This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3681ED0/5251C078CE2411EDA092D0ACF1222468/SoPzGxsGBMptC3KkU9qj61h7TII.mft
File:                     SoPzGxsGBMptC3KkU9qj61h7TII.mft (raw, json)
Hash identifier:          besJTUxh6uKIgaRqUpfXz/aHF/smh1H44CRp31grpXg=
Subject key identifier:   E5:9B:77:FA:02:6D:9A:83:10:3C:99:7E:4A:D8:F2:EC:A6:7E:36:29
Authority key identifier: 4A:83:F3:1B:1B:06:04:CA:6D:0B:72:A4:53:DA:A3:EB:58:7B:4C:82
Certificate issuer:       /CN=F3681ED0AF/serialNumber=4A83F31B1B0604CA6D0B72A453DAA3EB587B4C82
Certificate serial:       0415
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/SoPzGxsGBMptC3KkU9qj61h7TII.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3681ED0/5251C078CE2411EDA092D0ACF1222468/SoPzGxsGBMptC3KkU9qj61h7TII.mft
Manifest number:          0406
Signing time:             Fri 05 Dec 2025 03:25:53 +0000
Manifest this update:     Fri 05 Dec 2025 03:25:53 +0000
Manifest next update:     Sun 07 Dec 2025 03:25:53 +0000
Files and hashes:         1: SoPzGxsGBMptC3KkU9qj61h7TII.crl (hash: Loz3KYQVUDwcuvhwYUkRqxdr8M1ANysn1Y/EW+9QHLA=)
                          2: C644833AEE7111EE86F7F361775412E6.roa (hash: YgdlYAvq9L3YlpIV33voCNPfR5sCeCWFkjxpZfRsE/k=)
                          3: 7B89F0F65C1011F097764BA7DAE4EC9C.roa (hash: eGy/v5dJ9Sg7LBFixJArYusJNOZkmFriL3Cy5EJmVsc=)
                          4: BFD118C27C3E11F0A02173AEDAE4EC9C.roa (hash: E8rOx5Kz5JNVd/9IEaiBcjxCcyJDlnKMUqqptEDdwRw=)
                          5: 42CC1EC00B7611EEA5D28A444AD9E6FC.roa (hash: hsH3WbP2I/ts2EY2aQeTrcaXJgp89zEB64yilwHc5pg=)
                          6: 1E00E01A052911EE84BBD2454AD9E6FC.roa (hash: sJsPXhS2u3JarGDtOh1UZa0tPJmz8vwB7/YeLKri/dk=)
                          7: F8481206047B11EE91F2EF354AD9E6FC.roa (hash: jtUAjy0+9QV2iQ02jzkoPCkRiaIb/F60j3I68U9pgH4=)
                          8: F65930865B2911F0A6F411CCDAE4EC9C.roa (hash: zlBIS1j6PkXW4nIJqeYYZE1QxvGn2R6vJr3qJUI1Apc=)
                          9: C210ED2E064611F094E66494762E951A.roa (hash: Gw9d4UydYI1TKn6YtgmxyrXffZXD7vcLeB5cryG7IG4=)
                          10: F4E7AB82052811EE94115E454AD9E6FC.roa (hash: 0f6Udr5nVgdqIgPgxaXYb0TifWritIk3wQmsNXYsjss=)
                          11: 1587E6CCEE7111EEAAFBB25C775412E6.roa (hash: zasoVhr4ZDA3BPJ+ug5ooyH3/rY2lwS6n6p8BUEgx2w=)
                          12: 4F0B564AF51511EEB208C151775412E6.roa (hash: XNyDHYdBwPvc7NbnPS7pTjwqkoohEdJw312l57VSDB8=)
                          13: 4A7830A0D18B11EFAB9E6B88762E951A.roa (hash: xV745XWxYsFhNII926E/fN4gSuSPSdyN3viLNfdZy9M=)
                          14: 31CFB30C052C11EEAC0EDC4E4AD9E6FC.roa (hash: 707c2EgzG32Mlw18CbzTHauUb9G8+7v2J+8ka2UNIbA=)
                          15: 506B37B0FD0A11EEA3B5DB34017001B1.roa (hash: 12EkqcvUqaX3EcpZliJ64g6Wrfs7WAZ3LR6j5D262RI=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3681ED0/5251C078CE2411EDA092D0ACF1222468/SoPzGxsGBMptC3KkU9qj61h7TII.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3681ED0/5251C078CE2411EDA092D0ACF1222468/SoPzGxsGBMptC3KkU9qj61h7TII.mft
