This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3658A3F/74DD844C741D11EFA2D01673762E951A/vc-uJWmnA46pcPrPQDA0GPY1H0g.mft
File:                     vc-uJWmnA46pcPrPQDA0GPY1H0g.mft (raw, json)
Hash identifier:          BgIZSWFCXdPst62BAT9YtOiyv1ZosiBwgefcNAafOXw=
Subject key identifier:   6B:1C:B5:EB:20:78:D3:EB:70:60:A2:69:2E:C3:0B:D2:A0:0A:5B:30
Authority key identifier: BD:CF:AE:25:69:A7:03:8E:A9:70:FA:CF:40:30:34:18:F6:35:1F:48
Certificate issuer:       /CN=F3658A3FAF/serialNumber=BDCFAE2569A7038EA970FACF40303418F6351F48
Certificate serial:       01D1
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/vc-uJWmnA46pcPrPQDA0GPY1H0g.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3658A3F/74DD844C741D11EFA2D01673762E951A/vc-uJWmnA46pcPrPQDA0GPY1H0g.mft
Manifest number:          01CE
Signing time:             Sun 07 Dec 2025 04:31:16 +0000
Manifest this update:     Sun 07 Dec 2025 04:31:16 +0000
Manifest next update:     Tue 09 Dec 2025 04:31:16 +0000
Files and hashes:         1: vc-uJWmnA46pcPrPQDA0GPY1H0g.crl (hash: z3oJIAnW4PAy2baPRlJqu45fR73j+TYM/efMx53Rm4U=)
                          2: 2FD55E82741E11EFAC1F5677762E951A.roa (hash: yK+GF+mnFJmB3GPr0etfsyb2RoWyRhvCEdCQ6Xl4fOM=)
                          3: B1580E28775211EF8422209B762E951A.roa (hash: 3jNv2hrO32PB5K8c+t8vu6E3ApIkflNjeVX5pzc7APs=)
                          4: FF8E457C741D11EF8D538675762E951A.roa (hash: 6X3NUQA2g5a3P3oPEfsVXoEnHkdqMcSAGwMmrV+SpqU=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3658A3F/74DD844C741D11EFA2D01673762E951A/vc-uJWmnA46pcPrPQDA0GPY1H0g.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3658A3F/74DD844C741D11EFA2D01673762E951A/vc-uJWmnA46pcPrPQDA0GPY1H0g.mft
                          rsync://rpki.afrinic.net/repository/afrinic/vc-uJWmnA46pcPrPQDA0GPY1H0g.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 09 Dec 2025 04:31:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 465 (0x1d1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3658A3FAF, serialNumber=BDCFAE2569A7038EA970FACF40303418F6351F48
        Validity
            Not Before: Dec  7 04:31:16 2025 GMT
            Not After : Dec  9 04:31:16 2025 GMT
        Subject: CN=69350314-2fb1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:99:fa:10:fc:97:52:23:e8:c7:c9:ee:6a:1b:
                    3b:d6:dd:73:8b:38:05:43:f4:6f:3a:dc:d2:e3:95:
                    b5:21:62:8e:20:18:09:64:7a:21:43:ee:68:5b:af:
                    b6:d2:a7:e4:35:29:7a:01:08:81:a2:ce:88:e1:86:
                    48:45:b8:16:ee:82:c1:e2:d4:22:3f:ae:c2:b6:6c:
                    0e:fe:23:73:12:fe:0b:26:cc:c2:ed:20:bf:f7:47:
                    da:54:ca:ee:b8:e0:2a:e8:f0:31:f5:7f:e9:e6:e0:
                    29:8f:2a:9f:f6:51:19:f5:0a:ee:e3:dc:3b:fc:0e:
                    6c:3d:84:dd:6a:7c:87:3d:bb:24:81:a4:84:99:d6:
                    c9:b1:71:b9:be:a7:72:a4:86:25:75:5c:6a:82:4f:
                    a5:c5:9d:2b:2d:5a:80:28:09:f0:0d:fb:63:99:8b:
                    76:70:17:45:0e:ae:fd:53:fe:42:9d:8c:b7:33:95:
                    12:57:fa:62:39:7a:9c:bd:4d:c9:ce:94:14:89:f5:
                    4d:00:41:d0:ec:e8:af:84:91:95:0a:68:78:42:15:
                    4f:17:2f:49:f5:bf:94:33:21:e0:c1:8e:68:07:68:
                    11:a3:83:a9:20:da:f9:a7:51:4e:31:f4:f1:a2:3e:
                    5d:5c:99:94:18:21:54:ea:b9:38:73:16:12:90:38:
                    49:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:1C:B5:EB:20:78:D3:EB:70:60:A2:69:2E:C3:0B:D2:A0:0A:5B:30
            X509v3 Authority Key Identifier:
                keyid:BD:CF:AE:25:69:A7:03:8E:A9:70:FA:CF:40:30:34:18:F6:35:1F:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3658A3F/74DD844C741D11EFA2D01673762E951A/vc-uJWmnA46pcPrPQDA0GPY1H0g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/vc-uJWmnA46pcPrPQDA0GPY1H0g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3658A3F/74DD844C741D11EFA2D01673762E951A/vc-uJWmnA46pcPrPQDA0GPY1H0g.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:33:b6:b5:8c:da:1e:b5:d8:20:c3:83:49:41:2c:a7:10:ac:
         f6:66:f2:c6:3a:1e:2f:4f:b9:ce:17:65:41:9f:ec:c3:28:2d:
         05:f1:57:bd:08:f1:48:a6:04:79:d2:75:af:e2:37:f4:34:fa:
         0c:3a:cb:c3:d2:f0:85:a7:31:b8:28:1d:a6:31:26:7c:49:ba:
         f5:1b:d9:eb:57:73:1e:31:7d:40:73:5f:e6:db:7a:ca:ee:68:
         72:4c:87:43:25:c3:a1:f1:d7:05:43:db:9c:e6:6c:f8:32:6c:
         76:7a:22:24:28:13:4e:f1:67:f0:18:a3:65:e9:70:5e:42:b1:
         33:b2:1d:20:bc:50:ed:0a:be:06:d2:ad:24:dc:ab:d6:1a:36:
         b2:eb:e5:d6:d0:7f:96:1c:a1:63:ba:d9:43:c3:5e:3b:ef:7e:
         ac:fb:cb:67:ac:b5:c7:0b:47:d7:30:62:b6:71:51:0f:35:2c:
         3d:15:31:72:f9:56:27:9a:9e:e5:4b:09:fa:6b:14:ac:0c:21:
         70:91:a7:4c:c8:79:18:db:c2:b9:72:4f:0c:d9:09:e6:c6:9b:
         7e:8b:a7:3c:82:13:8f:19:81:6d:14:d5:1e:d0:6e:16:dc:c3:
         31:d1:56:17:ab:e6:89:7f:41:3b:bc:05:2e:07:71:02:ce:e8:
         a8:48:f1:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 8 05:03:16 2025 by rpki-client