This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3688596/59EF2C686E6311E585534430F8AEA228/0qqhpeGuF8P2b2b6cdmmEWGVp4w.mft
File:                     0qqhpeGuF8P2b2b6cdmmEWGVp4w.mft (raw, json)
Hash identifier:          U0O7ZcVp7ZuvOhP9qIzpRzJpxrWApM4oNC4JQy77KBY=
Subject key identifier:   DE:04:59:E8:A2:58:E7:04:9A:50:39:46:AD:D9:5F:C6:87:8D:D2:7A
Authority key identifier: D2:AA:A1:A5:E1:AE:17:C3:F6:6F:66:FA:71:D9:A6:11:61:95:A7:8C
Certificate issuer:       /CN=F3688596AF/serialNumber=D2AAA1A5E1AE17C3F66F66FA71D9A6116195A78C
Certificate serial:       0EC9
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/0qqhpeGuF8P2b2b6cdmmEWGVp4w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3688596/59EF2C686E6311E585534430F8AEA228/0qqhpeGuF8P2b2b6cdmmEWGVp4w.mft
Manifest number:          0EC9
Signing time:             Tue 09 Dec 2025 00:57:52 +0000
Manifest this update:     Tue 09 Dec 2025 00:57:51 +0000
Manifest next update:     Thu 11 Dec 2025 00:57:51 +0000
Files and hashes:         1: 0qqhpeGuF8P2b2b6cdmmEWGVp4w.crl (hash: pftWszVzpLPxv4iTeJ/a7hEH1whGQ0LaXe0M679j/7Q=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3688596/59EF2C686E6311E585534430F8AEA228/0qqhpeGuF8P2b2b6cdmmEWGVp4w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3688596/59EF2C686E6311E585534430F8AEA228/0qqhpeGuF8P2b2b6cdmmEWGVp4w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/0qqhpeGuF8P2b2b6cdmmEWGVp4w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 11 Dec 2025 00:57:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3785 (0xec9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3688596AF, serialNumber=D2AAA1A5E1AE17C3F66F66FA71D9A6116195A78C
        Validity
            Not Before: Dec  9 00:57:51 2025 GMT
            Not After : Dec 11 00:57:51 2025 GMT
        Subject: CN=69377410-af3a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:2e:7f:a8:49:d1:a1:a6:2f:4f:08:05:7d:74:
                    43:05:13:ee:53:a7:e5:5f:3e:e2:14:89:7a:93:44:
                    27:51:bc:67:da:c0:d8:ea:94:9e:c7:a6:28:f1:60:
                    d3:ae:87:18:60:5c:c8:93:a6:8c:69:b3:0f:34:3c:
                    d8:85:a1:ca:ea:c8:fd:4c:fa:18:d0:de:13:2f:a8:
                    8f:cc:f6:e7:87:20:cd:a7:95:f9:49:01:b1:ae:f2:
                    3b:f9:3d:f1:22:fa:ef:a5:16:41:40:b5:d8:8a:9c:
                    44:4c:f5:bc:b1:7b:3c:eb:29:c0:f2:0e:2c:65:b6:
                    16:70:fe:9d:76:4b:d0:51:81:d0:97:54:ba:00:77:
                    b6:06:12:07:12:85:1b:ab:2b:e2:5b:60:fd:14:2d:
                    e2:77:07:1f:47:62:5b:dd:d0:75:c5:31:d6:cb:93:
                    53:d3:2c:e0:fa:19:57:64:47:99:86:a4:5b:b4:50:
                    80:85:1a:5d:2e:5a:dd:52:55:13:16:15:16:25:f1:
                    87:e7:c5:37:a5:5b:cf:71:0c:c0:99:f5:63:0a:aa:
                    a4:49:2e:69:ab:13:cb:e0:36:3e:d3:e4:5f:1b:df:
                    7f:66:8c:5d:15:a3:1e:46:3e:5e:ad:08:41:34:1d:
                    2f:6c:ed:b9:00:07:34:1b:2e:5d:06:c1:ac:72:d1:
                    73:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:04:59:E8:A2:58:E7:04:9A:50:39:46:AD:D9:5F:C6:87:8D:D2:7A
            X509v3 Authority Key Identifier:
                keyid:D2:AA:A1:A5:E1:AE:17:C3:F6:6F:66:FA:71:D9:A6:11:61:95:A7:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3688596/59EF2C686E6311E585534430F8AEA228/0qqhpeGuF8P2b2b6cdmmEWGVp4w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/0qqhpeGuF8P2b2b6cdmmEWGVp4w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3688596/59EF2C686E6311E585534430F8AEA228/0qqhpeGuF8P2b2b6cdmmEWGVp4w.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:30:fa:06:c3:e1:1a:02:6f:40:b9:ea:96:26:ce:fe:fe:ae:
         73:b2:2c:37:27:cd:c8:8d:3b:51:d6:63:a6:d5:8f:16:00:34:
         55:33:e5:8a:d0:e2:1a:f3:ba:31:01:2a:02:b1:47:c3:50:fe:
         d1:30:67:12:6c:6c:59:16:14:a7:15:34:d6:16:d7:e2:78:bb:
         0f:a0:8c:d7:b8:73:ac:5e:a5:05:f3:ae:f7:5a:82:75:67:ea:
         1f:7f:57:62:25:7d:bb:d1:fd:e6:2a:76:fa:23:29:ff:96:e1:
         d4:8c:c4:b4:e0:d1:f7:8d:d2:e3:c5:fe:c0:c8:9f:26:e4:f8:
         3d:e6:cc:f3:69:7d:96:35:e9:25:4b:87:4f:51:f6:85:a7:1d:
         37:36:8e:36:d4:98:9c:1b:b3:59:ad:e7:b8:76:63:29:37:55:
         82:75:26:31:6d:9e:fd:9b:cc:b2:db:f8:8a:af:db:56:5c:29:
         1c:a1:d2:8d:1e:b0:66:34:4d:e1:00:81:df:cf:a7:6b:15:16:
         55:7e:2d:40:c2:05:f4:7f:3b:80:3e:4d:2f:21:88:3a:7f:03:
         86:dd:40:4c:73:e0:f9:55:2a:d0:a6:86:84:f3:e4:55:18:bd:
         7c:b0:0b:61:52:7d:ae:47:7a:67:1e:37:4d:3f:00:96:2c:4f:
         c4:88:d6:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 9 12:07:03 2025 by rpki-client