This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367676C/318C1E901A6111EE83E1D3814AD9E6FC/BgFTVgEyf0M_jYQnIExQlCCErVY.mft
File:                     BgFTVgEyf0M_jYQnIExQlCCErVY.mft (raw, json)
Hash identifier:          LNxjpjmOcP5tHWxN0vnc1Di6quTb3y9/DN/0aClMmB4=
Subject key identifier:   DA:61:A1:54:81:88:5C:4F:A2:B9:5D:5F:85:F1:53:E1:44:D6:CC:50
Authority key identifier: 06:01:53:56:01:32:7F:43:3F:8D:84:27:20:4C:50:94:20:84:AD:56
Certificate issuer:       /CN=F367676CAF/serialNumber=0601535601327F433F8D8427204C50942084AD56
Certificate serial:       03AB
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/BgFTVgEyf0M_jYQnIExQlCCErVY.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F367676C/318C1E901A6111EE83E1D3814AD9E6FC/BgFTVgEyf0M_jYQnIExQlCCErVY.mft
Manifest number:          03A5
Signing time:             Sun 21 Dec 2025 03:34:49 +0000
Manifest this update:     Sun 21 Dec 2025 03:34:48 +0000
Manifest next update:     Tue 23 Dec 2025 03:34:48 +0000
Files and hashes:         1: BgFTVgEyf0M_jYQnIExQlCCErVY.crl (hash: 6lOCZ3wL3q/pu08Mg67ZaEsGa4se6sTeSiidYMQE05w=)
                          2: B4157BCEC51811EEA71E2955775412E6.roa (hash: +8B3PetXXdBYl4xVysjBuEdmB8tCvNT4URtK1ryNHXo=)
                          3: 9B15553CC51711EE865F7453775412E6.roa (hash: B4szk6C0WLymXGOq975zsN9fUPmrwwcdkQwfSngmA8Q=)
                          4: D7ED7CFCC51511EE85F58D50775412E6.roa (hash: QAA9COkPZwe9PTmNfwL5wojLGp+HtJSiqKQk5ypGdaw=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F367676C/318C1E901A6111EE83E1D3814AD9E6FC/BgFTVgEyf0M_jYQnIExQlCCErVY.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F367676C/318C1E901A6111EE83E1D3814AD9E6FC/BgFTVgEyf0M_jYQnIExQlCCErVY.mft
                          rsync://rpki.afrinic.net/repository/afrinic/BgFTVgEyf0M_jYQnIExQlCCErVY.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 23 Dec 2025 00:06:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 939 (0x3ab)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F367676CAF, serialNumber=0601535601327F433F8D8427204C50942084AD56
        Validity
            Not Before: Dec 21 03:34:48 2025 GMT
            Not After : Dec 23 03:34:48 2025 GMT
        Subject: CN=69476ad9-ba38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:fc:d5:d5:d8:6d:83:66:b5:42:a5:f6:77:b9:
                    24:c1:b9:a2:4b:3e:06:8d:1f:dd:b7:c1:0b:d6:39:
                    35:cb:16:a8:eb:75:64:62:13:31:b2:29:53:70:74:
                    83:35:57:58:a3:81:20:d3:9b:ef:9d:2a:a1:6c:5b:
                    45:85:44:b9:8e:61:a6:b9:db:9e:9c:7a:9a:93:a7:
                    11:22:da:b2:a3:38:88:94:28:42:83:34:ce:2d:1f:
                    bd:e8:0f:86:0f:a5:96:7e:68:ef:d4:d9:86:8e:18:
                    22:8a:e6:87:78:83:58:94:be:44:d6:56:6e:40:b6:
                    b1:73:ea:cc:e0:fe:42:a1:9f:58:e8:5c:2d:5c:5a:
                    5d:59:d5:b9:87:6a:b5:f0:f7:69:38:e1:f8:8b:24:
                    03:37:64:01:59:aa:a8:01:e6:12:64:1f:6e:5b:4a:
                    6e:90:ee:1b:82:d8:37:08:1f:3e:91:18:79:93:94:
                    9e:30:9a:26:e0:b8:9d:dd:56:89:30:70:91:60:cb:
                    d5:3a:a5:6a:db:a2:cc:34:c2:2f:0c:c9:1e:0a:7a:
                    bc:28:cc:9d:2e:86:5b:8f:52:33:95:2e:dc:2a:43:
                    74:79:99:c3:98:5d:c5:c3:52:b3:0f:09:7a:b4:d2:
                    18:38:46:54:29:5f:57:d0:40:eb:26:b7:7d:0b:93:
                    9d:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:61:A1:54:81:88:5C:4F:A2:B9:5D:5F:85:F1:53:E1:44:D6:CC:50
            X509v3 Authority Key Identifier:
                keyid:06:01:53:56:01:32:7F:43:3F:8D:84:27:20:4C:50:94:20:84:AD:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F367676C/318C1E901A6111EE83E1D3814AD9E6FC/BgFTVgEyf0M_jYQnIExQlCCErVY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/BgFTVgEyf0M_jYQnIExQlCCErVY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367676C/318C1E901A6111EE83E1D3814AD9E6FC/BgFTVgEyf0M_jYQnIExQlCCErVY.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:bd:df:6a:f9:ef:97:d7:52:17:f4:cc:03:5b:94:2b:96:4b:
         9c:d3:1d:74:ae:e5:51:a9:df:37:c0:8e:7a:85:f8:e2:1f:bc:
         70:f5:53:2e:50:8c:84:f4:b7:30:ca:a4:7c:1c:4e:59:f3:61:
         70:22:b7:c4:11:22:34:52:96:48:e3:9d:2c:b3:2b:b7:96:35:
         e7:81:73:5b:bf:5d:03:c4:f8:57:2b:44:f0:80:7d:ce:e1:39:
         83:77:6e:dd:5c:b6:8e:98:42:4d:c1:6a:cd:b9:16:e7:ab:1b:
         53:15:1e:08:99:e5:32:dd:c8:60:bf:ed:66:04:19:e7:fb:37:
         0e:ee:98:cf:88:43:e4:f5:67:4f:58:04:5e:ef:5b:fd:50:d2:
         eb:6c:1b:8a:da:ab:53:11:9a:4b:14:65:6f:7c:3e:88:b7:64:
         ce:25:4b:a1:46:ba:ed:38:a9:6f:f2:26:6c:de:0d:09:bf:ca:
         68:d5:a0:de:82:d7:84:eb:62:fd:6a:e5:38:24:bf:14:f3:3c:
         4d:5b:9a:61:dc:ed:e0:72:de:09:e8:93:ea:8c:e8:0e:14:c6:
         41:ae:c8:72:44:7f:72:43:02:08:7d:3d:f2:be:81:00:e5:c7:
         01:83:6a:47:54:11:66:ef:6d:43:78:f2:fa:41:af:92:11:7b:
         a3:e1:ff:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 10:52:29 2025 by rpki-client