This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C5C48/902C8B843C6411F0ADBE878DDAE4EC9C/yD_Q4V0UPDf5lHSXz4Zvj650cLk.mft
File:                     yD_Q4V0UPDf5lHSXz4Zvj650cLk.mft (raw, json)
Hash identifier:          EKT5E9dwPhxL1beW5S4Sntvo/myaS1FzBb6uqkX7NTU=
Subject key identifier:   67:8C:94:C9:B3:EA:A2:C7:0D:8C:45:38:B0:EE:94:43:5A:51:2D:31
Authority key identifier: C8:3F:D0:E1:5D:14:3C:37:F9:94:74:97:CF:86:6F:8F:AE:74:70:B9
Certificate issuer:       /CN=F36C5C48AF/serialNumber=C83FD0E15D143C37F9947497CF866F8FAE7470B9
Certificate serial:       D5
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/yD_Q4V0UPDf5lHSXz4Zvj650cLk.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C5C48/902C8B843C6411F0ADBE878DDAE4EC9C/yD_Q4V0UPDf5lHSXz4Zvj650cLk.mft
Manifest number:          D4
Signing time:             Sun 21 Dec 2025 04:56:28 +0000
Manifest this update:     Sun 21 Dec 2025 04:56:27 +0000
Manifest next update:     Tue 23 Dec 2025 04:56:27 +0000
Files and hashes:         1: yD_Q4V0UPDf5lHSXz4Zvj650cLk.crl (hash: +IlWXMjLHakq9roYRrW0HOwW5qP8n/xFmM6M345Zrkw=)
                          2: 7810FC3C3C6511F09E134B93DAE4EC9C.roa (hash: f1/GvpZGuXTR7gHR1RFHDPtCJrb5runsWbtXK95Q83A=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36C5C48/902C8B843C6411F0ADBE878DDAE4EC9C/yD_Q4V0UPDf5lHSXz4Zvj650cLk.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36C5C48/902C8B843C6411F0ADBE878DDAE4EC9C/yD_Q4V0UPDf5lHSXz4Zvj650cLk.mft
                          rsync://rpki.afrinic.net/repository/afrinic/yD_Q4V0UPDf5lHSXz4Zvj650cLk.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 23 Dec 2025 04:56:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 213 (0xd5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C5C48AF, serialNumber=C83FD0E15D143C37F9947497CF866F8FAE7470B9
        Validity
            Not Before: Dec 21 04:56:27 2025 GMT
            Not After : Dec 23 04:56:27 2025 GMT
        Subject: CN=69477dfc-97c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:af:96:11:61:4c:46:f4:2d:38:1b:92:83:41:
                    29:db:b1:97:7b:a4:5f:17:47:ea:e6:c3:b8:4d:22:
                    cd:a9:c6:c2:99:14:18:9d:fe:be:d5:0b:bd:13:54:
                    f7:09:69:3d:d2:3e:a3:06:e5:83:2c:e4:04:23:06:
                    d1:82:05:d8:23:99:43:15:25:49:9f:56:bb:b6:b4:
                    99:79:61:ee:3d:06:a9:bc:0c:2a:d6:18:26:e0:cf:
                    ed:c5:4d:33:14:d6:8e:c0:3c:e0:43:e5:bc:25:7b:
                    e2:78:cd:06:39:a6:25:6f:9a:ec:6e:c2:07:c8:d4:
                    31:07:85:a7:25:eb:a9:74:7f:fe:df:d6:82:c8:2b:
                    b0:d0:0f:cf:40:4e:33:d8:87:91:38:f8:94:59:1e:
                    da:0a:06:cf:69:0b:bf:e7:31:94:3d:cc:20:3a:6a:
                    39:3b:f1:48:c6:79:c2:28:13:be:d9:ac:97:c7:5d:
                    cf:f1:72:b6:d4:db:36:41:86:54:a0:83:61:5d:0b:
                    7d:b0:d1:1f:6d:34:2b:2a:6c:1c:24:fd:2b:fd:88:
                    aa:da:24:a2:52:c9:1d:35:d7:b1:d9:81:29:5a:18:
                    52:a9:73:5f:11:ca:a5:85:b2:7d:6c:37:8c:69:fa:
                    89:8a:1e:c4:75:6f:27:20:d6:96:f2:bb:4c:ae:c3:
                    5c:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:8C:94:C9:B3:EA:A2:C7:0D:8C:45:38:B0:EE:94:43:5A:51:2D:31
            X509v3 Authority Key Identifier:
                keyid:C8:3F:D0:E1:5D:14:3C:37:F9:94:74:97:CF:86:6F:8F:AE:74:70:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C5C48/902C8B843C6411F0ADBE878DDAE4EC9C/yD_Q4V0UPDf5lHSXz4Zvj650cLk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/yD_Q4V0UPDf5lHSXz4Zvj650cLk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C5C48/902C8B843C6411F0ADBE878DDAE4EC9C/yD_Q4V0UPDf5lHSXz4Zvj650cLk.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:08:f6:65:40:a1:be:5a:cc:a9:a2:d4:a4:2b:82:5d:71:d9:
         06:b5:17:2b:59:be:5e:11:fe:9d:60:25:fd:18:f0:44:e5:c4:
         c7:88:ac:f8:11:e8:21:88:f9:32:af:9f:05:0c:43:ba:89:31:
         02:2a:fc:02:c0:82:06:58:63:3e:ee:75:a9:70:56:65:c2:30:
         a5:f4:54:93:7a:a8:b4:a8:cd:8a:d3:8e:41:92:5c:0b:83:4b:
         6c:fc:d5:49:7e:d2:ce:2d:81:b9:a5:28:04:91:e0:35:7f:00:
         d9:2e:a3:87:ca:ef:6b:4b:6f:86:e1:c5:c8:85:0f:e6:64:c1:
         d6:f9:a1:77:a9:3e:06:49:47:b8:f0:47:76:26:1c:3b:5e:dd:
         74:b5:e9:7f:a0:e7:45:ec:93:eb:c3:8a:d2:4e:7c:21:50:9b:
         84:b2:48:70:8c:c4:a6:63:c7:a0:6e:33:11:66:ea:3d:3e:e6:
         37:72:6a:49:d9:5e:fb:85:a1:71:56:fb:ef:e4:58:99:1e:27:
         98:ad:2a:cd:ea:f8:dd:c3:9d:00:92:d9:ce:30:54:e8:fb:88:
         30:6e:a9:81:04:70:aa:20:f5:64:b7:a0:17:ae:a2:97:53:60:
         e1:90:e9:bd:db:e4:c1:2a:48:1f:42:a8:a7:66:30:da:5c:54:
         29:cc:2c:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 17:25:56 2025 by rpki-client