This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368948B/57871110B09A11EFBA5BE8A0762E951A/wrcqDttgGOuk7XzTA12xMvRJwB0.mft
File:                     wrcqDttgGOuk7XzTA12xMvRJwB0.mft (raw, json)
Hash identifier:          Cg+eDoAGJnC46luoSBKEa147VoyHYSPiRQ248tOlIsM=
Subject key identifier:   92:F9:15:50:50:F1:10:EE:00:88:91:59:67:1C:5C:4F:35:28:65:CE
Authority key identifier: C2:B7:2A:0E:DB:60:18:EB:A4:ED:7C:D3:03:5D:B1:32:F4:49:C0:1D
Certificate issuer:       /CN=F368948BAF/serialNumber=C2B72A0EDB6018EBA4ED7CD3035DB132F449C01D
Certificate serial:       0192
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/wrcqDttgGOuk7XzTA12xMvRJwB0.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368948B/57871110B09A11EFBA5BE8A0762E951A/wrcqDttgGOuk7XzTA12xMvRJwB0.mft
Manifest number:          018F
Signing time:             Tue 23 Dec 2025 04:43:56 +0000
Manifest this update:     Tue 23 Dec 2025 04:43:55 +0000
Manifest next update:     Thu 25 Dec 2025 04:43:55 +0000
Files and hashes:         1: wrcqDttgGOuk7XzTA12xMvRJwB0.crl (hash: saI5OJbIK1KTMbQrlFhYUa7YxpuNOLFOelu5F5ctFnQ=)
                          2: 2B39C894B3A811EFB417EA70762E951A.roa (hash: JbNHPWtSF1vQZDwXPX2JIdA3ze8jlLo9getuU4tbAN4=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368948B/57871110B09A11EFBA5BE8A0762E951A/wrcqDttgGOuk7XzTA12xMvRJwB0.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368948B/57871110B09A11EFBA5BE8A0762E951A/wrcqDttgGOuk7XzTA12xMvRJwB0.mft
                          rsync://rpki.afrinic.net/repository/afrinic/wrcqDttgGOuk7XzTA12xMvRJwB0.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 25 Dec 2025 04:43:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 402 (0x192)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368948BAF, serialNumber=C2B72A0EDB6018EBA4ED7CD3035DB132F449C01D
        Validity
            Not Before: Dec 23 04:43:55 2025 GMT
            Not After : Dec 25 04:43:55 2025 GMT
        Subject: CN=694a1e0c-69d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:88:9b:1e:e9:03:d2:c9:6e:95:bb:c0:34:ab:
                    f3:d7:35:ee:66:62:17:6f:2a:c8:cc:49:f5:a2:28:
                    83:ff:1b:b4:b9:8c:44:1f:32:3e:5a:68:11:f9:eb:
                    54:e1:be:99:ab:2f:9f:e7:f6:01:2b:17:ce:b0:1d:
                    16:d6:61:c0:ab:d7:4b:3b:71:bc:e8:79:53:70:42:
                    09:4a:64:2c:62:8a:0e:ca:39:65:f3:91:f4:24:ce:
                    ba:b3:03:58:0f:f6:81:3e:7c:c4:75:1f:1b:b1:a0:
                    56:2d:6a:9a:e2:ed:69:86:b4:73:56:1e:70:2a:56:
                    d6:0a:99:f7:0f:36:22:7e:be:d3:79:43:28:ec:84:
                    81:a8:df:f5:22:ad:a5:af:13:e3:3e:8f:a2:68:66:
                    64:07:19:20:43:c8:eb:79:3d:3f:87:2a:3e:3c:0c:
                    4e:32:50:48:b5:83:e3:52:74:81:12:6e:87:86:70:
                    a7:43:06:dc:fb:57:40:d0:9a:2b:85:54:27:94:6b:
                    f5:c7:b9:8d:f8:f7:a6:19:d9:88:6a:c2:51:11:b2:
                    44:b4:88:cf:86:89:99:32:00:bc:27:c5:bc:c1:1f:
                    ae:07:13:17:85:4a:2e:31:89:32:9f:18:9f:0e:52:
                    43:0a:94:b8:47:f1:89:d9:bc:e7:38:78:24:ef:da:
                    05:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:F9:15:50:50:F1:10:EE:00:88:91:59:67:1C:5C:4F:35:28:65:CE
            X509v3 Authority Key Identifier:
                keyid:C2:B7:2A:0E:DB:60:18:EB:A4:ED:7C:D3:03:5D:B1:32:F4:49:C0:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368948B/57871110B09A11EFBA5BE8A0762E951A/wrcqDttgGOuk7XzTA12xMvRJwB0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/wrcqDttgGOuk7XzTA12xMvRJwB0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368948B/57871110B09A11EFBA5BE8A0762E951A/wrcqDttgGOuk7XzTA12xMvRJwB0.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:b0:42:98:e1:6e:ac:c8:d1:01:65:a4:6f:5a:4f:0f:fc:af:
         19:cd:94:61:b4:c5:ae:21:29:9e:62:d0:48:15:ab:a3:53:e4:
         9c:49:ac:22:09:7e:27:b7:99:d3:56:e6:52:f7:4a:0e:46:59:
         a3:3c:3d:9a:3b:88:0f:7d:8f:32:2a:0b:80:96:95:35:f3:6e:
         10:20:9f:46:88:b7:96:78:1a:02:54:a1:f9:e4:48:f2:5c:69:
         33:23:88:ed:8e:87:74:27:ca:ad:6c:61:95:51:af:e7:bb:c0:
         2b:42:66:29:9c:0d:86:5e:19:b6:31:bc:fb:b9:5a:d9:51:a6:
         22:c8:a3:f7:d9:fa:37:73:1d:6d:ff:b4:a7:28:67:9b:90:9c:
         a5:ce:20:27:9d:b4:47:8f:d8:ea:ed:da:b6:af:fe:3a:f9:e3:
         69:91:7d:18:f8:ba:d2:cf:81:16:93:4b:22:63:7e:4f:b1:71:
         76:1a:1b:92:2f:3b:82:26:59:c8:2a:8c:99:47:78:de:45:c2:
         68:f4:d5:0b:a3:d2:c9:3f:39:32:a6:d4:f3:97:39:35:df:a1:
         bd:89:32:8a:21:11:2d:4a:a8:08:eb:4a:f1:67:87:2c:84:cd:
         6a:64:aa:14:d0:ed:18:ee:b1:7a:de:96:b8:34:3d:72:f1:22:
         37:af:9a:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 10:52:53 2025 by rpki-client