This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C38D9/74EBC17E66D111EE9135F77D4AD9E6FC/yZPQ8U81sUlhtFMJfMPSL6eQ3s8.mft
File:                     yZPQ8U81sUlhtFMJfMPSL6eQ3s8.mft (raw, json)
Hash identifier:          7DST+T566ep3JyDMCO3s/KwJSX6TsiISmIlUH3MHg20=
Subject key identifier:   47:39:F0:DA:AE:9E:9C:FE:37:C4:53:2E:3D:8D:5E:AD:79:16:33:64
Authority key identifier: C9:93:D0:F1:4F:35:B1:49:61:B4:53:09:7C:C3:D2:2F:A7:90:DE:CF
Certificate issuer:       /CN=F36C38D9AF/serialNumber=C993D0F14F35B14961B453097CC3D22FA790DECF
Certificate serial:       0346
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/yZPQ8U81sUlhtFMJfMPSL6eQ3s8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C38D9/74EBC17E66D111EE9135F77D4AD9E6FC/yZPQ8U81sUlhtFMJfMPSL6eQ3s8.mft
Manifest number:          0343
Signing time:             Mon 22 Dec 2025 03:49:11 +0000
Manifest this update:     Mon 22 Dec 2025 03:49:10 +0000
Manifest next update:     Wed 24 Dec 2025 03:49:10 +0000
Files and hashes:         1: yZPQ8U81sUlhtFMJfMPSL6eQ3s8.crl (hash: isO2+TQ5b+edWG+V7TrELrDOFrSAUDrNf8fHxh37phg=)
                          2: 04EB056A6ABE11EE9E4243804AD9E6FC.roa (hash: EyVlkSGybf5bnAy71sGPmJ47rqIPQfEXtljbaai4c88=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36C38D9/74EBC17E66D111EE9135F77D4AD9E6FC/yZPQ8U81sUlhtFMJfMPSL6eQ3s8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36C38D9/74EBC17E66D111EE9135F77D4AD9E6FC/yZPQ8U81sUlhtFMJfMPSL6eQ3s8.mft
                          rsync://rpki.afrinic.net/repository/afrinic/yZPQ8U81sUlhtFMJfMPSL6eQ3s8.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 24 Dec 2025 00:06:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 838 (0x346)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C38D9AF, serialNumber=C993D0F14F35B14961B453097CC3D22FA790DECF
        Validity
            Not Before: Dec 22 03:49:10 2025 GMT
            Not After : Dec 24 03:49:10 2025 GMT
        Subject: CN=6948bfb7-fbab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:47:53:e1:04:cc:f0:a7:73:84:9d:b5:c0:af:
                    f7:62:e1:b6:c0:f0:26:fa:65:ef:7c:38:09:57:67:
                    35:5f:45:1a:a9:e5:b9:de:ca:3f:fd:aa:e4:a8:9b:
                    fa:7a:5c:a3:89:36:e8:ab:a3:a6:f6:8c:c0:f3:6b:
                    59:f3:9c:0d:da:ed:4b:2c:fd:c6:d3:c1:66:55:33:
                    98:22:31:9e:8b:89:6b:06:a4:d7:4e:33:2a:5a:b1:
                    02:41:22:13:68:66:66:5f:f8:b7:db:06:44:93:c8:
                    a3:ff:a0:80:6d:b5:19:cf:fa:12:24:09:80:8d:e5:
                    32:44:fb:0f:26:9a:ed:e1:b7:46:ce:72:6e:ae:63:
                    47:9c:54:a8:1c:ea:c5:17:44:94:e8:46:a0:f2:56:
                    9f:65:77:93:03:a7:67:5c:23:b4:a7:19:61:6e:c9:
                    68:fa:25:63:2a:1c:15:10:61:3a:e3:29:fa:4d:c5:
                    ed:f2:10:a5:d8:3c:3c:9f:3a:f7:1f:b3:e4:56:fb:
                    85:7a:8c:e0:44:16:eb:b1:fb:4a:84:ad:ca:e9:83:
                    5b:1b:46:40:43:58:77:44:98:a5:17:f4:8a:78:49:
                    e3:96:82:a9:bc:4d:e2:80:46:76:8b:85:96:a6:02:
                    08:d0:a5:1a:fb:18:b0:f2:f0:c4:37:fa:8d:02:c8:
                    1b:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:39:F0:DA:AE:9E:9C:FE:37:C4:53:2E:3D:8D:5E:AD:79:16:33:64
            X509v3 Authority Key Identifier:
                keyid:C9:93:D0:F1:4F:35:B1:49:61:B4:53:09:7C:C3:D2:2F:A7:90:DE:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C38D9/74EBC17E66D111EE9135F77D4AD9E6FC/yZPQ8U81sUlhtFMJfMPSL6eQ3s8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/yZPQ8U81sUlhtFMJfMPSL6eQ3s8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C38D9/74EBC17E66D111EE9135F77D4AD9E6FC/yZPQ8U81sUlhtFMJfMPSL6eQ3s8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:65:40:c7:a9:79:76:83:d4:57:61:06:e4:e6:b5:6d:fe:f3:
         36:4a:85:db:a7:26:8d:ed:58:43:49:be:28:5d:f0:8a:71:e6:
         e6:6c:c9:6e:56:c8:d0:9a:6a:78:ec:54:01:c7:b2:07:8b:ef:
         72:35:d1:d9:cb:28:79:5d:e4:a5:1d:a0:74:20:1d:a1:ec:48:
         5d:7c:7f:92:d7:b5:9c:0e:15:10:a5:8c:c5:18:ba:a5:72:f4:
         be:5b:cf:eb:27:0f:5f:92:ac:4d:73:b6:a6:1e:39:51:f0:51:
         9a:db:0d:c9:9f:f8:fc:1f:ee:8a:0c:8c:6d:b2:2b:d5:67:93:
         2e:c7:71:9e:25:c7:7f:68:0b:4b:73:65:30:36:e2:c1:d1:d4:
         03:5a:ab:73:9d:4f:7b:0e:75:44:f7:b5:ef:7f:23:1b:85:2a:
         10:89:84:63:c6:4c:04:9a:cf:83:cd:ec:5b:ca:61:1c:50:23:
         05:4d:e6:6f:8e:d7:73:90:6e:9c:50:6a:d5:a0:86:ee:ca:dc:
         93:25:28:24:5f:06:de:28:46:09:64:ed:8e:cd:7e:1d:b9:26:
         d1:67:33:46:0a:29:d6:1d:0e:52:90:a3:bd:d5:cf:c9:4d:63:
         7a:c9:5d:7c:f0:c1:06:7c:2b:87:b1:1e:6c:bd:ab:8a:74:1a:
         d9:3e:23:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 12:21:02 2025 by rpki-client