This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3688163/3982A74ECBC911EEA7F5F576775412E6/eRR9PW5TftaH0IV7r4SSgRj9pOU.mft
File:                     eRR9PW5TftaH0IV7r4SSgRj9pOU.mft (raw, json)
Hash identifier:          YqAe97FhXuvik5S+B7v+O4QsDT3HLjbz73AOC0nHGSo=
Subject key identifier:   19:BD:4F:42:10:9F:F2:26:78:6B:BE:D7:EC:76:C3:40:D5:DF:83:97
Authority key identifier: 79:14:7D:3D:6E:53:7E:D6:87:D0:85:7B:AF:84:92:81:18:FD:A4:E5
Certificate issuer:       /CN=F3688163AF/serialNumber=79147D3D6E537ED687D0857BAF84928118FDA4E5
Certificate serial:       02A9
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/eRR9PW5TftaH0IV7r4SSgRj9pOU.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3688163/3982A74ECBC911EEA7F5F576775412E6/eRR9PW5TftaH0IV7r4SSgRj9pOU.mft
Manifest number:          02A8
Signing time:             Tue 09 Dec 2025 04:05:45 +0000
Manifest this update:     Tue 09 Dec 2025 04:05:45 +0000
Manifest next update:     Thu 11 Dec 2025 04:05:45 +0000
Files and hashes:         1: eRR9PW5TftaH0IV7r4SSgRj9pOU.crl (hash: FgfJfQaX3P2CbMjUt7NKdhWI7Ra8AhEmkx+xsr5hgoE=)
                          2: E8A5A2BCCBC911EE8E9BEF77775412E6.roa (hash: uW1ZZtqf2li8jzBd7IN42gC/xPbqnD5CcVOfHA/YQtE=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3688163/3982A74ECBC911EEA7F5F576775412E6/eRR9PW5TftaH0IV7r4SSgRj9pOU.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3688163/3982A74ECBC911EEA7F5F576775412E6/eRR9PW5TftaH0IV7r4SSgRj9pOU.mft
                          rsync://rpki.afrinic.net/repository/afrinic/eRR9PW5TftaH0IV7r4SSgRj9pOU.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 11 Dec 2025 04:05:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 681 (0x2a9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3688163AF, serialNumber=79147D3D6E537ED687D0857BAF84928118FDA4E5
        Validity
            Not Before: Dec  9 04:05:45 2025 GMT
            Not After : Dec 11 04:05:45 2025 GMT
        Subject: CN=6937a019-2d5e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:3c:10:1d:7c:e3:3f:08:75:ed:5c:12:2a:fb:
                    33:cb:fb:0d:d0:76:81:18:61:56:e4:85:cd:1d:60:
                    e5:40:f1:66:a5:39:63:7b:07:83:8f:39:72:9d:c4:
                    65:9e:3d:cf:0a:bd:05:8b:3c:3a:98:f1:0a:8d:16:
                    76:1c:60:32:f5:8c:50:34:1a:42:13:bb:7e:1f:72:
                    38:56:a8:34:a3:3a:b2:28:bf:e9:08:2e:99:c8:0a:
                    39:31:84:08:5b:64:11:17:6c:69:b9:e6:5f:dc:40:
                    ba:f2:b5:cc:6c:18:aa:70:24:e7:4c:d9:ee:65:9d:
                    27:16:68:a7:11:cf:d0:ef:60:c9:ae:c3:8d:04:b3:
                    8f:62:32:ab:c0:e9:22:27:cf:20:dc:a6:1d:29:71:
                    a4:2d:a5:08:a5:ba:d5:dc:2f:1a:34:63:04:3c:50:
                    18:e3:02:90:bf:4f:03:17:44:7e:45:27:d8:51:aa:
                    b8:9d:9b:57:c8:e0:ea:c1:6a:09:65:41:69:4f:34:
                    21:d2:47:56:d7:6a:c8:72:22:f3:80:62:b4:27:d5:
                    f5:ce:99:f7:ab:53:9c:76:e6:08:a4:3f:66:f6:25:
                    19:44:e2:08:f7:17:f8:50:55:89:33:6d:a7:0e:16:
                    0e:ec:26:7a:b9:dc:3f:16:d9:50:a9:5d:97:40:4d:
                    18:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:BD:4F:42:10:9F:F2:26:78:6B:BE:D7:EC:76:C3:40:D5:DF:83:97
            X509v3 Authority Key Identifier:
                keyid:79:14:7D:3D:6E:53:7E:D6:87:D0:85:7B:AF:84:92:81:18:FD:A4:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3688163/3982A74ECBC911EEA7F5F576775412E6/eRR9PW5TftaH0IV7r4SSgRj9pOU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/eRR9PW5TftaH0IV7r4SSgRj9pOU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3688163/3982A74ECBC911EEA7F5F576775412E6/eRR9PW5TftaH0IV7r4SSgRj9pOU.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:10:db:92:ba:3a:6a:1f:c8:07:2b:02:01:e0:ed:01:b9:28:
         64:6a:61:c0:17:d7:c3:2a:85:96:29:a3:3e:fc:27:bf:54:cd:
         87:ed:b2:65:ff:95:95:b0:d9:db:f5:10:93:88:c5:98:c4:91:
         2f:66:cc:12:c0:fa:76:80:61:9a:ec:48:4c:ea:32:31:86:3e:
         95:ce:97:65:bd:17:df:66:36:b9:4c:82:7f:0b:9a:7f:39:7a:
         fb:ae:5a:4e:43:02:59:d1:7a:01:0b:72:6d:fb:3e:50:4b:84:
         f1:b5:27:b6:ae:c8:1b:20:2b:f1:5b:e3:18:74:89:30:b5:59:
         0f:16:e9:84:ec:37:99:d1:b9:45:c7:43:45:09:fd:c3:b7:c9:
         a2:95:0e:03:7c:3e:8a:be:0d:96:4d:6c:7d:36:71:60:cd:0a:
         a2:02:fe:c1:74:2c:09:d6:9e:fe:f5:af:2d:f3:00:4b:fb:d9:
         a1:3e:86:f0:6d:1f:59:d4:02:49:68:2f:cd:eb:8b:c0:9b:ec:
         40:b1:3e:e7:34:8f:a5:79:65:0f:2c:77:b0:56:2f:e7:96:db:
         84:47:58:80:ea:7b:64:a1:44:8d:10:33:cb:4b:27:4c:cd:51:
         15:0c:13:41:e3:59:ca:f5:29:59:63:b6:91:00:3a:b0:8f:b2:
         9d:ea:32:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 9 12:19:11 2025 by rpki-client