This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3656387/C78EEF9090CD11EC8B7B29A05A40D577/0cZXgBrfziVpTfuxqVxs2kR-O7o.mft
File:                     0cZXgBrfziVpTfuxqVxs2kR-O7o.mft (raw, json)
Hash identifier:          GUuuU3TtEQXvW2BSrUYH95SQbMdAvlhsxyWyl46F2Uk=
Subject key identifier:   41:90:04:C4:B2:70:11:76:AC:CD:31:37:E2:84:8D:CA:AE:C3:C9:89
Authority key identifier: D1:C6:57:80:1A:DF:CE:25:69:4D:FB:B1:A9:5C:6C:DA:44:7E:3B:BA
Certificate issuer:       /CN=F3656387AF/serialNumber=D1C657801ADFCE25694DFBB1A95C6CDA447E3BBA
Certificate serial:       059A
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/0cZXgBrfziVpTfuxqVxs2kR-O7o.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3656387/C78EEF9090CD11EC8B7B29A05A40D577/0cZXgBrfziVpTfuxqVxs2kR-O7o.mft
Manifest number:          0598
Signing time:             Tue 09 Dec 2025 02:38:03 +0000
Manifest this update:     Tue 09 Dec 2025 02:38:03 +0000
Manifest next update:     Thu 11 Dec 2025 02:38:03 +0000
Files and hashes:         1: 0cZXgBrfziVpTfuxqVxs2kR-O7o.crl (hash: AzJOW4CWca7ery0+qExrBFv2sSxLe8LOobPZd6WS5N4=)
                          2: 5929BAD6881811EF9F8726B0762E951A.roa (hash: gqseLBT3raRF8qI8a39+TId/5s+ZYprcLYdDUSRWjC4=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3656387/C78EEF9090CD11EC8B7B29A05A40D577/0cZXgBrfziVpTfuxqVxs2kR-O7o.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3656387/C78EEF9090CD11EC8B7B29A05A40D577/0cZXgBrfziVpTfuxqVxs2kR-O7o.mft
                          rsync://rpki.afrinic.net/repository/afrinic/0cZXgBrfziVpTfuxqVxs2kR-O7o.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 11 Dec 2025 02:38:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1434 (0x59a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3656387AF, serialNumber=D1C657801ADFCE25694DFBB1A95C6CDA447E3BBA
        Validity
            Not Before: Dec  9 02:38:03 2025 GMT
            Not After : Dec 11 02:38:03 2025 GMT
        Subject: CN=69378b8b-7aea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:69:89:17:a1:7c:be:21:6f:f8:35:cd:d9:d3:
                    b7:97:e2:14:c5:df:92:93:6f:cf:f8:bc:78:60:5c:
                    d9:c9:e3:45:21:c6:e9:f7:e7:04:1b:61:27:81:e7:
                    73:d1:7f:6d:9c:10:68:34:df:fe:4d:d9:ee:32:a6:
                    80:4d:2f:e5:eb:f1:de:43:90:d9:18:09:af:b5:8c:
                    83:ba:fa:03:90:2b:aa:53:26:b0:18:15:89:2c:09:
                    0e:32:3c:52:06:99:71:61:04:2d:e6:77:47:d5:fe:
                    2d:b8:fd:b4:8e:d8:95:e7:cb:f7:64:03:cd:0e:f3:
                    0d:e6:cf:ee:a3:e7:d2:a7:b6:a9:6e:f4:58:d1:03:
                    5b:07:65:21:bc:6f:09:ae:30:43:6a:f2:7c:b0:79:
                    f9:f1:06:03:6c:40:76:c2:45:fd:da:d4:2c:73:60:
                    36:b6:9b:14:c0:49:f0:71:1e:ed:0c:e4:fe:e1:6e:
                    9c:04:28:c4:c4:7e:c3:ed:a4:20:3c:4b:4d:2e:b5:
                    15:0a:95:b1:03:b4:79:8a:46:77:38:99:85:30:1b:
                    e8:82:83:97:57:ad:51:ec:9e:41:df:e5:77:a9:48:
                    fb:68:b0:c3:f0:38:00:ae:54:2b:55:52:8d:96:b2:
                    7c:e8:a9:91:17:a0:fd:31:95:38:5f:c7:41:70:8d:
                    3b:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:90:04:C4:B2:70:11:76:AC:CD:31:37:E2:84:8D:CA:AE:C3:C9:89
            X509v3 Authority Key Identifier:
                keyid:D1:C6:57:80:1A:DF:CE:25:69:4D:FB:B1:A9:5C:6C:DA:44:7E:3B:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3656387/C78EEF9090CD11EC8B7B29A05A40D577/0cZXgBrfziVpTfuxqVxs2kR-O7o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/0cZXgBrfziVpTfuxqVxs2kR-O7o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3656387/C78EEF9090CD11EC8B7B29A05A40D577/0cZXgBrfziVpTfuxqVxs2kR-O7o.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:3f:fa:d7:9f:d9:55:66:93:c4:fa:c8:14:2e:04:52:48:99:
         5d:e9:71:82:40:d9:9f:3c:94:8b:53:92:f3:73:68:94:7c:f4:
         99:cb:33:46:38:04:2f:d1:9e:15:1c:0f:dc:08:1d:5e:fa:96:
         61:9c:46:26:25:86:61:b9:ed:26:88:e2:00:be:b3:53:13:3b:
         35:e7:24:64:77:96:b1:c3:bd:61:67:c6:9e:7a:5c:d8:61:84:
         bd:fc:cb:dd:4d:da:95:ff:5e:da:8d:10:e1:0e:ca:4d:fb:f1:
         4e:b9:92:00:11:29:fc:c0:22:e6:4a:dd:b6:bb:bf:5f:4f:d5:
         97:85:b5:47:2d:99:99:25:5c:2e:a4:d9:70:c9:30:58:e8:d7:
         52:95:99:a3:26:43:37:47:ec:8b:07:85:a9:e8:b0:74:40:7f:
         0c:f0:d1:69:59:f8:64:97:b6:2d:f1:d0:7e:44:4d:34:7f:85:
         af:3f:3a:b7:de:e3:7f:da:91:ac:7c:92:0a:bc:8c:ea:f4:a3:
         28:fa:a2:08:a0:e7:88:ce:09:ef:5e:45:27:66:d9:a0:25:b8:
         a2:a8:d7:f7:7d:9d:47:f8:df:0d:29:b5:fb:ef:2b:b3:6d:46:
         78:75:77:16:27:7d:5a:6d:b2:1a:32:62:e6:26:e5:f4:5f:d9:
         66:ea:87:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 9 12:18:03 2025 by rpki-client