This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F366C124/21E2D0D4CAF011E98C204478F8AEA228/dUDQUtEpERNWC6gtIyBCuZqopko.mft
File:                     dUDQUtEpERNWC6gtIyBCuZqopko.mft (raw, json)
Hash identifier:          O1ddOuutMq2hiLQYM+eC1m35LOLAuslcfj5k3J66gKk=
Subject key identifier:   06:F9:40:7E:8F:BC:D9:D6:7A:90:81:0D:C9:1E:57:BC:7E:5C:84:2B
Authority key identifier: 75:40:D0:52:D1:29:11:13:56:0B:A8:2D:23:20:42:B9:9A:A8:A6:4A
Certificate issuer:       /CN=F366C124AF/serialNumber=7540D052D1291113560BA82D232042B99AA8A64A
Certificate serial:       094A
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/dUDQUtEpERNWC6gtIyBCuZqopko.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F366C124/21E2D0D4CAF011E98C204478F8AEA228/dUDQUtEpERNWC6gtIyBCuZqopko.mft
Manifest number:          0947
Signing time:             Tue 30 Dec 2025 01:34:22 +0000
Manifest this update:     Tue 30 Dec 2025 01:34:21 +0000
Manifest next update:     Thu 01 Jan 2026 01:34:21 +0000
Files and hashes:         1: dUDQUtEpERNWC6gtIyBCuZqopko.crl (hash: JBzgueC2NWunbkYWJI7TGUJbco+SoKhxYQ+BSHwvBxs=)
                          2: F2B47ECE67CF11F0A078F98BDAE4EC9C.roa (hash: P3LDJsnxMQwbvrXOtqRElx5hirBS3sM/lIPVBob33/w=)
                          3: C82D839403C511EBB1822323F8AEA228.roa (hash: BRU/+9vSJaKFXnQ7Cb8Og2eSBhtx9/MwNvCd1XqLbx0=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F366C124/21E2D0D4CAF011E98C204478F8AEA228/dUDQUtEpERNWC6gtIyBCuZqopko.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F366C124/21E2D0D4CAF011E98C204478F8AEA228/dUDQUtEpERNWC6gtIyBCuZqopko.mft
                          rsync://rpki.afrinic.net/repository/afrinic/dUDQUtEpERNWC6gtIyBCuZqopko.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 01 Jan 2026 00:07:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2378 (0x94a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F366C124AF, serialNumber=7540D052D1291113560BA82D232042B99AA8A64A
        Validity
            Not Before: Dec 30 01:34:21 2025 GMT
            Not After : Jan  1 01:34:21 2026 GMT
        Subject: CN=69532c1e-dc50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:a3:f1:8b:b1:c6:93:4c:56:a1:6c:5d:72:a3:
                    82:a3:89:6d:7b:3c:18:00:b1:f1:b2:aa:9e:02:68:
                    dd:10:06:d5:62:51:46:72:a5:85:d3:fc:52:4d:85:
                    53:bb:b9:3e:41:45:f8:5f:f4:56:87:f7:48:23:b6:
                    06:50:c4:5e:33:0e:81:46:fc:ab:25:d6:74:2e:40:
                    70:92:8b:1f:60:0e:7d:f5:23:43:4c:cd:51:19:31:
                    53:f4:88:0c:c0:fc:6f:f4:c2:27:1f:97:e6:3a:b2:
                    95:c1:89:60:97:09:0f:6e:c4:4b:b7:6b:b3:f5:d5:
                    02:27:25:c7:ea:8f:63:ad:72:36:ca:5e:89:c9:a5:
                    f1:75:8e:90:3a:8d:48:c3:40:3e:fb:b8:6a:8d:19:
                    c9:fa:0f:25:cc:34:0d:09:ea:fd:71:f9:f1:e2:67:
                    e7:38:6f:90:0c:d8:f1:d9:d7:db:97:53:bf:b5:11:
                    12:c6:5e:05:e9:bc:51:88:16:d0:96:89:85:90:c2:
                    6c:1c:93:1f:7a:6b:c3:a1:e2:02:12:79:a5:e7:17:
                    46:80:cb:ec:f7:7f:86:89:c1:0f:bd:d4:e3:92:7d:
                    27:ff:29:09:60:e0:da:45:4b:85:0c:47:9e:bb:b6:
                    63:58:dc:37:06:24:d4:bf:8e:e9:76:5d:e6:3c:bc:
                    18:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:F9:40:7E:8F:BC:D9:D6:7A:90:81:0D:C9:1E:57:BC:7E:5C:84:2B
            X509v3 Authority Key Identifier:
                keyid:75:40:D0:52:D1:29:11:13:56:0B:A8:2D:23:20:42:B9:9A:A8:A6:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F366C124/21E2D0D4CAF011E98C204478F8AEA228/dUDQUtEpERNWC6gtIyBCuZqopko.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/dUDQUtEpERNWC6gtIyBCuZqopko.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F366C124/21E2D0D4CAF011E98C204478F8AEA228/dUDQUtEpERNWC6gtIyBCuZqopko.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:f2:08:d6:b5:54:a7:4d:88:26:60:fe:60:02:92:5a:ea:3f:
         45:20:fd:cc:2f:83:d0:93:88:ab:d8:55:e7:3b:70:db:f0:6a:
         52:91:03:ea:1d:e4:ac:26:0f:72:d4:ae:35:53:42:17:a9:4e:
         77:83:8e:7d:35:fa:46:19:a0:1f:c5:6b:d3:d6:05:9c:a5:3a:
         ba:af:a9:26:73:7e:1b:e3:8e:3e:5e:04:90:94:1a:42:27:94:
         53:cd:89:cb:4a:44:a6:81:91:5c:54:c1:06:71:d5:7a:cb:27:
         cc:23:57:f5:36:42:4c:1d:6e:2d:38:ee:c5:e4:d8:b0:a1:d8:
         07:39:4a:87:17:16:b3:d8:34:c8:64:e6:f0:52:db:98:80:56:
         15:ff:17:eb:6a:2e:83:b4:8e:cc:d5:96:95:c9:59:d3:0f:93:
         e8:bf:ee:db:05:47:8e:1c:b4:6d:cf:fb:76:4e:4d:2f:07:32:
         f4:83:23:e3:33:bb:0a:16:fe:40:07:c0:60:e2:5f:58:c7:c1:
         fd:1b:30:2d:ea:b5:d2:3c:c4:ab:a1:40:0d:e2:d2:4f:c4:eb:
         b8:45:bc:3d:39:6a:a3:26:bc:2a:f8:b5:1c:cf:a7:16:b0:79:
         50:17:ae:97:35:8d:17:a3:9f:5b:00:2d:8e:40:0b:cb:c2:e6:
         1b:d6:ea:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 30 09:01:49 2025 by rpki-client