This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3615A34/02B52692AC0E11ECB3BC0FB05A40D577/Ex3eTwA3nPTxQ9XQDhN9aXoOt4M.mft
File:                     Ex3eTwA3nPTxQ9XQDhN9aXoOt4M.mft (raw, json)
Hash identifier:          1nAxNuTKV43L+Y6uZ0QxiyXkqpxV93pg2/syfJImazw=
Subject key identifier:   8B:41:EE:94:D9:5C:3A:4C:80:66:FE:32:B5:62:04:BB:E9:63:C1:EC
Authority key identifier: 13:1D:DE:4F:00:37:9C:F4:F1:43:D5:D0:0E:13:7D:69:7A:0E:B7:83
Certificate issuer:       /CN=F3615A34AF/serialNumber=131DDE4F00379CF4F143D5D00E137D697A0EB783
Certificate serial:       0593
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/Ex3eTwA3nPTxQ9XQDhN9aXoOt4M.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3615A34/02B52692AC0E11ECB3BC0FB05A40D577/Ex3eTwA3nPTxQ9XQDhN9aXoOt4M.mft
Manifest number:          0588
Signing time:             Mon 22 Dec 2025 02:41:31 +0000
Manifest this update:     Mon 22 Dec 2025 02:41:30 +0000
Manifest next update:     Wed 24 Dec 2025 02:41:30 +0000
Files and hashes:         1: Ex3eTwA3nPTxQ9XQDhN9aXoOt4M.crl (hash: ZyMTBG4KPdli+6ZYktSI5toHm0lKff0SJnEtbc5XXGQ=)
                          2: 72BABCF46FFC11EFBB10279D762E951A.roa (hash: rlDq1sLVRqkoMbUERI8asuL0sKn6qOkKebzRsYaYfgo=)
                          3: 3BAA3D5C6FFC11EFA23C0A9B762E951A.roa (hash: ZnDxmAxeEfDaWqAukKaPEazhsegTXYgu0pD30UCvUW4=)
                          4: D1982E4E706711EF8FA752B1762E951A.roa (hash: 13e2tsP9vZSc4kP/9gYLRySR8RimddvRM/CF31h+Gls=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3615A34/02B52692AC0E11ECB3BC0FB05A40D577/Ex3eTwA3nPTxQ9XQDhN9aXoOt4M.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3615A34/02B52692AC0E11ECB3BC0FB05A40D577/Ex3eTwA3nPTxQ9XQDhN9aXoOt4M.mft
                          rsync://rpki.afrinic.net/repository/afrinic/Ex3eTwA3nPTxQ9XQDhN9aXoOt4M.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 24 Dec 2025 00:06:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1427 (0x593)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3615A34AF, serialNumber=131DDE4F00379CF4F143D5D00E137D697A0EB783
        Validity
            Not Before: Dec 22 02:41:30 2025 GMT
            Not After : Dec 24 02:41:30 2025 GMT
        Subject: CN=6948afdb-0aff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:6a:c2:dc:c6:4a:1d:ea:29:56:05:87:c1:58:
                    37:05:df:77:f9:4f:45:6e:d3:c3:d9:84:c1:c5:82:
                    41:73:b9:0e:76:23:d6:37:45:49:62:9d:e3:f9:e5:
                    35:24:7c:b0:1d:22:bb:2d:99:85:85:98:53:74:e3:
                    14:58:be:a8:56:10:30:79:15:66:1a:a8:fe:2b:73:
                    74:54:2c:73:5d:8e:27:e5:ee:8c:9c:cf:23:6f:ed:
                    d7:64:ee:51:29:13:8a:2c:a6:c8:ec:c9:ae:83:a4:
                    c6:4f:92:ac:03:1c:ee:61:b3:68:2a:62:5b:e7:3d:
                    9d:d6:59:12:e1:b9:25:20:1b:9b:09:97:a0:db:a3:
                    c9:9e:a8:b5:07:7f:a5:ad:43:23:36:4b:35:8f:37:
                    13:43:fe:ec:80:ea:48:01:4d:3c:0d:42:d8:00:71:
                    e0:18:bd:6c:e1:83:30:30:cf:3b:90:be:c5:f3:a0:
                    ef:de:cd:af:cc:00:5f:9a:f2:31:4a:dc:87:ba:24:
                    6f:22:68:c5:5b:c0:f2:c0:3d:5d:0b:74:a7:c1:e3:
                    33:ee:dd:0d:11:04:13:f2:75:e1:36:70:cc:3a:0f:
                    86:bc:e2:46:9c:51:54:01:2f:09:c1:1b:95:90:61:
                    06:3c:71:5d:08:2a:7c:ba:9d:19:ce:11:35:32:78:
                    1f:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:41:EE:94:D9:5C:3A:4C:80:66:FE:32:B5:62:04:BB:E9:63:C1:EC
            X509v3 Authority Key Identifier:
                keyid:13:1D:DE:4F:00:37:9C:F4:F1:43:D5:D0:0E:13:7D:69:7A:0E:B7:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3615A34/02B52692AC0E11ECB3BC0FB05A40D577/Ex3eTwA3nPTxQ9XQDhN9aXoOt4M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Ex3eTwA3nPTxQ9XQDhN9aXoOt4M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3615A34/02B52692AC0E11ECB3BC0FB05A40D577/Ex3eTwA3nPTxQ9XQDhN9aXoOt4M.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:05:88:00:a2:63:e8:4d:7d:fb:88:75:fc:a0:b9:1e:48:30:
         29:50:22:bf:ca:3b:94:82:74:da:35:ea:2c:3c:29:d8:5e:b8:
         09:90:e0:ec:d6:50:7a:74:ac:f4:ea:df:ec:11:44:37:c4:c3:
         7b:a6:38:d5:9e:03:49:ac:52:b9:9e:f1:1e:22:bd:a1:81:0c:
         fe:e9:a0:cf:4c:b8:b0:79:22:25:34:66:9e:10:a4:22:f3:af:
         ff:80:ac:3a:d1:98:0c:5e:1c:f7:50:a4:a4:67:f2:aa:64:d4:
         1b:af:80:38:98:3c:f1:bb:b2:3a:72:ac:07:09:3d:f2:1d:58:
         d9:0b:ce:53:62:be:a2:91:98:0f:0e:92:96:0c:f3:33:01:12:
         46:69:0c:3b:42:27:4c:2d:e2:62:70:11:7a:fc:64:12:35:b7:
         0b:03:ce:ea:95:74:a4:a7:03:2b:2d:ae:91:83:27:d1:e3:69:
         21:88:77:c7:c8:e2:12:10:62:7c:20:85:f6:0c:6a:5c:cd:79:
         3c:53:1a:cb:5b:60:bd:42:04:16:c5:ff:54:62:75:46:77:a9:
         01:ee:52:14:06:c5:07:e9:48:e6:19:55:76:13:52:33:52:20:
         36:45:73:5f:06:89:8c:71:fb:d8:0a:0a:cd:fc:9d:6b:af:96:
         d1:e5:ab:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 20:48:27 2025 by rpki-client