This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3617770/E57BA9D8DC0311EF9C482C52762E951A/v62u3NVIMg_I8seYfA4imdy6Opw.mft
File:                     v62u3NVIMg_I8seYfA4imdy6Opw.mft (raw, json)
Hash identifier:          MnnqgLXxfosij0XuUCx7rLs/ck3fcFKMNQcpn3BPUx4=
Subject key identifier:   EC:41:83:DC:19:7D:BC:4C:9B:60:24:9E:AB:E8:3E:67:7B:97:A9:08
Authority key identifier: BF:AD:AE:DC:D5:48:32:0F:C8:F2:C7:98:7C:0E:22:99:DC:BA:3A:9C
Certificate issuer:       /CN=F3617770AF/serialNumber=BFADAEDCD548320FC8F2C7987C0E2299DCBA3A9C
Certificate serial:       0143
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/v62u3NVIMg_I8seYfA4imdy6Opw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3617770/E57BA9D8DC0311EF9C482C52762E951A/v62u3NVIMg_I8seYfA4imdy6Opw.mft
Manifest number:          0143
Signing time:             Tue 09 Dec 2025 04:49:41 +0000
Manifest this update:     Tue 09 Dec 2025 04:49:41 +0000
Manifest next update:     Thu 11 Dec 2025 04:49:41 +0000
Files and hashes:         1: v62u3NVIMg_I8seYfA4imdy6Opw.crl (hash: eS/GXB0hd2hHglkN1t7eZej3wyv2fZidTBjFnhYHWMw=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3617770/E57BA9D8DC0311EF9C482C52762E951A/v62u3NVIMg_I8seYfA4imdy6Opw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3617770/E57BA9D8DC0311EF9C482C52762E951A/v62u3NVIMg_I8seYfA4imdy6Opw.mft
                          rsync://rpki.afrinic.net/repository/afrinic/v62u3NVIMg_I8seYfA4imdy6Opw.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 11 Dec 2025 04:49:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 323 (0x143)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3617770AF, serialNumber=BFADAEDCD548320FC8F2C7987C0E2299DCBA3A9C
        Validity
            Not Before: Dec  9 04:49:41 2025 GMT
            Not After : Dec 11 04:49:41 2025 GMT
        Subject: CN=6937aa65-7cea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:e1:8b:61:e0:23:db:ab:b2:b4:95:6a:cc:f6:
                    3e:94:da:77:67:f9:66:fe:08:d4:6b:6f:cd:dd:e4:
                    c5:e8:c8:4a:e1:f8:52:4d:4c:ad:01:14:7a:c2:7a:
                    8e:28:a4:41:f7:ca:47:23:fb:01:32:ef:55:88:a3:
                    82:fa:85:1a:5b:2b:ae:ba:fd:bf:d8:0b:71:ca:99:
                    d7:89:22:36:24:06:94:f5:be:c3:16:8f:e8:ad:07:
                    e8:f1:51:68:9c:cd:07:1b:86:27:5d:55:e4:3f:38:
                    21:35:2c:79:5c:65:b5:1b:ae:48:6e:1f:f7:03:e2:
                    63:8f:a2:12:e5:db:4b:06:a3:5c:bb:f7:66:b0:58:
                    90:bb:8c:5a:10:8e:22:e7:fa:b2:e3:0d:1d:aa:a4:
                    97:1c:2f:e0:47:b9:48:5c:d3:5e:94:a7:bc:97:53:
                    df:b3:75:25:ac:88:ff:21:91:9b:46:cc:5e:b9:7f:
                    a4:e2:98:5e:ee:47:fb:0a:be:e0:d8:fb:ff:b5:c6:
                    01:e0:6d:8c:1e:95:dc:bb:50:a9:b6:12:9f:dd:ae:
                    10:28:fb:c3:df:0e:a0:a6:03:21:62:1f:cb:aa:58:
                    e3:dc:2d:cf:f2:82:0d:4a:93:f1:13:52:2f:cb:33:
                    07:3f:5c:0f:1c:dc:8b:36:0d:0b:ef:95:87:41:2f:
                    f7:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:41:83:DC:19:7D:BC:4C:9B:60:24:9E:AB:E8:3E:67:7B:97:A9:08
            X509v3 Authority Key Identifier:
                keyid:BF:AD:AE:DC:D5:48:32:0F:C8:F2:C7:98:7C:0E:22:99:DC:BA:3A:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3617770/E57BA9D8DC0311EF9C482C52762E951A/v62u3NVIMg_I8seYfA4imdy6Opw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/v62u3NVIMg_I8seYfA4imdy6Opw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3617770/E57BA9D8DC0311EF9C482C52762E951A/v62u3NVIMg_I8seYfA4imdy6Opw.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:93:ac:30:63:25:4d:ea:3d:df:23:09:64:b1:ae:0e:0d:59:
         e3:db:ca:fc:18:99:7b:03:7b:6d:dc:9d:3a:96:05:20:9e:b0:
         43:6b:dd:59:2a:16:95:7a:25:54:52:cb:16:06:c2:2c:3c:08:
         01:dc:f4:a8:23:90:ff:a2:ec:f8:19:64:96:7d:99:fc:73:df:
         ed:2f:89:8c:64:cf:70:63:f9:15:11:58:2e:45:f3:ec:13:ec:
         e5:89:d4:c1:a0:c9:fd:5a:5a:31:87:01:37:4a:12:00:ed:45:
         f0:b9:3e:c2:be:da:4b:74:f7:f1:9d:7c:66:04:eb:96:67:39:
         a9:3e:01:dd:4f:a0:33:7f:60:7a:76:8e:e1:9e:31:ec:8a:4b:
         2a:8f:25:cd:7f:cb:0a:7e:94:d6:9b:87:e6:22:08:8b:be:b0:
         20:dc:a2:18:b5:8e:e3:c8:88:87:50:f9:14:dc:3b:f3:9a:c2:
         5e:be:29:76:42:c3:2f:a4:57:f1:8a:8b:1e:24:73:41:0b:73:
         0e:7b:99:7d:ea:42:f9:18:46:9c:e0:f5:f0:82:55:4f:ef:bf:
         14:3f:30:61:11:cb:8f:27:78:10:08:90:c9:a2:02:27:62:f8:
         a6:8d:ae:ec:6f:33:d0:53:1c:d3:98:de:24:07:92:00:6c:2e:
         c4:f5:f1:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 9 12:31:59 2025 by rpki-client