This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368A3D1/73732E56702811EBB2F96825F8AEA228/rlHSVxbdtMyjGy6YXgp1Jff0ucY.mft
File:                     rlHSVxbdtMyjGy6YXgp1Jff0ucY.mft (raw, json)
Hash identifier:          xRR+ebkOrnCF8+YHTokBWF+TnuoK1q6AluxYZJNzCSI=
Subject key identifier:   D2:03:3C:AA:F1:1E:68:3B:19:01:93:6C:4B:77:DE:9B:7B:DA:33:85
Authority key identifier: AE:51:D2:57:16:DD:B4:CC:A3:1B:2E:98:5E:0A:75:25:F7:F4:B9:C6
Certificate issuer:       /CN=F368A3D1AF/serialNumber=AE51D25716DDB4CCA31B2E985E0A7525F7F4B9C6
Certificate serial:       0724
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/rlHSVxbdtMyjGy6YXgp1Jff0ucY.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368A3D1/73732E56702811EBB2F96825F8AEA228/rlHSVxbdtMyjGy6YXgp1Jff0ucY.mft
Manifest number:          071E
Signing time:             Sun 21 Dec 2025 02:01:07 +0000
Manifest this update:     Sun 21 Dec 2025 02:01:07 +0000
Manifest next update:     Tue 23 Dec 2025 02:01:07 +0000
Files and hashes:         1: rlHSVxbdtMyjGy6YXgp1Jff0ucY.crl (hash: AArI3K9PAILQ5sYTqE5lfEWbzVcSpyC98FPf2740Kpg=)
                          2: BABA0216CDB011EDAD89A0C6F1222468.roa (hash: luxr+QNwcQO4iv8H9JMZsFbjB/B4eY0ANzOBLeZGQ7s=)
                          3: BCAF9294702811EB8791AD25F8AEA228.roa (hash: AT0o7ug7v2ZBAyMdgUq3SD/St9P0mYCt+1mdlQ+38qg=)
                          4: 9D82CD40CDB011ED812241C6F1222468.roa (hash: qsqlB1DyQeEjQRpQD9Kt6opY0oeDRgR3OAxfv/Yfba8=)
                          5: 1C83F7F2CCA011ED9FBDAF90F1222468.roa (hash: 34j16EfLKBboBdu4W8orVCqv2BpWRoneipEfOF9Vyhs=)
                          6: A0FB2C7A702811EBBEEF8C25F8AEA228.roa (hash: WRA7vUkmweseystfPnsoSmxUQdjwHDtXfkHr1rmgxF8=)
                          7: 365FE0469DF411EB9F82B84AF8AEA228.roa (hash: Ws8N8X7YiONJc56TyVAJKcp66X/6QscYInYVrETeq+o=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368A3D1/73732E56702811EBB2F96825F8AEA228/rlHSVxbdtMyjGy6YXgp1Jff0ucY.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368A3D1/73732E56702811EBB2F96825F8AEA228/rlHSVxbdtMyjGy6YXgp1Jff0ucY.mft
                          rsync://rpki.afrinic.net/repository/afrinic/rlHSVxbdtMyjGy6YXgp1Jff0ucY.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 23 Dec 2025 00:06:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1828 (0x724)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368A3D1AF, serialNumber=AE51D25716DDB4CCA31B2E985E0A7525F7F4B9C6
        Validity
            Not Before: Dec 21 02:01:07 2025 GMT
            Not After : Dec 23 02:01:07 2025 GMT
        Subject: CN=694754e3-b2f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:4d:40:8a:c8:2b:83:da:b8:a9:53:7e:b4:7e:
