This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3666101/4AD5EC589BA211ECB39203765A40D577/NaE6RzFmxUdFBUsur-85WeOenW8.mft
File:                     NaE6RzFmxUdFBUsur-85WeOenW8.mft (raw, json)
Hash identifier:          IBsNKw+JjJTQ5qivXo3ES9FiSGZxod7OzuhEvzKZI8A=
Subject key identifier:   A8:EA:12:40:DD:F5:C5:21:98:85:EB:FD:BE:7D:04:D1:31:CE:DB:BA
Authority key identifier: 35:A1:3A:47:31:66:C5:47:45:05:4B:2E:AF:EF:39:59:E3:9E:9D:6F
Certificate issuer:       /CN=F3666101AF/serialNumber=35A13A473166C54745054B2EAFEF3959E39E9D6F
Certificate serial:       058B
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/NaE6RzFmxUdFBUsur-85WeOenW8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3666101/4AD5EC589BA211ECB39203765A40D577/NaE6RzFmxUdFBUsur-85WeOenW8.mft
Manifest number:          0588
Signing time:             Tue 09 Dec 2025 02:39:46 +0000
Manifest this update:     Tue 09 Dec 2025 02:39:45 +0000
Manifest next update:     Thu 11 Dec 2025 02:39:45 +0000
Files and hashes:         1: NaE6RzFmxUdFBUsur-85WeOenW8.crl (hash: PyTOOYMMriZ7aw1vJLVNRPeafklbBD+0jQfIFdGpZgY=)
                          2: 99A1984E57F311F086ED54DEDAE4EC9C.roa (hash: ZM8T8/0Cbu1okxArEtkbxlaS5j1+sO4e39kgIitch78=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3666101/4AD5EC589BA211ECB39203765A40D577/NaE6RzFmxUdFBUsur-85WeOenW8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3666101/4AD5EC589BA211ECB39203765A40D577/NaE6RzFmxUdFBUsur-85WeOenW8.mft
                          rsync://rpki.afrinic.net/repository/afrinic/NaE6RzFmxUdFBUsur-85WeOenW8.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 11 Dec 2025 02:39:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1419 (0x58b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3666101AF, serialNumber=35A13A473166C54745054B2EAFEF3959E39E9D6F
        Validity
            Not Before: Dec  9 02:39:45 2025 GMT
            Not After : Dec 11 02:39:45 2025 GMT
        Subject: CN=69378bf2-bd4e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:a0:e4:97:2f:3f:75:f8:78:94:27:f0:81:e2:
                    b5:03:9e:cf:e4:37:c0:15:02:fb:f5:b7:ef:2d:7b:
                    f4:b4:d7:55:86:69:d8:b8:b1:05:5c:f5:2f:f2:83:
                    07:ed:73:82:69:df:87:db:1e:ba:d6:8b:71:ae:22:
                    be:e1:cb:5b:d5:c2:ac:4b:f5:78:5a:c0:74:25:7c:
                    99:95:f4:57:f6:87:93:ce:c0:54:ed:a0:26:25:de:
                    4c:02:f1:04:af:62:e3:8e:37:bc:1a:3a:88:f2:00:
                    62:30:ac:df:c5:26:2b:3d:93:22:3f:1b:06:20:b7:
                    dd:8f:e0:a0:98:fe:e1:f0:6f:52:f1:7f:41:e9:3f:
                    09:4a:cc:fd:aa:58:ad:ca:46:9d:b7:e7:23:d2:bc:
                    62:02:e8:27:ea:6f:33:b5:33:c6:cf:f1:23:8a:70:
                    80:82:ba:4e:e6:b0:d0:2a:96:ae:19:98:1d:2e:aa:
                    20:10:c7:2a:8c:1d:e1:d8:30:24:40:b0:33:88:88:
                    d6:b3:21:5f:76:7b:88:2e:29:e5:1d:65:c1:64:c1:
                    bf:aa:e6:0d:7b:71:43:6f:b3:c0:f0:99:22:5e:59:
                    1d:01:5d:0a:bc:a7:c1:31:5e:8a:ce:d2:ba:ad:76:
                    95:b4:09:b4:b0:b5:c5:db:1d:7c:16:e7:e6:42:61:
