This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369FA36/9B16B9A8813911E9AB932A1AF8AEA228/JbZLdh63yNTuwchu-qN5sDvSAGE.mft
File:                     JbZLdh63yNTuwchu-qN5sDvSAGE.mft (raw, json)
Hash identifier:          hT3/N9QXOwV3sQQ9b44qswXni3UOsgFYm70GeZpsXGI=
Subject key identifier:   32:48:E4:89:82:9D:B8:F1:EE:2A:88:3A:C6:34:2B:E9:DE:EB:4C:3A
Authority key identifier: 25:B6:4B:76:1E:B7:C8:D4:EE:C1:C8:6E:FA:A3:79:B0:3B:D2:00:61
Certificate issuer:       /CN=F369FA36AF/serialNumber=25B64B761EB7C8D4EEC1C86EFAA379B03BD20061
Certificate serial:       09AA
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JbZLdh63yNTuwchu-qN5sDvSAGE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F369FA36/9B16B9A8813911E9AB932A1AF8AEA228/JbZLdh63yNTuwchu-qN5sDvSAGE.mft
Manifest number:          09AA
Signing time:             Wed 31 Dec 2025 01:22:58 +0000
Manifest this update:     Wed 31 Dec 2025 01:22:57 +0000
Manifest next update:     Fri 02 Jan 2026 01:22:57 +0000
Files and hashes:         1: JbZLdh63yNTuwchu-qN5sDvSAGE.crl (hash: UFBVYCj98WHylfVDpgeI0S1LbydA4UQkoLmZoFueb4k=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F369FA36/9B16B9A8813911E9AB932A1AF8AEA228/JbZLdh63yNTuwchu-qN5sDvSAGE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F369FA36/9B16B9A8813911E9AB932A1AF8AEA228/JbZLdh63yNTuwchu-qN5sDvSAGE.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JbZLdh63yNTuwchu-qN5sDvSAGE.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 02 Jan 2026 00:06:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2474 (0x9aa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F369FA36AF, serialNumber=25B64B761EB7C8D4EEC1C86EFAA379B03BD20061
        Validity
            Not Before: Dec 31 01:22:57 2025 GMT
            Not After : Jan  2 01:22:57 2026 GMT
        Subject: CN=69547af2-110d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:7f:7e:d1:39:22:aa:ab:b7:dd:e3:c9:9c:5e:
                    5d:ed:61:ec:e6:0d:ee:5f:ed:da:01:29:15:93:d9:
                    fe:69:be:22:f7:9c:d1:62:47:9a:54:33:40:10:af:
                    99:fa:f5:68:84:6c:95:3f:99:39:07:24:a3:6f:39:
                    16:f2:73:0c:9f:95:cd:8f:c9:c3:ad:34:be:01:1a:
                    cd:71:d6:65:af:00:16:ac:de:98:9e:7f:e7:1d:ae:
                    c1:f5:c0:bc:b2:51:ea:a7:6b:34:6b:53:5c:4c:6f:
                    29:2b:ea:e7:6c:a9:8c:e8:c1:9c:5b:4f:93:a5:70:
                    e7:32:c0:58:74:f9:8f:a3:ef:78:c8:c1:71:9d:26:
                    90:3f:3c:f4:4b:26:f9:d3:c5:74:c2:67:88:98:5a:
                    b5:01:29:2d:81:7a:e8:2f:d3:fb:23:8c:76:5c:2b:
                    6a:5d:36:38:16:02:90:ef:d6:0d:e4:0c:47:52:c2:
                    8b:41:e1:3b:4d:1c:51:56:c1:d4:5b:2f:b5:83:7d:
                    9e:e3:b3:d3:8f:1a:f3:77:1e:25:b7:8d:ef:d9:39:
                    8b:76:6a:c8:df:8e:6b:5f:fd:73:2d:d2:cf:f1:cd:
                    1b:e2:ef:85:60:e2:ed:d2:9d:fb:e3:72:17:2f:a7:
                    dd:49:c8:ca:64:f7:e3:b7:fd:de:0e:42:71:83:f0:
                    ce:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:48:E4:89:82:9D:B8:F1:EE:2A:88:3A:C6:34:2B:E9:DE:EB:4C:3A
            X509v3 Authority Key Identifier:
                keyid:25:B6:4B:76:1E:B7:C8:D4:EE:C1:C8:6E:FA:A3:79:B0:3B:D2:00:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F369FA36/9B16B9A8813911E9AB932A1AF8AEA228/JbZLdh63yNTuwchu-qN5sDvSAGE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JbZLdh63yNTuwchu-qN5sDvSAGE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369FA36/9B16B9A8813911E9AB932A1AF8AEA228/JbZLdh63yNTuwchu-qN5sDvSAGE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:a3:c4:f4:a5:1c:e9:60:e9:94:e7:8e:f2:13:7f:b0:6a:a4:
         cb:50:11:57:9d:ab:7d:f1:34:8a:3f:b6:7d:d3:41:62:32:37:
         70:af:dd:26:31:bc:29:25:c1:cb:41:00:01:27:a7:80:a7:33:
         cc:72:95:85:b8:c7:eb:ba:9d:0f:c5:29:f4:4a:50:89:5b:eb:
         18:37:b4:40:fd:22:5c:2f:0b:99:60:85:bc:54:a2:03:04:e5:
         6c:46:73:e0:d4:f8:77:ab:bb:e3:32:01:12:ca:5d:27:e3:a1:
         ef:9f:a9:fa:09:df:e6:34:6c:19:90:95:dd:f3:ab:63:e6:4a:
         3a:b8:0f:f0:62:91:44:9b:b7:95:49:9f:be:69:e4:63:22:b6:
         a8:5f:74:72:d3:10:61:71:da:d4:13:93:95:48:a6:ba:5c:c2:
         8d:59:dd:26:a8:89:9e:fc:c5:3e:5e:e8:c5:98:e4:b3:b3:17:
         3f:f8:71:2a:67:62:36:9c:59:cc:8f:3c:1f:94:c6:0a:98:a9:
         96:e9:4f:8e:29:d3:1c:70:42:54:a5:09:4d:c7:ac:d2:06:cd:
         90:5e:97:fa:00:61:94:fd:f5:ac:5a:ec:51:7f:23:ca:10:b1:
         7d:96:00:bd:29:64:86:b9:ec:ad:d6:4d:ae:45:b0:69:db:4f:
         c0:b7:2b:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 31 07:44:37 2025 by rpki-client