This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369D48A/C4097DD038D611ECA501247DD8A014CE/u_8lJAsgf5usxcuVSmIwmrulNl0.mft
File:                     u_8lJAsgf5usxcuVSmIwmrulNl0.mft (raw, json)
Hash identifier:          d3dZ3vVhXFG7NFu0rKkb5xi/v8D3l1w/o7hnW3x/13s=
Subject key identifier:   E8:E7:CD:4B:29:B1:0C:8B:78:E6:D8:9D:35:9A:AB:CA:FB:AC:C2:3E
Authority key identifier: BB:FF:25:24:0B:20:7F:9B:AC:C5:CB:95:4A:62:30:9A:BB:A5:36:5D
Certificate issuer:       /CN=F369D48AAF/serialNumber=BBFF25240B207F9BACC5CB954A62309ABBA5365D
Certificate serial:       0622
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/u_8lJAsgf5usxcuVSmIwmrulNl0.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F369D48A/C4097DD038D611ECA501247DD8A014CE/u_8lJAsgf5usxcuVSmIwmrulNl0.mft
Manifest number:          0620
Signing time:             Sat 27 Dec 2025 02:31:33 +0000
Manifest this update:     Sat 27 Dec 2025 02:31:32 +0000
Manifest next update:     Mon 29 Dec 2025 02:31:32 +0000
Files and hashes:         1: u_8lJAsgf5usxcuVSmIwmrulNl0.crl (hash: mQl9LYITTYvjeHKh7kWpQ7Wzu51hsmR0OMf//6K1l24=)
                          2: 5C15170E7C3F11ED8559019DF1222468.roa (hash: Fnw4e2Z6mQxfu98S+Kvx8lPub/zYdBqQ2Qpl3ytsjPY=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F369D48A/C4097DD038D611ECA501247DD8A014CE/u_8lJAsgf5usxcuVSmIwmrulNl0.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F369D48A/C4097DD038D611ECA501247DD8A014CE/u_8lJAsgf5usxcuVSmIwmrulNl0.mft
                          rsync://rpki.afrinic.net/repository/afrinic/u_8lJAsgf5usxcuVSmIwmrulNl0.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 29 Dec 2025 02:31:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1570 (0x622)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F369D48AAF, serialNumber=BBFF25240B207F9BACC5CB954A62309ABBA5365D
        Validity
            Not Before: Dec 27 02:31:32 2025 GMT
            Not After : Dec 29 02:31:32 2025 GMT
        Subject: CN=694f4505-d71b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:5b:23:e9:05:8f:24:ec:4b:8c:d5:16:cd:af:
                    8d:cf:89:ac:36:7c:89:65:b9:c9:06:fc:09:cc:c0:
                    b8:3e:63:4c:86:a8:7a:ee:43:34:0e:3e:a9:8a:d3:
                    fb:8a:b1:fc:e3:17:db:0c:02:82:06:c1:5d:12:a1:
                    7d:f4:95:3a:0a:f7:f0:5a:b6:8a:42:af:61:c2:93:
                    16:10:97:7d:4f:44:ab:76:1e:1a:7c:6f:95:c4:49:
                    d2:66:9c:de:33:8f:b2:dd:02:48:7e:12:79:e9:55:
                    f6:da:fe:3c:2d:18:17:64:57:58:ba:3f:a4:f4:f7:
                    a9:52:5a:fe:93:de:c4:ac:73:68:4a:79:59:0e:c8:
                    7d:52:65:f7:89:8d:af:8f:c3:da:bf:4f:91:86:46:
                    ab:07:a9:a3:60:e3:92:12:a6:89:14:2a:91:00:fd:
                    f2:d1:eb:6f:5f:aa:85:5a:83:5c:78:5a:d4:da:0f:
                    f7:f8:d5:b7:d7:0a:be:1b:49:f0:81:5b:ec:c6:a7:
                    12:d4:c7:8d:e2:a9:5c:b1:5f:20:9d:69:a8:b5:08:
                    3c:3b:4c:6a:0d:7b:b1:81:78:b1:6a:b7:3d:da:7b:
                    e5:cf:89:17:0b:d4:ea:72:aa:4d:dd:2a:a1:ef:9f:
                    68:cc:5d:53:f5:58:a9:51:53:b6:c4:89:60:f4:d1:
                    d4:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:E7:CD:4B:29:B1:0C:8B:78:E6:D8:9D:35:9A:AB:CA:FB:AC:C2:3E
            X509v3 Authority Key Identifier:
                keyid:BB:FF:25:24:0B:20:7F:9B:AC:C5:CB:95:4A:62:30:9A:BB:A5:36:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F369D48A/C4097DD038D611ECA501247DD8A014CE/u_8lJAsgf5usxcuVSmIwmrulNl0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/u_8lJAsgf5usxcuVSmIwmrulNl0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369D48A/C4097DD038D611ECA501247DD8A014CE/u_8lJAsgf5usxcuVSmIwmrulNl0.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:93:68:6e:77:6a:5b:28:2e:4c:17:b8:a3:3e:81:85:92:00:
         d4:b0:74:12:5c:e5:a7:24:2b:4e:f3:36:f5:a6:d8:5a:1a:28:
         14:5a:b2:0e:cb:14:d4:25:cb:21:93:b7:24:87:f1:82:cd:7b:
         c4:3e:97:dd:89:03:21:a0:96:90:d7:d9:16:6b:0c:5b:a5:41:
         40:8a:8a:f2:4a:13:4c:20:e2:48:be:b6:81:a4:10:17:4f:11:
         41:01:1b:87:bd:df:5b:5d:07:71:a7:4e:c5:2f:ba:9c:b8:40:
         b3:1f:f8:94:78:fd:94:c0:2a:fe:cd:50:c6:24:c7:3c:d9:6f:
         1c:76:25:72:5d:d2:9e:60:5e:c0:60:00:dd:d5:48:48:51:0d:
         31:c1:0c:6f:7b:45:2c:43:82:90:f5:83:e0:c8:69:c6:75:b1:
         85:f2:4b:e9:8d:53:05:72:45:08:90:82:cf:2a:e5:8a:74:13:
         cf:bd:a5:72:d1:85:f5:31:9f:61:3a:aa:63:29:56:e7:71:55:
         f8:5d:11:ae:1e:ac:1d:66:8c:56:76:3e:b9:01:c8:7d:44:0a:
         08:23:b4:fa:db:74:25:2e:f7:30:8e:07:6e:55:4d:18:75:59:
         e0:5f:61:ca:59:65:75:38:ec:f5:13:aa:c2:fb:a6:e8:81:ea:
         27:b9:e5:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 28 03:20:06 2025 by rpki-client