This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3618989/DE67E01AC03F11EA886D1D21F8AEA228/_CFqOFBDurE2eHrAmYJUYZDL3pI.mft
File:                     _CFqOFBDurE2eHrAmYJUYZDL3pI.mft (raw, json)
Hash identifier:          auC0cVZnMRHhVUmfJcFyZbFkHlgxYr6kjjDwRpYt/kM=
Subject key identifier:   B1:4A:BC:70:82:1E:B3:DE:87:15:FA:F0:8A:94:DF:9E:7D:1C:1D:26
Authority key identifier: FC:21:6A:38:50:43:BA:B1:36:78:7A:C0:99:82:54:61:90:CB:DE:92
Certificate issuer:       /CN=F3618989AF/serialNumber=FC216A385043BAB136787AC09982546190CBDE92
Certificate serial:       07F5
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/_CFqOFBDurE2eHrAmYJUYZDL3pI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3618989/DE67E01AC03F11EA886D1D21F8AEA228/_CFqOFBDurE2eHrAmYJUYZDL3pI.mft
Manifest number:          07F2
Signing time:             Tue 09 Dec 2025 01:52:07 +0000
Manifest this update:     Tue 09 Dec 2025 01:52:07 +0000
Manifest next update:     Thu 11 Dec 2025 01:52:07 +0000
Files and hashes:         1: _CFqOFBDurE2eHrAmYJUYZDL3pI.crl (hash: WnelnP9bePmdkNMT/vrAo5cEG2YomQsKu0mrk/FgpHw=)
                          2: 7D1D251CC04011EA957AEB21F8AEA228.roa (hash: t/ypp67l7oHU7gQc6/GfToKk0xAfDBleGGehP++nK88=)
                          3: 234A1CC0C04011EABDD07A21F8AEA228.roa (hash: qxLDaEM+dLvWNlnURJT6LsT7+vD5fBM4n0SH7Mu85No=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3618989/DE67E01AC03F11EA886D1D21F8AEA228/_CFqOFBDurE2eHrAmYJUYZDL3pI.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3618989/DE67E01AC03F11EA886D1D21F8AEA228/_CFqOFBDurE2eHrAmYJUYZDL3pI.mft
                          rsync://rpki.afrinic.net/repository/afrinic/_CFqOFBDurE2eHrAmYJUYZDL3pI.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 11 Dec 2025 01:52:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2037 (0x7f5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3618989AF, serialNumber=FC216A385043BAB136787AC09982546190CBDE92
        Validity
            Not Before: Dec  9 01:52:07 2025 GMT
            Not After : Dec 11 01:52:07 2025 GMT
        Subject: CN=693780c7-3efb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:9d:06:9b:3d:e0:5f:c6:57:84:bf:8c:ec:e7:
                    a8:e6:02:8c:67:f2:73:09:d5:f8:1c:4a:0a:ae:12:
                    20:61:28:cc:0b:5c:8a:a4:56:a6:28:c0:5a:8e:f7:
                    f0:93:79:b9:77:8e:f2:ff:81:bf:b6:5b:f4:b2:49:
                    a6:d1:c0:ff:87:4d:eb:e0:f2:14:f2:91:c5:ad:e7:
                    e5:bf:29:84:4d:ec:ac:70:49:15:20:80:90:43:65:
                    ef:8a:83:9e:83:e9:c8:7c:f5:45:3d:db:4d:e8:20:
                    02:4d:ab:27:fd:26:4f:ef:b5:b1:45:8e:ab:40:d7:
                    6b:6e:49:3d:4c:9c:5e:b9:2f:3f:35:91:52:ca:5d:
                    be:a6:07:de:b1:56:17:5a:06:7e:23:65:07:56:79:
                    a0:68:6a:f8:48:62:a5:c4:81:93:f6:1b:29:40:ae:
                    e6:61:cd:67:a1:77:f2:f2:b9:06:65:81:69:13:8b:
                    6d:11:50:86:54:98:4c:fb:d7:71:5e:ad:f4:9e:44:
                    06:21:1a:be:d1:5d:48:fa:d7:82:07:89:03:59:68:
                    8e:50:63:2b:4b:75:29:7a:37:fc:ea:53:09:44:83:
                    5c:25:89:33:1e:63:c7:af:37:75:7b:02:fc:fd:16:
                    d2:cd:f9:f3:aa:60:7c:c7:12:2a:c7:10:32:6a:c1:
                    72:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:4A:BC:70:82:1E:B3:DE:87:15:FA:F0:8A:94:DF:9E:7D:1C:1D:26
            X509v3 Authority Key Identifier:
                keyid:FC:21:6A:38:50:43:BA:B1:36:78:7A:C0:99:82:54:61:90:CB:DE:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3618989/DE67E01AC03F11EA886D1D21F8AEA228/_CFqOFBDurE2eHrAmYJUYZDL3pI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/_CFqOFBDurE2eHrAmYJUYZDL3pI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3618989/DE67E01AC03F11EA886D1D21F8AEA228/_CFqOFBDurE2eHrAmYJUYZDL3pI.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:67:c5:26:1c:26:74:46:4b:15:e2:af:21:f0:0a:98:b5:59:
         91:7c:e6:43:53:bf:dc:0e:24:7e:95:d0:8f:05:26:9d:f1:f8:
         16:eb:a3:fd:31:5a:84:68:7e:22:61:2f:57:5c:e8:87:de:01:
         ca:fd:8c:04:5e:6c:85:cf:88:33:88:86:25:f3:14:12:97:d0:
         55:0d:9e:91:ac:d3:71:ee:68:52:4e:71:0e:45:05:49:93:2e:
         fb:32:74:8a:56:49:b3:06:30:74:88:42:6c:1d:46:fa:20:b3:
         35:93:0a:14:ef:5b:11:4d:d2:3e:40:32:2b:33:aa:13:4e:76:
         1b:be:76:b9:7d:71:bd:21:5d:35:8a:a4:ee:5f:7a:63:c9:c8:
         19:ed:a1:f3:09:e3:3c:2f:fb:2e:6c:41:a3:74:9a:fa:e8:2f:
         b0:34:e7:f0:20:fc:1d:8d:fd:0c:78:2d:d8:54:30:2f:45:b8:
         69:98:4f:98:02:05:93:b8:70:8a:ce:7c:39:63:d6:17:ef:65:
         58:67:15:bb:fa:49:3c:9c:d8:8a:72:69:98:73:9c:99:7b:32:
         c0:63:1c:e4:51:3d:cb:a5:12:cc:2d:3f:10:e4:db:ae:21:77:
         59:9a:84:3d:52:2a:2a:53:43:16:57:a0:87:37:f1:73:d3:bd:
         bd:98:99:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 9 12:19:10 2025 by rpki-client