This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3659389/86E3F6920B4111F092F87169762E951A/B2ElfcmJxny_4WN0g0zoWSFoyWQ.mft
File:                     B2ElfcmJxny_4WN0g0zoWSFoyWQ.mft (raw, json)
Hash identifier:          QuK6Wzo6l2XutABMO9xvaGaw1FnF1J/Tmm4Bje+wM28=
Subject key identifier:   16:8E:B3:99:E8:15:FE:78:BA:65:C2:83:38:87:B1:CA:B8:C7:6E:5C
Authority key identifier: 07:61:25:7D:C9:89:C6:7C:BF:E1:63:74:83:4C:E8:59:21:68:C9:64
Certificate issuer:       /CN=F3659389AF/serialNumber=0761257DC989C67CBFE16374834CE8592168C964
Certificate serial:       0114
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/B2ElfcmJxny_4WN0g0zoWSFoyWQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3659389/86E3F6920B4111F092F87169762E951A/B2ElfcmJxny_4WN0g0zoWSFoyWQ.mft
Manifest number:          0113
Signing time:             Fri 19 Dec 2025 04:55:29 +0000
Manifest this update:     Fri 19 Dec 2025 04:55:28 +0000
Manifest next update:     Sun 21 Dec 2025 04:55:28 +0000
Files and hashes:         1: B2ElfcmJxny_4WN0g0zoWSFoyWQ.crl (hash: 4/Wq7gyIWsCN8vpnGymde0Y0FoP37F67ZV58wqU0og8=)
                          2: 10EAF1B40B4311F08B33AB71762E951A.roa (hash: 8dKtBcctBuIDLiDUfnBFwlKL6LP+a2nsnLbiPCcB/UI=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3659389/86E3F6920B4111F092F87169762E951A/B2ElfcmJxny_4WN0g0zoWSFoyWQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3659389/86E3F6920B4111F092F87169762E951A/B2ElfcmJxny_4WN0g0zoWSFoyWQ.mft
                          rsync://rpki.afrinic.net/repository/afrinic/B2ElfcmJxny_4WN0g0zoWSFoyWQ.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 21 Dec 2025 04:55:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 276 (0x114)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3659389AF, serialNumber=0761257DC989C67CBFE16374834CE8592168C964
        Validity
            Not Before: Dec 19 04:55:28 2025 GMT
            Not After : Dec 21 04:55:28 2025 GMT
        Subject: CN=6944dac1-b78a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:e6:dc:77:58:79:06:44:ed:69:cb:6a:27:2c:
                    06:60:ce:be:2c:b5:e0:c0:f8:b3:a7:e1:81:39:8d:
                    d2:85:e1:1e:18:3b:2b:8a:b1:b4:e0:13:35:a7:ec:
                    14:21:0c:82:f2:66:cb:96:a4:65:68:bd:e7:c9:e3:
                    77:d1:1f:92:e6:9d:61:30:e1:33:02:76:eb:a2:0d:
                    87:d2:9d:cf:5a:a2:bb:a2:18:4e:b2:01:44:17:a5:
                    da:c7:a9:4c:6b:19:d8:1a:7e:e0:64:91:fc:c3:c8:
                    0a:ac:07:8d:47:94:fb:fd:3d:8f:8b:12:d7:8c:03:
                    75:01:ce:90:6a:9f:83:90:8d:0c:90:ba:c2:da:89:
                    57:0f:33:e1:ae:a8:4e:50:67:7c:26:80:0b:ac:a8:
                    c5:55:52:27:d6:5d:27:89:f2:02:e9:a3:0d:77:73:
                    5f:54:9d:34:d4:d6:b6:b0:1d:11:f7:95:e6:82:af:
                    de:6c:4d:59:00:a7:8e:9c:f0:1b:6d:c0:c3:e4:8f:
                    dd:52:13:72:d3:74:60:69:24:40:86:d2:d8:88:f5:
                    49:af:61:e5:75:aa:db:e5:d1:8b:c8:6e:e9:4f:f2:
                    2c:e9:e7:34:a7:50:75:12:c3:a0:35:2e:b6:44:f2:
                    d1:15:14:07:23:0a:37:56:43:e6:1f:ac:81:53:60:
                    fc:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:8E:B3:99:E8:15:FE:78:BA:65:C2:83:38:87:B1:CA:B8:C7:6E:5C
            X509v3 Authority Key Identifier:
                keyid:07:61:25:7D:C9:89:C6:7C:BF:E1:63:74:83:4C:E8:59:21:68:C9:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3659389/86E3F6920B4111F092F87169762E951A/B2ElfcmJxny_4WN0g0zoWSFoyWQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/B2ElfcmJxny_4WN0g0zoWSFoyWQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3659389/86E3F6920B4111F092F87169762E951A/B2ElfcmJxny_4WN0g0zoWSFoyWQ.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:fe:aa:59:ed:92:3d:9b:50:d1:99:92:59:de:87:8c:f8:26:
         91:f9:8b:82:1a:29:19:5f:e8:9b:ac:2d:06:88:e7:fb:fd:45:
         5a:c4:0b:6a:ae:f7:a5:13:a3:d4:54:b1:ba:ef:7b:82:97:ea:
         56:59:8b:ae:51:3a:1f:1c:77:b0:af:2f:5f:80:1c:6d:35:e6:
         2b:1b:8e:76:79:47:0c:57:30:fd:b6:37:8e:bc:a1:50:32:d6:
         91:21:d4:85:2f:3c:ef:10:13:c4:b9:9c:2b:cf:14:aa:ea:17:
         50:d4:2f:2d:1e:d3:7f:7f:aa:c8:b7:51:90:68:4a:65:5d:d5:
         05:f5:12:48:15:4d:0b:01:6a:a7:57:17:a8:f8:0d:93:2c:3b:
         dc:b7:3c:92:17:6d:49:1e:c3:1e:f3:ed:d2:1d:d5:b9:06:33:
         fb:6f:41:3c:67:20:68:8c:b7:c5:04:44:b2:bb:4b:fb:1f:2f:
         0f:57:80:c5:7b:fd:21:0f:44:d7:98:b4:b1:49:1c:37:f4:88:
         64:49:c7:3b:3f:89:76:0e:44:c4:08:a0:11:e7:67:76:45:af:
         cf:5f:3d:6a:f7:b5:c4:8b:6c:c0:01:e8:e8:68:f6:c5:4c:3a:
         e3:dc:13:d0:4d:69:ab:02:cf:47:c1:ea:ed:72:1d:84:92:95:
         bf:bf:6b:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 03:53:32 2025 by rpki-client