This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369F697/78C36842E3AD11EF83884B8B762E951A/ASN6z_lkUyycUxWHWhRYLqqqtmQ.mft
File:                     ASN6z_lkUyycUxWHWhRYLqqqtmQ.mft (raw, json)
Hash identifier:          A0ce1NJ2NMtDtiwssQvl3LcaKPCuimrUQ/aE11Nfzy0=
Subject key identifier:   6B:95:8C:B3:06:2D:0A:DA:4D:3C:1A:B6:81:17:16:74:F3:F9:3C:AC
Authority key identifier: 01:23:7A:CF:F9:64:53:2C:9C:53:15:87:5A:14:58:2E:AA:AA:B6:64
Certificate issuer:       /CN=F369F697AF/serialNumber=01237ACFF964532C9C5315875A14582EAAAAB664
Certificate serial:       0146
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/ASN6z_lkUyycUxWHWhRYLqqqtmQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F369F697/78C36842E3AD11EF83884B8B762E951A/ASN6z_lkUyycUxWHWhRYLqqqtmQ.mft
Manifest number:          0145
Signing time:             Sun 21 Dec 2025 04:49:31 +0000
Manifest this update:     Sun 21 Dec 2025 04:49:30 +0000
Manifest next update:     Tue 23 Dec 2025 04:49:30 +0000
Files and hashes:         1: ASN6z_lkUyycUxWHWhRYLqqqtmQ.crl (hash: 51WxY3cAaSYyrFCRgLkXCvizhS+36hr2DrbWEU7m0yo=)
                          2: 111BD7DCE3AE11EF8894E28F762E951A.roa (hash: djJy//nqF4vHyJ4+PresBjZlxrALQCLSVGMcIglIjq0=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F369F697/78C36842E3AD11EF83884B8B762E951A/ASN6z_lkUyycUxWHWhRYLqqqtmQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F369F697/78C36842E3AD11EF83884B8B762E951A/ASN6z_lkUyycUxWHWhRYLqqqtmQ.mft
                          rsync://rpki.afrinic.net/repository/afrinic/ASN6z_lkUyycUxWHWhRYLqqqtmQ.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 23 Dec 2025 00:06:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 326 (0x146)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F369F697AF, serialNumber=01237ACFF964532C9C5315875A14582EAAAAB664
        Validity
            Not Before: Dec 21 04:49:30 2025 GMT
            Not After : Dec 23 04:49:30 2025 GMT
        Subject: CN=69477c5a-2b88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:ae:7e:d5:f5:63:48:d2:22:52:06:84:ca:fa:
                    7f:2d:33:dd:58:2c:7c:ad:b1:53:de:8b:45:59:4b:
                    4a:9c:84:da:35:d5:ee:5e:4d:76:d0:ac:9c:06:ac:
                    a4:38:a2:cd:03:9d:8d:b7:5e:90:85:2a:b2:6d:a9:
                    9d:aa:90:2e:9d:99:7f:14:73:af:2b:14:6c:a1:fe:
                    74:38:e7:e7:db:c7:9a:27:bf:05:62:f8:a8:4b:d2:
                    10:50:13:81:f7:b2:ff:38:8b:0e:4b:5e:2d:e6:77:
                    10:e2:21:80:6c:a2:6d:b7:b1:b6:43:4a:b9:3e:54:
                    70:d6:37:5a:e8:2c:3a:48:0c:f4:d8:97:6c:a6:9b:
                    44:51:ed:c1:7d:d9:77:cd:df:b5:15:60:c3:01:a7:
                    ae:56:7f:c8:c5:b4:0c:6a:fc:8b:74:e0:0e:8e:1f:
                    8c:05:b5:52:c8:18:cf:ca:e3:c7:c4:ed:e4:55:a1:
                    8a:45:4e:a2:a9:d0:42:7d:ef:51:1f:d1:8e:71:ee:
                    67:b8:57:1a:0c:02:c6:9f:e1:e8:c3:8d:83:56:2c:
                    03:92:ab:5b:12:bd:9f:eb:21:36:b9:fb:e2:6a:94:
                    5f:63:d6:c0:97:7b:9f:fd:bc:16:d2:89:fe:2e:32:
                    a1:b6:b1:0a:2e:a0:dc:2f:75:e8:fc:f8:26:43:23:
                    62:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:95:8C:B3:06:2D:0A:DA:4D:3C:1A:B6:81:17:16:74:F3:F9:3C:AC
            X509v3 Authority Key Identifier:
                keyid:01:23:7A:CF:F9:64:53:2C:9C:53:15:87:5A:14:58:2E:AA:AA:B6:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F369F697/78C36842E3AD11EF83884B8B762E951A/ASN6z_lkUyycUxWHWhRYLqqqtmQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/ASN6z_lkUyycUxWHWhRYLqqqtmQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369F697/78C36842E3AD11EF83884B8B762E951A/ASN6z_lkUyycUxWHWhRYLqqqtmQ.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:c5:3d:35:83:23:c9:1e:a9:38:28:4a:ab:7f:65:25:73:da:
         b4:70:31:14:07:7a:ac:85:3d:e9:cb:10:56:0b:a2:2e:d5:33:
         ef:6c:7d:17:af:0b:a3:eb:90:60:a0:5c:df:ec:97:ae:a2:1f:
         33:76:15:6d:44:2f:3c:e6:80:53:8b:b3:f7:63:ad:4c:ce:3f:
         05:1f:d3:8e:6f:4a:dd:09:29:1f:19:67:87:25:55:93:ca:0c:
         4d:3b:14:20:c4:3e:6a:0c:48:70:d0:4c:59:5b:b2:8e:72:af:
         bd:8e:6f:8a:ed:66:51:5e:8d:fd:c9:8a:52:21:22:c9:2e:9d:
         2a:24:f0:77:0a:d4:f0:c3:8f:95:c6:cb:83:94:4a:4e:1f:02:
         c1:ef:b8:8f:1c:9f:e4:00:6c:5e:4f:60:da:c9:d4:73:63:99:
         8f:b7:16:ef:71:75:dc:85:31:c7:2d:f1:ef:d8:89:b7:22:d2:
         2b:ea:e5:bd:a0:f2:ff:f1:cf:d5:87:e6:1f:07:14:86:fa:41:
         1e:a2:90:e1:8c:ae:85:95:f3:31:ea:a6:d8:b0:70:78:57:a5:
         00:4e:68:4b:16:34:8d:a4:30:94:f9:d7:2f:0d:7d:dc:1b:6c:
         fe:0b:e7:ae:73:6b:67:fb:6f:0f:db:56:d5:29:ec:9e:18:d4:
         34:b4:f8:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 08:38:04 2025 by rpki-client