This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F68F4/51DF5004C67311EE84C75AA5775412E6/YnpDuw3zxvXmKHq_6henXbeyswM.mft
File:                     YnpDuw3zxvXmKHq_6henXbeyswM.mft (raw, json)
Hash identifier:          hmFZtj7cv/SWosZ/AVWhXdzy/g66MVvSv39LA2yOsFo=
Subject key identifier:   C9:E8:A6:C7:FF:0A:AA:81:A6:24:C4:0E:83:D7:5A:2C:53:BD:DA:CD
Authority key identifier: 62:7A:43:BB:0D:F3:C6:F5:E6:28:7A:BF:EA:17:A7:5D:B7:B2:B3:03
Certificate issuer:       /CN=F36F68F4AF/serialNumber=627A43BB0DF3C6F5E6287ABFEA17A75DB7B2B303
Certificate serial:       02CD
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/YnpDuw3zxvXmKHq_6henXbeyswM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36F68F4/51DF5004C67311EE84C75AA5775412E6/YnpDuw3zxvXmKHq_6henXbeyswM.mft
Manifest number:          02CB
Signing time:             Wed 31 Dec 2025 04:05:33 +0000
Manifest this update:     Wed 31 Dec 2025 04:05:32 +0000
Manifest next update:     Fri 02 Jan 2026 04:05:32 +0000
Files and hashes:         1: YnpDuw3zxvXmKHq_6henXbeyswM.crl (hash: j2rtC8JYGl+LZ6OO4oU4Q/ZHo+IFqwCM+4/MIsd0L7c=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36F68F4/51DF5004C67311EE84C75AA5775412E6/YnpDuw3zxvXmKHq_6henXbeyswM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36F68F4/51DF5004C67311EE84C75AA5775412E6/YnpDuw3zxvXmKHq_6henXbeyswM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/YnpDuw3zxvXmKHq_6henXbeyswM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 02 Jan 2026 00:06:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 717 (0x2cd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36F68F4AF, serialNumber=627A43BB0DF3C6F5E6287ABFEA17A75DB7B2B303
        Validity
            Not Before: Dec 31 04:05:32 2025 GMT
            Not After : Jan  2 04:05:32 2026 GMT
        Subject: CN=6954a10c-719b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:ab:7f:78:44:25:6c:81:83:f9:61:91:96:96:
                    de:ec:f0:ab:40:84:e8:a7:4c:37:a3:e4:c9:80:9d:
                    94:aa:8e:c5:51:1f:22:18:92:95:b8:98:6e:17:9e:
                    6a:92:c6:1f:cc:72:67:ea:e2:62:b0:40:7a:c8:2c:
                    fc:18:4f:ce:ae:b2:f3:ea:be:54:d0:3e:b1:6a:0b:
                    a6:bb:b0:47:15:bd:20:05:32:91:3f:bc:4c:88:a6:
                    2e:10:34:99:c4:93:87:c1:3e:f5:da:69:a7:3d:c2:
                    33:94:a0:04:be:c2:8e:23:59:69:f0:42:3d:e7:0f:
                    2d:ab:60:f7:64:22:04:42:1f:83:75:6e:1a:88:6e:
                    7a:aa:1b:10:13:2b:0f:b2:19:ab:d9:d0:da:ab:31:
                    36:9d:6d:6e:a7:cf:21:80:28:db:18:7f:c5:5d:13:
                    d1:33:f7:be:67:81:f0:d0:6b:94:db:c1:97:a2:88:
                    4d:8f:4c:9b:61:83:46:34:55:1d:57:9c:91:52:11:
                    3c:ef:e6:54:39:4f:39:d3:2a:6f:97:84:f2:c3:90:
                    9d:2b:89:40:e8:a5:b4:91:3e:bf:2b:50:36:cb:e1:
                    06:fd:c1:fe:83:73:db:e1:e6:39:21:25:9b:84:63:
                    ed:23:0f:e1:77:43:bc:06:67:d5:95:90:36:db:b5:
                    eb:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:E8:A6:C7:FF:0A:AA:81:A6:24:C4:0E:83:D7:5A:2C:53:BD:DA:CD
            X509v3 Authority Key Identifier:
                keyid:62:7A:43:BB:0D:F3:C6:F5:E6:28:7A:BF:EA:17:A7:5D:B7:B2:B3:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36F68F4/51DF5004C67311EE84C75AA5775412E6/YnpDuw3zxvXmKHq_6henXbeyswM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/YnpDuw3zxvXmKHq_6henXbeyswM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F68F4/51DF5004C67311EE84C75AA5775412E6/YnpDuw3zxvXmKHq_6henXbeyswM.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:40:c0:27:c1:c2:65:7d:9e:e2:fd:83:5d:97:91:2d:fa:6a:
         75:dd:1e:69:a8:44:b7:01:e3:dd:42:cc:95:2f:a3:47:54:8c:
         85:3c:84:f4:c0:21:29:c3:2d:9f:ef:31:5f:7b:36:26:d3:13:
         b6:48:91:38:4c:d2:43:61:e3:60:1d:d5:d6:bc:cd:84:28:61:
         4a:41:fb:58:1c:cd:7b:bd:54:bb:f3:95:80:4d:3f:0a:37:93:
         76:fd:39:5b:b6:9e:a8:cf:19:21:6a:c6:36:74:9d:cd:95:1c:
         e8:9b:ee:4d:af:12:f3:e8:a8:ba:31:51:f9:11:ab:3c:c2:af:
         c8:a9:75:1d:37:68:ca:61:74:91:7d:11:33:d4:1d:66:c9:19:
         84:d9:3a:90:ed:60:1c:99:77:53:9d:51:f0:e7:39:e7:38:26:
         d5:95:a4:4d:a9:79:ff:d0:ad:74:2b:dc:6d:a3:9e:4e:11:de:
         06:41:48:a6:57:3f:78:8c:4a:53:f6:20:11:3c:d7:52:63:73:
         1e:0d:4e:5c:93:db:1f:06:78:2b:15:e9:2c:a1:07:d9:97:2e:
         e6:12:61:db:41:ad:9e:0c:9b:a1:15:8c:4b:3d:1c:81:20:e1:
         39:dc:10:9d:bb:09:90:06:99:51:54:2c:d2:5a:25:2d:de:4d:
         4e:e1:3e:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 31 05:25:57 2025 by rpki-client