This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3611B04/78F95A183D5011F080DBDA86DAE4EC9C/TiOqeg2oNA4u3f0hXrbEUzdC_PA.mft
File:                     TiOqeg2oNA4u3f0hXrbEUzdC_PA.mft (raw, json)
Hash identifier:          JHMuGI6xeUiix2sxhmjVan3iJeo0cHQDonSCpylh494=
Subject key identifier:   85:8F:A6:2F:FF:A4:87:A1:55:4A:1F:2D:D7:AB:BF:19:4C:C6:88:9A
Authority key identifier: 4E:23:AA:7A:0D:A8:34:0E:2E:DD:FD:21:5E:B6:C4:53:37:42:FC:F0
Certificate issuer:       /CN=F3611B04AF/serialNumber=4E23AA7A0DA8340E2EDDFD215EB6C4533742FCF0
Certificate serial:       C7
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/TiOqeg2oNA4u3f0hXrbEUzdC_PA.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3611B04/78F95A183D5011F080DBDA86DAE4EC9C/TiOqeg2oNA4u3f0hXrbEUzdC_PA.mft
Manifest number:          C6
Signing time:             Tue 09 Dec 2025 04:59:27 +0000
Manifest this update:     Tue 09 Dec 2025 04:59:26 +0000
Manifest next update:     Thu 11 Dec 2025 04:59:26 +0000
Files and hashes:         1: TiOqeg2oNA4u3f0hXrbEUzdC_PA.crl (hash: U802NJkBwpCXW5F3qccMDAVHuqIY/J+BoH8Upj6AYrM=)
                          2: D4D84B9E3D5211F08FF5E995DAE4EC9C.roa (hash: /d1iMp/ZT/BMLsfn6Ybe9u0ARPnAxFGfjCR2WymN//o=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3611B04/78F95A183D5011F080DBDA86DAE4EC9C/TiOqeg2oNA4u3f0hXrbEUzdC_PA.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3611B04/78F95A183D5011F080DBDA86DAE4EC9C/TiOqeg2oNA4u3f0hXrbEUzdC_PA.mft
                          rsync://rpki.afrinic.net/repository/afrinic/TiOqeg2oNA4u3f0hXrbEUzdC_PA.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 11 Dec 2025 04:59:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 199 (0xc7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3611B04AF, serialNumber=4E23AA7A0DA8340E2EDDFD215EB6C4533742FCF0
        Validity
            Not Before: Dec  9 04:59:26 2025 GMT
            Not After : Dec 11 04:59:26 2025 GMT
        Subject: CN=6937acaf-3518
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:18:62:30:f6:de:e7:bb:a4:16:ec:1b:f1:16:
                    d5:2b:f5:ef:3c:d1:3f:e5:fb:74:98:8c:41:e7:d5:
                    15:75:3c:08:ca:87:a5:e4:97:fc:af:f1:eb:de:52:
                    53:45:03:61:2c:26:50:83:ab:ff:a1:81:6d:23:bf:
                    51:1b:be:f2:18:4c:5f:3f:dd:f1:79:f4:5f:17:9c:
                    1d:a6:43:03:0e:48:ef:ff:98:eb:08:80:f2:a8:c3:
                    b7:81:85:53:37:bd:ff:dd:3a:97:53:34:30:5e:90:
                    8e:ff:ee:53:8e:dd:5b:a9:f0:3d:de:42:40:3f:68:
                    1c:a1:b5:1c:30:1d:19:26:2b:0d:8e:10:13:3c:3f:
                    90:53:f8:d1:93:e6:41:ae:b2:57:15:76:1b:5c:2d:
                    38:ea:45:6e:d1:4d:ac:db:b0:61:06:da:58:06:9e:
                    25:18:aa:42:09:60:f3:9e:dd:c7:6e:a8:0b:6c:23:
                    81:a9:49:e0:4e:33:be:3c:9b:b2:bc:e4:a1:98:30:
                    7d:bf:4e:0b:2f:a6:06:4b:2f:61:b7:e6:52:6a:93:
                    36:95:8a:f9:e1:68:6d:f2:c1:de:b9:82:75:c8:70:
                    61:a9:0d:9e:7c:74:ad:7f:9c:59:4e:a1:65:bb:f2:
                    25:5e:a5:f2:33:68:26:9a:b9:e5:0c:c0:e9:79:f9:
                    36:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:8F:A6:2F:FF:A4:87:A1:55:4A:1F:2D:D7:AB:BF:19:4C:C6:88:9A
            X509v3 Authority Key Identifier:
                keyid:4E:23:AA:7A:0D:A8:34:0E:2E:DD:FD:21:5E:B6:C4:53:37:42:FC:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3611B04/78F95A183D5011F080DBDA86DAE4EC9C/TiOqeg2oNA4u3f0hXrbEUzdC_PA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/TiOqeg2oNA4u3f0hXrbEUzdC_PA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3611B04/78F95A183D5011F080DBDA86DAE4EC9C/TiOqeg2oNA4u3f0hXrbEUzdC_PA.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:2e:b7:74:25:06:3d:af:70:ef:ca:77:bd:dd:a6:13:90:50:
         3e:39:e0:0c:20:5f:02:2b:b3:0c:9b:3f:42:da:96:bf:1f:38:
         1e:7d:4b:e2:8b:82:40:d6:40:9a:3d:d3:61:c0:9a:98:07:1c:
         38:1f:e3:c8:35:85:3a:67:1c:1b:ea:dd:f3:34:71:58:14:e2:
         43:92:4d:d3:5c:f9:97:07:de:45:78:77:d7:3d:ef:15:6c:c4:
         df:aa:dd:f3:59:bc:6a:9e:44:ca:7a:1b:fd:7e:2f:b2:53:8a:
         47:14:84:96:de:ad:0d:67:80:ce:0a:d7:40:69:46:88:78:d3:
         1e:f5:48:39:c9:a9:ee:a5:4d:13:f1:c8:43:97:de:2c:46:4a:
         99:3f:2f:b7:3a:01:8e:fb:e8:89:0d:7e:f6:35:fc:b6:b6:c4:
         87:b4:51:09:1b:64:4c:85:e8:06:47:b2:42:68:f8:9c:d0:4c:
         c8:93:c9:07:d8:de:73:7d:84:22:5e:cb:ef:63:29:1c:64:13:
         5d:8c:47:92:88:70:30:1a:57:78:c9:ed:33:06:e4:3e:99:56:
         71:b3:59:76:2a:66:9b:ac:cf:96:d3:4c:8b:ba:a1:7a:cc:5c:
         77:4e:73:e5:68:c7:0c:38:e5:86:f6:1f:28:35:a5:68:b6:25:
         65:33:62:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 9 12:03:44 2025 by rpki-client