This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3628288/4693761EBED711EF82A7A345762E951A/lJZxJ_9k7Hxyo6vqFs5prtp_aDQ.mft
File:                     lJZxJ_9k7Hxyo6vqFs5prtp_aDQ.mft (raw, json)
Hash identifier:          ys6BspTkrxpHRzlx9rbX8RPYFWALGn6hOyEi6u1Mj7o=
Subject key identifier:   0E:80:BD:D6:E1:45:21:5A:5D:5B:7F:69:F1:A5:72:71:72:22:14:FF
Authority key identifier: 94:96:71:27:FF:64:EC:7C:72:A3:AB:EA:16:CE:69:AE:DA:7F:68:34
Certificate issuer:       /CN=F3628288AF/serialNumber=94967127FF64EC7C72A3ABEA16CE69AEDA7F6834
Certificate serial:       016B
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/lJZxJ_9k7Hxyo6vqFs5prtp_aDQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3628288/4693761EBED711EF82A7A345762E951A/lJZxJ_9k7Hxyo6vqFs5prtp_aDQ.mft
Manifest number:          016A
Signing time:             Sun 07 Dec 2025 04:43:48 +0000
Manifest this update:     Sun 07 Dec 2025 04:43:48 +0000
Manifest next update:     Tue 09 Dec 2025 04:43:48 +0000
Files and hashes:         1: lJZxJ_9k7Hxyo6vqFs5prtp_aDQ.crl (hash: SUpp9qXhK5EO3rHJy2JdeU8ffFDI2VBKQv/o9I6Xpp4=)
                          2: 5607C3B0BEE211EFA4CEA589762E951A.roa (hash: OpcRwl+jfvnh8TAOsFlPTty/eZv7mZcg2dDEa8udpEA=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3628288/4693761EBED711EF82A7A345762E951A/lJZxJ_9k7Hxyo6vqFs5prtp_aDQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3628288/4693761EBED711EF82A7A345762E951A/lJZxJ_9k7Hxyo6vqFs5prtp_aDQ.mft
                          rsync://rpki.afrinic.net/repository/afrinic/lJZxJ_9k7Hxyo6vqFs5prtp_aDQ.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 09 Dec 2025 04:43:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 363 (0x16b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3628288AF, serialNumber=94967127FF64EC7C72A3ABEA16CE69AEDA7F6834
        Validity
            Not Before: Dec  7 04:43:48 2025 GMT
            Not After : Dec  9 04:43:48 2025 GMT
        Subject: CN=69350604-eae0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:3d:f6:49:fe:1d:a8:3f:21:6b:9d:3c:77:bf:
                    5c:9b:54:db:43:02:0a:8d:92:40:ea:f9:67:7e:1f:
                    61:0c:ed:ff:94:0f:3f:c5:9c:a0:58:b5:62:75:06:
                    c5:71:e8:cd:dc:4b:35:ec:e9:50:9f:a8:2f:49:29:
                    43:73:21:4b:8a:7e:82:36:e2:fd:25:f3:92:75:b1:
                    c9:53:23:d1:f1:f1:44:0f:85:6d:81:59:70:fb:6e:
                    30:d8:2c:ac:b1:66:c9:ab:cb:89:bb:b3:16:d6:95:
                    ff:73:c8:9c:bc:f4:fa:f8:2e:bc:a1:2b:19:15:41:
                    91:e0:d4:e7:45:0e:c7:48:92:78:f4:23:03:c9:01:
                    08:d5:4d:66:13:46:cd:68:4d:63:29:c0:95:f2:f3:
                    7c:63:16:a9:6d:a4:af:38:3c:5a:91:e3:09:1e:53:
                    5c:86:f1:36:da:ae:f8:d9:93:3e:e1:b2:1e:92:f8:
                    ed:52:49:55:42:31:62:d3:e6:fc:b3:fe:db:23:25:
                    60:21:ed:d9:60:e9:6a:65:ed:ba:ee:ec:93:f5:00:
                    f9:97:23:3a:d0:e1:6a:3b:4b:78:dc:48:55:a2:0d:
                    26:c7:cf:10:fe:7d:99:1a:aa:0b:95:ee:eb:8e:fb:
                    f8:84:97:df:25:82:5f:af:c3:7d:fd:a6:0e:44:5c:
                    0e:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:80:BD:D6:E1:45:21:5A:5D:5B:7F:69:F1:A5:72:71:72:22:14:FF
            X509v3 Authority Key Identifier:
                keyid:94:96:71:27:FF:64:EC:7C:72:A3:AB:EA:16:CE:69:AE:DA:7F:68:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3628288/4693761EBED711EF82A7A345762E951A/lJZxJ_9k7Hxyo6vqFs5prtp_aDQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/lJZxJ_9k7Hxyo6vqFs5prtp_aDQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3628288/4693761EBED711EF82A7A345762E951A/lJZxJ_9k7Hxyo6vqFs5prtp_aDQ.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:06:7e:91:fe:cb:d6:bf:b8:b4:3b:84:29:21:79:28:e1:5e:
         db:39:02:83:6e:74:2b:73:58:51:9b:dc:37:e2:eb:12:6f:46:
         0e:90:8d:ef:be:03:af:c1:6e:74:ac:d6:73:08:45:ee:7b:0b:
         9d:23:0e:69:3b:e9:96:40:71:56:18:d8:a4:6d:e9:9a:16:f2:
         29:76:d5:ac:cd:6a:97:f8:b7:3e:d6:d8:41:82:d3:9c:22:7d:
         25:ee:7c:12:10:49:7b:97:2e:24:42:39:89:87:ab:fe:87:ed:
         28:78:8c:9b:2d:c3:6b:b5:64:ff:b0:08:eb:7b:92:1d:17:f2:
         e0:71:00:80:55:f2:31:c9:6a:ca:b0:d8:8c:fa:c4:c2:b5:ef:
         c2:61:6e:c3:1d:1b:9e:fb:24:91:73:22:cc:64:21:7a:38:ca:
         4e:94:44:2a:92:d0:aa:0b:f7:25:98:66:4a:df:0c:33:4b:aa:
         0e:96:2b:97:82:f6:46:5b:99:7c:e4:9a:72:54:6e:68:5c:58:
         1f:eb:0c:5f:11:e0:d0:a5:43:46:89:96:58:af:ef:7c:2a:42:
         55:75:99:94:2d:5e:d0:1f:52:f7:e5:e9:7a:4a:a8:5b:6d:55:
         63:bb:17:a4:21:1e:84:c4:98:67:55:55:28:c2:50:2c:cd:06:
         2d:59:6c:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 8 03:58:57 2025 by rpki-client