This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3670369/691565D27E7811ECB77461CB5A40D577/yLuITQS6vBYFq333lYeWBZySwmo.mft
File:                     yLuITQS6vBYFq333lYeWBZySwmo.mft (raw, json)
Hash identifier:          v2CeMsdphBIOEx7FAz6vFG2MTxHOYJGTJVwH06zFgfI=
Subject key identifier:   05:54:71:67:B8:B2:C2:86:9E:CA:F1:CC:0A:C3:95:1B:4F:15:BF:1D
Authority key identifier: C8:BB:88:4D:04:BA:BC:16:05:AB:7D:F7:95:87:96:05:9C:92:C2:6A
Certificate issuer:       /CN=F3670369AF/serialNumber=C8BB884D04BABC1605AB7DF7958796059C92C26A
Certificate serial:       05BB
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/yLuITQS6vBYFq333lYeWBZySwmo.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3670369/691565D27E7811ECB77461CB5A40D577/yLuITQS6vBYFq333lYeWBZySwmo.mft
Manifest number:          05BA
Signing time:             Sat 20 Dec 2025 02:37:33 +0000
Manifest this update:     Sat 20 Dec 2025 02:37:32 +0000
Manifest next update:     Mon 22 Dec 2025 02:37:32 +0000
Files and hashes:         1: yLuITQS6vBYFq333lYeWBZySwmo.crl (hash: A839MER1woSvWTOgzlmuvk5q+fEILpJCg2AtpjGtP70=)
                          2: DBE0F6EE7E8C11EC9A551E885A40D577.roa (hash: e+LkqN78DWuhBsqL8FFr5mWtusQpgR9pzmjfGcJQ5/w=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3670369/691565D27E7811ECB77461CB5A40D577/yLuITQS6vBYFq333lYeWBZySwmo.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3670369/691565D27E7811ECB77461CB5A40D577/yLuITQS6vBYFq333lYeWBZySwmo.mft
                          rsync://rpki.afrinic.net/repository/afrinic/yLuITQS6vBYFq333lYeWBZySwmo.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 22 Dec 2025 00:06:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1467 (0x5bb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3670369AF, serialNumber=C8BB884D04BABC1605AB7DF7958796059C92C26A
        Validity
            Not Before: Dec 20 02:37:32 2025 GMT
            Not After : Dec 22 02:37:32 2025 GMT
        Subject: CN=69460bed-6cf0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:84:99:61:6f:8b:cd:4a:52:2c:87:68:fe:90:
                    39:57:ed:76:c5:a1:31:13:3a:fa:01:c1:02:85:6c:
                    5f:0f:f6:80:04:13:8a:6e:23:fe:f7:42:fe:05:04:
                    a3:f9:ce:93:1b:96:8a:f9:97:ca:3b:a9:98:f0:c9:
                    2b:b6:1f:c1:a3:b6:37:17:40:bb:06:e0:c2:f4:87:
                    e6:35:d1:47:0a:18:98:6c:63:8a:da:9d:f5:e9:20:
                    37:ca:bc:f5:d3:f1:54:6a:56:30:92:1b:a6:70:96:
                    fc:55:63:44:24:fc:84:d0:5f:bd:99:51:db:89:e6:
                    42:d7:12:e7:04:30:d8:b4:1c:99:24:27:af:0d:23:
                    51:76:49:96:cb:ce:87:3a:3f:ba:e0:b4:81:8d:e3:
                    81:1c:60:42:4d:8a:3b:28:36:3e:bd:24:dc:d9:38:
                    5f:65:bd:63:5e:d6:ee:84:15:40:1b:9b:12:ec:38:
                    bd:4b:db:4f:a1:ef:5d:0d:59:80:d7:61:e2:61:d6:
                    3e:a7:9b:91:57:ea:1d:db:60:aa:22:8c:f5:8d:67:
                    ab:59:e2:48:bc:90:25:e1:6d:b4:6a:96:00:51:4c:
                    3a:d0:dd:43:23:02:53:51:1d:b4:ba:83:62:c0:ed:
                    35:65:32:8d:a9:ce:a3:16:45:64:5d:a2:9c:ec:76:
                    23:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:54:71:67:B8:B2:C2:86:9E:CA:F1:CC:0A:C3:95:1B:4F:15:BF:1D
            X509v3 Authority Key Identifier:
                keyid:C8:BB:88:4D:04:BA:BC:16:05:AB:7D:F7:95:87:96:05:9C:92:C2:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3670369/691565D27E7811ECB77461CB5A40D577/yLuITQS6vBYFq333lYeWBZySwmo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/yLuITQS6vBYFq333lYeWBZySwmo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3670369/691565D27E7811ECB77461CB5A40D577/yLuITQS6vBYFq333lYeWBZySwmo.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:a5:65:43:66:76:72:39:21:2d:28:23:02:2e:e7:45:cf:98:
         9a:06:b1:82:68:fe:1e:95:2c:f5:26:da:6c:30:54:e0:d2:6f:
         b2:ca:22:73:67:32:e6:de:b3:25:3a:f4:eb:f5:9b:43:81:8f:
         22:4d:52:da:9d:cb:46:54:3d:0f:0e:f2:8b:f3:32:ec:ca:00:
         b4:19:20:0a:a1:49:25:1d:f8:bf:e9:48:66:a8:f9:6d:1d:3e:
         e2:fc:65:99:a2:ca:34:01:88:cd:dd:3f:5d:af:33:7a:83:9c:
         3d:f6:48:ea:1c:91:39:9f:2a:8a:6f:2d:a1:ef:09:7e:fb:4d:
         a0:6b:5d:e9:fd:7b:5c:8c:e7:4b:7a:9d:35:b2:72:3a:6d:60:
         e8:76:ce:7d:f0:cd:c2:4b:50:43:b9:40:d8:04:a7:f3:ea:42:
         6d:28:1a:53:1b:7f:12:7c:a6:02:90:a9:82:c4:26:58:bd:79:
         40:e1:1f:f8:21:02:69:44:e3:f7:75:8f:5c:c0:9e:c9:57:6d:
         a6:ae:ba:1a:1f:52:3a:29:12:a0:d1:85:36:47:29:98:1e:61:
         d2:06:87:e3:4f:49:84:e0:a6:0f:c0:f2:68:ae:fb:59:10:4c:
         60:39:72:e8:22:b4:29:c4:ee:9b:da:53:70:96:5e:85:32:53:
         5e:99:67:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 04:45:32 2025 by rpki-client