This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3652C3A/D607CF289A8111EE8A7BF12BD25BE465/Pw7qWRltFKMq812hcQ8VDV-d3dg.mft
File:                     Pw7qWRltFKMq812hcQ8VDV-d3dg.mft (raw, json)
Hash identifier:          G+9rPkfmRO8NUfjf1r9b6EAN4+DBNlGt4qiGRre+ifs=
Subject key identifier:   71:B7:D8:A8:2D:30:6C:A7:F2:C3:75:BA:72:9F:6F:A8:9C:FA:89:6A
Authority key identifier: 3F:0E:EA:59:19:6D:14:A3:2A:F3:5D:A1:71:0F:15:0D:5F:9D:DD:D8
Certificate issuer:       /CN=F3652C3AAF/serialNumber=3F0EEA59196D14A32AF35DA1710F150D5F9DDDD8
Certificate serial:       02FF
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/Pw7qWRltFKMq812hcQ8VDV-d3dg.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3652C3A/D607CF289A8111EE8A7BF12BD25BE465/Pw7qWRltFKMq812hcQ8VDV-d3dg.mft
Manifest number:          02FB
Signing time:             Sat 20 Dec 2025 03:56:38 +0000
Manifest this update:     Sat 20 Dec 2025 03:56:38 +0000
Manifest next update:     Mon 22 Dec 2025 03:56:38 +0000
Files and hashes:         1: Pw7qWRltFKMq812hcQ8VDV-d3dg.crl (hash: tKYyFv6zoi4Kxch+fLtBaoC5OqQ3DBRy6V+tC+Hggq4=)
                          2: D15451B8AEF411EE804D56A3775412E6.roa (hash: YBWjlP8F+YdvA9ozU69TQggPOcEWkXW+zdvhhb0CYsA=)
                          3: 9DB45F1AAEF411EEBD21E1A2775412E6.roa (hash: zk4qjNpUR6ox7pi92CW344nHF3kKf96YYdu89XzhQ3o=)
                          4: B918F940B04E11EEBBD2E697775412E6.roa (hash: ZrUlsRanFtsZhQlEVluoYbwWKfggdoIE9yZOZzdy4S4=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3652C3A/D607CF289A8111EE8A7BF12BD25BE465/Pw7qWRltFKMq812hcQ8VDV-d3dg.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3652C3A/D607CF289A8111EE8A7BF12BD25BE465/Pw7qWRltFKMq812hcQ8VDV-d3dg.mft
                          rsync://rpki.afrinic.net/repository/afrinic/Pw7qWRltFKMq812hcQ8VDV-d3dg.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 22 Dec 2025 00:06:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 767 (0x2ff)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3652C3AAF, serialNumber=3F0EEA59196D14A32AF35DA1710F150D5F9DDDD8
        Validity
            Not Before: Dec 20 03:56:38 2025 GMT
            Not After : Dec 22 03:56:38 2025 GMT
        Subject: CN=69461e76-cabf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:4b:02:56:87:53:4d:75:72:53:a2:b9:60:42:
                    8b:54:0e:e2:13:4a:e4:16:94:ab:50:50:19:47:86:
                    b1:33:7e:91:16:44:00:0f:35:de:51:1d:52:bf:14:
                    5c:c8:11:2e:38:75:d1:e2:e6:ad:25:3b:f7:b0:e5:
                    9d:1f:1b:e7:af:83:b8:a4:01:73:19:17:ca:10:2b:
                    75:2e:df:44:72:09:19:2d:78:9f:e3:27:1c:e5:0a:
                    97:bb:ea:18:44:2c:af:eb:40:2e:24:3f:fe:9e:7e:
                    ff:46:99:43:b0:48:c2:f4:f8:36:b1:57:4e:33:26:
                    e0:6e:80:a7:a1:e5:3f:dc:0d:8d:3f:60:20:b7:b2:
                    09:d6:ab:e6:d7:26:a8:01:c6:63:9f:32:4e:eb:75:
                    3f:1e:a2:70:40:63:9f:2f:8a:a2:54:70:e4:a1:b6:
                    61:94:e0:99:af:81:ca:f3:14:be:74:3d:68:37:4e:
                    ab:b6:2e:fe:24:c2:20:c4:0d:f8:18:91:a6:a4:f4:
                    7f:6d:7d:79:c8:66:a0:8b:96:e9:79:54:0e:99:c7:
                    ba:15:ec:b4:23:7b:ec:19:b3:d4:02:1a:74:27:9a:
                    24:ae:c7:10:28:e9:6c:1f:2b:02:60:60:58:34:f2:
                    20:5f:b8:e8:b8:58:0b:99:f4:54:93:3c:60:7e:3e:
                    11:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:B7:D8:A8:2D:30:6C:A7:F2:C3:75:BA:72:9F:6F:A8:9C:FA:89:6A
            X509v3 Authority Key Identifier:
                keyid:3F:0E:EA:59:19:6D:14:A3:2A:F3:5D:A1:71:0F:15:0D:5F:9D:DD:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3652C3A/D607CF289A8111EE8A7BF12BD25BE465/Pw7qWRltFKMq812hcQ8VDV-d3dg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Pw7qWRltFKMq812hcQ8VDV-d3dg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3652C3A/D607CF289A8111EE8A7BF12BD25BE465/Pw7qWRltFKMq812hcQ8VDV-d3dg.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:e9:f6:48:cd:16:38:8a:e8:de:90:c5:ab:56:c2:b3:aa:8d:
         ff:d6:3d:17:3d:3d:37:fa:3d:dc:d0:7a:a4:1e:ac:c4:76:de:
         b0:04:14:c3:b3:41:ce:ec:fb:25:88:0c:84:6e:15:e8:84:e2:
         6e:e0:c7:6c:b9:9b:96:bc:92:4d:f7:de:ee:18:b5:0b:40:4a:
         5c:65:31:0b:14:3e:63:10:69:0c:44:9d:01:d8:70:83:5e:9f:
         fc:9f:5a:96:38:86:af:bd:df:06:33:cc:7f:23:2e:9b:ff:ee:
         80:63:27:47:56:f9:31:89:b9:a3:e7:88:34:56:61:e4:91:a4:
         60:c1:c2:dc:b2:a5:57:3c:83:12:9b:ab:9e:71:4e:ba:38:97:
         85:83:d0:11:59:38:3c:98:3d:cc:c5:3e:00:0c:8f:8e:57:ac:
         08:81:14:b7:a0:2c:67:6a:ef:e4:66:2e:f0:00:8c:73:0a:94:
         49:9b:9d:50:82:23:cf:22:13:09:3e:bb:79:97:78:3f:5e:e4:
         08:c1:09:22:75:03:78:07:4f:a4:18:66:e7:7d:a8:94:e4:90:
         a2:98:35:73:91:63:21:c8:e4:68:b8:85:9d:aa:74:7f:5e:a7:
         33:af:e5:74:38:fd:91:01:f6:df:7c:25:d5:22:7b:57:c6:50:
         21:9d:b5:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 18:26:08 2025 by rpki-client