This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3665E95/BB835CD0AD5E11EF9618654E762E951A/wZn8M3XABV4cIAIEqXeWkq9n_bE.mft
File:                     wZn8M3XABV4cIAIEqXeWkq9n_bE.mft (raw, json)
Hash identifier:          o//28WrV57UBnaF/bcupZFz6nZA1LNVZhLPmVo0k4Kw=
Subject key identifier:   2D:6B:57:80:FB:C0:E5:61:9A:4F:39:49:87:A8:79:0D:B3:8D:02:21
Authority key identifier: C1:99:FC:33:75:C0:05:5E:1C:20:02:04:A9:77:96:92:AF:67:FD:B1
Certificate issuer:       /CN=F3665E95AF/serialNumber=C199FC3375C0055E1C200204A9779692AF67FDB1
Certificate serial:       0184
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/wZn8M3XABV4cIAIEqXeWkq9n_bE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3665E95/BB835CD0AD5E11EF9618654E762E951A/wZn8M3XABV4cIAIEqXeWkq9n_bE.mft
Manifest number:          0183
Signing time:             Tue 09 Dec 2025 04:44:10 +0000
Manifest this update:     Tue 09 Dec 2025 04:44:09 +0000
Manifest next update:     Thu 11 Dec 2025 04:44:09 +0000
Files and hashes:         1: wZn8M3XABV4cIAIEqXeWkq9n_bE.crl (hash: WHCt4TkI/qugeUoGUh+QsLmms//rRbXkiiXIyd0TPso=)
                          2: 5AF585EAB22811EFB73F1584762E951A.roa (hash: M9j4j96vg9g40Cd6Oyoi8y4djAsi7G1lD1LSmjWcsgA=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3665E95/BB835CD0AD5E11EF9618654E762E951A/wZn8M3XABV4cIAIEqXeWkq9n_bE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3665E95/BB835CD0AD5E11EF9618654E762E951A/wZn8M3XABV4cIAIEqXeWkq9n_bE.mft
                          rsync://rpki.afrinic.net/repository/afrinic/wZn8M3XABV4cIAIEqXeWkq9n_bE.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 11 Dec 2025 04:44:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 388 (0x184)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3665E95AF, serialNumber=C199FC3375C0055E1C200204A9779692AF67FDB1
        Validity
            Not Before: Dec  9 04:44:09 2025 GMT
            Not After : Dec 11 04:44:09 2025 GMT
        Subject: CN=6937a919-18cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:0d:b8:65:5f:8a:06:ed:a2:8d:4f:b7:e7:4a:
                    8d:06:77:88:6d:c4:ad:77:cc:62:d5:69:f0:cb:4f:
                    70:24:f1:e9:76:76:23:10:ae:2f:d9:c9:cb:07:7a:
                    47:7e:80:d4:7a:ac:db:89:8e:86:57:8f:47:5d:ac:
                    84:8a:89:a3:db:0b:19:e5:6a:fa:01:5b:f3:08:0a:
                    a2:56:5f:25:eb:97:f2:40:90:5e:83:1a:c0:c4:d3:
                    12:db:17:2c:bb:4d:03:0c:58:df:73:cd:e6:2e:b8:
                    d6:34:60:44:7e:97:e1:33:ed:0f:63:39:64:38:5d:
                    3a:5a:0b:16:d3:fa:a2:e9:96:25:4e:0e:1b:12:f5:
                    7b:22:07:f5:6f:6f:82:00:23:45:e6:d9:30:cd:91:
                    b7:75:7a:8d:14:3b:d8:92:91:07:cc:c1:86:9f:2f:
                    5d:84:15:88:8b:31:93:86:8b:cb:ff:0a:f6:29:eb:
                    3d:c4:0d:b6:ec:cd:24:4b:5c:aa:2b:c0:4c:2a:bd:
                    50:72:21:b1:3b:8d:7a:cd:da:8d:65:f6:8a:20:53:
                    7f:4b:af:12:8e:72:a1:c4:b1:91:3f:31:5e:b7:a5:
                    0e:51:b9:93:c7:62:54:17:7d:de:e4:f8:1c:97:83:
                    be:4a:6d:c5:e1:fc:4c:5e:8d:c7:f3:2f:f5:50:67:
                    81:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:6B:57:80:FB:C0:E5:61:9A:4F:39:49:87:A8:79:0D:B3:8D:02:21
            X509v3 Authority Key Identifier:
                keyid:C1:99:FC:33:75:C0:05:5E:1C:20:02:04:A9:77:96:92:AF:67:FD:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3665E95/BB835CD0AD5E11EF9618654E762E951A/wZn8M3XABV4cIAIEqXeWkq9n_bE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/wZn8M3XABV4cIAIEqXeWkq9n_bE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3665E95/BB835CD0AD5E11EF9618654E762E951A/wZn8M3XABV4cIAIEqXeWkq9n_bE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:e5:1d:16:c3:d8:9e:3f:21:3d:f6:ac:b4:cf:68:c8:44:64:
         2b:07:bf:ff:73:56:f7:57:76:ab:70:62:30:e5:51:83:94:4b:
         6b:23:65:ac:98:13:08:3f:69:05:f3:69:fb:a7:84:81:64:2e:
         db:d1:40:d2:ab:3a:6b:bf:a9:8a:c1:eb:d9:85:f4:ab:1b:a4:
         72:16:e4:94:2c:fc:ca:5e:d8:3e:0d:18:fe:82:77:86:99:8d:
         3e:5e:d2:7d:c6:58:34:4f:3d:40:c5:e3:a6:cf:af:1b:bd:14:
         e5:4e:81:6f:8a:02:a0:62:e1:b3:4d:ab:a3:e3:13:0b:ac:43:
         42:a9:51:1a:2a:22:73:bd:72:0b:6e:61:87:7a:f4:b3:88:f9:
         1d:00:70:9c:e1:17:78:c0:30:ce:0c:39:70:3e:00:0d:8e:43:
         56:17:7e:d5:29:8b:42:c0:ad:2b:fc:ac:49:74:84:bf:89:87:
         fa:ce:7c:89:bd:67:13:dc:a6:f9:c5:1b:91:b5:90:56:6c:7c:
         70:17:49:71:49:f1:ee:05:b4:a0:28:f6:e0:bb:75:90:46:a6:
         1d:39:70:13:1d:c4:14:32:f9:f6:d6:2a:68:2b:2d:ce:84:62:
         e0:e5:c0:c2:f0:b0:23:d7:1f:90:f3:80:d8:7f:19:59:d4:96:
         6a:45:51:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 9 12:32:42 2025 by rpki-client