This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3654E24/A318A10892FB11ECA71411895A40D577/2pwGSilziJ8Q063Z_fEqiDYTZL8.mft
File:                     2pwGSilziJ8Q063Z_fEqiDYTZL8.mft (raw, json)
Hash identifier:          w+bz46caz35wstegMVVmIWJ/NrQub9cm+x+AWmwcbPg=
Subject key identifier:   F5:1B:FF:33:A3:ED:60:13:E4:CB:11:FD:BD:56:8B:BE:E1:06:78:31
Authority key identifier: DA:9C:06:4A:29:73:88:9F:10:D3:AD:D9:FD:F1:2A:88:36:13:64:BF
Certificate issuer:       /CN=F3654E24AF/serialNumber=DA9C064A2973889F10D3ADD9FDF12A88361364BF
Certificate serial:       05A1
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/2pwGSilziJ8Q063Z_fEqiDYTZL8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3654E24/A318A10892FB11ECA71411895A40D577/2pwGSilziJ8Q063Z_fEqiDYTZL8.mft
Manifest number:          05A0
Signing time:             Tue 23 Dec 2025 02:38:13 +0000
Manifest this update:     Tue 23 Dec 2025 02:38:12 +0000
Manifest next update:     Thu 25 Dec 2025 02:38:12 +0000
Files and hashes:         1: 2pwGSilziJ8Q063Z_fEqiDYTZL8.crl (hash: W198NpfZcJy2mcTUgpohq7Hl90F6x5zn8R3mHKVWVOo=)
                          2: 58BE8A3A92FD11EC9A66148E5A40D577.roa (hash: p/Nwn6WbMbiqBh52brLCSrPTezSi2w7+mCvrJxVr0pE=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3654E24/A318A10892FB11ECA71411895A40D577/2pwGSilziJ8Q063Z_fEqiDYTZL8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3654E24/A318A10892FB11ECA71411895A40D577/2pwGSilziJ8Q063Z_fEqiDYTZL8.mft
                          rsync://rpki.afrinic.net/repository/afrinic/2pwGSilziJ8Q063Z_fEqiDYTZL8.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 25 Dec 2025 02:38:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1441 (0x5a1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3654E24AF, serialNumber=DA9C064A2973889F10D3ADD9FDF12A88361364BF
        Validity
            Not Before: Dec 23 02:38:12 2025 GMT
            Not After : Dec 25 02:38:12 2025 GMT
        Subject: CN=694a0095-431f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:2a:f1:2f:d1:bc:fa:de:64:6e:b8:c5:84:77:
                    91:c6:f4:26:f5:5e:7a:5b:7a:1c:b5:0d:8b:53:c7:
                    51:26:7e:58:6c:9d:26:8f:15:d4:66:72:1e:78:87:
                    00:12:43:ba:f8:37:7d:ac:39:fa:f0:33:7d:86:23:
                    59:25:a4:fe:60:98:bc:7f:b6:c6:8d:d2:d5:81:9f:
                    47:19:bb:e8:71:0e:4b:02:39:cd:b6:49:fc:64:5e:
                    50:d0:24:f9:20:c4:34:d2:f5:88:ce:15:66:a0:03:
                    1b:61:76:b0:fd:77:ad:a3:c9:d2:fe:e4:b2:13:45:
                    d1:2a:21:84:ee:00:04:ae:8e:81:17:29:e2:82:7c:
                    a6:2d:ec:ec:23:f8:10:33:cb:2a:b7:0d:b8:bf:a5:
                    2a:93:39:5a:35:8f:8d:bb:85:f3:61:2d:92:a8:95:
                    1e:57:80:80:f1:63:bf:71:ef:c3:e2:db:60:b7:7e:
                    b1:5f:d9:9d:19:3b:8d:de:f3:1c:45:be:e4:5d:7f:
                    76:cd:7d:d2:95:5c:bf:18:11:f9:bd:6e:8e:2e:1e:
                    04:9f:59:f1:80:bb:d8:ae:f7:38:05:35:66:35:31:
                    9b:83:20:1e:3c:62:c4:66:de:61:f2:4b:95:0d:b2:
                    2f:98:07:c4:23:2a:5e:bf:b2:fd:ee:43:2a:0c:f1:
                    5c:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:1B:FF:33:A3:ED:60:13:E4:CB:11:FD:BD:56:8B:BE:E1:06:78:31
            X509v3 Authority Key Identifier:
                keyid:DA:9C:06:4A:29:73:88:9F:10:D3:AD:D9:FD:F1:2A:88:36:13:64:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3654E24/A318A10892FB11ECA71411895A40D577/2pwGSilziJ8Q063Z_fEqiDYTZL8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/2pwGSilziJ8Q063Z_fEqiDYTZL8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3654E24/A318A10892FB11ECA71411895A40D577/2pwGSilziJ8Q063Z_fEqiDYTZL8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:ae:35:03:35:c1:79:f8:25:9a:2f:14:b3:70:a0:5e:72:86:
         ca:08:68:97:13:bc:bb:44:6d:ec:67:9b:37:94:2e:c9:82:71:
         46:32:94:4f:1e:99:6d:55:bd:90:33:af:fe:02:a1:5e:ed:84:
         b5:a6:a7:0d:2a:29:83:63:67:03:1e:8b:e7:88:5f:d4:42:91:
         27:89:18:2b:0d:9e:c4:81:45:52:0c:99:f2:20:52:da:28:3e:
         f7:a8:9f:f7:57:01:1b:2d:eb:fe:6a:b2:eb:43:d8:12:c1:9f:
         d4:61:c5:be:65:d5:70:e6:fc:dc:64:8b:f8:dc:1c:21:f1:5d:
         0a:f3:6d:ce:fc:00:1c:f7:ac:24:7f:8b:40:58:1d:ee:f9:e3:
         ef:e2:b6:e6:9c:73:73:11:a2:de:62:79:c6:d8:11:6d:b0:92:
         ff:90:c2:f1:e8:88:43:af:98:02:2c:73:89:3b:8e:4b:0c:e1:
         be:95:bc:ab:5d:61:7c:85:d9:76:a5:57:5e:ba:09:07:60:1a:
         4d:0a:a5:73:8f:d6:d9:8e:7e:28:26:94:ab:4f:28:61:dc:4b:
         c4:50:6e:8d:84:41:fd:11:ec:a4:6a:9f:63:cd:53:59:9c:c6:
         cf:3f:cd:07:78:dc:56:34:a7:0f:cd:ba:fc:f6:cf:0d:e7:ae:
         03:cd:96:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 18:06:48 2025 by rpki-client