This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F361F1DA/2DA8F37A77E011EEA233EA7B4AD9E6FC/U3W2ePNrjZxrXcMoG29etnFqEQk.mft
File:                     U3W2ePNrjZxrXcMoG29etnFqEQk.mft (raw, json)
Hash identifier:          Jjyz4bgn9Bb3MiTt3kBG6vBAdgUN/4mSCwE6LprfJAI=
Subject key identifier:   42:89:46:4C:78:7A:79:D9:38:CE:44:6B:9A:E0:40:D4:20:53:D4:D6
Authority key identifier: 53:75:B6:78:F3:6B:8D:9C:6B:5D:C3:28:1B:6F:5E:B6:71:6A:11:09
Certificate issuer:       /CN=F361F1DAAF/serialNumber=5375B678F36B8D9C6B5DC3281B6F5EB6716A1109
Certificate serial:       031D
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/U3W2ePNrjZxrXcMoG29etnFqEQk.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F361F1DA/2DA8F37A77E011EEA233EA7B4AD9E6FC/U3W2ePNrjZxrXcMoG29etnFqEQk.mft
Manifest number:          0318
Signing time:             Thu 04 Dec 2025 03:51:35 +0000
Manifest this update:     Thu 04 Dec 2025 03:51:35 +0000
Manifest next update:     Sat 06 Dec 2025 03:51:35 +0000
Files and hashes:         1: U3W2ePNrjZxrXcMoG29etnFqEQk.crl (hash: VoOJ/W53ggodUAG24NvK0kZjZqH6jDnyghoIHqL3bUA=)
                          2: 902EBEC6960311EEBE7A780ED25BE465.roa (hash: RI1NH59VXYSwoVvD3QSrzuux5c6I6SJhdTOnik9vzQs=)
                          3: DBC979D8CFB411F0BD144F9CDAE4EC9C.roa (hash: 4zbQGzXYjWG9pUVTMR7RzWQtxqPrQhTqI/M5Rc7TchA=)
                          4: 6684D06A960311EEBA07EA0DD25BE465.roa (hash: 43CBfTPYLSaOl2NwiPQTIsa3VBBdU7WdHBgYb3+EOHI=)
                          5: 790E531095AD11EE9C283379D25BE465.roa (hash: Qj3JkuwJNN7j0VesRDUQ2bCZfvpe+I/vZ/mOS/O0MGI=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F361F1DA/2DA8F37A77E011EEA233EA7B4AD9E6FC/U3W2ePNrjZxrXcMoG29etnFqEQk.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F361F1DA/2DA8F37A77E011EEA233EA7B4AD9E6FC/U3W2ePNrjZxrXcMoG29etnFqEQk.mft
                          rsync://rpki.afrinic.net/repository/afrinic/U3W2ePNrjZxrXcMoG29etnFqEQk.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 06 Dec 2025 03:51:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 797 (0x31d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F361F1DAAF, serialNumber=5375B678F36B8D9C6B5DC3281B6F5EB6716A1109
        Validity
            Not Before: Dec  4 03:51:35 2025 GMT
            Not After : Dec  6 03:51:35 2025 GMT
        Subject: CN=69310547-9a1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:cc:15:75:d6:ac:d2:b8:74:71:fb:7f:16:6c:
                    c1:25:02:66:8f:31:8d:4f:59:49:8e:64:9c:98:2b:
                    06:4e:5d:6d:38:07:24:58:4f:b4:3d:82:01:1f:1a:
                    bf:8b:da:f4:df:cf:a8:be:30:14:88:71:51:c3:15:
                    a4:e3:5f:7b:32:cc:7f:2c:1e:40:ec:a9:39:0a:73:
                    2c:39:e7:8f:a6:ea:99:76:22:ac:fa:ba:af:98:c4:
                    b7:90:67:64:4f:fe:fd:53:44:43:74:fe:ad:9d:67:
                    c5:c2:29:dc:ca:b1:08:54:20:86:82:4b:cc:0b:34:
                    da:72:67:00:37:ea:2f:6a:41:9b:a8:7d:94:f4:e6:
                    6a:0d:32:f9:67:a5:d1:13:de:57:fc:07:e9:a0:16:
                    df:a9:83:ef:0c:90:b0:92:90:af:88:e0:b3:77:85:
                    2c:08:1d:54:de:f8:90:57:91:4b:89:84:79:42:6c:
                    0c:db:88:18:99:bf:af:41:bc:9b:9e:0a:e7:bd:ec:
                    f3:88:e5:72:ce:34:4e:19:95:9a:99:ef:c0:4c:eb:
                    c7:18:34:f3:72:ea:ce:6c:a2:5a:0f:7e:0c:c3:a4:
