This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368B07F/9A1299DEB9C411E78B59C061F8AEA228/eIJbK8kIpA_vYrJkgtYamFdfy9M.mft
File:                     eIJbK8kIpA_vYrJkgtYamFdfy9M.mft (raw, json)
Hash identifier:          71dROnoym/uFB6flgNVbgyN8Q/mKQCC1OGIjuoCYwsU=
Subject key identifier:   69:43:49:A2:3A:1D:9E:91:FE:76:7A:84:3E:29:F4:71:C4:2C:E2:3F
Authority key identifier: 78:82:5B:2B:C9:08:A4:0F:EF:62:B2:64:82:D6:1A:98:57:5F:CB:D3
Certificate issuer:       /CN=F368B07FAF/serialNumber=78825B2BC908A40FEF62B26482D61A98575FCBD3
Certificate serial:       0C17
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/eIJbK8kIpA_vYrJkgtYamFdfy9M.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368B07F/9A1299DEB9C411E78B59C061F8AEA228/eIJbK8kIpA_vYrJkgtYamFdfy9M.mft
Manifest number:          0C09
Signing time:             Wed 31 Dec 2025 01:09:59 +0000
Manifest this update:     Wed 31 Dec 2025 01:09:59 +0000
Manifest next update:     Fri 02 Jan 2026 01:09:59 +0000
Files and hashes:         1: eIJbK8kIpA_vYrJkgtYamFdfy9M.crl (hash: 3RDnAfd7LM7jdP8rSup0JTpvfUfzlsTx5L0Mnu7T89U=)
                          2: 88C4BC14044611F0AD660049762E951A.roa (hash: gxQ4TZcIwXW8UpNV4nfbcezjuDijdoi8k2ctMvb0xJY=)
                          3: 1A2092F6044611F095BFB244762E951A.roa (hash: 0SLkUBB5NPSR/wjDecq70mS7cvLncEMmvdIdrHVhmHQ=)
                          4: DB96D28E044511F0B15D9244762E951A.roa (hash: i+EO9un0S5Mao/hCZ7gU7BvNM5zD9ye2X0RQkXQ9bls=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368B07F/9A1299DEB9C411E78B59C061F8AEA228/eIJbK8kIpA_vYrJkgtYamFdfy9M.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368B07F/9A1299DEB9C411E78B59C061F8AEA228/eIJbK8kIpA_vYrJkgtYamFdfy9M.mft
                          rsync://rpki.afrinic.net/repository/afrinic/eIJbK8kIpA_vYrJkgtYamFdfy9M.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 02 Jan 2026 00:06:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3095 (0xc17)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368B07FAF, serialNumber=78825B2BC908A40FEF62B26482D61A98575FCBD3
        Validity
            Not Before: Dec 31 01:09:59 2025 GMT
            Not After : Jan  2 01:09:59 2026 GMT
        Subject: CN=695477e7-fa5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:59:12:61:52:18:80:8b:5c:52:15:7a:dd:1a:
                    8f:45:55:44:ad:d6:2a:9d:0b:50:a8:c1:79:df:65:
                    ac:84:87:b9:b5:4b:ee:d1:ca:d3:7f:2a:bd:f4:ac:
                    f0:0b:44:31:9e:b2:22:14:95:6b:f1:3c:f6:33:b2:
                    cd:fe:a4:ce:6e:22:76:e0:1a:38:3a:ec:f0:76:52:
                    c3:a6:8a:e4:b9:3c:a6:4f:cd:77:70:64:ca:41:87:
                    24:df:16:75:c8:b0:a0:c9:db:34:ed:64:96:81:46:
                    ab:3a:40:f4:8b:f3:ee:e5:0a:1d:ad:63:bf:ad:79:
                    86:a8:91:5e:8b:0f:4d:12:98:99:df:35:c0:a5:e1:
                    17:b4:34:da:b3:cd:c7:e0:b9:eb:76:bb:f2:59:a3:
                    2c:f0:4f:6e:79:a1:f0:37:30:f4:80:ab:e1:41:39:
                    04:de:55:81:69:60:c4:ac:ac:84:43:63:4a:57:1e:
                    58:7c:62:e9:b6:a2:6f:96:fe:50:01:8d:7c:cb:37:
                    a4:dd:d1:f0:93:d8:4c:33:e7:ec:14:ab:8d:58:cb:
                    c8:46:4d:e2:32:ef:d4:ef:1b:0c:31:86:d4:18:87:
                    b7:a3:32:eb:af:62:4e:54:62:b7:26:3c:8e:a1:63:
                    f2:b1:44:29:f2:4e:d7:c8:96:48:b4:8b:2f:66:19:
                    0a:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:43:49:A2:3A:1D:9E:91:FE:76:7A:84:3E:29:F4:71:C4:2C:E2:3F
            X509v3 Authority Key Identifier:
                keyid:78:82:5B:2B:C9:08:A4:0F:EF:62:B2:64:82:D6:1A:98:57:5F:CB:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368B07F/9A1299DEB9C411E78B59C061F8AEA228/eIJbK8kIpA_vYrJkgtYamFdfy9M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/eIJbK8kIpA_vYrJkgtYamFdfy9M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368B07F/9A1299DEB9C411E78B59C061F8AEA228/eIJbK8kIpA_vYrJkgtYamFdfy9M.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:59:fc:b6:9d:04:57:1a:38:70:79:27:5f:12:99:3e:c8:0f:
         8e:44:71:77:c9:f7:38:d6:82:17:00:a0:80:c3:8e:f5:3d:42:
         bb:09:1d:b9:19:36:e0:5f:25:70:90:2c:02:46:5b:24:07:6e:
         eb:b1:e6:01:33:92:2b:6b:a8:3f:dd:07:da:95:11:0f:ec:0d:
         86:2f:07:87:be:ba:13:58:8a:b0:5c:f7:74:15:eb:47:e1:c2:
         7d:bd:fc:fd:88:90:c6:3a:e7:c9:8d:03:43:c4:97:66:9f:09:
         c8:d2:f1:c0:6f:ae:f6:57:2c:ac:82:03:c2:62:53:fe:38:dd:
         39:f4:80:bf:63:07:ff:82:f6:81:95:b3:33:14:26:44:66:d0:
         75:7f:18:1b:f8:cb:4a:de:6b:b2:26:b9:c4:47:c0:1d:17:64:
         2b:e4:bb:3f:18:90:a2:c9:b1:23:6d:11:b1:b0:78:d8:27:c6:
         68:9a:d0:11:f6:37:f6:0f:e3:eb:82:90:e3:af:dc:fb:12:85:
         60:d0:d4:53:65:a8:10:3d:25:26:28:df:da:89:69:8f:46:e5:
         44:59:28:fb:31:af:e9:58:0a:69:6c:71:7c:f6:dd:9c:2c:6f:
         71:a5:68:d3:13:93:48:ab:3d:48:51:5f:45:2c:a2:c0:23:21:
         1c:a7:cd:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 31 09:36:11 2025 by rpki-client