This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3632CFE/500B2990828511EB80C7EF79F8AEA228/gBdkcAW5GRQgyZGxrgeYtayhTQw.mft
File:                     gBdkcAW5GRQgyZGxrgeYtayhTQw.mft (raw, json)
Hash identifier:          4qio4PAtZKRP7FawpF5057ERMS4kv2ag+3l+p6Nbjng=
Subject key identifier:   DA:45:03:E3:26:D0:3E:17:6E:D2:FD:40:29:77:EB:A3:7B:F0:5E:87
Authority key identifier: 80:17:64:70:05:B9:19:14:20:C9:91:B1:AE:07:98:B5:AC:A1:4D:0C
Certificate issuer:       /CN=F3632CFEAF/serialNumber=8017647005B9191420C991B1AE0798B5ACA14D0C
Certificate serial:       0710
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/gBdkcAW5GRQgyZGxrgeYtayhTQw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3632CFE/500B2990828511EB80C7EF79F8AEA228/gBdkcAW5GRQgyZGxrgeYtayhTQw.mft
Manifest number:          0704
Signing time:             Fri 05 Dec 2025 02:03:57 +0000
Manifest this update:     Fri 05 Dec 2025 02:03:56 +0000
Manifest next update:     Sun 07 Dec 2025 02:03:56 +0000
Files and hashes:         1: gBdkcAW5GRQgyZGxrgeYtayhTQw.crl (hash: VWWgaIftvKlaLgmE2yDNEP/+Z4THc/suH3+HNFfv2Oo=)
                          2: 49BADED6E0AF11EBA4AE8C60F8AEA228.roa (hash: bfzLeABKt8iJaNdlc12joZPlW2B3ok9kJhlWiLncwS0=)
                          3: 40E2C4A2E0D411EBB731DB11F8AEA228.roa (hash: iNVwS1o0KwvedAC6eQYfYJ+BAcXsoI+clsk0jnqfrIA=)
                          4: 10C8FFEEE29F11EBAA580947F8AEA228.roa (hash: 387HhPDysnyOhc8pmgAp8wGABIBNWQ6h4D9Qi4Iokv0=)
                          5: 7A4D6530E0D411EB863D3F12F8AEA228.roa (hash: P26YxJOy6uRICshHfktO8hTsp7ut8yCkshcNludKd0A=)
                          6: 254A1146DE4A11EB99E5AD21F8AEA228.roa (hash: +hq36BifBeCSUhyFbBupJ4tam0DEvG9eurBQqxlzAcI=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3632CFE/500B2990828511EB80C7EF79F8AEA228/gBdkcAW5GRQgyZGxrgeYtayhTQw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3632CFE/500B2990828511EB80C7EF79F8AEA228/gBdkcAW5GRQgyZGxrgeYtayhTQw.mft
                          rsync://rpki.afrinic.net/repository/afrinic/gBdkcAW5GRQgyZGxrgeYtayhTQw.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 07 Dec 2025 02:03:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1808 (0x710)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3632CFEAF, serialNumber=8017647005B9191420C991B1AE0798B5ACA14D0C
        Validity
            Not Before: Dec  5 02:03:56 2025 GMT
            Not After : Dec  7 02:03:56 2025 GMT
        Subject: CN=69323d8d-beee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:44:bc:bd:91:15:68:94:07:b6:ea:6d:ab:98:
                    43:2b:06:34:1f:f5:73:9f:4a:37:62:4b:29:99:b1:
                    fe:92:10:5b:2b:37:27:60:10:c5:85:19:8b:17:08:
                    41:8b:d4:c3:e9:03:af:81:b3:cb:97:dd:38:a3:c1:
                    e1:8e:07:70:bb:23:da:83:09:b7:bd:2a:4c:5e:f8:
                    cf:2c:10:7e:fd:5d:b9:97:70:5b:6d:54:db:06:38:
                    b4:6b:88:b1:0c:50:36:af:32:2e:90:fc:73:04:ef:
                    c7:ac:d6:d1:72:b8:34:22:66:83:58:8d:94:0f:5d:
                    e9:7f:d5:8e:e0:92:70:fa:91:ad:7f:80:6b:09:79:
                    0d:be:a0:c4:67:bf:ec:1e:01:8d:66:a7:14:8c:ae:
                    36:93:43:59:59:06:67:41:28:5e:e8:5c:44:18:1b:
                    b3:09:ad:a6:97:d9:6c:1c:31:39:4c:6f:f8:f5:bc:
                    69:11:ff:6b:0a:01:8b:85:a9:7d:43:2d:ce:a9:9c:
                    a5:6a:15:05:d1:6c:d5:1f:20:5d:38:5f:59:d7:59:
                    a5:4a:45:7a:dc:a2:1d:9c:d5:42:47:f1:ee:86:8b:
                    91:eb:70:0a:d7:a2:c7:a8:d9:45:d3:56:d6:58:33:
                    17:19:16:61:00:ab:87:7b:9c:1a:be:86:a0:c2:bc:
                    9a:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:45:03:E3:26:D0:3E:17:6E:D2:FD:40:29:77:EB:A3:7B:F0:5E:87
            X509v3 Authority Key Identifier:
                keyid:80:17:64:70:05:B9:19:14:20:C9:91:B1:AE:07:98:B5:AC:A1:4D:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3632CFE/500B2990828511EB80C7EF79F8AEA228/gBdkcAW5GRQgyZGxrgeYtayhTQw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/gBdkcAW5GRQgyZGxrgeYtayhTQw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3632CFE/500B2990828511EB80C7EF79F8AEA228/gBdkcAW5GRQgyZGxrgeYtayhTQw.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:76:6f:3f:7d:f8:d4:9d:6d:b9:d9:1f:97:00:c4:ff:9e:7c:
         3b:52:fa:06:98:ba:5e:a8:9c:8d:93:fe:1a:1f:94:39:e6:a1:
         63:5a:a1:64:38:df:ba:54:40:0e:ec:0a:71:2d:1e:5c:e0:ed:
         79:5e:e5:12:3a:3f:99:7c:ad:a2:a4:32:96:db:06:92:44:2c:
         1d:9a:19:7f:fd:1b:6f:e2:f6:1f:40:f8:53:f2:4b:0f:5b:98:
         31:f0:60:4a:41:d2:bd:aa:62:14:26:ba:d0:70:1b:64:5d:84:
         38:60:ca:77:f0:87:36:81:60:87:66:42:5a:aa:54:1e:a0:38:
         03:1d:99:29:5d:25:41:29:1a:48:dc:cd:bb:33:ca:fd:81:2b:
         d0:6c:1f:c9:3d:83:9d:91:2f:30:c5:29:96:3c:ed:a7:af:3b:
         8d:dc:74:63:00:b3:cd:b6:a4:2c:41:b4:21:bd:fb:8d:2f:0b:
         83:75:1c:13:36:61:fe:3a:87:fd:4f:67:55:79:e5:23:eb:74:
         1c:7c:fd:08:24:ee:66:23:c1:fe:8a:0c:6b:05:77:8f:95:a5:
         b1:cc:dc:f1:ea:2e:1c:76:d2:21:e6:66:b0:e8:39:06:2c:8d:
         db:83:96:a2:b0:ca:cb:ec:9c:ce:43:06:61:7d:9d:6b:16:1f:
         5e:3b:58:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 5 23:04:51 2025 by rpki-client