This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3696A10/CBB5DFACC38C11F0A2712CBBDAE4EC9C/EbTv4fMc1cj0SqlTE_0Nw1yuJLw.mft
File:                     EbTv4fMc1cj0SqlTE_0Nw1yuJLw.mft (raw, json)
Hash identifier:          vmwuVPqIs0yWD9GkT6VgRsxDoMZATMhBHguc9QgYso4=
Subject key identifier:   7E:06:6A:49:AE:27:82:44:F7:CF:3C:5A:2E:C4:24:92:80:90:39:EF
Authority key identifier: 11:B4:EF:E1:F3:1C:D5:C8:F4:4A:A9:53:13:FD:0D:C3:5C:AE:24:BC
Certificate issuer:       /CN=F3696A10AF/serialNumber=11B4EFE1F31CD5C8F44AA95313FD0DC35CAE24BC
Certificate serial:       18
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/EbTv4fMc1cj0SqlTE_0Nw1yuJLw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3696A10/CBB5DFACC38C11F0A2712CBBDAE4EC9C/EbTv4fMc1cj0SqlTE_0Nw1yuJLw.mft
Manifest number:          18
Signing time:             Tue 09 Dec 2025 05:20:54 +0000
Manifest this update:     Tue 09 Dec 2025 05:20:54 +0000
Manifest next update:     Thu 11 Dec 2025 05:20:54 +0000
Files and hashes:         1: EbTv4fMc1cj0SqlTE_0Nw1yuJLw.crl (hash: HEMi+bowLClhoyBi4Zc+CzoClFYa3Tb7SalhXdPRSBA=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3696A10/CBB5DFACC38C11F0A2712CBBDAE4EC9C/EbTv4fMc1cj0SqlTE_0Nw1yuJLw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3696A10/CBB5DFACC38C11F0A2712CBBDAE4EC9C/EbTv4fMc1cj0SqlTE_0Nw1yuJLw.mft
                          rsync://rpki.afrinic.net/repository/afrinic/EbTv4fMc1cj0SqlTE_0Nw1yuJLw.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 11 Dec 2025 05:20:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 24 (0x18)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3696A10AF, serialNumber=11B4EFE1F31CD5C8F44AA95313FD0DC35CAE24BC
        Validity
            Not Before: Dec  9 05:20:54 2025 GMT
            Not After : Dec 11 05:20:54 2025 GMT
        Subject: CN=6937b1b6-cdfc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:41:92:dd:66:28:fe:d7:f8:67:44:28:1b:f7:
                    91:ff:a8:d6:52:f1:1f:d1:fb:1b:59:46:70:e8:a9:
                    4e:23:31:77:79:cc:ad:5f:b0:4a:c5:86:22:7b:02:
                    89:9e:ab:1c:85:96:14:23:af:ea:e1:f1:41:48:03:
                    46:91:e8:28:d3:15:e2:dd:eb:c0:ec:c3:f2:d2:98:
                    9d:ea:ab:3b:ad:08:a0:a1:ac:ba:61:4f:3b:d1:3d:
                    bd:32:5f:ee:a1:0a:d6:bc:bf:6a:d1:bf:13:bc:d6:
                    c7:f9:ff:85:50:0a:02:01:76:38:55:b8:42:68:30:
                    fb:28:1e:73:b8:51:c2:ef:9c:ae:2f:4e:87:1d:51:
                    45:81:37:2e:c3:99:65:ef:c6:ce:50:20:ce:9c:6c:
                    9f:56:aa:e2:a3:6b:ab:d4:89:cc:a8:ec:35:7c:99:
                    39:40:3c:74:bd:d9:e9:e1:45:4b:f3:e5:aa:34:3c:
                    26:79:a3:ec:95:3a:2c:6d:e5:3b:2c:0f:10:a8:ca:
                    dd:ba:55:27:6c:55:3c:1c:bf:18:96:52:75:d4:34:
                    0d:ce:fb:bf:e1:0e:65:ba:79:1a:0c:67:65:76:aa:
                    fa:e0:26:5d:10:ce:a9:e1:ea:db:94:8a:be:78:a7:
                    e7:fc:12:b7:c0:f5:ed:bf:ef:e0:c8:ba:12:31:05:
                    5b:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:06:6A:49:AE:27:82:44:F7:CF:3C:5A:2E:C4:24:92:80:90:39:EF
            X509v3 Authority Key Identifier:
                keyid:11:B4:EF:E1:F3:1C:D5:C8:F4:4A:A9:53:13:FD:0D:C3:5C:AE:24:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3696A10/CBB5DFACC38C11F0A2712CBBDAE4EC9C/EbTv4fMc1cj0SqlTE_0Nw1yuJLw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/EbTv4fMc1cj0SqlTE_0Nw1yuJLw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3696A10/CBB5DFACC38C11F0A2712CBBDAE4EC9C/EbTv4fMc1cj0SqlTE_0Nw1yuJLw.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:36:83:b6:e3:e4:d0:1f:63:2b:43:05:eb:37:cc:c7:9b:b4:
         84:d4:a5:45:c5:4b:fe:51:50:f0:da:9a:86:4b:39:96:ac:b4:
         75:38:ff:ee:ab:2b:00:88:8b:2a:e3:44:49:e3:43:03:bb:1a:
         36:3f:f9:04:b2:a2:63:a3:d7:9f:11:4b:4b:19:b3:21:9a:f2:
         37:1f:c4:b1:de:3f:12:62:3b:51:5b:0d:8a:4a:64:09:b1:64:
         fd:9b:fa:32:ec:e4:6c:54:8f:e9:b5:9a:5c:e1:1a:a1:06:e7:
         c8:bc:09:42:d8:b6:6f:af:ac:23:c1:d8:7b:a6:58:3c:72:c2:
         7c:7c:7f:8b:b3:d4:88:0e:9b:89:d9:24:d6:bb:05:b3:03:63:
         4a:c2:08:f3:b6:d0:fd:77:47:c3:a4:75:9f:46:5c:8f:3a:98:
         56:c6:bf:1b:69:d3:a2:e7:48:05:8f:9a:1e:88:d4:a9:0f:87:
         be:4b:44:e6:fc:30:c3:d7:86:7b:a6:3b:21:dd:9c:42:a0:24:
         c0:c2:f1:ff:b8:05:38:bc:01:d2:5a:89:49:47:f8:f2:e8:29:
         b7:38:66:af:50:3e:ad:08:b9:3e:93:68:a7:71:a1:7a:2c:56:
         ac:fe:52:95:5a:87:ad:35:14:a3:77:92:f7:a3:46:45:73:bb:
         88:83:b1:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 9 12:03:14 2025 by rpki-client