This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F365C79E/1FC34BE6BEDA11EB8F5CE243F8AEA228/3XSZqMjBKrZ-FetJKAimku1LWfQ.mft
File:                     3XSZqMjBKrZ-FetJKAimku1LWfQ.mft (raw, json)
Hash identifier:          Tj/QIqN+EYFFSBWSfGUlEHgoXXvvuBx3JIRNvTJENF0=
Subject key identifier:   97:B4:16:5D:87:73:38:90:7B:79:30:83:05:1C:8F:89:43:CD:7F:35
Authority key identifier: DD:74:99:A8:C8:C1:2A:B6:7E:15:EB:49:28:08:A6:92:ED:4B:59:F4
Certificate issuer:       /CN=F365C79EAF/serialNumber=DD7499A8C8C12AB67E15EB492808A692ED4B59F4
Certificate serial:       06B7
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/3XSZqMjBKrZ-FetJKAimku1LWfQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F365C79E/1FC34BE6BEDA11EB8F5CE243F8AEA228/3XSZqMjBKrZ-FetJKAimku1LWfQ.mft
Manifest number:          06B1
Signing time:             Mon 08 Dec 2025 02:09:59 +0000
Manifest this update:     Mon 08 Dec 2025 02:09:58 +0000
Manifest next update:     Wed 10 Dec 2025 02:09:58 +0000
Files and hashes:         1: 3XSZqMjBKrZ-FetJKAimku1LWfQ.crl (hash: b4N6JoogiSeLvKodObirRzf4tt3tdS1FWPhxcKfzVQI=)
                          2: 1D79094AD6B211EFB2D3FF42762E951A.roa (hash: DubCazr+DZeeKepCVu6sjSupYBoZCqIo6H/IBZvf+PU=)
                          3: FB1FEEF4D6B111EF8099CF40762E951A.roa (hash: +7phxm5TzkZRyeFGhR37ALd4AEcaf9TKaQBnWBb/gF0=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F365C79E/1FC34BE6BEDA11EB8F5CE243F8AEA228/3XSZqMjBKrZ-FetJKAimku1LWfQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F365C79E/1FC34BE6BEDA11EB8F5CE243F8AEA228/3XSZqMjBKrZ-FetJKAimku1LWfQ.mft
                          rsync://rpki.afrinic.net/repository/afrinic/3XSZqMjBKrZ-FetJKAimku1LWfQ.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 10 Dec 2025 00:06:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1719 (0x6b7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F365C79EAF, serialNumber=DD7499A8C8C12AB67E15EB492808A692ED4B59F4
        Validity
            Not Before: Dec  8 02:09:58 2025 GMT
            Not After : Dec 10 02:09:58 2025 GMT
        Subject: CN=69363377-2ffc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:4b:24:9e:31:c7:b7:cc:d6:de:79:e4:85:05:
                    55:21:8b:00:96:97:26:18:42:cb:b6:6b:ee:79:52:
                    af:46:9f:10:d3:33:0a:bd:3c:37:35:fa:e9:fe:45:
                    41:c4:f3:53:31:70:87:25:65:c1:04:e5:b7:45:3a:
                    67:48:b1:c7:10:81:e3:59:87:bf:a4:40:06:16:a0:
                    c6:71:d4:32:12:80:4a:e7:50:1b:d9:c0:bf:58:64:
                    f2:8e:12:50:57:63:26:29:13:02:a8:e4:28:31:3f:
                    67:95:f1:cc:c7:28:af:94:12:1e:6b:91:d1:74:92:
                    8b:d1:66:8d:58:ba:df:db:2e:23:8e:a8:45:9e:51:
                    e8:28:8d:4a:41:f9:e9:05:d2:a0:fb:91:8c:0b:36:
                    a9:4a:9e:ed:ec:2c:b7:b0:c4:81:00:2d:38:8c:f5:
                    a3:70:70:d4:da:fb:12:95:f0:9c:66:ba:6d:ab:b0:
                    77:7e:03:9e:19:95:cb:81:8e:82:c5:43:52:ad:7b:
                    b3:13:5d:1d:85:1d:1c:55:67:bf:a3:21:98:82:fe:
                    ba:0e:e2:68:7b:a9:e4:56:51:ba:66:9a:14:5f:8c:
                    c3:52:a8:94:88:33:6b:f8:e3:dc:b4:29:41:f6:2e:
                    4c:5e:a2:15:42:81:7f:02:28:c6:6b:d4:a7:84:2d:
                    a5:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:B4:16:5D:87:73:38:90:7B:79:30:83:05:1C:8F:89:43:CD:7F:35
            X509v3 Authority Key Identifier:
                keyid:DD:74:99:A8:C8:C1:2A:B6:7E:15:EB:49:28:08:A6:92:ED:4B:59:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F365C79E/1FC34BE6BEDA11EB8F5CE243F8AEA228/3XSZqMjBKrZ-FetJKAimku1LWfQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/3XSZqMjBKrZ-FetJKAimku1LWfQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F365C79E/1FC34BE6BEDA11EB8F5CE243F8AEA228/3XSZqMjBKrZ-FetJKAimku1LWfQ.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d5:9e:38:23:92:8a:b6:4d:ec:6a:ca:0d:f7:ca:56:55:0a:65:
         6f:09:16:3e:03:36:41:94:6c:10:05:40:e3:7f:6b:f9:03:92:
         e6:3d:f6:bb:4c:1e:c8:62:a0:f3:69:39:a8:f8:8b:3c:5f:17:
         cf:68:34:31:30:a2:f1:40:f3:20:8b:11:14:9a:a4:40:60:4a:
         08:44:c2:b8:1b:6d:4e:49:66:d4:62:29:a8:4e:29:8f:06:5a:
         82:4a:88:cf:e7:66:13:42:77:5b:11:7c:09:0a:36:2d:89:2e:
         dc:8d:80:45:d3:23:87:0e:84:91:85:b7:99:a8:41:fc:38:9a:
         f7:91:8a:45:18:0e:18:18:cd:f2:32:31:2f:e4:f4:a6:ff:d7:
         79:14:b5:57:40:bd:83:c3:29:bd:99:10:ee:d3:a3:1b:1f:ee:
         e3:7d:38:07:b7:35:86:da:20:d4:bd:5c:76:55:86:e6:9c:38:
         08:55:ee:a6:e9:53:ec:b2:10:30:a6:2f:b5:60:75:5f:cd:86:
         d5:59:d2:b8:b8:8a:15:e6:94:c5:19:f1:e6:73:d4:2f:1f:5f:
         be:30:01:9d:d2:2d:30:58:ca:ce:62:d2:ac:d0:6a:4b:f5:a1:
         eb:32:1b:19:d1:0a:07:86:55:78:ab:98:af:83:29:34:30:c2:
         7a:88:7b:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 8 06:40:11 2025 by rpki-client