This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36CA1C4/17267A9AF42B11EB91881E34D8A014CE/Y8NA4QrXVoDHqjzdANvkjX1BneY.mft
File:                     Y8NA4QrXVoDHqjzdANvkjX1BneY.mft (raw, json)
Hash identifier:          wk2it+sfuTaEXmjwaFJEJ0wuzTdKDHP1NbgmFsWWkgU=
Subject key identifier:   0B:DD:16:07:9D:AE:0A:73:3F:30:A7:B6:FA:82:7A:E8:98:B7:80:16
Authority key identifier: 63:C3:40:E1:0A:D7:56:80:C7:AA:3C:DD:00:DB:E4:8D:7D:41:9D:E6
Certificate issuer:       /CN=F36CA1C4AF/serialNumber=63C340E10AD75680C7AA3CDD00DBE48D7D419DE6
Certificate serial:       0670
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/Y8NA4QrXVoDHqjzdANvkjX1BneY.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36CA1C4/17267A9AF42B11EB91881E34D8A014CE/Y8NA4QrXVoDHqjzdANvkjX1BneY.mft
Manifest number:          066E
Signing time:             Sun 21 Dec 2025 02:19:33 +0000
Manifest this update:     Sun 21 Dec 2025 02:19:32 +0000
Manifest next update:     Tue 23 Dec 2025 02:19:32 +0000
Files and hashes:         1: Y8NA4QrXVoDHqjzdANvkjX1BneY.crl (hash: ryBwiZJePIcetbORauIvNYiumjr29F4SMnNIOiwJ/FY=)
                          2: E22275A0F42B11EB8DE13535D8A014CE.roa (hash: ixRAeAOi1PIeYWgmp7z7mBTbmz/nQmCMeTxu8P6RJX8=)
                          3: 75DE7694F4E611EBBD7D085AD8A014CE.roa (hash: 3ZB2CJ/bayIERLBg5mRjM6sGFJ1JWNYNoqaW/CbBpAw=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36CA1C4/17267A9AF42B11EB91881E34D8A014CE/Y8NA4QrXVoDHqjzdANvkjX1BneY.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36CA1C4/17267A9AF42B11EB91881E34D8A014CE/Y8NA4QrXVoDHqjzdANvkjX1BneY.mft
                          rsync://rpki.afrinic.net/repository/afrinic/Y8NA4QrXVoDHqjzdANvkjX1BneY.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 23 Dec 2025 00:06:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1648 (0x670)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36CA1C4AF, serialNumber=63C340E10AD75680C7AA3CDD00DBE48D7D419DE6
        Validity
            Not Before: Dec 21 02:19:32 2025 GMT
            Not After : Dec 23 02:19:32 2025 GMT
        Subject: CN=69475935-b658
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:4a:8a:f7:08:9e:fb:f1:c1:ab:b6:cd:37:17:
                    ce:a3:09:70:b4:00:13:36:a3:51:b8:8d:3c:f0:c1:
                    56:dd:6b:24:75:9a:44:80:c2:c3:3c:6b:67:34:8b:
                    35:29:71:b6:c1:8c:40:8d:0c:d0:eb:0c:fd:73:7d:
                    5b:ce:c8:e7:2e:48:fd:81:cc:07:09:b6:91:86:12:
                    dd:86:74:5f:66:a6:8a:76:0b:bc:48:43:ea:d7:e5:
                    fd:93:3e:19:cf:a1:62:c5:cd:fb:54:5f:51:f1:86:
                    f4:3f:85:d0:e2:1c:2a:59:0e:69:e3:94:fd:3c:f4:
                    8e:30:1f:1c:3e:1e:0b:f7:51:41:a3:03:b9:0e:eb:
                    4c:e2:95:82:47:8b:b4:76:37:9b:6c:9d:1e:a8:1a:
                    84:a5:6c:18:b8:db:7d:16:86:f0:37:4b:31:55:8d:
                    09:6e:05:b0:36:fc:e3:ae:75:35:b7:c5:c7:6a:82:
                    46:71:a2:a3:23:25:02:5d:0e:dc:a0:fc:4b:97:2a:
                    76:80:c0:76:9c:6a:1b:84:d0:fc:a1:aa:c6:4b:1b:
                    92:e8:d8:8c:f6:0c:95:2c:05:57:bc:ba:a3:9b:4a:
                    a0:bd:b1:35:a4:e5:60:c5:67:78:ca:77:b2:7f:e6:
                    13:b0:aa:68:19:e8:73:b5:ad:f7:b4:a0:17:d2:0a:
                    30:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:DD:16:07:9D:AE:0A:73:3F:30:A7:B6:FA:82:7A:E8:98:B7:80:16
            X509v3 Authority Key Identifier:
                keyid:63:C3:40:E1:0A:D7:56:80:C7:AA:3C:DD:00:DB:E4:8D:7D:41:9D:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36CA1C4/17267A9AF42B11EB91881E34D8A014CE/Y8NA4QrXVoDHqjzdANvkjX1BneY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Y8NA4QrXVoDHqjzdANvkjX1BneY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36CA1C4/17267A9AF42B11EB91881E34D8A014CE/Y8NA4QrXVoDHqjzdANvkjX1BneY.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:02:9c:9f:93:c5:ca:98:c9:ab:fe:b7:88:24:40:94:55:6f:
         ff:98:36:f0:42:e0:26:3b:2d:d3:6f:e4:6e:b7:17:36:cd:02:
         c5:ce:2e:1b:ca:5e:ae:41:a4:60:11:86:c0:25:54:38:d6:cc:
         b4:5e:df:2a:bf:5b:6d:3d:b1:90:8d:06:3c:c0:3e:d6:be:2d:
         9c:1e:77:82:8f:50:9a:ea:8c:9b:d0:ea:44:1f:84:83:d3:40:
         e3:de:3d:f8:29:c4:f5:2d:bb:4c:d4:ce:63:79:53:2d:80:68:
         6a:a0:f3:c1:77:48:b8:ee:bc:74:0d:37:97:c0:f3:53:39:9a:
         f1:a0:6d:8f:71:aa:a3:bc:c2:3c:44:38:0d:b4:1d:b9:c4:a8:
         4e:b7:e9:25:83:b5:1d:55:a4:1b:f6:3e:c9:8f:b0:17:7b:67:
         e2:43:11:28:6f:7c:21:4d:69:22:f9:e1:19:0a:d9:a5:67:45:
         51:75:c1:f4:bb:6c:d5:49:e9:53:a7:1f:e7:96:8c:9a:95:cb:
         60:b7:a6:ad:45:93:f4:f4:7f:91:61:52:e0:98:70:12:ad:e6:
         64:da:ef:67:b9:96:e1:3a:e3:82:08:84:b0:f5:6f:15:2c:7c:
         57:13:ad:dc:a7:b3:78:9e:68:5a:62:40:a1:dd:8c:dc:7d:30:
         7d:01:a6:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 07:45:47 2025 by rpki-client