This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3619C2D/A3800BAE482011EFB826B541762E951A/CrgqSYFgfZszadx3bbCHPaDXW0o.mft
File:                     CrgqSYFgfZszadx3bbCHPaDXW0o.mft (raw, json)
Hash identifier:          uus1ih1pZ6cIjU79v5qfsrHHql7go4KbQ1y4G43WQtE=
Subject key identifier:   AD:9C:77:A5:55:D7:55:D7:4A:49:D5:88:41:F2:8E:D2:9C:DC:17:D6
Authority key identifier: 0A:B8:2A:49:81:60:7D:9B:33:69:DC:77:6D:B0:87:3D:A0:D7:5B:4A
Certificate issuer:       /CN=F3619C2DAF/serialNumber=0AB82A4981607D9B3369DC776DB0873DA0D75B4A
Certificate serial:       020D
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/CrgqSYFgfZszadx3bbCHPaDXW0o.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3619C2D/A3800BAE482011EFB826B541762E951A/CrgqSYFgfZszadx3bbCHPaDXW0o.mft
Manifest number:          020A
Signing time:             Tue 09 Dec 2025 04:24:05 +0000
Manifest this update:     Tue 09 Dec 2025 04:24:04 +0000
Manifest next update:     Thu 11 Dec 2025 04:24:04 +0000
Files and hashes:         1: CrgqSYFgfZszadx3bbCHPaDXW0o.crl (hash: 7AcYGcrSiYbZQqHlTKMolLtQrKsjynYvv3X0En4nPjI=)
                          2: 49178D26482111EFBF6A9846762E951A.roa (hash: Uq5zF4pcoSNvC1y+ziK2X/Qxf/rDJCV5RGjunbzu6Yw=)
                          3: B03D2452482111EF9F9EC84A762E951A.roa (hash: jCfjvbMFxRCBjcQ1hYzWoTlmpoZT6gauVXaJc8YGgBc=)
                          4: 74DC4CE4482111EFB52ABE46762E951A.roa (hash: IrKSaBlXTXvuFdDCMcmVoeGgt+ao2gr+1sDL9IuQ/x0=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3619C2D/A3800BAE482011EFB826B541762E951A/CrgqSYFgfZszadx3bbCHPaDXW0o.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3619C2D/A3800BAE482011EFB826B541762E951A/CrgqSYFgfZszadx3bbCHPaDXW0o.mft
                          rsync://rpki.afrinic.net/repository/afrinic/CrgqSYFgfZszadx3bbCHPaDXW0o.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 11 Dec 2025 04:24:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 525 (0x20d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3619C2DAF, serialNumber=0AB82A4981607D9B3369DC776DB0873DA0D75B4A
        Validity
            Not Before: Dec  9 04:24:04 2025 GMT
            Not After : Dec 11 04:24:04 2025 GMT
        Subject: CN=6937a464-8d2b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:5a:be:ae:a9:36:dd:f9:f4:5a:2d:b9:83:85:
                    b5:a1:56:b5:cd:df:ef:63:dc:a1:a1:36:df:f0:7b:
                    6d:37:5d:54:20:ca:5f:46:f4:82:1b:6a:ef:43:bd:
                    cf:25:e1:9f:90:ce:01:ea:62:46:99:e7:73:e8:78:
                    1c:05:1b:c3:7a:52:1c:a9:36:aa:b1:f1:29:9c:63:
                    16:44:cd:89:cd:f7:03:fa:d0:c5:a6:0e:e8:85:f0:
                    61:2e:d7:94:47:92:84:e6:ba:e5:ce:19:c4:e4:2a:
                    ed:90:f7:d7:ca:17:b5:26:d6:a7:2b:b3:87:95:40:
                    5d:09:4c:f2:71:2f:54:50:f1:f4:4e:8d:b9:05:c1:
                    77:b2:87:c3:50:07:94:07:8e:ad:d5:0b:fc:2d:50:
                    3d:68:d3:8b:d6:4a:83:c9:dd:9d:37:76:98:19:cb:
                    26:42:ed:b4:69:19:c7:38:19:b6:f9:76:a1:14:98:
                    36:85:85:6a:c7:02:8b:26:0a:6d:50:58:f8:59:01:
                    91:f9:96:58:d1:56:15:a8:41:6c:2a:6a:ee:10:79:
                    a9:0a:0f:88:a9:27:a6:da:6c:1a:a0:41:63:79:f0:
                    51:5a:99:5c:d8:f6:70:a0:98:d0:0a:a7:92:de:b9:
                    d5:f7:14:66:1f:60:a8:4f:6e:2c:87:ab:8a:ff:25:
                    68:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:9C:77:A5:55:D7:55:D7:4A:49:D5:88:41:F2:8E:D2:9C:DC:17:D6
            X509v3 Authority Key Identifier:
                keyid:0A:B8:2A:49:81:60:7D:9B:33:69:DC:77:6D:B0:87:3D:A0:D7:5B:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3619C2D/A3800BAE482011EFB826B541762E951A/CrgqSYFgfZszadx3bbCHPaDXW0o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CrgqSYFgfZszadx3bbCHPaDXW0o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3619C2D/A3800BAE482011EFB826B541762E951A/CrgqSYFgfZszadx3bbCHPaDXW0o.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:ee:d3:05:04:f4:e3:54:31:b0:00:c3:38:16:94:7c:eb:1b:
         cd:a6:34:c4:b4:31:1f:41:2b:9a:73:5a:71:6a:86:52:1e:2e:
         83:73:c7:2c:9d:a1:00:55:4e:f8:29:14:6b:ca:fe:76:62:b3:
         cd:af:80:59:3e:28:e9:40:ff:32:78:6b:61:a3:f7:3d:1d:9f:
         34:99:70:e3:ce:74:8e:8d:b4:c9:fc:ee:87:34:15:36:1e:b0:
         c5:cf:c8:a5:3d:9b:df:b5:94:38:7d:25:5b:d1:29:4c:ef:0c:
         b9:29:39:39:f3:37:8a:4a:f0:35:44:8d:bf:83:c8:15:30:51:
         ab:07:77:6f:56:93:45:6c:94:53:b5:2e:9b:99:5e:f9:66:ef:
         f6:96:fc:55:a1:7b:ac:af:2a:ef:22:30:1e:88:b6:40:f4:c6:
         af:f4:0c:e7:54:58:05:2b:f5:8f:97:9c:db:ab:ed:d6:6f:8b:
         e1:25:67:f9:79:bc:62:b2:a1:fc:d6:b6:96:4b:8d:78:18:18:
         b0:b5:9e:0b:bf:27:7c:28:c9:4e:02:ad:65:67:23:29:15:eb:
         2b:8a:08:8d:ae:a1:4f:6b:99:bb:da:a7:24:8f:35:86:1b:29:
         71:01:7d:40:d7:39:2e:62:60:43:90:70:9c:fb:43:81:64:53:
         8f:d5:75:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 9 12:19:15 2025 by rpki-client