This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3614DFD/9187C5D4776711EE99DFD9724AD9E6FC/POdKxSWrybUFEx5W069Lqgyoa8c.mft
File:                     POdKxSWrybUFEx5W069Lqgyoa8c.mft (raw, json)
Hash identifier:          1RYuJkpalXMx7+9i/qM/etM18+X+Ba40bKFRK5sANvQ=
Subject key identifier:   A3:F2:81:A8:AF:7F:70:AB:55:4E:78:87:AD:50:92:1F:5B:65:70:D6
Authority key identifier: 3C:E7:4A:C5:25:AB:C9:B5:05:13:1E:56:D3:AF:4B:AA:0C:A8:6B:C7
Certificate issuer:       /CN=F3614DFDAF/serialNumber=3CE74AC525ABC9B505131E56D3AF4BAA0CA86BC7
Certificate serial:       0321
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/POdKxSWrybUFEx5W069Lqgyoa8c.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3614DFD/9187C5D4776711EE99DFD9724AD9E6FC/POdKxSWrybUFEx5W069Lqgyoa8c.mft
Manifest number:          031D
Signing time:             Mon 08 Dec 2025 03:49:37 +0000
Manifest this update:     Mon 08 Dec 2025 03:49:36 +0000
Manifest next update:     Wed 10 Dec 2025 03:49:36 +0000
Files and hashes:         1: POdKxSWrybUFEx5W069Lqgyoa8c.crl (hash: XL2Aop3tnbyEAgDilShNtketuRiqY/IVSrSKuIb5wvc=)
                          2: AF323FA6BEB611EE92751B56775412E6.roa (hash: GK2/9/UfmXeWntRnu6M2Z7FCwh1Nn+0g0buRneYltSM=)
                          3: 40F84818776811EEA27107754AD9E6FC.roa (hash: nFqZ/v55EZimpFy2xDwmiE1oDV8eSlURy0csO3fvt1E=)
                          4: BEC2B6AE7FD611EEA15ECB6C4AD9E6FC.roa (hash: fJFVTiESI7QrywlkzoasbC83KVzfgYWTl7sxxTe7Lrk=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3614DFD/9187C5D4776711EE99DFD9724AD9E6FC/POdKxSWrybUFEx5W069Lqgyoa8c.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3614DFD/9187C5D4776711EE99DFD9724AD9E6FC/POdKxSWrybUFEx5W069Lqgyoa8c.mft
                          rsync://rpki.afrinic.net/repository/afrinic/POdKxSWrybUFEx5W069Lqgyoa8c.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 10 Dec 2025 00:06:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 801 (0x321)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3614DFDAF, serialNumber=3CE74AC525ABC9B505131E56D3AF4BAA0CA86BC7
        Validity
            Not Before: Dec  8 03:49:36 2025 GMT
            Not After : Dec 10 03:49:36 2025 GMT
        Subject: CN=69364ad1-dcd3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:a7:3d:27:f8:97:90:4c:06:20:e7:08:6a:68:
                    4d:2d:72:d0:62:55:a5:44:84:72:00:87:89:42:7e:
                    bb:d7:6d:f0:9a:e4:d5:bb:da:34:79:0b:39:a9:63:
                    bc:77:82:32:43:63:01:c3:48:4b:b2:c8:24:4e:ce:
                    9a:ef:68:ce:0b:9b:1a:62:bb:fb:16:af:13:6d:13:
                    a6:ea:f7:7f:47:cc:fc:cb:59:ba:71:d0:7f:2a:17:
                    7a:d1:9a:2c:e2:22:a3:7f:ce:8e:ca:e5:73:97:4a:
                    68:9b:7b:bc:a3:3a:fe:f3:77:c9:7e:1d:b9:eb:7b:
                    76:9c:de:22:e9:3d:f4:5a:1f:78:9d:7d:8f:06:3e:
                    f1:50:1c:12:23:92:97:3d:08:e1:ea:f2:81:05:da:
                    6f:89:9f:ea:68:1c:37:35:78:0e:e3:9f:f6:00:2f:
                    98:88:02:c8:16:82:9d:7f:11:15:11:e6:6c:2f:12:
                    da:95:b7:5c:33:63:d7:ef:0c:d6:fb:c8:52:24:17:
                    06:24:49:05:3e:45:cd:7d:da:1e:08:46:50:61:86:
                    15:d9:60:36:66:5c:f5:55:9a:d7:8f:f2:bc:aa:b1:
                    61:60:12:9b:3e:bc:2d:c1:dd:5d:a4:7c:3a:05:00:
                    1a:70:91:23:5d:81:1a:d9:99:4e:95:d7:cf:32:f1:
                    70:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:F2:81:A8:AF:7F:70:AB:55:4E:78:87:AD:50:92:1F:5B:65:70:D6
            X509v3 Authority Key Identifier:
                keyid:3C:E7:4A:C5:25:AB:C9:B5:05:13:1E:56:D3:AF:4B:AA:0C:A8:6B:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3614DFD/9187C5D4776711EE99DFD9724AD9E6FC/POdKxSWrybUFEx5W069Lqgyoa8c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/POdKxSWrybUFEx5W069Lqgyoa8c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3614DFD/9187C5D4776711EE99DFD9724AD9E6FC/POdKxSWrybUFEx5W069Lqgyoa8c.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:48:b1:5b:dc:65:c7:83:be:92:a0:0d:fc:32:2a:69:6a:7a:
         e3:38:18:17:b0:8b:2e:f1:c9:8a:35:04:83:30:ac:04:47:d1:
         2b:9f:01:e1:30:dc:ce:04:ac:91:38:51:7c:ec:29:7f:ad:d0:
         2f:53:c1:8d:36:3f:15:42:bb:bc:92:99:b0:ba:69:ad:99:dc:
         83:81:f6:bc:88:87:6d:72:80:b3:03:05:2e:8c:cf:e8:8e:db:
         51:42:0d:d8:40:eb:fe:67:ee:9d:09:0a:df:5a:d0:ac:5e:42:
         21:50:55:ed:12:5e:6b:2f:4f:23:01:2f:64:09:ae:ae:dc:b0:
         76:07:00:1b:c3:1e:d4:7d:ea:df:af:30:bd:13:e3:46:c2:7a:
         e9:ee:51:96:9f:4c:fe:9a:2b:73:80:1a:14:26:b2:b9:cb:08:
         5c:bd:60:e5:a5:5f:c4:5c:12:27:af:b0:cb:fb:b8:74:4b:5c:
         54:2a:64:74:bd:8e:af:41:ae:c1:f1:b2:a2:12:c6:b4:a3:25:
         d9:f0:dc:f5:e1:05:4b:64:64:88:71:ee:a5:1d:b5:ce:07:0a:
         71:6c:6e:58:96:b7:04:b8:55:3a:e0:c6:a4:14:59:cb:2b:10:
         8d:b0:ce:b3:9e:11:bf:09:b7:da:c8:74:6e:3f:89:92:85:5f:
         42:b8:ef:0c
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICAyEwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
MTRERkRBRjExMC8GA1UEBRMoM0NFNzRBQzUyNUFCQzlCNTA1MTMxRTU2RDNBRjRC
QUEwQ0E4NkJDNzAeFw0yNTEyMDgwMzQ5MzZaFw0yNTEyMTAwMzQ5MzZaMBgxFjAU
BgNVBAMTDTY5MzY0YWQxLWRjZDMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCkpz0n+JeQTAYg5whqaE0tctBiVaVEhHIAh4lCfrvXbfCa5NW72jR5Czmp
Y7x3gjJDYwHDSEuyyCROzprvaM4Lmxpiu/sWrxNtE6bq939HzPzLWbpx0H8qF3rR
miziIqN/zo7K5XOXSmibe7yjOv7zd8l+Hbnre3ac3iLpPfRaH3idfY8GPvFQHBIj
kpc9COHq8oEF2m+Jn+poHDc1eA7jn/YAL5iIAsgWgp1/ERUR5mwvEtqVt1wzY9fv
DNb7yFIkFwYkSQU+Rc192h4IRlBhhhXZYDZmXPVVmteP8ryqsWFgEps+vC3B3V2k
fDoFABpwkSNdgRrZmU6V188y8XBJAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUo/KB
qK9/cKtVTniHrVCSH1tlcNYwHwYDVR0jBBgwFoAUPOdKxSWrybUFEx5W069Lqgyo
a8cwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjE0REZELzkxODdDNUQ0Nzc2NzExRUU5OURGRDk3MjRBRDlFNkZDL1BPZEt4
U1dyeWJVRkV4NVcwNjlMcWd5b2E4Yy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1BPZEt4U1dyeWJVRkV4NVcwNjlMcWd5b2E4Yy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2MTRERkQvOTE4N0M1RDQ3NzY3MTFFRTk5REZEOTcyNEFE
OUU2RkMvUE9kS3hTV3J5YlVGRXg1VzA2OUxxZ3lvYThjLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQB/SLFb3GXHg76SoA38MippanrjOBgX
sIsu8cmKNQSDMKwER9ErnwHhMNzOBKyROFF87Cl/rdAvU8GNNj8VQru8kpmwummt
mdyDgfa8iIdtcoCzAwUujM/ojttRQg3YQOv+Z+6dCQrfWtCsXkIhUFXtEl5rL08j
AS9kCa6u3LB2BwAbwx7UferfrzC9E+NGwnrp7lGWn0z+mitzgBoUJrK5ywhcvWDl
pV/EXBInr7DL+7h0S1xUKmR0vY6vQa7B8bKiEsa0oyXZ8Nz14QVLZGSIce6lHbXO
BwpxbG5YlrcEuFU64MakFFnLKxCNsM6znhG/CbfayHRuP4mShV9CuO8M
-----END CERTIFICATE-----
Generated at Mon Dec 8 17:04:47 2025 by rpki-client