                    a7:1f:29:67:83:57:ac:5c:d9:86:c5:91:97:96:20:
                    07:b0:31:c7:38:08:ea:c8:f1:1a:d7:26:c1:bc:6b:
                    61:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:89:46:4C:78:7A:79:D9:38:CE:44:6B:9A:E0:40:D4:20:53:D4:D6
            X509v3 Authority Key Identifier:
                keyid:53:75:B6:78:F3:6B:8D:9C:6B:5D:C3:28:1B:6F:5E:B6:71:6A:11:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F361F1DA/2DA8F37A77E011EEA233EA7B4AD9E6FC/U3W2ePNrjZxrXcMoG29etnFqEQk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/U3W2ePNrjZxrXcMoG29etnFqEQk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F361F1DA/2DA8F37A77E011EEA233EA7B4AD9E6FC/U3W2ePNrjZxrXcMoG29etnFqEQk.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:a0:8a:94:6b:f8:4a:ef:bf:89:5a:7d:42:6c:db:5b:9c:56:
         ef:7b:b2:01:48:85:58:f2:12:1e:64:18:f9:38:fa:0a:c1:a1:
         b8:91:8a:52:c8:cc:4a:a0:1e:73:b3:4c:87:3d:10:15:8c:c5:
         8c:2c:c7:4e:d7:ee:9c:8f:ec:83:0e:f6:2e:a9:82:1d:20:c9:
         99:1b:ef:3a:df:3f:70:fd:e4:11:a5:9c:cf:8a:10:04:f1:c2:
         01:46:f7:b2:28:a7:bb:b2:a4:1d:79:fd:38:68:15:05:fc:01:
         e0:0d:74:15:32:88:85:b3:e4:dc:65:64:df:dd:a1:3f:12:b3:
         54:9f:40:09:66:1d:14:33:e8:a1:20:c8:8f:54:b4:25:fb:3e:
         ce:95:83:a3:70:69:ed:aa:bb:2f:48:ae:27:6d:54:47:13:e7:
         22:6d:7a:d2:7b:e4:e9:49:ce:24:38:ec:a6:f4:b3:43:05:4a:
         b9:a0:45:e2:f1:c8:c0:11:35:eb:4d:45:44:c5:04:26:20:99:
         b4:b1:49:38:fb:1f:4a:97:79:fe:e8:f5:48:f9:7d:ff:78:9e:
         33:c5:d1:0a:d5:88:43:38:07:a1:b1:26:41:50:aa:a8:d7:e0:
         0b:00:bd:39:6d:d1:85:fe:6f:bf:38:67:02:57:99:16:c9:da:
         80:ab:19:cb
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICAx0wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
MUYxREFBRjExMC8GA1UEBRMoNTM3NUI2NzhGMzZCOEQ5QzZCNURDMzI4MUI2RjVF
QjY3MTZBMTEwOTAeFw0yNTEyMDQwMzUxMzVaFw0yNTEyMDYwMzUxMzVaMBgxFjAU
BgNVBAMTDTY5MzEwNTQ3LTlhMWEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCizBV11qzSuHRx+38WbMElAmaPMY1PWUmOZJyYKwZOXW04ByRYT7Q9ggEf
Gr+L2vTfz6i+MBSIcVHDFaTjX3syzH8sHkDsqTkKcyw554+m6pl2Iqz6uq+YxLeQ
Z2RP/v1TREN0/q2dZ8XCKdzKsQhUIIaCS8wLNNpyZwA36i9qQZuofZT05moNMvln
pdET3lf8B+mgFt+pg+8MkLCSkK+I4LN3hSwIHVTe+JBXkUuJhHlCbAzbiBiZv69B
vJueCue97POI5XLONE4ZlZqZ78BM68cYNPNy6s5soloPfgzDpKcfKWeDV6xc2YbF
kZeWIAewMcc4COrI8RrXJsG8a2GvAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUQolG
THh6edk4zkRrmuBA1CBT1NYwHwYDVR0jBBgwFoAUU3W2ePNrjZxrXcMoG29etnFq
EQkwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjFGMURBLzJEQThGMzdBNzdFMDExRUVBMjMzRUE3QjRBRDlFNkZDL1UzVzJl
UE5yalp4clhjTW9HMjlldG5GcUVRay5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1UzVzJlUE5yalp4clhjTW9HMjlldG5GcUVRay5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2MUYxREEvMkRBOEYzN0E3N0UwMTFFRUEyMzNFQTdCNEFE
OUU2RkMvVTNXMmVQTnJqWnhyWGNNb0cyOWV0bkZxRVFrLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCKoIqUa/hK77+JWn1CbNtbnFbve7IB
SIVY8hIeZBj5OPoKwaG4kYpSyMxKoB5zs0yHPRAVjMWMLMdO1+6cj+yDDvYuqYId
IMmZG+863z9w/eQRpZzPihAE8cIBRveyKKe7sqQdef04aBUF/AHgDXQVMoiFs+Tc
ZWTf3aE/ErNUn0AJZh0UM+ihIMiPVLQl+z7OlYOjcGntqrsvSK4nbVRHE+cibXrS
e+TpSc4kOOym9LNDBUq5oEXi8cjAETXrTUVExQQmIJm0sUk4+x9Kl3n+6PVI+X3/
eJ4zxdEK1YhDOAehsSZBUKqo1+ALAL05bdGF/m+/OGcCV5kWydqAqxnL
-----END CERTIFICATE-----
Generated at Fri Dec 5 02:26:36 2025 by rpki-client