This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3667885/2F732490067811ECB5D5945AD8A014CE/xKeWHgAqqJ1QvqIlLU-Use72aiM.mft
File:                     xKeWHgAqqJ1QvqIlLU-Use72aiM.mft (raw, json)
Hash identifier:          OpKf/ZF2C6afhQykiBfp1/sD7+wAqHsBKb40G34UCnw=
Subject key identifier:   9C:28:D8:E8:1F:7D:38:63:CE:D3:7D:7D:DA:81:F0:95:70:7F:BE:66
Authority key identifier: C4:A7:96:1E:00:2A:A8:9D:50:BE:A2:25:2D:4F:94:B1:EE:F6:6A:23
Certificate issuer:       /CN=F3667885AF/serialNumber=C4A7961E002AA89D50BEA2252D4F94B1EEF66A23
Certificate serial:       064F
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/xKeWHgAqqJ1QvqIlLU-Use72aiM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3667885/2F732490067811ECB5D5945AD8A014CE/xKeWHgAqqJ1QvqIlLU-Use72aiM.mft
Manifest number:          064D
Signing time:             Tue 09 Dec 2025 02:22:31 +0000
Manifest this update:     Tue 09 Dec 2025 02:22:30 +0000
Manifest next update:     Thu 11 Dec 2025 02:22:30 +0000
Files and hashes:         1: xKeWHgAqqJ1QvqIlLU-Use72aiM.crl (hash: 3WyTsPKqccQ1AtjWlwM3e8TtOuLvfNKlqjSfrVKZGX4=)
                          2: 0974EE44692C11EFB84E09BE762E951A.roa (hash: umDKOoC9/WNBFwfe+01c/iCxCRQnfD2hLqhhCsHnBu0=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3667885/2F732490067811ECB5D5945AD8A014CE/xKeWHgAqqJ1QvqIlLU-Use72aiM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3667885/2F732490067811ECB5D5945AD8A014CE/xKeWHgAqqJ1QvqIlLU-Use72aiM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/xKeWHgAqqJ1QvqIlLU-Use72aiM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 11 Dec 2025 02:22:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1615 (0x64f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3667885AF, serialNumber=C4A7961E002AA89D50BEA2252D4F94B1EEF66A23
        Validity
            Not Before: Dec  9 02:22:30 2025 GMT
            Not After : Dec 11 02:22:30 2025 GMT
        Subject: CN=693787e7-47a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:e4:4e:d1:bd:d3:c9:16:e6:e2:44:b5:9a:db:
                    4d:49:c6:21:20:66:94:a1:26:1a:73:bd:cb:f0:43:
                    65:e9:05:ed:e8:7e:4d:e6:8c:c7:99:4c:df:c7:a5:
                    af:78:22:28:2f:0c:6a:5c:42:ba:0c:fa:90:2b:77:
                    d1:1b:a3:47:d7:20:a0:87:20:59:55:64:62:2e:bf:
                    52:33:46:8a:3d:68:f4:bc:7d:ae:e7:c9:ce:16:09:
                    93:6f:b1:2a:6c:ba:3d:f8:b5:9b:76:9a:8b:97:13:
                    3c:0d:02:2d:d0:be:a4:1d:3f:ae:dd:23:b0:d4:c4:
                    60:69:7b:aa:db:77:a9:b4:1f:39:ce:36:75:fa:02:
                    dc:b1:3c:1a:df:34:fb:00:67:7f:3c:87:b5:1a:58:
                    79:43:66:37:7a:f4:30:ff:5a:fa:13:31:74:6b:7c:
                    ba:8a:34:c2:c4:50:d6:3c:3e:13:e2:67:f7:28:c5:
                    35:02:c6:94:e9:9a:00:b6:19:ba:f8:74:9a:42:06:
                    cb:75:0f:32:d0:f3:1d:4b:38:a8:b4:9e:6d:64:92:
                    fa:95:12:0f:df:75:29:7c:f9:47:ae:3d:0b:1b:88:
                    09:f5:82:2a:4c:c8:91:a5:ba:73:0b:b3:b0:3c:24:
                    bb:de:7c:4c:6f:12:b1:19:0c:fa:5c:86:ad:01:05:
                    9e:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:28:D8:E8:1F:7D:38:63:CE:D3:7D:7D:DA:81:F0:95:70:7F:BE:66
            X509v3 Authority Key Identifier:
                keyid:C4:A7:96:1E:00:2A:A8:9D:50:BE:A2:25:2D:4F:94:B1:EE:F6:6A:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3667885/2F732490067811ECB5D5945AD8A014CE/xKeWHgAqqJ1QvqIlLU-Use72aiM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/xKeWHgAqqJ1QvqIlLU-Use72aiM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3667885/2F732490067811ECB5D5945AD8A014CE/xKeWHgAqqJ1QvqIlLU-Use72aiM.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:8c:e9:ec:31:92:2c:d6:5a:66:38:5e:5f:ee:31:e4:bb:e9:
         26:8f:8b:b6:e5:88:5e:a7:36:97:f5:84:2a:3d:36:26:53:24:
         ab:80:b9:8d:4f:2b:73:0f:3e:17:cd:6c:bf:03:77:09:48:db:
         e6:ae:36:97:81:33:5b:09:d5:da:9d:6c:f0:99:c1:be:f0:51:
         cc:82:0d:77:7b:63:d3:09:dc:fd:fa:db:60:a0:96:7d:70:2a:
         39:ee:a4:db:2f:ec:7b:92:a2:18:22:3d:e1:7f:7e:fa:18:47:
         59:bd:ae:7c:a9:81:bc:4f:aa:ea:77:e8:d7:76:d3:65:83:4b:
         30:7e:cb:4c:64:e1:2d:ce:6c:cf:08:95:07:3a:5a:19:94:62:
         55:63:04:8c:71:63:0a:86:56:e0:35:8b:d6:ac:25:f8:3d:1d:
         95:f2:e9:20:ad:ef:21:07:ef:21:d1:0d:d4:15:45:55:f3:f1:
         ed:45:14:3b:47:e8:86:43:60:78:eb:6f:73:14:98:eb:95:df:
         47:d3:24:97:fa:18:b9:45:ce:47:1f:d8:d5:e0:62:c1:8f:67:
         5e:e6:2d:40:f1:ba:74:59:90:c8:f5:f8:b2:09:44:39:a4:6b:
         c2:2b:b3:eb:e5:10:8b:d0:f7:b1:d2:ab:58:7e:0d:dd:6d:c8:
         73:b0:cf:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 9 12:05:24 2025 by rpki-client