This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3614ABB/A6BA4A94900911ED93517389F1222468/eAFgO7LzcEbg-v3Xp0_LBuPECBg.mft
File:                     eAFgO7LzcEbg-v3Xp0_LBuPECBg.mft (raw, json)
Hash identifier:          6l1wS9EOTxbB9oK8u8qKrrDx8F1YLoV8KLEQFUXFRyI=
Subject key identifier:   3A:63:7B:4B:47:9C:77:EC:C4:EA:B2:13:FB:92:E8:F8:9E:06:2F:A1
Authority key identifier: 78:01:60:3B:B2:F3:70:46:E0:FA:FD:D7:A7:4F:CB:06:E3:C4:08:18
Certificate issuer:       /CN=F3614ABBAF/serialNumber=7801603BB2F37046E0FAFDD7A74FCB06E3C40818
Certificate serial:       0458
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/eAFgO7LzcEbg-v3Xp0_LBuPECBg.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3614ABB/A6BA4A94900911ED93517389F1222468/eAFgO7LzcEbg-v3Xp0_LBuPECBg.mft
Manifest number:          0453
Signing time:             Tue 09 Dec 2025 03:09:26 +0000
Manifest this update:     Tue 09 Dec 2025 03:09:25 +0000
Manifest next update:     Thu 11 Dec 2025 03:09:25 +0000
Files and hashes:         1: eAFgO7LzcEbg-v3Xp0_LBuPECBg.crl (hash: 2cyOH9EGFqQE4+CqkD2ZuTIrXjzJ4fhyxqF8n5a+at4=)
                          2: C1DD39CACFBF11EEA8FB4574775412E6.roa (hash: Q5pUSksntCvIgKgWSWWYT5WZcxdon8uSCDfTyZBPILk=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3614ABB/A6BA4A94900911ED93517389F1222468/eAFgO7LzcEbg-v3Xp0_LBuPECBg.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3614ABB/A6BA4A94900911ED93517389F1222468/eAFgO7LzcEbg-v3Xp0_LBuPECBg.mft
                          rsync://rpki.afrinic.net/repository/afrinic/eAFgO7LzcEbg-v3Xp0_LBuPECBg.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 11 Dec 2025 03:09:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1112 (0x458)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3614ABBAF, serialNumber=7801603BB2F37046E0FAFDD7A74FCB06E3C40818
        Validity
            Not Before: Dec  9 03:09:25 2025 GMT
            Not After : Dec 11 03:09:25 2025 GMT
        Subject: CN=693792e6-b56c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:29:dd:b5:57:a2:a0:5b:74:16:62:79:7d:52:
                    fc:bc:aa:de:be:1a:02:a3:2d:d6:cb:71:f9:57:ae:
                    89:15:a7:87:47:4a:6a:25:24:03:8b:d9:47:e3:c1:
                    70:69:47:4f:fc:70:1a:b5:0b:48:8e:63:f4:08:27:
                    f4:b3:4b:46:bc:cb:83:be:62:77:e5:db:b2:43:13:
                    92:49:d1:e1:05:50:22:a8:96:27:25:1f:cd:c1:11:
                    a7:0e:b6:89:31:31:65:dc:ed:f2:e5:3c:6b:4a:30:
                    39:c2:4d:0d:0c:14:f3:77:99:9d:40:05:9c:0f:51:
                    e6:cb:58:7f:15:9f:38:65:85:9d:8f:e2:e6:91:ac:
                    1b:80:4a:56:b0:2e:4a:ab:dc:6d:fd:fc:95:f9:8c:
                    be:1a:bf:49:8d:98:63:bc:f8:42:ee:f5:8b:8a:f7:
                    02:76:88:33:03:2f:88:82:88:ab:19:07:7b:50:b1:
                    a8:c8:db:64:ca:ad:22:09:0a:af:e7:1b:00:d4:d1:
                    58:76:44:fe:27:48:2d:39:cd:d7:b0:d7:d7:af:46:
                    5a:42:85:eb:dd:f0:5f:78:5b:3a:f1:1e:2a:d4:89:
                    e0:77:f8:b7:64:4f:18:b1:82:30:ce:a6:2c:ee:8c:
                    7d:f6:13:57:5a:a7:21:b9:b1:06:c4:b2:18:97:81:
