This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F366828B/4A0C87A2D30111EAB14F613CF8AEA228/M9OMRBGkiFgWl_Ydv1-0_TWNgh8.mft
File:                     M9OMRBGkiFgWl_Ydv1-0_TWNgh8.mft (raw, json)
Hash identifier:          pcfaB2tlu5VcI2EDNXzG35djZmOfMwuHQJ/JPxK58qI=
Subject key identifier:   DE:A1:B3:9F:11:A9:ED:EB:21:FA:EA:54:A3:60:5F:6D:77:99:FC:53
Authority key identifier: 33:D3:8C:44:11:A4:88:58:16:97:F6:1D:BF:5F:B4:FD:35:8D:82:1F
Certificate issuer:       /CN=F366828BAF/serialNumber=33D38C4411A488581697F61DBF5FB4FD358D821F
Certificate serial:       07EA
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/M9OMRBGkiFgWl_Ydv1-0_TWNgh8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F366828B/4A0C87A2D30111EAB14F613CF8AEA228/M9OMRBGkiFgWl_Ydv1-0_TWNgh8.mft
Manifest number:          07EA
Signing time:             Tue 30 Dec 2025 01:54:04 +0000
Manifest this update:     Tue 30 Dec 2025 01:54:03 +0000
Manifest next update:     Thu 01 Jan 2026 01:54:03 +0000
Files and hashes:         1: M9OMRBGkiFgWl_Ydv1-0_TWNgh8.crl (hash: e1wbXXhROx+Jz3kiCdP4bMV8bGNqNnpryJxsVhgQACk=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F366828B/4A0C87A2D30111EAB14F613CF8AEA228/M9OMRBGkiFgWl_Ydv1-0_TWNgh8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F366828B/4A0C87A2D30111EAB14F613CF8AEA228/M9OMRBGkiFgWl_Ydv1-0_TWNgh8.mft
                          rsync://rpki.afrinic.net/repository/afrinic/M9OMRBGkiFgWl_Ydv1-0_TWNgh8.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 01 Jan 2026 00:07:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2026 (0x7ea)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F366828BAF, serialNumber=33D38C4411A488581697F61DBF5FB4FD358D821F
        Validity
            Not Before: Dec 30 01:54:03 2025 GMT
            Not After : Jan  1 01:54:03 2026 GMT
        Subject: CN=695330bc-186f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:c1:92:65:31:a1:22:19:b7:d2:0e:c5:3a:df:
                    59:4f:7a:57:d4:7f:8c:79:03:c2:35:04:29:63:40:
                    9c:fe:bd:38:7e:35:b8:c4:25:93:fe:b8:70:d6:ea:
                    b7:b7:ee:3f:b6:f4:5a:67:92:31:84:30:38:50:c6:
                    02:14:9e:7b:2a:8e:5f:31:1f:be:68:5f:50:10:26:
                    97:92:59:94:9f:0a:1e:51:85:7c:86:e3:c7:4a:d2:
                    08:58:b0:d2:81:01:39:e8:fc:dd:f2:94:5c:dc:e5:
                    84:36:09:f4:58:47:e2:e9:b7:60:c5:c8:0b:6c:26:
                    f7:cf:db:fa:22:23:2a:4d:bb:9f:77:0f:db:17:65:
                    8b:72:12:f9:c5:69:9a:03:79:b3:51:ca:92:dd:31:
                    c5:2e:5c:e8:76:19:55:01:78:8d:40:9f:87:d2:7d:
                    a4:77:40:e4:98:b8:cf:95:64:3b:c8:40:71:a6:21:
                    3d:41:69:da:7c:fb:cf:5c:f2:b4:eb:62:88:fa:82:
                    6b:a1:da:9c:e9:9a:83:6e:9d:bc:d0:43:ad:8c:57:
                    53:c0:24:df:47:1e:eb:82:26:5d:08:87:5f:ac:74:
                    75:8d:9b:f5:51:2c:5a:e0:91:2d:9f:2b:24:02:f1:
                    0c:e9:82:31:ca:fd:74:11:a6:55:47:98:47:84:cd:
                    c4:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:A1:B3:9F:11:A9:ED:EB:21:FA:EA:54:A3:60:5F:6D:77:99:FC:53
            X509v3 Authority Key Identifier:
                keyid:33:D3:8C:44:11:A4:88:58:16:97:F6:1D:BF:5F:B4:FD:35:8D:82:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F366828B/4A0C87A2D30111EAB14F613CF8AEA228/M9OMRBGkiFgWl_Ydv1-0_TWNgh8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/M9OMRBGkiFgWl_Ydv1-0_TWNgh8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F366828B/4A0C87A2D30111EAB14F613CF8AEA228/M9OMRBGkiFgWl_Ydv1-0_TWNgh8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ca:ca:9e:4e:99:93:f6:20:0d:53:28:2e:bc:20:2c:5b:81:d2:
         39:77:c2:04:2d:64:0c:33:75:c8:43:1e:7b:bd:2e:79:7e:33:
         cb:ff:b9:4c:69:3a:4c:cf:8b:2b:a3:46:29:49:8f:1e:45:b3:
         66:b6:72:9c:98:c5:1c:72:04:3c:0c:51:f7:c3:80:00:11:28:
         b7:b3:f6:ae:c4:c8:49:79:fa:f4:8b:fe:30:3d:70:99:be:94:
         40:f1:94:d0:44:83:4b:61:6e:84:ba:73:4e:a3:ce:e3:0e:e9:
         fd:a7:bf:d4:56:96:4e:d1:4c:31:6e:d7:b5:8f:8a:29:1b:8b:
         a0:d5:54:b4:7d:77:99:9d:5d:8b:2d:9b:00:19:5a:8b:20:dd:
         81:33:00:3b:d0:45:12:23:fd:b9:e5:df:48:f6:ba:8f:cc:0b:
         6d:5d:ae:9e:c3:ef:91:f1:6f:15:a5:e8:00:f7:bc:97:6d:c0:
         9a:26:68:91:1d:c3:bc:de:90:8d:4e:41:a9:11:d7:f4:ac:71:
         1d:6e:19:c6:50:c5:13:b8:3c:17:c5:80:ea:b9:d6:1b:bb:00:
         52:b1:5c:02:cd:a6:06:89:98:f0:f4:13:0e:dd:e5:3a:bd:07:
         0a:7f:39:a1:15:e2:05:c9:5f:46:73:ef:7f:c9:34:db:56:71:
         7d:c7:8a:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 30 06:22:15 2025 by rpki-client