This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369C738/7A0ABF00EEA911EAA287D91BF8AEA228/AeYcP5ZGalkJmFR26IR5u31BEvY.mft
File:                     AeYcP5ZGalkJmFR26IR5u31BEvY.mft (raw, json)
Hash identifier:          bdOgL6GjruXeUfjq4gO7/do1mKvSwIWzh3MhL4UvK8E=
Subject key identifier:   E2:12:05:2E:3C:48:22:AA:2C:0A:12:9D:C1:AC:7C:A4:28:DD:94:1E
Authority key identifier: 01:E6:1C:3F:96:46:6A:59:09:98:54:76:E8:84:79:BB:7D:41:12:F6
Certificate issuer:       /CN=F369C738AF/serialNumber=01E61C3F96466A5909985476E88479BB7D4112F6
Certificate serial:       07D1
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/AeYcP5ZGalkJmFR26IR5u31BEvY.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F369C738/7A0ABF00EEA911EAA287D91BF8AEA228/AeYcP5ZGalkJmFR26IR5u31BEvY.mft
Manifest number:          07C9
Signing time:             Thu 25 Dec 2025 01:54:33 +0000
Manifest this update:     Thu 25 Dec 2025 01:54:32 +0000
Manifest next update:     Sat 27 Dec 2025 01:54:32 +0000
Files and hashes:         1: AeYcP5ZGalkJmFR26IR5u31BEvY.crl (hash: 960ojnLuytJxveLeCx1ZYDPn/ZfJCCs4dDcBjgrpcGI=)
                          2: 7BD1C78ECEC211ECA5D168D9F1222468.roa (hash: nf4PK+lidOrfc2Reb2CQH5nPtPRWenK3xLxQgTopJGo=)
                          3: AF4DC1D2CEC011ECA479F5D3F1222468.roa (hash: QVVfkdm1Ps59DY37Vr5B9x+xZ3oQL5mjOfgaIXuN1I8=)
                          4: 1E1654C4EEAA11EA8289771CF8AEA228.roa (hash: Dm82340uA0C690wn7sH2AhL9e6hsAhiXi6CDcAUcav4=)
                          5: DB1CF2E4CF5E11EC915C67C8F1222468.roa (hash: 5Aalyj0KvAvkgduGsPBpHdZbewdqAVL2gKGSiyYrFeY=)
                          6: 9CE6BFE6CEC311ECA312CEDCF1222468.roa (hash: UglkDp7AHPyplmtXic17NxeQDhq5WTRNY6CVWgh+94E=)
                          7: 3BD19BC6CEBF11ECB35C83CFF1222468.roa (hash: OQiLL3s4QK6PIepNSEVRJXRwc92W6fxDSAwcYtXxCQ0=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F369C738/7A0ABF00EEA911EAA287D91BF8AEA228/AeYcP5ZGalkJmFR26IR5u31BEvY.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F369C738/7A0ABF00EEA911EAA287D91BF8AEA228/AeYcP5ZGalkJmFR26IR5u31BEvY.mft
                          rsync://rpki.afrinic.net/repository/afrinic/AeYcP5ZGalkJmFR26IR5u31BEvY.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 27 Dec 2025 00:06:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2001 (0x7d1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F369C738AF, serialNumber=01E61C3F96466A5909985476E88479BB7D4112F6
        Validity
            Not Before: Dec 25 01:54:32 2025 GMT
            Not After : Dec 27 01:54:32 2025 GMT
        Subject: CN=694c9959-0103
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:98:3f:95:8c:ae:f5:ac:7e:71:00:f8:b7:45:
                    1e:5e:87:d5:ca:89:29:f7:5a:e3:8c:c2:8c:03:a6:
                    4b:fc:dc:14:8f:ea:83:c7:2d:73:fd:9f:e8:6b:85:
                    6a:b9:ac:07:41:5c:a0:e3:75:d7:18:c7:b0:18:1c:
                    90:54:4c:0d:6d:42:41:41:f9:4c:db:06:f1:a8:0f:
                    15:f8:49:42:31:eb:d1:e1:f7:e6:7d:64:9a:aa:81:
                    ff:5f:99:60:30:51:10:4f:1c:01:74:e0:52:c3:07:
                    00:a1:42:1c:f7:53:af:6e:b8:04:35:9a:1a:b6:32:
                    23:e5:9e:af:6d:fc:a8:59:69:25:c1:7f:1b:f0:af:
                    3b:fd:eb:b0:be:3a:dc:10:1b:4d:16:bc:f1:25:5d:
                    77:78:9f:5c:3d:ed:b3:98:bd:89:b4:44:20:65:cf:
                    57:20:51:4e:25:ce:4a:ff:c3:26:95:e7:32:31:da:
                    40:48:e8:4a:e6:ae:31:a0:1b:ce:70:bc:fd:fb:e1:
                    68:7f:30:14:9e:4c:ac:d8:63:fd:fd:82:59:4a:f4:
                    7b:80:a1:1b:55:f4:ca:0b:3d:94:67:9a:cc:47:ba:
                    6c:a4:7f:aa:a8:a0:2d:a2:57:b9:47:12:e3:15:6a:
                    68:58:53:b6:05:25:a0:fb:97:9d:86:1c:ff:ef:e7:
                    5f:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:12:05:2E:3C:48:22:AA:2C:0A:12:9D:C1:AC:7C:A4:28:DD:94:1E
            X509v3 Authority Key Identifier:
                keyid:01:E6:1C:3F:96:46:6A:59:09:98:54:76:E8:84:79:BB:7D:41:12:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F369C738/7A0ABF00EEA911EAA287D91BF8AEA228/AeYcP5ZGalkJmFR26IR5u31BEvY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/AeYcP5ZGalkJmFR26IR5u31BEvY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369C738/7A0ABF00EEA911EAA287D91BF8AEA228/AeYcP5ZGalkJmFR26IR5u31BEvY.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:2a:8f:7b:b5:7c:7d:85:25:f9:ba:99:fe:68:67:6e:3b:7e:
         ff:8f:c1:d9:78:6f:2e:e5:1f:21:eb:fe:ff:8e:20:95:37:f7:
         3f:53:39:d5:9b:b2:b0:20:1e:d2:a9:55:3e:b1:2b:96:4c:83:
         01:ae:53:01:a2:78:ea:89:c5:10:40:ff:8f:91:7d:1c:86:61:
         ce:6a:7b:ed:d1:ac:4f:ac:9c:02:dd:15:37:44:3b:db:65:cf:
         5c:a1:27:97:5f:31:40:9c:ad:7f:bb:40:25:62:91:13:22:4c:
         dd:0c:43:4f:e6:be:ac:50:31:99:af:78:3a:6a:1d:d0:aa:e6:
         5c:fb:44:25:41:52:00:61:4b:b1:1c:e5:1a:b4:a6:14:b1:29:
         88:8d:78:4c:48:eb:b8:35:a3:ce:53:b1:8f:b2:6a:ce:80:92:
         d7:cb:38:e0:ea:a0:49:fe:07:bf:7c:49:a8:56:04:64:cc:de:
         9f:45:81:86:f9:29:7d:fe:c9:57:ca:a3:8b:48:69:45:33:22:
         c7:3d:e4:06:66:d6:e8:82:10:0d:96:34:6f:c5:d3:22:6a:72:
         40:0d:c2:d0:24:16:94:fe:52:32:ec:7a:91:c2:0e:0d:df:2c:
         4f:8f:92:2e:32:79:c8:fb:62:5e:fc:d2:db:db:e7:49:90:5c:
         d2:d7:15:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 25 17:10:39 2025 by rpki-client