This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F366E949/F90391E0D5D211F08FED0880DAE4EC9C/u2qTYF7QXN2ypNl62Gzmg68jfZk.mft
File:                     u2qTYF7QXN2ypNl62Gzmg68jfZk.mft (raw, json)
Hash identifier:          iezeFovkAXtNJZlEDcZFFXcOXnIHKEaIG7Ez2guRSkc=
Subject key identifier:   70:A8:68:48:FE:E4:1A:A8:E2:F1:25:0D:D3:21:8D:34:88:4B:85:DD
Authority key identifier: BB:6A:93:60:5E:D0:5C:DD:B2:A4:D9:7A:D8:6C:E6:83:AF:23:7D:99
Certificate issuer:       /CN=F366E949AF/serialNumber=BB6A93605ED05CDDB2A4D97AD86CE683AF237D99
Certificate serial:       0A
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/u2qTYF7QXN2ypNl62Gzmg68jfZk.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F366E949/F90391E0D5D211F08FED0880DAE4EC9C/u2qTYF7QXN2ypNl62Gzmg68jfZk.mft
Manifest number:          0A
Signing time:             Fri 19 Dec 2025 05:25:08 +0000
Manifest this update:     Fri 19 Dec 2025 05:25:07 +0000
Manifest next update:     Sun 21 Dec 2025 05:25:07 +0000
Files and hashes:         1: u2qTYF7QXN2ypNl62Gzmg68jfZk.crl (hash: fugYsPssJvcldTzpKKGlCiCpjJpHDbrg5t4BFudMWLk=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F366E949/F90391E0D5D211F08FED0880DAE4EC9C/u2qTYF7QXN2ypNl62Gzmg68jfZk.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F366E949/F90391E0D5D211F08FED0880DAE4EC9C/u2qTYF7QXN2ypNl62Gzmg68jfZk.mft
                          rsync://rpki.afrinic.net/repository/afrinic/u2qTYF7QXN2ypNl62Gzmg68jfZk.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 21 Dec 2025 00:06:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10 (0xa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F366E949AF, serialNumber=BB6A93605ED05CDDB2A4D97AD86CE683AF237D99
        Validity
            Not Before: Dec 19 05:25:07 2025 GMT
            Not After : Dec 21 05:25:07 2025 GMT
        Subject: CN=6944e1b4-4e24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:b2:b1:b5:57:12:d2:67:36:ee:68:2a:de:bc:
                    17:cb:52:c2:1f:69:dd:38:28:e7:c0:d0:b8:4a:91:
                    ff:f3:3f:2c:ec:1e:5c:9a:ca:8c:5b:e5:0b:56:b4:
                    b7:07:b3:06:57:f6:c8:c0:84:5c:5f:0c:fb:4f:86:
                    8d:aa:af:ac:68:81:e8:d0:2b:0a:9a:cc:8c:0a:62:
                    fb:5a:55:5e:23:84:d3:9b:99:1b:54:9d:25:9c:7d:
                    ad:5c:22:44:40:9e:6e:4f:86:26:1e:d9:a0:37:03:
                    cd:d9:d7:97:f9:55:b3:81:c0:03:56:b0:bb:c9:0d:
                    af:70:11:5d:d9:3b:c9:78:6f:fe:61:66:9c:26:24:
                    89:ea:09:cc:a7:a7:df:59:ea:b2:45:42:f3:e8:b9:
                    8a:0c:7b:6a:2a:30:92:98:5a:36:f4:5e:d7:9e:e1:
                    da:35:bb:14:59:55:a7:9a:0f:ff:5f:4c:2e:89:05:
                    0f:d1:e0:71:76:47:f7:30:d9:8b:ce:8d:ab:a2:f1:
                    0f:00:44:cb:9f:3e:08:b8:9a:2c:7e:c8:82:84:c2:
                    d1:fa:e8:a2:00:24:50:a4:f3:8c:d8:7c:a3:2b:79:
                    15:dd:67:21:05:6a:e5:ba:3e:f4:4c:19:01:7a:7e:
                    0c:aa:33:35:57:9b:98:c4:5e:54:5a:a3:62:92:9b:
                    f4:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:A8:68:48:FE:E4:1A:A8:E2:F1:25:0D:D3:21:8D:34:88:4B:85:DD
            X509v3 Authority Key Identifier:
                keyid:BB:6A:93:60:5E:D0:5C:DD:B2:A4:D9:7A:D8:6C:E6:83:AF:23:7D:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F366E949/F90391E0D5D211F08FED0880DAE4EC9C/u2qTYF7QXN2ypNl62Gzmg68jfZk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/u2qTYF7QXN2ypNl62Gzmg68jfZk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F366E949/F90391E0D5D211F08FED0880DAE4EC9C/u2qTYF7QXN2ypNl62Gzmg68jfZk.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:e1:de:85:21:a3:47:d2:e3:70:c0:28:72:4d:7a:93:cf:a8:
         ac:f7:a7:31:c1:14:8a:42:5c:a6:c1:ce:7e:d1:fb:71:38:8b:
         f1:4e:d2:b6:fa:65:7c:1f:58:bb:3b:df:96:6c:c1:21:a3:61:
         b9:24:23:ae:58:a6:99:81:e0:c9:d4:da:eb:cf:aa:95:40:d9:
         3c:4c:c4:03:e3:c6:fa:e3:05:69:3b:74:e5:4d:74:e0:e8:53:
         de:56:ba:bf:01:60:3a:37:51:97:72:9f:a7:0b:7c:52:d1:bc:
         0f:51:0d:9a:0c:30:42:84:55:3c:1f:a6:7d:d2:64:e7:31:bf:
         5c:6d:1f:17:5e:18:85:b1:39:a5:7c:cc:aa:4c:85:df:08:c0:
         15:aa:78:56:80:ec:c2:ed:1c:dd:2b:62:eb:cf:29:ba:53:e5:
         07:72:47:42:1e:b8:31:4a:c5:6c:5d:6d:bc:a6:25:57:1b:15:
         cf:d4:56:bf:13:0e:36:96:74:a8:71:18:23:87:64:6a:c5:49:
         00:e4:63:63:f7:0a:52:9e:f1:b5:be:a5:e1:25:cf:40:c4:6e:
         31:57:ba:e9:84:e2:db:b4:f6:c5:47:fe:4e:53:d3:1c:ac:71:
         66:3e:de:b6:1f:f3:30:4c:c8:4a:f8:b6:fd:99:6d:9e:22:c3:
         1f:25:7a:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 00:57:18 2025 by rpki-client