This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3662F58/7594EBF2498711EA969C9454F8AEA228/7PbzU5pP4IyibRf5jcsVmgR8v-g.mft
File:                     7PbzU5pP4IyibRf5jcsVmgR8v-g.mft (raw, json)
Hash identifier:          i6n1PPXTYEEla/oJ/cYMCLzDQ1X7R9MSDguKZem+fzc=
Subject key identifier:   87:4D:79:56:51:E7:39:0A:A5:EF:0F:04:06:E2:C5:53:36:04:61:5F
Authority key identifier: EC:F6:F3:53:9A:4F:E0:8C:A2:6D:17:F9:8D:CB:15:9A:04:7C:BF:E8
Certificate issuer:       /CN=F3662F58AF/serialNumber=ECF6F3539A4FE08CA26D17F98DCB159A047CBFE8
Certificate serial:       0893
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/7PbzU5pP4IyibRf5jcsVmgR8v-g.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3662F58/7594EBF2498711EA969C9454F8AEA228/7PbzU5pP4IyibRf5jcsVmgR8v-g.mft
Manifest number:          0891
Signing time:             Tue 09 Dec 2025 01:41:57 +0000
Manifest this update:     Tue 09 Dec 2025 01:41:55 +0000
Manifest next update:     Thu 11 Dec 2025 01:41:55 +0000
Files and hashes:         1: 7PbzU5pP4IyibRf5jcsVmgR8v-g.crl (hash: z4yNkn7YOpXzzE/myJ/2GLfzRSPyT/Qt0bFn48URjnY=)
                          2: 61D9EFE8D21F11EE9A695056775412E6.roa (hash: sHwcRAoEIh3+NnhsNE7+YK15IM8uU90vV0uO3YY5oHk=)
                          3: C6128B02498711EA8512D154F8AEA228.roa (hash: YenFdE2aLh0x++T/JYlwu3uxxzj0ygFVKQ0oMgyFqM0=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3662F58/7594EBF2498711EA969C9454F8AEA228/7PbzU5pP4IyibRf5jcsVmgR8v-g.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3662F58/7594EBF2498711EA969C9454F8AEA228/7PbzU5pP4IyibRf5jcsVmgR8v-g.mft
                          rsync://rpki.afrinic.net/repository/afrinic/7PbzU5pP4IyibRf5jcsVmgR8v-g.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 11 Dec 2025 01:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2195 (0x893)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3662F58AF, serialNumber=ECF6F3539A4FE08CA26D17F98DCB159A047CBFE8
        Validity
            Not Before: Dec  9 01:41:55 2025 GMT
            Not After : Dec 11 01:41:55 2025 GMT
        Subject: CN=69377e64-eb08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:ab:41:8c:ca:4a:3a:2d:dd:d4:4f:87:cf:e2:
                    e8:07:9e:53:ee:b1:c7:b4:ae:ee:1b:6d:53:f3:62:
                    12:72:cd:f5:02:ab:87:09:30:e3:3e:49:49:49:6f:
                    5e:87:04:3d:1b:fb:54:b5:4c:2b:a2:4b:88:12:b5:
                    1f:97:04:7c:07:69:38:66:6b:87:e8:08:68:f9:a8:
                    aa:fa:a3:1c:c4:97:d6:77:af:d2:27:b4:d8:18:e2:
                    79:8b:90:0b:07:83:b1:52:8f:1d:e4:fa:20:a9:a2:
                    c5:5d:a4:85:f5:ef:08:7f:6f:17:54:1d:37:b9:43:
                    37:5f:66:ef:8e:36:5c:2c:6d:50:3a:5f:04:e2:42:
                    ae:23:73:e6:bd:ab:d0:a2:6b:10:26:c7:d5:6b:f1:
                    24:50:73:95:f8:f8:3f:81:4d:44:93:8b:8b:15:25:
                    d5:b9:03:ce:5e:8f:41:d9:7e:70:cd:9a:51:45:69:
                    c1:b6:eb:0c:5e:5c:aa:06:70:65:7d:96:85:4e:2d:
                    83:86:df:50:74:a6:4b:c4:7a:fd:01:83:dc:9b:84:
                    a5:3c:af:e8:63:83:cb:f1:9c:52:ac:07:14:08:8d:
                    56:35:b7:04:53:a9:92:bd:c7:92:c9:27:60:8e:ed:
                    45:03:86:57:81:31:fa:be:51:2a:5e:a6:ae:4e:eb:
                    86:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:4D:79:56:51:E7:39:0A:A5:EF:0F:04:06:E2:C5:53:36:04:61:5F
            X509v3 Authority Key Identifier:
                keyid:EC:F6:F3:53:9A:4F:E0:8C:A2:6D:17:F9:8D:CB:15:9A:04:7C:BF:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3662F58/7594EBF2498711EA969C9454F8AEA228/7PbzU5pP4IyibRf5jcsVmgR8v-g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/7PbzU5pP4IyibRf5jcsVmgR8v-g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3662F58/7594EBF2498711EA969C9454F8AEA228/7PbzU5pP4IyibRf5jcsVmgR8v-g.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d1:0e:a1:39:2a:50:b2:b0:44:db:a6:46:37:84:0f:38:ff:80:
         88:b1:91:29:c6:52:d4:1f:bf:76:f2:ec:cf:5b:6e:71:94:01:
         0f:05:07:77:34:ec:a3:c4:d6:c8:81:b6:7b:c9:2d:7f:50:d8:
         6d:6b:16:7a:a5:49:48:b1:91:a3:4e:f8:6c:63:0b:6b:d5:cd:
         bd:ad:01:93:e5:fe:73:6b:0f:6b:6a:63:e4:79:34:17:29:59:
         b2:02:26:37:35:2f:cb:18:b8:bb:7c:c9:88:6c:dd:27:ec:cc:
         7a:6e:9d:8a:f6:06:6b:49:e1:fa:e0:81:e2:01:b9:52:d4:83:
         e3:2a:16:0a:2e:6a:d9:c7:05:05:8d:1f:9d:ec:6e:14:6b:e0:
         fa:56:f3:bb:bb:de:73:67:77:2f:15:f3:5b:e8:ce:5c:01:55:
         5d:18:69:db:39:71:21:a1:fd:4c:c8:17:1a:f9:15:9f:78:34:
         3e:76:06:6c:b8:a1:43:6b:da:64:77:14:33:82:36:83:58:2b:
         e7:a3:34:4e:67:22:86:72:33:de:49:a2:77:7c:a7:5c:29:a8:
         a7:ac:b8:65:4c:7a:1d:ed:a1:6f:aa:53:6b:6f:87:6b:54:64:
         c3:73:a9:0f:58:1e:a9:aa:b7:ed:42:34:f0:42:bf:ec:3e:92:
         4a:e1:ea:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 9 12:26:31 2025 by rpki-client