                    65:a4:34:59:ad:eb:8d:d5:2d:18:8c:09:c9:f1:68:
                    b0:6c:76:82:e5:b7:69:f3:07:00:a6:45:9a:a3:b1:
                    07:b4:50:92:d5:d2:6a:16:b1:cf:f1:77:aa:2f:ae:
                    0e:14:7d:bb:15:5e:97:56:c4:7d:bb:75:39:0b:fd:
                    69:4e:5f:83:46:a4:cc:87:c6:4c:4f:e7:8f:02:b1:
                    ac:5b:5d:fc:0d:9b:ed:b9:a8:17:82:3f:f1:62:d9:
                    de:f1:d5:da:72:38:f7:cd:94:51:e8:37:97:d9:93:
                    47:0b:83:ab:9f:97:2e:0b:c3:29:c1:04:fd:b5:6d:
                    73:57:92:c2:61:15:60:bf:8c:8f:e7:71:84:a4:d1:
                    1d:43:c8:bf:6c:ba:7c:cb:73:ae:f4:9d:b8:8e:20:
                    f8:45:36:b7:2d:6f:e0:53:f9:93:a6:c1:4b:26:ff:
                    b1:b4:a8:a1:25:b6:bc:e8:a7:72:73:d7:40:d9:26:
                    a4:fb:73:1c:1f:e1:9c:f5:5a:d1:eb:86:a8:18:60:
                    f3:b9:76:cc:4c:70:bc:73:c5:dd:a3:9b:fe:37:69:
                    4c:57:d6:ed:64:c2:78:bc:b5:42:43:18:49:ee:06:
                    ce:fe:14:71:3d:14:10:63:53:5b:5f:3f:9e:9a:aa:
                    99:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:03:3C:AA:F1:1E:68:3B:19:01:93:6C:4B:77:DE:9B:7B:DA:33:85
            X509v3 Authority Key Identifier:
                keyid:AE:51:D2:57:16:DD:B4:CC:A3:1B:2E:98:5E:0A:75:25:F7:F4:B9:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368A3D1/73732E56702811EBB2F96825F8AEA228/rlHSVxbdtMyjGy6YXgp1Jff0ucY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/rlHSVxbdtMyjGy6YXgp1Jff0ucY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368A3D1/73732E56702811EBB2F96825F8AEA228/rlHSVxbdtMyjGy6YXgp1Jff0ucY.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:de:f2:46:df:35:b4:e4:ad:61:37:65:97:50:8a:8e:ff:8e:
         2c:1f:01:96:bb:72:49:76:01:5a:74:e3:65:9c:cc:4c:7b:0e:
         25:69:34:58:a1:13:e8:75:d7:e7:ac:ae:4a:12:57:da:1b:1f:
         d7:9c:85:27:b0:70:42:11:4a:19:71:c9:c1:72:08:63:45:8f:
         64:ad:03:6d:80:d1:9e:11:be:a7:2c:03:11:6a:fb:b2:1a:6a:
         fb:e6:33:c6:5d:bf:16:8b:94:44:56:38:ed:aa:1a:7b:33:98:
         d4:7a:ea:b2:94:6c:6d:e8:71:c6:66:33:c0:4b:c8:28:9a:e4:
         d2:55:3f:a7:16:11:88:9c:dc:f0:32:d6:ab:6c:7a:83:5a:d9:
         53:5f:51:c1:3a:7d:0b:27:79:26:13:a9:d0:ab:e1:a2:04:d4:
         2a:16:ed:13:07:9b:a9:28:12:a4:ad:49:59:2f:46:db:5a:c7:
         63:1d:bf:09:e8:31:b6:c2:b5:b6:a3:70:01:9e:cb:f9:74:3f:
         8a:32:20:f6:0b:67:a9:3c:69:6b:23:2a:b0:63:7f:04:56:77:
         b0:ea:ca:16:fe:05:49:1c:f0:b6:40:1c:aa:33:67:eb:ef:c3:
         25:e8:81:8d:24:07:2b:5b:83:45:b8:17:99:26:2b:82:48:8a:
         0c:2a:54:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 05:39:04 2025 by rpki-client