This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3650F65/F43C863A498311EFA2F45FB4762E951A/wMDnGZy4QKJJjB47pWdvngwGKGg.mft
File:                     wMDnGZy4QKJJjB47pWdvngwGKGg.mft (raw, json)
Hash identifier:          OeDlJdRXkYlKuwH5eQw7eDrCpgw9imQ2bfS3lAX7AjE=
Subject key identifier:   D1:D4:1B:D9:11:48:F4:61:A2:64:FE:8D:FA:96:7A:6F:73:CA:AC:4D
Authority key identifier: C0:C0:E7:19:9C:B8:40:A2:49:8C:1E:3B:A5:67:6F:9E:0C:06:28:68
Certificate issuer:       /CN=F3650F65AF/serialNumber=C0C0E7199CB840A2498C1E3BA5676F9E0C062868
Certificate serial:       0215
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/wMDnGZy4QKJJjB47pWdvngwGKGg.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3650F65/F43C863A498311EFA2F45FB4762E951A/wMDnGZy4QKJJjB47pWdvngwGKGg.mft
Manifest number:          0210
Signing time:             Tue 09 Dec 2025 04:24:42 +0000
Manifest this update:     Tue 09 Dec 2025 04:24:41 +0000
Manifest next update:     Thu 11 Dec 2025 04:24:41 +0000
Files and hashes:         1: wMDnGZy4QKJJjB47pWdvngwGKGg.crl (hash: cUdJe3uXiUPVBBzdTw5qGSPEUZCrz/S/jFGNtJer3uI=)
                          2: 9005CECEAE5411F0853AF8CFDAE4EC9C.roa (hash: YWZz4QWlH0Bj3OOamSSjFcO7qun04dQhqkzbk6gKKqQ=)
                          3: D2876104AE5411F0AC152FD4DAE4EC9C.roa (hash: kpP94D+u8/tcFFiU+q6BH1AoYrF/Io2l+lqQI9CxNX4=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3650F65/F43C863A498311EFA2F45FB4762E951A/wMDnGZy4QKJJjB47pWdvngwGKGg.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3650F65/F43C863A498311EFA2F45FB4762E951A/wMDnGZy4QKJJjB47pWdvngwGKGg.mft
                          rsync://rpki.afrinic.net/repository/afrinic/wMDnGZy4QKJJjB47pWdvngwGKGg.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 11 Dec 2025 04:24:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 533 (0x215)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3650F65AF, serialNumber=C0C0E7199CB840A2498C1E3BA5676F9E0C062868
        Validity
            Not Before: Dec  9 04:24:41 2025 GMT
            Not After : Dec 11 04:24:41 2025 GMT
        Subject: CN=6937a48a-899e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:11:a9:71:a9:a2:69:b7:cb:e2:92:0c:5f:02:
                    ed:59:82:2f:e0:28:f2:fe:7c:fa:a4:bb:b8:31:12:
                    53:19:34:6a:74:42:55:23:1f:20:43:9a:c3:cf:d9:
                    db:ce:ff:7f:8d:6a:a3:42:c8:6d:43:60:dd:09:4a:
                    0a:30:4b:ba:09:63:dc:c3:ae:a1:dc:ff:3c:12:8c:
                    d4:54:90:61:76:fa:85:7b:75:c7:f4:20:f6:fc:e6:
                    e8:f9:54:5e:99:83:79:5a:7e:58:1f:76:02:c5:a3:
                    9a:51:fc:c4:b5:2a:0c:c9:28:39:97:86:6e:4a:d5:
                    61:b3:09:f1:f5:ab:ed:60:0f:0f:0f:0d:b4:34:38:
                    e0:eb:bc:25:0a:f9:47:5c:19:11:ec:8e:0d:b5:71:
                    36:c1:6d:be:a1:8d:a9:02:a9:87:2c:a5:3a:c0:3e:
                    61:80:08:03:63:ab:ef:3c:22:85:08:b2:af:7e:bb:
                    f1:78:bb:82:18:41:a7:0e:e2:36:d3:14:29:dc:2a:
                    e1:9b:f2:6d:0e:21:da:d2:f0:4a:35:03:72:b7:b3:
                    b6:b5:9c:64:68:9d:d5:41:43:dd:24:eb:df:2a:71:
                    8e:1e:8b:c3:c3:59:e6:b2:36:b0:af:67:b4:a7:a7:
                    3b:ee:af:91:77:7d:a0:25:19:7d:aa:29:5a:fd:0f:
                    af:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:D4:1B:D9:11:48:F4:61:A2:64:FE:8D:FA:96:7A:6F:73:CA:AC:4D
            X509v3 Authority Key Identifier:
                keyid:C0:C0:E7:19:9C:B8:40:A2:49:8C:1E:3B:A5:67:6F:9E:0C:06:28:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3650F65/F43C863A498311EFA2F45FB4762E951A/wMDnGZy4QKJJjB47pWdvngwGKGg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/wMDnGZy4QKJJjB47pWdvngwGKGg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3650F65/F43C863A498311EFA2F45FB4762E951A/wMDnGZy4QKJJjB47pWdvngwGKGg.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:be:35:d5:62:ff:76:a2:5b:d5:b4:20:d6:6d:d4:0b:0d:75:
         a5:62:32:54:a5:95:91:ac:91:55:f9:a1:7b:fa:61:61:7f:cc:
         3d:3e:ac:f2:e5:fd:6f:a9:1e:b4:35:cf:17:85:1c:b4:85:65:
         d1:1c:4d:76:93:ca:84:da:96:34:27:eb:84:b5:7d:4e:d7:e6:
         7f:aa:b0:0e:08:b1:98:e5:c3:54:87:91:ef:23:58:70:6d:bf:
         45:e1:d6:f9:fc:7c:37:0d:e6:27:45:12:40:6d:76:87:84:e4:
         be:8f:ef:94:1d:eb:14:e9:7f:dc:16:af:6a:9a:af:6c:9d:69:
         26:f2:a5:a2:70:3d:73:c5:1c:e9:cf:61:45:8a:f1:fd:cc:43:
         5d:25:06:30:46:63:a6:29:d9:b4:33:70:65:c1:f1:d7:4c:e8:
         53:c0:da:4c:b7:24:02:d1:a8:46:04:1b:76:f3:b0:b6:a5:de:
         de:b3:a1:c1:d0:b6:6c:0e:79:55:f5:93:ba:7a:3e:2d:7c:dd:
         9e:67:ef:db:7d:9a:6a:8d:0f:0d:08:6d:76:cf:b4:b5:cc:e8:
         2c:08:a0:a0:a8:4f:47:90:d0:d4:96:23:cf:7d:cb:0a:94:a1:
         52:d0:ca:46:55:79:64:3f:c2:ba:1d:3f:a0:ba:76:26:08:31:
         b7:19:67:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 9 12:31:38 2025 by rpki-client