This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369E1AE/A3E2EC72A56611EEBE59906AD25BE465/D0ElrSzSvYs64WLz4yLl9YEEdVw.mft
File:                     D0ElrSzSvYs64WLz4yLl9YEEdVw.mft (raw, json)
Hash identifier:          wuFk+OlqZ6PxTSxUfxzW/pyO8QZDp6Qpfn0FJUWMT54=
Subject key identifier:   DC:E6:24:BC:59:39:F0:F4:60:C7:3B:16:51:11:ED:17:34:41:14:87
Authority key identifier: 0F:41:25:AD:2C:D2:BD:8B:3A:E1:62:F3:E3:22:E5:F5:81:04:75:5C
Certificate issuer:       /CN=F369E1AEAF/serialNumber=0F4125AD2CD2BD8B3AE162F3E322E5F58104755C
Certificate serial:       02F1
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/D0ElrSzSvYs64WLz4yLl9YEEdVw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F369E1AE/A3E2EC72A56611EEBE59906AD25BE465/D0ElrSzSvYs64WLz4yLl9YEEdVw.mft
Manifest number:          02F0
Signing time:             Mon 29 Dec 2025 03:59:47 +0000
Manifest this update:     Mon 29 Dec 2025 03:59:46 +0000
Manifest next update:     Wed 31 Dec 2025 03:59:46 +0000
Files and hashes:         1: D0ElrSzSvYs64WLz4yLl9YEEdVw.crl (hash: CdkK0Gi2m6yM00ETaE3PB18YmfRf4Sb0WYR8ZcUHiUk=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F369E1AE/A3E2EC72A56611EEBE59906AD25BE465/D0ElrSzSvYs64WLz4yLl9YEEdVw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F369E1AE/A3E2EC72A56611EEBE59906AD25BE465/D0ElrSzSvYs64WLz4yLl9YEEdVw.mft
                          rsync://rpki.afrinic.net/repository/afrinic/D0ElrSzSvYs64WLz4yLl9YEEdVw.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 31 Dec 2025 00:06:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 753 (0x2f1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F369E1AEAF, serialNumber=0F4125AD2CD2BD8B3AE162F3E322E5F58104755C
        Validity
            Not Before: Dec 29 03:59:46 2025 GMT
            Not After : Dec 31 03:59:46 2025 GMT
        Subject: CN=6951fcb3-5ad8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:e1:95:53:55:59:d5:37:9c:5d:74:12:90:92:
                    0c:ae:b4:d9:9a:5a:c9:80:3c:1f:de:15:76:89:da:
                    53:78:f5:81:91:4b:ea:5b:db:b4:6c:95:85:71:99:
                    bc:8d:cf:cc:04:c6:1c:f0:f4:0d:91:62:99:18:92:
                    49:6c:71:28:a1:e9:ff:ba:80:88:26:87:c6:f4:db:
                    b4:5e:85:a4:0d:45:0e:fe:91:fd:a9:ea:7b:86:c7:
                    60:81:14:2c:ba:de:9a:df:50:8e:02:03:0f:85:5a:
                    00:73:7c:b4:2c:e2:03:c8:f1:1e:19:89:e1:20:11:
                    54:c9:57:0b:4f:11:16:98:a4:a6:a2:99:ec:1f:cd:
                    4f:56:23:a8:e3:81:55:b3:84:33:4e:62:d7:69:b0:
                    be:f6:6c:51:02:c0:03:52:94:e3:e0:15:90:29:d4:
                    2b:e3:c6:29:d3:60:2e:de:b6:20:fc:0c:36:17:6f:
                    3f:c2:4e:cc:52:4f:02:27:62:ea:c6:83:3a:e1:cc:
                    0d:6a:d7:5b:ca:1b:79:95:22:7f:79:fb:49:13:a2:
                    82:ce:84:d6:ac:1e:46:97:4a:5c:df:e3:fb:e2:79:
                    b9:a2:ac:89:4d:04:98:12:32:a8:40:90:51:1c:68:
                    b6:85:ba:e3:ab:95:3e:3d:d8:1b:2c:6b:d3:d4:de:
                    70:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:E6:24:BC:59:39:F0:F4:60:C7:3B:16:51:11:ED:17:34:41:14:87
            X509v3 Authority Key Identifier:
                keyid:0F:41:25:AD:2C:D2:BD:8B:3A:E1:62:F3:E3:22:E5:F5:81:04:75:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F369E1AE/A3E2EC72A56611EEBE59906AD25BE465/D0ElrSzSvYs64WLz4yLl9YEEdVw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/D0ElrSzSvYs64WLz4yLl9YEEdVw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369E1AE/A3E2EC72A56611EEBE59906AD25BE465/D0ElrSzSvYs64WLz4yLl9YEEdVw.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:8c:37:ad:0d:cb:61:28:2c:9d:0c:59:bd:73:3b:dc:f9:4a:
         48:05:12:1e:dc:be:9e:bf:ff:d4:3b:8a:d0:58:2c:58:12:12:
         13:17:8c:01:4e:a1:2d:aa:3c:fe:3b:6c:27:56:ac:b7:6b:11:
         b1:d4:e8:16:9b:4d:11:27:eb:7e:64:41:1f:6b:71:19:d3:38:
         52:56:91:3f:c7:1b:dc:41:95:3f:55:b0:a1:e5:65:da:40:c4:
         99:47:c1:d9:c7:84:99:2e:39:90:b2:d1:22:5f:cc:a7:f5:28:
         6b:a0:36:7a:30:be:a1:86:3f:8d:a4:38:dc:30:ad:45:2a:1e:
         3c:41:35:49:ad:8f:d5:39:ce:c4:a2:bc:50:08:2e:69:63:fc:
         7c:50:02:8e:0c:51:92:13:27:0f:99:f2:1b:d9:43:25:f5:67:
         c5:26:64:d4:f9:c0:2f:ed:c2:73:24:e0:8b:7e:63:1d:b5:19:
         0a:97:d4:4e:ba:c8:6b:89:bc:0d:4a:ae:86:99:f9:e5:eb:e0:
         7a:68:4e:92:66:73:b5:7c:b9:c8:c6:d4:e3:ad:d0:1d:cb:67:
         29:ad:b5:1d:66:b8:27:8d:91:d8:c5:0b:43:fe:14:ca:60:29:
         8d:d9:75:17:cf:02:af:e7:07:f7:77:67:8d:66:f7:71:d8:9a:
         96:40:7b:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 30 00:24:26 2025 by rpki-client