This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3688163/3982A74ECBC911EEA7F5F576775412E6/eRR9PW5TftaH0IV7r4SSgRj9pOU.mft
File:                     eRR9PW5TftaH0IV7r4SSgRj9pOU.mft (raw, json)
Hash identifier:          0mVCtweayXlprZLtVzA/tOWdqni+33OzLrugL7oIqOw=
Subject key identifier:   2A:B1:D6:20:09:CC:BA:27:05:BB:23:B3:B0:41:DA:74:C0:41:D2:9D
Authority key identifier: 79:14:7D:3D:6E:53:7E:D6:87:D0:85:7B:AF:84:92:81:18:FD:A4:E5
Certificate issuer:       /CN=F3688163AF/serialNumber=79147D3D6E537ED687D0857BAF84928118FDA4E5
Certificate serial:       02B6
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/eRR9PW5TftaH0IV7r4SSgRj9pOU.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3688163/3982A74ECBC911EEA7F5F576775412E6/eRR9PW5TftaH0IV7r4SSgRj9pOU.mft
Manifest number:          02B5
Signing time:             Mon 22 Dec 2025 04:07:24 +0000
Manifest this update:     Mon 22 Dec 2025 04:07:23 +0000
Manifest next update:     Wed 24 Dec 2025 04:07:23 +0000
Files and hashes:         1: eRR9PW5TftaH0IV7r4SSgRj9pOU.crl (hash: 5jfCA17s6W5E0kBgcQCVfFv47LIdT28nVoEPVnGq0J4=)
                          2: E8A5A2BCCBC911EE8E9BEF77775412E6.roa (hash: uW1ZZtqf2li8jzBd7IN42gC/xPbqnD5CcVOfHA/YQtE=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3688163/3982A74ECBC911EEA7F5F576775412E6/eRR9PW5TftaH0IV7r4SSgRj9pOU.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3688163/3982A74ECBC911EEA7F5F576775412E6/eRR9PW5TftaH0IV7r4SSgRj9pOU.mft
                          rsync://rpki.afrinic.net/repository/afrinic/eRR9PW5TftaH0IV7r4SSgRj9pOU.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 24 Dec 2025 00:06:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 694 (0x2b6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3688163AF, serialNumber=79147D3D6E537ED687D0857BAF84928118FDA4E5
        Validity
            Not Before: Dec 22 04:07:23 2025 GMT
            Not After : Dec 24 04:07:23 2025 GMT
        Subject: CN=6948c3fc-acea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:fd:20:65:01:76:62:c7:1b:bb:43:56:4f:09:
                    16:80:05:0a:6c:43:88:22:71:0d:af:2b:b2:2c:ba:
                    4e:b6:d3:df:da:63:3f:3b:79:42:23:3b:30:ea:fc:
                    5c:1b:ba:35:c6:e1:4e:2f:28:c9:ed:50:c8:36:dc:
                    1b:d3:1a:79:8b:36:b1:31:4f:17:63:6b:a2:da:74:
                    a6:ec:00:5b:a7:ec:20:44:87:36:4d:c0:fa:84:17:
                    cd:be:6b:24:1e:52:2f:12:21:a2:04:15:0b:fc:ff:
                    9f:5e:af:eb:ab:6c:ce:9c:a8:9f:27:ea:b6:0d:31:
                    2a:f0:c8:7d:c1:55:8b:03:d9:a7:a5:3f:f7:77:56:
                    2d:21:fb:9c:9e:ce:06:05:e4:2c:a3:d8:97:5a:ac:
                    f5:24:50:04:c9:3b:46:b4:62:23:8a:4b:5b:99:ac:
                    a6:55:5e:2f:25:bc:b2:2c:98:8f:ba:62:97:97:64:
                    68:05:be:93:a1:21:07:66:08:db:a2:0f:b8:2a:9b:
                    5e:f6:4f:4a:ef:b3:e8:f1:f5:69:bf:3e:37:65:ce:
                    8e:40:4e:0c:fc:a2:49:db:10:d0:c8:e7:16:49:74:
                    4f:2a:7d:5b:94:ef:4b:60:f8:9f:e8:b2:4b:08:2f:
                    c9:32:54:aa:d4:9d:ca:77:e5:56:a2:ac:ce:eb:b2:
                    fd:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:B1:D6:20:09:CC:BA:27:05:BB:23:B3:B0:41:DA:74:C0:41:D2:9D
            X509v3 Authority Key Identifier:
                keyid:79:14:7D:3D:6E:53:7E:D6:87:D0:85:7B:AF:84:92:81:18:FD:A4:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3688163/3982A74ECBC911EEA7F5F576775412E6/eRR9PW5TftaH0IV7r4SSgRj9pOU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/eRR9PW5TftaH0IV7r4SSgRj9pOU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3688163/3982A74ECBC911EEA7F5F576775412E6/eRR9PW5TftaH0IV7r4SSgRj9pOU.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:8b:5f:9c:98:05:ed:31:42:3e:4d:04:02:2a:3c:8f:95:ab:
         ff:2d:83:89:be:9f:de:10:46:57:c1:32:59:65:d5:09:de:09:
         82:4e:c6:65:32:8f:07:0c:1c:d0:e9:2d:87:41:03:c7:8b:48:
         2d:43:95:0f:e7:cd:69:ed:33:65:0b:3a:7d:8a:ec:88:5c:3b:
         c4:fc:ed:f1:26:10:63:09:20:01:db:5a:de:3a:a4:84:be:22:
         25:85:60:73:ff:c3:3d:50:10:b4:85:ba:d7:ef:24:55:82:6f:
         be:3f:51:61:21:bb:79:3b:92:7f:63:f5:1a:bf:2f:93:e4:1d:
         d6:59:5a:09:6a:d9:b5:e4:f0:9f:ae:25:e5:25:34:9b:dd:49:
         c7:1f:21:33:0f:12:06:2d:b7:d5:ca:de:a1:36:d0:fc:98:ed:
         f7:eb:cc:b9:d0:03:77:1c:7e:36:fa:12:96:e7:2e:69:d5:2a:
         dd:87:46:6a:29:2f:c3:7e:a7:cc:f1:1d:48:16:a5:f1:de:48:
         9a:3e:e3:03:47:34:af:96:fc:3f:89:b7:5b:a7:9e:35:0a:6b:
         8d:cc:bd:3d:6f:77:1f:f1:25:14:27:96:5a:26:3d:3b:e8:92:
         47:5f:e3:3c:74:a5:f0:a6:3f:a7:d5:5b:69:a5:09:45:17:45:
         ee:77:d0:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 07:24:59 2025 by rpki-client