This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D65B9/75C6F8D63F4611EF9CAD4D6C762E951A/Bevs4xKZG-PE6ppU-CJmlQVGg7Q.mft
File:                     Bevs4xKZG-PE6ppU-CJmlQVGg7Q.mft (raw, json)
Hash identifier:          geOLTXiYpRv6lRMFIhvVgG5wsz4wXSTPdbreERThHh0=
Subject key identifier:   B2:BB:60:BA:7C:6B:BE:67:71:38:A1:5C:85:64:D6:D0:30:26:6C:1D
Authority key identifier: 05:EB:EC:E3:12:99:1B:E3:C4:EA:9A:54:F8:22:66:95:05:46:83:B4
Certificate issuer:       /CN=F36D65B9AF/serialNumber=05EBECE312991BE3C4EA9A54F8226695054683B4
Certificate serial:       021E
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/Bevs4xKZG-PE6ppU-CJmlQVGg7Q.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36D65B9/75C6F8D63F4611EF9CAD4D6C762E951A/Bevs4xKZG-PE6ppU-CJmlQVGg7Q.mft
Manifest number:          021D
Signing time:             Thu 18 Dec 2025 06:48:18 +0000
Manifest this update:     Thu 18 Dec 2025 06:48:17 +0000
Manifest next update:     Sat 20 Dec 2025 06:48:17 +0000
Files and hashes:         1: Bevs4xKZG-PE6ppU-CJmlQVGg7Q.crl (hash: w076vnOp86SENamo/Wbm49WS8opxx41bQLIWiZATj8c=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36D65B9/75C6F8D63F4611EF9CAD4D6C762E951A/Bevs4xKZG-PE6ppU-CJmlQVGg7Q.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36D65B9/75C6F8D63F4611EF9CAD4D6C762E951A/Bevs4xKZG-PE6ppU-CJmlQVGg7Q.mft
                          rsync://rpki.afrinic.net/repository/afrinic/Bevs4xKZG-PE6ppU-CJmlQVGg7Q.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 20 Dec 2025 00:07:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 542 (0x21e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36D65B9AF, serialNumber=05EBECE312991BE3C4EA9A54F8226695054683B4
        Validity
            Not Before: Dec 18 06:48:17 2025 GMT
            Not After : Dec 20 06:48:17 2025 GMT
        Subject: CN=6943a3b2-d0ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:be:ad:39:20:c8:3c:44:58:77:f4:f8:56:67:
                    cb:ce:24:7c:3b:fb:9b:e6:56:86:af:6a:7a:75:50:
                    d9:3b:1c:bf:3d:32:41:bd:56:bb:bb:13:5b:5a:60:
                    44:8c:10:fd:9c:3c:ae:5f:a7:e9:df:7c:72:ff:ac:
                    75:71:88:0f:84:98:2c:4d:96:1d:78:79:a2:c9:ba:
                    29:cc:7a:38:7f:26:44:27:e7:00:33:0d:88:c7:af:
                    8d:b8:e5:91:10:d8:60:fc:c1:ef:0a:a6:d7:f2:28:
                    7e:11:e3:c1:e3:e6:cc:61:cf:f4:80:28:d4:07:73:
                    f9:15:4a:90:ef:c7:12:90:91:a0:72:82:44:07:e5:
                    b7:d3:65:9e:56:da:19:b0:64:72:8d:06:0b:1e:64:
                    cf:21:11:ba:12:be:73:66:3b:6f:50:1e:53:c6:66:
                    10:75:12:06:7d:23:69:b4:ac:08:fc:c9:62:44:0d:
                    a6:3b:b3:5c:8b:82:4e:f0:b2:d6:b8:f2:02:11:48:
                    55:6c:5a:aa:9f:45:7f:0d:e7:6b:67:85:e9:22:c4:
                    b8:4c:bc:f0:a8:d2:17:ab:06:4f:55:f1:f4:b8:4d:
                    6d:3e:23:86:7c:41:6c:2d:c5:5b:39:27:d8:a7:a1:
                    c7:46:62:6f:0a:78:1a:fd:a1:e1:49:5f:b9:18:60:
                    d8:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:BB:60:BA:7C:6B:BE:67:71:38:A1:5C:85:64:D6:D0:30:26:6C:1D
            X509v3 Authority Key Identifier:
                keyid:05:EB:EC:E3:12:99:1B:E3:C4:EA:9A:54:F8:22:66:95:05:46:83:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36D65B9/75C6F8D63F4611EF9CAD4D6C762E951A/Bevs4xKZG-PE6ppU-CJmlQVGg7Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Bevs4xKZG-PE6ppU-CJmlQVGg7Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D65B9/75C6F8D63F4611EF9CAD4D6C762E951A/Bevs4xKZG-PE6ppU-CJmlQVGg7Q.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:3c:bc:10:28:b6:e8:f5:f1:8c:9b:bb:08:0b:57:8e:57:68:
         c5:3c:d6:8e:89:80:17:70:8e:68:b2:7e:3c:ca:01:7a:e0:8e:
         69:4d:95:ea:2b:7e:e0:5a:42:7a:e5:da:5a:06:bd:3b:66:8a:
         3b:33:49:a6:17:32:da:f1:47:23:f4:83:f9:50:50:38:34:4b:
         3b:26:28:0c:45:83:88:4a:22:67:23:a5:49:da:e3:85:7e:c6:
         8e:fe:74:86:6f:9d:cc:01:2b:10:83:c1:3b:45:cb:f0:0f:36:
         01:18:d8:ed:a4:98:38:9d:e3:d6:9c:25:8f:24:61:7d:8b:9d:
         49:67:57:b2:e2:90:29:33:32:91:3e:1d:27:35:51:b5:19:26:
         98:54:36:f6:d6:cf:7d:52:78:e5:e5:c5:06:9f:84:6f:d0:8d:
         f8:59:ca:80:3a:6e:29:61:4e:52:df:15:98:e3:ea:18:89:ca:
         18:3f:4f:fe:ec:7a:16:f2:8a:eb:98:95:c7:dc:00:52:28:94:
         91:5a:a7:c6:a7:7d:6c:34:65:2c:14:a9:2b:e5:c7:a7:e7:56:
         8d:c3:3f:21:1c:b8:1c:89:50:32:a2:76:33:0b:be:c5:a9:42:
         ab:c8:78:fa:6a:4f:8e:bd:0e:38:7b:a8:3f:01:d6:c2:3c:d2:
         41:e5:1b:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 18 12:41:24 2025 by rpki-client