                    36:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:63:7B:4B:47:9C:77:EC:C4:EA:B2:13:FB:92:E8:F8:9E:06:2F:A1
            X509v3 Authority Key Identifier:
                keyid:78:01:60:3B:B2:F3:70:46:E0:FA:FD:D7:A7:4F:CB:06:E3:C4:08:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3614ABB/A6BA4A94900911ED93517389F1222468/eAFgO7LzcEbg-v3Xp0_LBuPECBg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/eAFgO7LzcEbg-v3Xp0_LBuPECBg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3614ABB/A6BA4A94900911ED93517389F1222468/eAFgO7LzcEbg-v3Xp0_LBuPECBg.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:0e:b1:e0:46:50:07:2d:c1:87:36:0c:07:07:77:cb:d7:07:
         f8:a9:a7:3e:d1:ad:42:80:43:99:33:99:b6:fb:73:03:bf:22:
         12:5e:cd:1f:74:cb:70:a6:f7:7a:df:d1:9c:e2:ba:c4:5a:ed:
         54:86:07:e6:33:42:63:95:5c:ff:4a:5f:92:e9:fc:77:cb:70:
         92:2c:b2:62:41:73:83:84:cc:a0:81:c4:5b:94:1f:27:39:be:
         8a:07:31:75:8b:f7:2b:4c:33:41:60:e8:39:f6:e9:b2:48:8f:
         49:44:92:e2:a1:ac:2b:98:79:a7:95:87:16:e9:f2:d0:ae:43:
         6c:6e:71:9c:72:04:08:96:18:bc:e1:18:c7:44:94:a5:ce:7b:
         ac:fe:b4:7a:31:08:6c:8f:04:f8:17:29:55:0b:52:97:c1:50:
         6c:a4:8d:f2:e8:61:7f:39:db:b1:fd:ca:b5:e3:54:8d:17:a6:
         bc:1f:14:50:3a:1a:17:75:c9:fc:9c:dc:3f:cc:36:67:53:ed:
         e4:9b:4b:c8:81:fe:1b:9f:5b:cf:21:0f:d0:70:fa:4c:a3:48:
         4d:d5:c5:dc:0c:af:b3:68:0a:5b:e1:bb:de:6e:fc:5a:7c:7e:
         7e:06:ba:ae:99:9e:16:bf:cf:52:24:2a:aa:14:a5:31:b2:9b:
         6c:c6:7d:e5
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICBFgwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
MTRBQkJBRjExMC8GA1UEBRMoNzgwMTYwM0JCMkYzNzA0NkUwRkFGREQ3QTc0RkNC
MDZFM0M0MDgxODAeFw0yNTEyMDkwMzA5MjVaFw0yNTEyMTEwMzA5MjVaMBgxFjAU
BgNVBAMTDTY5Mzc5MmU2LWI1NmMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC2Kd21V6KgW3QWYnl9Uvy8qt6+GgKjLdbLcflXrokVp4dHSmolJAOL2Ufj
wXBpR0/8cBq1C0iOY/QIJ/SzS0a8y4O+Ynfl27JDE5JJ0eEFUCKoliclH83BEacO
tokxMWXc7fLlPGtKMDnCTQ0MFPN3mZ1ABZwPUebLWH8VnzhlhZ2P4uaRrBuASlaw
Lkqr3G39/JX5jL4av0mNmGO8+ELu9YuK9wJ2iDMDL4iCiKsZB3tQsajI22TKrSIJ
Cq/nGwDU0Vh2RP4nSC05zdew19evRlpChevd8F94WzrxHirUieB3+LdkTxixgjDO
pizujH32E1dapyG5sQbEshiXgTZxAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUOmN7
S0ecd+zE6rIT+5Lo+J4GL6EwHwYDVR0jBBgwFoAUeAFgO7LzcEbg+v3Xp0/LBuPE
CBgwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjE0QUJCL0E2QkE0QTk0OTAwOTExRUQ5MzUxNzM4OUYxMjIyNDY4L2VBRmdP
N0x6Y0ViZy12M1hwMF9MQnVQRUNCZy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2VBRmdPN0x6Y0ViZy12M1hwMF9MQnVQRUNCZy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2MTRBQkIvQTZCQTRBOTQ5MDA5MTFFRDkzNTE3Mzg5RjEy
MjI0NjgvZUFGZ083THpjRWJnLXYzWHAwX0xCdVBFQ0JnLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCTDrHgRlAHLcGHNgwHB3fL1wf4qac+
0a1CgEOZM5m2+3MDvyISXs0fdMtwpvd639Gc4rrEWu1UhgfmM0JjlVz/Sl+S6fx3
y3CSLLJiQXODhMyggcRblB8nOb6KBzF1i/crTDNBYOg59umySI9JRJLioawrmHmn
lYcW6fLQrkNsbnGccgQIlhi84RjHRJSlznus/rR6MQhsjwT4FylVC1KXwVBspI3y
6GF/Odux/cq141SNF6a8HxRQOhoXdcn8nNw/zDZnU+3km0vIgf4bn1vPIQ/QcPpM
o0hN1cXcDK+zaApb4bvebvxafH5+BrqumZ4Wv89SJCqqFKUxsptsxn3l
-----END CERTIFICATE-----
Generated at Tue Dec 9 12:05:37 2025 by rpki-client