This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3614D1D/58CF30E4292811ED8E68E8F8F1222468/J3k9IV8IgF240LqJLTNvKat7sFs.mft
File:                     J3k9IV8IgF240LqJLTNvKat7sFs.mft (raw, json)
Hash identifier:          IjFKsnoDDkFyw8RUnWcWy9DQlqKsjYyoGuI8lzSTfBI=
Subject key identifier:   93:ED:EF:21:D9:C5:4F:C3:45:0D:09:85:17:AA:3D:96:07:F0:F6:0D
Authority key identifier: 27:79:3D:21:5F:08:80:5D:B8:D0:BA:89:2D:33:6F:29:AB:7B:B0:5B
Certificate issuer:       /CN=F3614D1DAF/serialNumber=27793D215F08805DB8D0BA892D336F29AB7BB05B
Certificate serial:       04F4
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/J3k9IV8IgF240LqJLTNvKat7sFs.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3614D1D/58CF30E4292811ED8E68E8F8F1222468/J3k9IV8IgF240LqJLTNvKat7sFs.mft
Manifest number:          04E7
Signing time:             Tue 09 Dec 2025 02:57:30 +0000
Manifest this update:     Tue 09 Dec 2025 02:57:29 +0000
Manifest next update:     Thu 11 Dec 2025 02:57:29 +0000
Files and hashes:         1: J3k9IV8IgF240LqJLTNvKat7sFs.crl (hash: dDyApWkUKhqL3zJJE6p7yJE8wd+9ffpUXqQQF086XEc=)
                          2: 70E6B838EAAA11EE8A93F24E775412E6.roa (hash: zEUrkuNTREb3r5McBooHFqJ4/0lPKiN0ZbSMvETqe3o=)
                          3: 50F16C540EA911EEA82A7D754AD9E6FC.roa (hash: JFMeuBCREn8gEQG0l1Zx/WGjkNjij2O55EpjmCaZhIk=)
                          4: C3D711B60EA811EEBCB2FD734AD9E6FC.roa (hash: v74BuAK39xflrjP35mv/hhNBB93p0EzHdrXne1JiLfM=)
                          5: 0946AEE0EAAA11EEB6FC8A4D775412E6.roa (hash: 4pe1psZanxElcih1u5RzgCI4HGeJZYc0Z4ZB69lx+r4=)
                          6: 7F943DD40EA911EE943E38764AD9E6FC.roa (hash: gg8WbfJG7g4logIUnRa/wxb93ochaU/ufh2HxdovgjM=)
                          7: 30F1D0060EA911EE87221F754AD9E6FC.roa (hash: cEPtCliLX4U+3+ySJMRVYmV3uH8KeTlwTAIUjoPeT0o=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3614D1D/58CF30E4292811ED8E68E8F8F1222468/J3k9IV8IgF240LqJLTNvKat7sFs.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3614D1D/58CF30E4292811ED8E68E8F8F1222468/J3k9IV8IgF240LqJLTNvKat7sFs.mft
                          rsync://rpki.afrinic.net/repository/afrinic/J3k9IV8IgF240LqJLTNvKat7sFs.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 11 Dec 2025 02:57:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1268 (0x4f4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3614D1DAF, serialNumber=27793D215F08805DB8D0BA892D336F29AB7BB05B
        Validity
            Not Before: Dec  9 02:57:29 2025 GMT
            Not After : Dec 11 02:57:29 2025 GMT
        Subject: CN=6937901a-8a85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:47:c5:3d:34:b8:ad:8d:d5:10:0b:1f:c6:f9:
                    42:1b:31:cc:86:7e:bc:d7:55:ed:eb:63:fb:95:7f:
                    a3:f3:79:4b:f3:9d:05:d5:da:a5:f8:11:cb:87:13:
                    f5:6e:39:2f:1a:21:c9:9d:41:a8:12:1d:68:59:3a:
                    ef:ba:da:b4:d1:4e:af:ab:dc:3a:4c:e5:c4:1e:b8:
                    30:b4:00:c6:9d:8f:6e:0e:fe:59:6b:21:10:9c:47:
                    78:46:c8:d5:1d:15:af:fb:cf:55:ac:63:76:06:31:
                    69:da:6e:b2:a1:5e:80:ab:42:a3:a8:15:9f:88:89:
                    f6:58:ba:25:93:e5:22:58:dd:31:7d:84:2b:4d:f5:
                    85:31:7c:15:bf:64:f2:48:d2:50:50:38:f1:b9:33:
                    63:55:c7:be:76:67:ca:3c:e3:a1:22:b8:90:18:1e:
                    21:05:cf:84:56:a6:0a:0b:6e:cb:a0:80:19:3e:32:
                    91:31:45:00:35:79:19:00:6e:60:c3:2f:6f:9e:36:
                    b2:ce:b1:ea:bd:d1:99:df:37:1c:85:b0:91:75:95:
                    84:1d:8d:03:5d:e2:b4:05:99:5c:af:8a:24:0d:41:
                    f8:6b:34:54:fd:f7:42:6b:2a:2b:0c:c4:08:a1:34:
                    4c:f5:9f:c4:f5:7c:94:2e:be:d4:e1:db:92:cc:34:
                    c2:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:ED:EF:21:D9:C5:4F:C3:45:0D:09:85:17:AA:3D:96:07:F0:F6:0D
            X509v3 Authority Key Identifier:
                keyid:27:79:3D:21:5F:08:80:5D:B8:D0:BA:89:2D:33:6F:29:AB:7B:B0:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3614D1D/58CF30E4292811ED8E68E8F8F1222468/J3k9IV8IgF240LqJLTNvKat7sFs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/J3k9IV8IgF240LqJLTNvKat7sFs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3614D1D/58CF30E4292811ED8E68E8F8F1222468/J3k9IV8IgF240LqJLTNvKat7sFs.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:1e:81:32:28:0e:fb:b7:9a:bf:dc:dd:9b:d2:5c:84:4f:1d:
         4a:42:84:82:3f:f1:09:5b:6c:d0:d1:74:8e:58:2b:a7:97:2c:
         63:f0:ef:97:24:16:ea:a1:4d:ae:64:cb:ea:68:5d:58:36:86:
         32:dd:9a:7f:b8:ee:4d:36:11:da:e8:cc:74:5d:39:99:7b:ed:
         3e:37:21:38:26:cf:32:7c:00:e5:a8:d0:08:d3:14:0b:e3:07:
         71:69:5c:64:37:77:24:68:e9:7a:86:f4:31:2e:87:d6:c5:57:
         79:60:c3:f3:e2:c7:b5:88:9b:8b:82:c1:9f:80:69:de:23:94:
         ab:86:f6:69:97:9d:8f:1c:18:6c:ca:39:d7:fd:2a:4e:7a:0d:
         12:93:28:42:61:0d:8f:af:5e:fc:91:0a:04:2c:c7:38:04:2a:
         60:f5:a7:f2:dd:81:ba:f3:f3:15:64:7a:79:8a:da:6f:6e:4d:
         32:98:5d:08:23:a0:c0:d7:70:fe:90:51:d7:29:d7:46:3a:04:
         01:a3:e5:e5:ae:53:93:27:28:0f:ed:f0:73:36:7e:8a:98:74:
         47:db:bd:e1:42:c5:4d:23:da:0e:d1:bc:c5:a8:65:62:a5:ac:
         58:0d:02:cd:c9:2b:d5:72:b3:7d:41:de:c6:54:05:af:75:5b:
         fc:87:cb:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 9 12:06:16 2025 by rpki-client