This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3699B8E/FE20D820B12211E5B9294D4AF8AEA228/oTXgC5jL9934qvJiOG-OFAOqwBg.mft
File:                     oTXgC5jL9934qvJiOG-OFAOqwBg.mft (raw, json)
Hash identifier:          pQwa/idmHMm/ypLg3s7Bm9slBENnDLWHmrjVARns3YQ=
Subject key identifier:   92:F1:44:B8:24:8B:6D:26:EF:D0:96:E0:18:F0:87:71:26:AF:28:8E
Authority key identifier: A1:35:E0:0B:98:CB:F7:DD:F8:AA:F2:62:38:6F:8E:14:03:AA:C0:18
Certificate issuer:       /CN=F3699B8EAF/serialNumber=A135E00B98CBF7DDF8AAF262386F8E1403AAC018
Certificate serial:       0E82
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/oTXgC5jL9934qvJiOG-OFAOqwBg.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3699B8E/FE20D820B12211E5B9294D4AF8AEA228/oTXgC5jL9934qvJiOG-OFAOqwBg.mft
Manifest number:          0E7D
Signing time:             Sat 13 Dec 2025 01:00:15 +0000
Manifest this update:     Sat 13 Dec 2025 01:00:14 +0000
Manifest next update:     Mon 15 Dec 2025 01:00:14 +0000
Files and hashes:         1: oTXgC5jL9934qvJiOG-OFAOqwBg.crl (hash: wy8PhY3fPaCqB9Wfn+GvU5KjQjbr9Dj10Xnmha4nQLU=)
                          2: FE5120C28FC111EDA79FCAC6F1222468.roa (hash: lagFk2mFf27o4rt0Ohp9C1TojQSFtfsxgyTlz5cUfvY=)
                          3: 3C9EDFE23B6911EEA2301F794AD9E6FC.roa (hash: wWzG/QoAuMYgq7222Q1LjDeYdIF1ogj08piOCTP/j4s=)
                          4: 89433AF2042E11EBA6782612F8AEA228.roa (hash: fYVRQ0io2BTLFn2lqVJHMZb8a+nPwuovmeRLf5YAMDY=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3699B8E/FE20D820B12211E5B9294D4AF8AEA228/oTXgC5jL9934qvJiOG-OFAOqwBg.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3699B8E/FE20D820B12211E5B9294D4AF8AEA228/oTXgC5jL9934qvJiOG-OFAOqwBg.mft
                          rsync://rpki.afrinic.net/repository/afrinic/oTXgC5jL9934qvJiOG-OFAOqwBg.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 15 Dec 2025 00:06:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3714 (0xe82)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3699B8EAF, serialNumber=A135E00B98CBF7DDF8AAF262386F8E1403AAC018
        Validity
            Not Before: Dec 13 01:00:14 2025 GMT
            Not After : Dec 15 01:00:14 2025 GMT
        Subject: CN=693cba9f-3630
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:6f:cc:a7:24:58:70:60:03:02:69:c7:d8:a0:
                    07:ac:a9:a1:ae:81:47:e0:45:c3:cf:4f:b1:e5:60:
                    9d:27:6d:8e:ba:e2:0d:85:63:95:f7:4a:3c:51:fa:
                    df:af:af:2a:88:7a:bf:22:64:bf:36:ca:bc:b4:13:
                    be:6a:fd:c8:3b:16:54:72:44:57:1b:9d:28:d9:08:
                    47:fd:52:48:95:19:72:c7:41:c4:16:95:9b:4c:0a:
                    7a:41:4e:03:d1:94:39:90:41:56:6a:77:ce:f2:d7:
                    e7:96:a9:62:1a:05:5c:ad:cd:98:75:00:35:13:f3:
                    44:79:f6:f4:95:1e:46:1d:8a:8d:2a:bd:22:ea:b3:
                    71:62:69:b8:03:04:89:25:e0:af:a0:24:f1:ff:0f:
                    d2:ac:fe:09:cf:08:93:cf:e1:dc:4a:85:a5:bb:ec:
                    97:dc:4a:95:a3:e7:50:62:ae:c8:1b:25:74:7e:14:
                    09:b1:01:90:92:a6:99:d9:44:79:a2:ab:dd:79:ba:
                    1f:8c:a2:c5:27:9d:1d:ab:d0:d4:e8:70:c0:68:68:
                    43:66:53:73:66:60:d0:ac:d5:9a:b2:2e:07:fb:2d:
                    48:62:d1:8e:74:46:d9:89:c4:8e:92:aa:4c:6b:41:
                    3c:be:cd:93:4e:c3:3b:69:57:6f:69:21:f1:49:8e:
                    aa:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:F1:44:B8:24:8B:6D:26:EF:D0:96:E0:18:F0:87:71:26:AF:28:8E
            X509v3 Authority Key Identifier:
                keyid:A1:35:E0:0B:98:CB:F7:DD:F8:AA:F2:62:38:6F:8E:14:03:AA:C0:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3699B8E/FE20D820B12211E5B9294D4AF8AEA228/oTXgC5jL9934qvJiOG-OFAOqwBg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/oTXgC5jL9934qvJiOG-OFAOqwBg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3699B8E/FE20D820B12211E5B9294D4AF8AEA228/oTXgC5jL9934qvJiOG-OFAOqwBg.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:f9:50:93:33:4b:f0:a7:aa:64:8c:33:25:9c:9f:26:3d:f3:
         7f:8b:30:cc:7f:c5:38:9c:e9:fd:81:3b:cf:27:f2:ea:9b:34:
         8a:41:f0:95:02:10:71:08:aa:0c:0c:f5:f6:45:d8:13:f7:a7:
         09:12:2c:fb:9d:e9:a9:66:5b:7e:25:59:89:20:92:11:f4:d5:
         54:f0:f8:82:81:26:a1:92:83:1b:be:19:f9:20:99:1a:f6:be:
         59:c8:d9:26:3b:e2:5f:5d:d8:3c:b9:28:30:6a:fb:18:53:37:
         c8:d5:27:ea:33:de:7f:49:42:c0:50:c0:05:42:53:b7:3b:86:
         b6:ba:73:fc:2a:6d:5d:49:5b:dd:ec:dc:d5:d3:23:c3:c7:41:
         0b:5d:35:64:b4:2e:57:27:11:6d:f2:8d:3b:35:b6:ab:a7:6c:
         f8:77:74:b6:86:1b:57:d3:42:c5:93:18:f6:14:d5:42:c9:cf:
         0e:d0:6d:1f:9d:e7:37:2e:88:81:44:d4:2e:70:d6:61:ac:8f:
         c9:2e:ba:d3:e4:90:d2:eb:02:18:b2:e5:cc:3d:34:4a:f7:2e:
         30:3c:9d:db:07:ba:60:44:34:cf:ec:12:2e:71:15:2b:54:c3:
         c1:49:17:60:c4:86:da:35:9e:98:7b:b3:56:af:75:d1:c9:c5:
         cb:b5:d4:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 13 20:42:17 2025 by rpki-client