This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3668037/2AB390E26DC711E68265362DF8AEA228/MU_85UKRThk8fBoqA8c1dGLqGBY.mft
File:                     MU_85UKRThk8fBoqA8c1dGLqGBY.mft (raw, json)
Hash identifier:          N71NpcQKKqfLiVTNvcLjaLNFrC9ACTYy8oXyFG1qW5c=
Subject key identifier:   7F:98:6C:C6:84:65:28:83:17:EB:4D:3F:A1:57:4F:D5:8B:DF:7F:80
Authority key identifier: 31:4F:FC:E5:42:91:4E:19:3C:7C:1A:2A:03:C7:35:74:62:EA:18:16
Certificate issuer:       /CN=F3668037AF/serialNumber=314FFCE542914E193C7C1A2A03C7357462EA1816
Certificate serial:       0DEA
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/MU_85UKRThk8fBoqA8c1dGLqGBY.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3668037/2AB390E26DC711E68265362DF8AEA228/MU_85UKRThk8fBoqA8c1dGLqGBY.mft
Manifest number:          0DCA
Signing time:             Sat 20 Dec 2025 01:03:20 +0000
Manifest this update:     Sat 20 Dec 2025 01:03:19 +0000
Manifest next update:     Mon 22 Dec 2025 01:03:19 +0000
Files and hashes:         1: MU_85UKRThk8fBoqA8c1dGLqGBY.crl (hash: xUma9mI+Uf1CImPFJ4LXxcuW0IqDc1GxEQXofE5TAms=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3668037/2AB390E26DC711E68265362DF8AEA228/MU_85UKRThk8fBoqA8c1dGLqGBY.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3668037/2AB390E26DC711E68265362DF8AEA228/MU_85UKRThk8fBoqA8c1dGLqGBY.mft
                          rsync://rpki.afrinic.net/repository/afrinic/MU_85UKRThk8fBoqA8c1dGLqGBY.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 22 Dec 2025 00:06:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3562 (0xdea)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3668037AF, serialNumber=314FFCE542914E193C7C1A2A03C7357462EA1816
        Validity
            Not Before: Dec 20 01:03:19 2025 GMT
            Not After : Dec 22 01:03:19 2025 GMT
        Subject: CN=6945f5d8-e6f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:5d:b3:55:25:ba:b7:d9:ec:6c:f6:af:d4:fc:
                    4c:fd:52:04:bf:94:ea:c4:5c:76:01:9a:17:c8:fb:
                    db:ed:c0:f2:a9:ba:0b:e9:19:87:a2:c0:e0:c3:6c:
                    e2:8c:fc:b6:82:68:eb:62:6c:66:d0:b4:43:13:14:
                    98:fe:77:37:4c:17:b3:c9:ad:14:9a:dd:d4:6b:de:
                    75:41:8e:2a:59:0d:35:e5:9a:5f:d0:46:f1:31:c6:
                    5f:98:b4:2b:57:31:d8:38:f1:c8:d7:01:56:5d:34:
                    53:a9:41:5e:7a:6f:39:66:98:eb:ed:2e:90:8c:bc:
                    d0:f4:45:b9:a6:30:e3:60:09:0d:68:41:9e:81:59:
                    24:e1:37:0d:ef:90:d2:49:f8:02:70:1b:64:82:53:
                    54:08:aa:66:7d:98:85:26:12:94:fd:a8:95:86:a3:
                    8d:a3:8e:9f:3f:e7:2c:ed:40:91:6d:fd:c7:ce:8c:
                    03:c2:23:25:a9:e2:24:1b:dd:c1:7f:e9:6d:6f:65:
                    92:12:55:34:6d:ac:b4:a8:d1:08:01:9d:38:65:17:
                    8d:13:bd:a3:bf:2d:7a:20:46:3f:1d:79:a2:58:97:
                    4e:ce:ac:fe:82:ac:b8:8a:74:c4:ba:f3:70:62:5d:
                    65:88:6a:45:cd:3b:40:f1:b6:47:03:7e:28:ac:eb:
                    84:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:98:6C:C6:84:65:28:83:17:EB:4D:3F:A1:57:4F:D5:8B:DF:7F:80
            X509v3 Authority Key Identifier:
                keyid:31:4F:FC:E5:42:91:4E:19:3C:7C:1A:2A:03:C7:35:74:62:EA:18:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3668037/2AB390E26DC711E68265362DF8AEA228/MU_85UKRThk8fBoqA8c1dGLqGBY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/MU_85UKRThk8fBoqA8c1dGLqGBY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3668037/2AB390E26DC711E68265362DF8AEA228/MU_85UKRThk8fBoqA8c1dGLqGBY.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:1d:84:9d:de:e1:67:e2:4a:9f:10:c9:b1:b1:cd:d4:dc:6b:
         4a:91:86:07:d7:4c:66:79:37:e3:3d:cd:e6:17:dc:48:0d:4d:
         68:81:44:b9:1a:15:05:1d:5b:b4:27:9b:ed:41:04:bd:53:56:
         42:87:49:3e:62:5a:d9:35:d0:99:87:87:e5:0b:8e:8b:55:46:
         65:bb:52:b9:0e:5f:2b:5b:67:74:32:ba:37:2e:7c:e7:ba:b0:
         2c:70:cf:7c:9f:61:a2:06:5d:2a:ce:af:fa:d2:27:d4:19:a8:
         f4:fb:04:cb:00:5f:38:fb:4a:ed:7b:09:0d:1e:06:9d:ca:4c:
         92:62:36:f3:fd:76:65:c4:e1:52:07:c6:9d:f7:92:96:74:ba:
         a5:23:37:2f:36:5d:d2:40:0e:b0:fe:ac:50:7f:7c:f5:4e:bb:
         6a:6f:35:f0:eb:a5:6b:72:e9:86:64:f8:d0:8b:5d:64:db:c1:
         da:d5:ad:c7:ee:7d:c6:1b:03:3d:bd:af:d7:99:a3:22:30:2e:
         c6:8f:d0:a0:e8:b6:4a:10:b6:fa:aa:59:6f:db:9e:00:07:0d:
         65:38:6f:2b:0c:14:b3:fa:c7:26:08:34:83:8b:84:8c:da:c5:
         67:5c:02:ed:1b:0c:8a:0f:97:f3:34:b9:32:5a:5a:86:3c:91:
         c9:e2:92:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 09:02:02 2025 by rpki-client