                    b1:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:EA:12:40:DD:F5:C5:21:98:85:EB:FD:BE:7D:04:D1:31:CE:DB:BA
            X509v3 Authority Key Identifier:
                keyid:35:A1:3A:47:31:66:C5:47:45:05:4B:2E:AF:EF:39:59:E3:9E:9D:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3666101/4AD5EC589BA211ECB39203765A40D577/NaE6RzFmxUdFBUsur-85WeOenW8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/NaE6RzFmxUdFBUsur-85WeOenW8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3666101/4AD5EC589BA211ECB39203765A40D577/NaE6RzFmxUdFBUsur-85WeOenW8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:11:f2:84:a1:28:69:4e:d9:16:9d:c8:c5:29:de:bd:06:e9:
         fc:e5:19:7f:34:2c:72:d6:c3:35:ae:68:84:52:ac:1f:be:8f:
         86:54:41:87:ad:04:c6:21:c0:33:4a:15:cc:21:b6:f2:7a:33:
         17:f8:d8:97:c7:c9:e1:2c:e6:66:3a:40:24:f0:ec:67:5e:06:
         a1:9b:bb:ea:bd:e3:79:5a:95:a5:00:10:8f:14:1e:56:24:bc:
         de:58:d8:4f:06:a8:ed:cf:3d:cd:c9:2b:2a:46:9d:2d:5a:f1:
         2d:9e:4f:8f:6b:98:0d:9e:9f:20:7d:63:2c:05:76:5a:da:05:
         32:ad:67:59:bb:4e:d3:7a:82:23:0b:98:01:a3:51:ba:e5:70:
         54:e5:4a:c6:0c:da:c4:f6:6f:2d:c5:8a:0b:d1:4a:37:72:44:
         f9:8f:54:ea:95:44:4f:b0:f9:14:cc:6e:3f:64:01:87:bd:b1:
         f1:e0:6d:2a:11:d3:c7:a9:bb:da:6e:5c:b9:17:79:f0:a2:0d:
         21:08:34:96:78:c6:1c:fc:bc:2b:fa:12:f1:1f:61:fe:c2:bc:
         25:26:00:48:88:de:06:f6:46:12:eb:14:e1:9a:19:55:f2:78:
         25:4e:1f:5d:3e:9f:0e:a6:7d:2e:10:0a:dd:77:c8:8c:c1:70:
         88:20:1a:4f
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICBYswDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NjYxMDFBRjExMC8GA1UEBRMoMzVBMTNBNDczMTY2QzU0NzQ1MDU0QjJFQUZFRjM5
NTlFMzlFOUQ2RjAeFw0yNTEyMDkwMjM5NDVaFw0yNTEyMTEwMjM5NDVaMBgxFjAU
BgNVBAMTDTY5Mzc4YmYyLWJkNGUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDjoOSXLz91+HiUJ/CB4rUDns/kN8AVAvv1t+8te/S011WGadi4sQVc9S/y
gwftc4Jp34fbHrrWi3GuIr7hy1vVwqxL9XhawHQlfJmV9Ff2h5POwFTtoCYl3kwC
8QSvYuOON7waOojyAGIwrN/FJis9kyI/GwYgt92P4KCY/uHwb1Lxf0HpPwlKzP2q
WK3KRp235yPSvGIC6CfqbzO1M8bP8SOKcICCuk7msNAqlq4ZmB0uqiAQxyqMHeHY
MCRAsDOIiNazIV92e4guKeUdZcFkwb+q5g17cUNvs8DwmSJeWR0BXQq8p8ExXorO
0rqtdpW0CbSwtcXbHXwW5+ZCYbF7AgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUqOoS
QN31xSGYhev9vn0E0THO27owHwYDVR0jBBgwFoAUNaE6RzFmxUdFBUsur+85WeOe
nW8wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjY2MTAxLzRBRDVFQzU4OUJBMjExRUNCMzkyMDM3NjVBNDBENTc3L05hRTZS
ekZteFVkRkJVc3VyLTg1V2VPZW5XOC5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL05hRTZSekZteFVkRkJVc3VyLTg1V2VPZW5XOC5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2NjYxMDEvNEFENUVDNTg5QkEyMTFFQ0IzOTIwMzc2NUE0
MEQ1NzcvTmFFNlJ6Rm14VWRGQlVzdXItODVXZU9lblc4Lm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCdEfKEoShpTtkWncjFKd69Bun85Rl/
NCxy1sM1rmiEUqwfvo+GVEGHrQTGIcAzShXMIbbyejMX+NiXx8nhLOZmOkAk8Oxn
Xgahm7vqveN5WpWlABCPFB5WJLzeWNhPBqjtzz3NySsqRp0tWvEtnk+Pa5gNnp8g
fWMsBXZa2gUyrWdZu07TeoIjC5gBo1G65XBU5UrGDNrE9m8txYoL0Uo3ckT5j1Tq
lURPsPkUzG4/ZAGHvbHx4G0qEdPHqbvably5F3nwog0hCDSWeMYc/Lwr+hLxH2H+
wrwlJgBIiN4G9kYS6xThmhlV8nglTh9dPp8Opn0uEArdd8iMwXCIIBpP
-----END CERTIFICATE-----
Generated at Tue Dec 9 12:18:13 2025 by rpki-client