This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3645590/95C1A38A27F811EFA48126167DDC24C2/PdV0GGdrVqud5W-qgMJ4h5vZRc4.mft
File:                     PdV0GGdrVqud5W-qgMJ4h5vZRc4.mft (raw, json)
Hash identifier:          sieZ4ejxELWr8YPfcZ7r8HXUxDYSm+E3MsNsq/p0oYQ=
Subject key identifier:   59:56:47:CD:58:F4:85:BA:65:73:C3:F2:8A:C6:E5:C3:B2:E0:68:74
Authority key identifier: 3D:D5:74:18:67:6B:56:AB:9D:E5:6F:AA:80:C2:78:87:9B:D9:45:CE
Certificate issuer:       /CN=F3645590AF/serialNumber=3DD57418676B56AB9DE56FAA80C278879BD945CE
Certificate serial:       022C
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/PdV0GGdrVqud5W-qgMJ4h5vZRc4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3645590/95C1A38A27F811EFA48126167DDC24C2/PdV0GGdrVqud5W-qgMJ4h5vZRc4.mft
Manifest number:          022B
Signing time:             Thu 04 Dec 2025 04:18:34 +0000
Manifest this update:     Thu 04 Dec 2025 04:18:33 +0000
Manifest next update:     Sat 06 Dec 2025 04:18:33 +0000
Files and hashes:         1: PdV0GGdrVqud5W-qgMJ4h5vZRc4.crl (hash: dTdvRhDHG3Kaj3l0X5iHQZCiemV5FwOY0J/Nb7QWvyg=)
                          2: 098CB55C27F911EF9DB4BD167DDC24C2.roa (hash: MnuSnmQB8rdokjiI++mFKj9UCdOQLKSSBfHFFf46+p0=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3645590/95C1A38A27F811EFA48126167DDC24C2/PdV0GGdrVqud5W-qgMJ4h5vZRc4.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3645590/95C1A38A27F811EFA48126167DDC24C2/PdV0GGdrVqud5W-qgMJ4h5vZRc4.mft
                          rsync://rpki.afrinic.net/repository/afrinic/PdV0GGdrVqud5W-qgMJ4h5vZRc4.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 06 Dec 2025 04:18:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 556 (0x22c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3645590AF, serialNumber=3DD57418676B56AB9DE56FAA80C278879BD945CE
        Validity
            Not Before: Dec  4 04:18:33 2025 GMT
            Not After : Dec  6 04:18:33 2025 GMT
        Subject: CN=69310b9a-0f88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:6f:5a:68:fa:0f:74:45:38:e6:3f:b7:fd:f3:
                    c3:5e:35:2d:72:bf:ad:61:70:12:79:f1:08:b6:5f:
                    51:d7:80:01:b5:57:59:da:7e:ad:6a:39:6c:b3:ad:
                    62:ec:df:0d:4a:e1:d7:bd:81:e0:b9:23:ab:aa:69:
                    f2:84:4e:9b:16:f0:26:68:10:35:ac:71:40:90:58:
                    d6:28:4e:18:a0:c3:e7:27:bc:45:c1:ef:a0:32:e4:
                    d9:b4:bb:8e:90:08:43:1d:e7:ab:17:20:98:eb:b5:
                    2a:4f:21:b7:c8:71:1b:a1:d1:c6:e5:24:17:cc:00:
                    5e:99:8b:90:07:1f:b7:80:60:44:2a:8e:97:ef:2f:
                    83:a6:f0:98:2c:95:53:2e:2f:0b:51:91:78:43:96:
                    ba:17:3d:cc:5c:0b:4d:54:4a:5b:d0:dd:02:d6:49:
                    57:5a:c9:2a:18:b4:3b:26:c1:16:0b:5c:b6:0e:46:
                    b7:88:0f:08:00:45:15:3a:9e:18:ab:a0:6c:b0:db:
                    d6:7a:24:48:9e:14:52:b4:8c:1b:46:61:5c:ed:92:
                    f9:49:23:9e:70:b7:50:74:e3:98:9b:ff:d2:dd:d3:
                    bd:b2:ce:b8:54:ae:b4:fd:14:79:e6:b3:82:61:83:
                    e7:67:f7:4d:7f:46:00:0e:74:70:6a:b6:4f:6e:b1:
                    ff:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:56:47:CD:58:F4:85:BA:65:73:C3:F2:8A:C6:E5:C3:B2:E0:68:74
            X509v3 Authority Key Identifier:
                keyid:3D:D5:74:18:67:6B:56:AB:9D:E5:6F:AA:80:C2:78:87:9B:D9:45:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3645590/95C1A38A27F811EFA48126167DDC24C2/PdV0GGdrVqud5W-qgMJ4h5vZRc4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/PdV0GGdrVqud5W-qgMJ4h5vZRc4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3645590/95C1A38A27F811EFA48126167DDC24C2/PdV0GGdrVqud5W-qgMJ4h5vZRc4.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:f3:07:1c:72:fa:a9:ab:24:77:34:48:6e:d1:1a:bc:c1:ba:
         1f:21:8e:f9:b1:e9:1b:91:99:65:c4:3e:53:3c:df:c1:2a:1f:
         76:38:5d:86:70:a0:f7:e4:62:4a:4d:04:14:ac:fc:1c:ac:e9:
         97:f8:56:56:10:a8:48:aa:cd:31:3b:d1:af:27:28:99:83:6c:
         a4:70:7f:60:23:45:b3:83:72:38:67:20:4d:fa:ee:f4:3e:c8:
         63:8f:96:a8:98:65:d7:5c:48:0e:8d:43:f9:8a:ea:b1:49:87:
         95:f4:9c:22:f4:de:1d:fa:08:b2:c3:40:62:ff:01:59:09:d6:
         2e:6d:54:7a:94:8c:1b:87:2f:03:4a:51:dd:ec:11:d6:b1:65:
         fb:64:13:36:6e:fe:78:29:09:df:df:d2:2a:24:f2:d5:93:00:
         fe:b2:73:20:ce:59:24:56:0c:b2:c3:14:6c:b0:50:b1:4b:a7:
         aa:ef:b8:da:c5:d5:a5:39:99:14:a2:45:a7:1f:3b:9e:63:8f:
         7b:65:1a:c5:f9:a0:fd:8e:92:1e:96:16:88:f0:17:90:98:14:
         ee:fd:15:88:1b:93:c1:af:e0:33:f3:1b:ee:bd:66:94:de:9b:
         09:91:dd:2e:f1:a1:a7:f4:c1:ed:ec:de:b7:bf:43:86:fb:b5:
         85:ee:e2:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 5 02:28:28 2025 by rpki-client