                          rsync://rpki.afrinic.net/repository/afrinic/SoPzGxsGBMptC3KkU9qj61h7TII.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 07 Dec 2025 03:25:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1045 (0x415)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3681ED0AF, serialNumber=4A83F31B1B0604CA6D0B72A453DAA3EB587B4C82
        Validity
            Not Before: Dec  5 03:25:53 2025 GMT
            Not After : Dec  7 03:25:53 2025 GMT
        Subject: CN=693250c1-e4ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:b2:2b:c0:25:7a:7c:8a:0e:41:72:b1:b5:43:
                    8c:a5:8e:b1:83:5a:a3:61:a9:f9:d8:95:07:5c:1d:
                    bc:d0:5c:11:aa:93:6a:56:98:f9:cd:4b:ee:6c:94:
                    a8:90:4b:86:c5:60:f8:92:bf:2f:81:8e:75:0b:79:
                    00:90:c2:4b:01:4b:65:03:e9:06:1e:57:d6:bc:6d:
                    d8:37:54:f3:e2:3b:6c:d2:38:9f:13:73:84:55:fd:
                    b5:f1:3f:1b:f6:b1:c2:42:a4:1f:e2:01:97:f0:12:
                    6e:9b:a7:da:3b:9a:db:be:ee:a2:26:9e:e0:ba:e4:
                    10:e3:eb:e1:c4:d9:16:0c:2f:c1:8b:c7:12:3d:73:
                    7a:35:8e:e1:a4:51:db:9f:de:77:1f:7e:9f:bb:33:
                    36:57:e7:34:c6:8b:3b:44:a0:ad:b9:26:69:bd:3e:
                    1a:ef:b8:53:c9:60:84:85:cf:53:cf:4f:b7:ce:ed:
                    f3:ce:f1:9f:69:5d:bd:55:75:9e:0e:90:2c:2c:b4:
                    36:d7:5c:06:1e:cd:de:b5:f8:52:d8:2b:0e:74:bb:
                    e7:0a:44:9d:2a:62:5a:8f:ca:62:6b:aa:c8:92:41:
                    dc:a3:52:10:aa:81:da:7a:23:0c:79:26:bb:23:22:
                    37:7a:da:92:90:02:06:b0:b8:59:2d:71:ad:8e:7e:
                    df:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:9B:77:FA:02:6D:9A:83:10:3C:99:7E:4A:D8:F2:EC:A6:7E:36:29
            X509v3 Authority Key Identifier:
                keyid:4A:83:F3:1B:1B:06:04:CA:6D:0B:72:A4:53:DA:A3:EB:58:7B:4C:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3681ED0/5251C078CE2411EDA092D0ACF1222468/SoPzGxsGBMptC3KkU9qj61h7TII.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SoPzGxsGBMptC3KkU9qj61h7TII.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3681ED0/5251C078CE2411EDA092D0ACF1222468/SoPzGxsGBMptC3KkU9qj61h7TII.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:4d:7b:c8:f8:c1:0d:f5:d6:0f:c8:32:75:37:7b:34:0c:b3:
         6f:d3:66:27:95:85:55:b8:a4:b7:f5:5d:17:43:65:80:9b:31:
         7f:2d:3f:69:3d:81:e6:ad:18:98:18:f6:03:de:e6:ac:93:4d:
         67:2d:a6:b9:35:6c:e6:df:bb:f3:09:4f:b8:03:26:c9:5c:72:
         cb:c3:cf:80:5f:55:20:f2:a9:63:46:63:47:4a:5c:39:e7:a1:
         27:06:6b:0f:23:cb:bb:36:3e:e0:71:71:b5:30:47:cf:22:3b:
         59:51:d1:e8:92:16:01:6c:a3:94:55:3c:f3:30:ab:b6:a5:ac:
         a5:02:99:67:ca:19:36:eb:9c:0c:55:d4:b0:99:a3:41:cf:54:
         ea:b7:26:28:b7:ab:9c:2a:38:71:d3:fb:30:3b:bf:f0:31:13:
         71:3f:fd:d2:9a:fb:12:d3:d0:97:4e:1e:a8:5f:82:92:6e:6b:
         61:3d:94:b7:d0:35:f9:c8:45:62:5c:aa:cb:64:ad:70:b0:19:
         ad:af:3d:bd:03:3d:95:f8:8c:65:34:37:6b:e3:db:61:26:0e:
         8a:6f:d2:25:e2:e4:15:a9:bb:e5:eb:a1:cf:4d:e8:f7:65:d8:
         a9:4b:76:72:5b:94:25:79:f1:b2:a7:89:4d:c9:d5:a8:b5:80:
         bd:6e:61:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 5 23:08:02 2025 by rpki-client