This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369E2BD/00F29B8E594311EABDC6E160F8AEA228/HD250CDCm_5JEPoUqlAU9gSkJn8.mft
File:                     HD250CDCm_5JEPoUqlAU9gSkJn8.mft (raw, json)
Hash identifier:          z38xfDSLfOK7K15cHbdm/xgzG7oIHoWERpX2lx6Sqqk=
Subject key identifier:   D0:54:41:CB:1E:52:8D:35:76:31:0D:C7:81:C3:B2:21:88:D2:2D:43
Authority key identifier: 1C:3D:B9:D0:20:C2:9B:FE:49:10:FA:14:AA:50:14:F6:04:A4:26:7F
Certificate issuer:       /CN=F369E2BDAF/serialNumber=1C3DB9D020C29BFE4910FA14AA5014F604A4267F
Certificate serial:       0891
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/HD250CDCm_5JEPoUqlAU9gSkJn8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F369E2BD/00F29B8E594311EABDC6E160F8AEA228/HD250CDCm_5JEPoUqlAU9gSkJn8.mft
Manifest number:          088B
Signing time:             Tue 23 Dec 2025 01:42:34 +0000
Manifest this update:     Tue 23 Dec 2025 01:42:33 +0000
Manifest next update:     Thu 25 Dec 2025 01:42:33 +0000
Files and hashes:         1: HD250CDCm_5JEPoUqlAU9gSkJn8.crl (hash: 2gB3LXNC+q0bD0ZhkEsx1YvqYkh20uGwlvpgqOgsT6U=)
                          2: CDF0081C70F711EAA281FF20F8AEA228.roa (hash: fFYrreAZo5U4KWtK7vRj8cUH2mjucnzUUJT2VrDYVDc=)
                          3: 57DC8B94594311EAB1EE2E61F8AEA228.roa (hash: 9IdSgdrivSza8u+XWxxC8YvqMBQsdLiCPyERfG7cngg=)
                          4: A936AAF870F711EA8C00D420F8AEA228.roa (hash: h7Qbm3X2TCVgdgM0/cTt4WYwz33KdG8jIAvDj0CvfDA=)
                          5: EC2721A870F711EA94C12321F8AEA228.roa (hash: H0RK+OL9qt2hdg5NTBlkcYhhkAHhYl2IgSl91pWodCw=)
                          6: 8A7230BA70F711EAB773C020F8AEA228.roa (hash: +UY6ocsMAssEaQx/2vFU1pZTXFT3vRCaWp9MYhngoW4=)
                          7: 34EC88D2594311EAB19C1B61F8AEA228.roa (hash: YNJO/Fu0d3uU51SAVuG+ftYS08KKoUW6lE8R11S/eF8=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F369E2BD/00F29B8E594311EABDC6E160F8AEA228/HD250CDCm_5JEPoUqlAU9gSkJn8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F369E2BD/00F29B8E594311EABDC6E160F8AEA228/HD250CDCm_5JEPoUqlAU9gSkJn8.mft
                          rsync://rpki.afrinic.net/repository/afrinic/HD250CDCm_5JEPoUqlAU9gSkJn8.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 25 Dec 2025 00:06:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2193 (0x891)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F369E2BDAF, serialNumber=1C3DB9D020C29BFE4910FA14AA5014F604A4267F
        Validity
            Not Before: Dec 23 01:42:33 2025 GMT
            Not After : Dec 25 01:42:33 2025 GMT
        Subject: CN=6949f389-f0c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:e1:fa:31:4d:22:7d:0d:73:ef:68:b8:81:98:
                    91:df:47:05:c7:84:28:f2:58:ce:c6:22:a0:92:d3:
                    90:4c:12:2c:1f:b9:ed:67:5d:eb:c3:09:d9:dc:8d:
                    67:87:61:fb:8b:8e:5f:3c:17:8a:6e:6e:41:91:ee:
                    71:17:dc:ed:b6:68:46:c9:02:46:64:e0:6c:de:13:
                    8c:90:e2:7f:62:69:a8:a5:67:a4:6b:a0:2d:e9:be:
                    dc:11:a7:12:25:96:2d:10:1e:95:b4:bd:87:df:02:
                    d3:47:b2:4a:ba:49:62:12:86:b0:86:a9:8b:49:89:
                    47:2b:27:f5:94:c6:1c:fd:c8:99:b3:19:1a:8a:86:
                    8b:75:02:fb:c4:04:26:e2:89:02:a3:79:e5:bd:c9:
                    86:f5:ac:96:53:10:45:b3:fc:38:5a:ce:ce:7c:a0:
                    a2:62:ee:69:1f:e9:13:1a:13:47:7c:57:ed:ed:7f:
                    98:16:12:df:c9:47:35:55:74:3b:9e:4f:86:73:97:
                    3f:38:11:12:c9:5b:34:c3:e9:17:8c:31:e4:0b:63:
                    0f:dd:8a:09:12:4e:ad:e3:e0:44:2b:a8:93:5d:40:
                    80:4d:7e:67:3a:7a:cc:1c:02:e4:c6:6f:d0:00:44:
                    eb:af:0c:2a:77:c2:64:12:35:6e:00:9f:3a:f9:ac:
                    22:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:54:41:CB:1E:52:8D:35:76:31:0D:C7:81:C3:B2:21:88:D2:2D:43
            X509v3 Authority Key Identifier:
                keyid:1C:3D:B9:D0:20:C2:9B:FE:49:10:FA:14:AA:50:14:F6:04:A4:26:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F369E2BD/00F29B8E594311EABDC6E160F8AEA228/HD250CDCm_5JEPoUqlAU9gSkJn8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/HD250CDCm_5JEPoUqlAU9gSkJn8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369E2BD/00F29B8E594311EABDC6E160F8AEA228/HD250CDCm_5JEPoUqlAU9gSkJn8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:4a:cc:f8:ab:db:82:b4:65:7a:ec:15:b0:22:79:88:08:cb:
         2b:e4:15:74:90:0e:e0:07:4c:cc:45:4e:cd:c3:f3:0d:54:92:
         53:1f:ef:40:c7:a8:b5:fd:a9:50:a6:da:65:0b:7e:60:a0:4b:
         61:0a:27:ab:ff:7d:e6:87:1b:a0:45:8c:1a:78:b8:ee:8a:0c:
         59:db:eb:a1:18:1c:f5:92:56:ac:3c:24:46:bf:fb:9a:0f:cd:
         f9:ec:72:90:a7:d0:50:f8:3c:83:6a:f2:18:65:19:d1:11:fe:
         63:9f:4a:51:5c:df:8f:18:b4:2d:ec:3a:d0:9c:05:a1:13:10:
         e7:83:75:c9:ef:30:06:a8:94:66:9d:08:2c:dc:aa:df:87:07:
         5e:83:8c:9a:e7:ae:ed:a3:18:cb:d4:1e:b5:94:67:8f:fa:e3:
         62:c7:b1:a3:d0:ab:56:01:99:97:c1:c2:af:fd:e5:9a:de:9d:
         50:d9:6c:2b:f7:ae:c7:79:81:d6:c9:49:22:0a:a5:d9:d6:36:
         30:65:df:23:24:eb:92:b1:f8:17:de:9c:ed:0b:e1:59:a6:03:
         aa:34:12:93:c1:b4:d6:81:1e:73:e0:7b:51:9f:96:25:c8:5f:
         f2:7a:f2:64:1f:a6:d4:a9:83:a6:d8:4a:67:a3:e3:3d:c2:cc:
         c7:94:aa:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 09:19:17 2025 by rpki-client