This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3621C8A/0E4E6838D3F111EBB0F12E18F8AEA228/_47Skrq7L4ZA7kbxs1kWS4BTj1U.mft
File:                     _47Skrq7L4ZA7kbxs1kWS4BTj1U.mft (raw, json)
Hash identifier:          zlMfAdz5YxEnFZPU6zash7OeOz2ETEhnfQsU/dPsfVA=
Subject key identifier:   19:27:A2:39:C3:43:07:BA:C3:17:87:81:25:21:D2:96:FB:14:FF:68
Authority key identifier: FF:8E:D2:92:BA:BB:2F:86:40:EE:46:F1:B3:59:16:4B:80:53:8F:55
Certificate issuer:       /CN=F3621C8AAF/serialNumber=FF8ED292BABB2F8640EE46F1B359164B80538F55
Certificate serial:       0699
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/_47Skrq7L4ZA7kbxs1kWS4BTj1U.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3621C8A/0E4E6838D3F111EBB0F12E18F8AEA228/_47Skrq7L4ZA7kbxs1kWS4BTj1U.mft
Manifest number:          0695
Signing time:             Tue 09 Dec 2025 02:15:34 +0000
Manifest this update:     Tue 09 Dec 2025 02:15:33 +0000
Manifest next update:     Thu 11 Dec 2025 02:15:33 +0000
Files and hashes:         1: _47Skrq7L4ZA7kbxs1kWS4BTj1U.crl (hash: gfx0cdLGzbnkBnSJnIYCSymjoN6PueWwRriwSr8tCdw=)
                          2: 618DD2E6D4DB11EBAC678141F8AEA228.roa (hash: 2dfVxKybLHR5+MMwCeet4VquLas7BlSkUUwjxoFXr54=)
                          3: 48E2F93A1FFB11EDA58CC9C5F1222468.roa (hash: RjLPfzgkdN2ZwbGON57T6lSnUm+N9Sb9duXVeRoxO88=)
                          4: 054D3E6C47A511EC9E4F5452D8A014CE.roa (hash: V0jAJU4mkJ4wT+l9amx7r69aJYuX+Vg75J6DIl15pPI=)
                          5: 7D716E841FFB11EDA4F58EC6F1222468.roa (hash: kIA9AuRs7fJpR8S/gM+T8eNfvwqqEcS39yhbVal5TQM=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3621C8A/0E4E6838D3F111EBB0F12E18F8AEA228/_47Skrq7L4ZA7kbxs1kWS4BTj1U.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3621C8A/0E4E6838D3F111EBB0F12E18F8AEA228/_47Skrq7L4ZA7kbxs1kWS4BTj1U.mft
                          rsync://rpki.afrinic.net/repository/afrinic/_47Skrq7L4ZA7kbxs1kWS4BTj1U.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 11 Dec 2025 02:15:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1689 (0x699)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3621C8AAF, serialNumber=FF8ED292BABB2F8640EE46F1B359164B80538F55
        Validity
            Not Before: Dec  9 02:15:33 2025 GMT
            Not After : Dec 11 02:15:33 2025 GMT
        Subject: CN=69378646-0a03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:b5:a3:8d:25:cf:70:1b:d8:1e:c5:e1:65:f6:
                    d4:6e:3a:0c:30:01:c8:39:32:b3:70:da:b5:9c:5b:
                    47:49:00:08:f0:8c:92:7d:46:c5:f4:9d:ed:93:99:
                    b9:ed:37:97:d0:2f:da:5b:20:06:7b:7b:b8:14:54:
                    80:c9:f8:e5:ef:8d:f1:7d:c8:76:71:92:9a:13:bf:
                    ea:de:cf:88:88:a2:07:a1:30:39:ee:15:de:d7:05:
                    d4:2f:ae:b7:a0:b8:ec:d5:a7:60:1b:6d:2d:1a:41:
                    ad:23:36:a1:3f:45:4b:02:28:0a:fe:cb:0a:fd:6e:
                    c4:3c:46:a5:0a:98:87:3e:f6:7b:39:9a:49:3f:b2:
                    95:3e:4a:64:87:e9:d9:9e:c7:01:8d:1d:2c:42:75:
                    f7:c0:32:f1:fb:04:6b:1b:77:99:da:76:c5:9e:f4:
                    0c:0f:17:34:02:b1:32:ab:fc:37:88:87:d2:4c:97:
                    96:73:33:2a:42:8d:bf:2b:40:8e:17:7a:b4:73:9d:
                    92:74:86:0a:aa:46:c4:24:5d:16:33:6b:a1:a0:cc:
                    6c:b7:72:e3:32:d8:30:b1:0f:6b:cd:dc:22:e9:aa:
                    e8:0c:6f:e5:03:40:03:f1:22:3d:d9:48:fd:12:53:
                    20:4f:e0:f1:8e:28:d1:85:17:b0:83:30:3f:1c:6f:
                    73:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:27:A2:39:C3:43:07:BA:C3:17:87:81:25:21:D2:96:FB:14:FF:68
            X509v3 Authority Key Identifier:
                keyid:FF:8E:D2:92:BA:BB:2F:86:40:EE:46:F1:B3:59:16:4B:80:53:8F:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3621C8A/0E4E6838D3F111EBB0F12E18F8AEA228/_47Skrq7L4ZA7kbxs1kWS4BTj1U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/_47Skrq7L4ZA7kbxs1kWS4BTj1U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3621C8A/0E4E6838D3F111EBB0F12E18F8AEA228/_47Skrq7L4ZA7kbxs1kWS4BTj1U.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:16:83:a0:ab:f3:86:96:4c:6b:c6:53:0a:a3:4d:51:dc:86:
         2c:58:bc:f0:d5:f1:4b:80:5b:64:43:c3:60:01:bb:ae:0a:40:
         13:be:c5:e0:4f:a1:9e:7f:32:ec:87:b4:49:df:9f:f4:f2:cd:
         b0:3d:5e:a2:1a:e9:a8:ea:cd:cc:d4:41:09:1e:b0:3f:cb:19:
         58:61:4f:24:54:fa:62:7e:aa:7f:4a:88:4b:b3:70:2a:36:7a:
         fd:53:d7:37:00:a7:8c:72:a3:a4:a4:37:d9:d0:e6:09:8d:34:
         fa:d0:41:74:8c:01:f1:f8:4f:66:ac:39:89:b7:94:fc:d3:4c:
         eb:5b:1c:be:c2:e9:89:25:f1:b0:71:87:d6:be:d1:28:43:d5:
         48:37:4d:17:be:81:9a:e6:41:0e:be:64:1d:dd:f6:b7:a8:01:
         bf:be:0c:67:0e:4c:07:54:cd:46:cf:eb:24:d4:42:ae:2b:a1:
         2e:15:02:d6:5d:65:91:ce:48:bf:84:67:f8:1b:29:1c:c3:7a:
         f3:a2:32:93:6c:2f:d4:f7:15:cb:d4:4f:cd:ee:1e:71:93:0c:
         a8:e5:26:04:d2:91:73:43:a9:cf:5c:06:59:86:25:a0:33:a7:
         18:40:a7:04:d6:ee:3a:02:1f:86:82:6f:4d:f8:ae:56:d7:73:
         87:f1:df:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 9 12:19:57 2025 by rpki-client