This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3627A5B/6C5DCE44434411EFB7629DBE762E951A/hv5z7TaP-SiSCjS0l1tObR5U4GM.mft
File:                     hv5z7TaP-SiSCjS0l1tObR5U4GM.mft (raw, json)
Hash identifier:          wkLRbBeGF9uCAnd5ug7PxhDfl+R/qSi8qosy1g1kkHw=
Subject key identifier:   C6:A0:FB:98:95:1F:6C:20:00:41:69:E7:3A:5B:B0:D6:03:26:B0:46
Authority key identifier: 86:FE:73:ED:36:8F:F9:28:92:0A:34:B4:97:5B:4E:6D:1E:54:E0:63
Certificate issuer:       /CN=F3627A5BAF/serialNumber=86FE73ED368FF928920A34B4975B4E6D1E54E063
Certificate serial:       020C
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/hv5z7TaP-SiSCjS0l1tObR5U4GM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3627A5B/6C5DCE44434411EFB7629DBE762E951A/hv5z7TaP-SiSCjS0l1tObR5U4GM.mft
Manifest number:          020C
Signing time:             Tue 09 Dec 2025 04:23:28 +0000
Manifest this update:     Tue 09 Dec 2025 04:23:27 +0000
Manifest next update:     Thu 11 Dec 2025 04:23:27 +0000
Files and hashes:         1: hv5z7TaP-SiSCjS0l1tObR5U4GM.crl (hash: JfDey2QtAx0tBBIvmLXfCkcOzyjmJ76S7mLxxPDl5wU=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3627A5B/6C5DCE44434411EFB7629DBE762E951A/hv5z7TaP-SiSCjS0l1tObR5U4GM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3627A5B/6C5DCE44434411EFB7629DBE762E951A/hv5z7TaP-SiSCjS0l1tObR5U4GM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/hv5z7TaP-SiSCjS0l1tObR5U4GM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 11 Dec 2025 04:23:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 524 (0x20c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3627A5BAF, serialNumber=86FE73ED368FF928920A34B4975B4E6D1E54E063
        Validity
            Not Before: Dec  9 04:23:27 2025 GMT
            Not After : Dec 11 04:23:27 2025 GMT
        Subject: CN=6937a440-39fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:a0:62:97:64:3d:98:86:b7:c0:74:bb:18:bf:
                    86:10:8c:a4:61:4d:f1:86:3d:20:bf:78:23:ad:a9:
                    37:f5:35:5d:ef:d2:cc:f2:29:4c:e3:87:e8:0a:9e:
                    7f:7d:f4:07:6b:85:da:35:57:c9:0e:dd:1a:a0:fd:
                    07:30:79:38:42:57:de:91:5e:6f:35:52:d3:6d:3c:
                    d0:64:db:2b:c3:9a:3f:3a:82:47:5e:ab:07:e6:3d:
                    50:c1:6f:c9:a8:1a:ad:d1:9a:58:cd:ce:c4:c5:ef:
                    ef:1e:0a:46:7b:74:0e:f1:8d:1a:52:b9:1d:8e:28:
                    90:bb:17:d8:76:05:e9:50:65:f0:50:d9:4e:a8:df:
                    0a:ea:36:79:2c:03:e1:20:45:04:72:3c:22:11:ec:
                    da:c1:9e:26:03:47:ce:e4:06:65:74:a4:e2:30:fe:
                    e3:78:59:49:73:2f:e3:a8:e5:65:05:64:7d:28:e6:
                    94:76:b6:6e:4b:18:e8:2c:02:c9:37:71:8d:fc:20:
                    0d:87:f1:88:76:26:8f:e4:62:99:46:8a:55:a8:be:
                    fd:77:89:63:f7:8f:95:51:55:89:32:41:40:d6:c0:
                    35:93:d2:30:b5:a1:84:f6:f1:eb:db:11:7b:81:01:
                    54:d0:87:66:00:77:6e:a6:c0:39:a2:57:46:19:6f:
                    73:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:A0:FB:98:95:1F:6C:20:00:41:69:E7:3A:5B:B0:D6:03:26:B0:46
            X509v3 Authority Key Identifier:
                keyid:86:FE:73:ED:36:8F:F9:28:92:0A:34:B4:97:5B:4E:6D:1E:54:E0:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3627A5B/6C5DCE44434411EFB7629DBE762E951A/hv5z7TaP-SiSCjS0l1tObR5U4GM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/hv5z7TaP-SiSCjS0l1tObR5U4GM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3627A5B/6C5DCE44434411EFB7629DBE762E951A/hv5z7TaP-SiSCjS0l1tObR5U4GM.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:8f:da:f3:23:ea:bb:5a:d6:72:c6:24:30:ad:69:46:da:d9:
         1d:62:85:3a:eb:42:21:70:63:85:0d:1c:48:29:68:22:48:53:
         1b:0b:4c:c8:e9:49:b4:42:30:81:9a:42:da:fd:ea:f3:d0:23:
         33:e9:14:80:5e:d6:58:a1:90:f6:f2:44:d3:48:d7:bb:69:6f:
         13:d7:d3:1d:1d:d6:d8:f9:1d:93:27:b0:38:25:7d:c2:1d:ee:
         b4:4c:18:e2:80:d2:ce:09:72:fc:cf:62:18:b0:08:cb:db:7d:
         f7:74:57:53:e0:15:fd:7a:13:f4:21:2e:fb:c7:04:ca:84:a7:
         ce:15:3f:52:da:8e:12:ba:6d:d8:63:33:76:c1:6f:fe:00:73:
         ce:e6:6f:51:b9:41:8a:ef:1f:ea:8b:ce:7a:f7:81:4f:42:10:
         c1:50:59:e2:2b:69:83:69:e6:46:57:e2:93:80:85:a6:2a:d0:
         66:9a:d3:42:93:bc:e6:33:00:f5:41:68:bb:b8:7c:f8:dd:a1:
         8d:cc:2b:45:0c:0b:74:27:96:38:07:ec:b7:8d:bd:a4:94:c6:
         48:76:4b:45:ec:7b:12:79:d2:b0:94:25:df:29:01:25:52:24:
         7e:1c:f9:11:ef:f9:4a:14:16:08:99:e3:96:88:51:01:1e:0c:
         e6:c7:7d:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 9 12:18:03 2025 by rpki-client