This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3617770/E57BA9D8DC0311EF9C482C52762E951A/v62u3NVIMg_I8seYfA4imdy6Opw.mft
File:                     v62u3NVIMg_I8seYfA4imdy6Opw.mft (raw, json)
Hash identifier:          qZHAvPa2p1TyI+900aeNvOOiLosIw8TBjn1V+XCBnw4=
Subject key identifier:   7D:F1:8A:F4:87:1E:57:1C:BE:E3:B5:51:31:24:A7:53:17:AC:22:3F
Authority key identifier: BF:AD:AE:DC:D5:48:32:0F:C8:F2:C7:98:7C:0E:22:99:DC:BA:3A:9C
Certificate issuer:       /CN=F3617770AF/serialNumber=BFADAEDCD548320FC8F2C7987C0E2299DCBA3A9C
Certificate serial:       0142
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/v62u3NVIMg_I8seYfA4imdy6Opw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3617770/E57BA9D8DC0311EF9C482C52762E951A/v62u3NVIMg_I8seYfA4imdy6Opw.mft
Manifest number:          0142
Signing time:             Mon 08 Dec 2025 04:48:14 +0000
Manifest this update:     Mon 08 Dec 2025 04:48:13 +0000
Manifest next update:     Wed 10 Dec 2025 04:48:13 +0000
Files and hashes:         1: v62u3NVIMg_I8seYfA4imdy6Opw.crl (hash: xAU6SvdQlchCiJqvhdHitltkrO+zMr0HWstYd7aOLYg=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3617770/E57BA9D8DC0311EF9C482C52762E951A/v62u3NVIMg_I8seYfA4imdy6Opw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3617770/E57BA9D8DC0311EF9C482C52762E951A/v62u3NVIMg_I8seYfA4imdy6Opw.mft
                          rsync://rpki.afrinic.net/repository/afrinic/v62u3NVIMg_I8seYfA4imdy6Opw.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 10 Dec 2025 00:06:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 322 (0x142)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3617770AF, serialNumber=BFADAEDCD548320FC8F2C7987C0E2299DCBA3A9C
        Validity
            Not Before: Dec  8 04:48:13 2025 GMT
            Not After : Dec 10 04:48:13 2025 GMT
        Subject: CN=6936588e-5a6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:b0:93:58:3f:da:85:05:a4:e0:43:aa:09:35:
                    72:c7:d6:90:d6:e3:fb:c7:75:c3:2b:35:e9:12:b0:
                    39:a4:f9:27:1a:2c:73:9a:9e:6b:bc:ec:2d:41:fa:
                    d2:08:ee:e4:c6:e9:2c:4b:6a:71:eb:13:fa:09:77:
                    35:d2:7b:67:0c:d6:bb:06:62:7c:d0:24:21:cf:eb:
                    0c:f3:cd:f3:be:7c:3a:da:24:93:a2:cd:6d:19:10:
                    d5:99:b5:5b:9e:f8:0a:bf:75:72:f4:cc:a3:85:45:
                    ac:2d:a5:99:52:3b:5f:96:ea:2b:f6:0b:e9:44:eb:
                    b3:5a:24:2d:a4:d4:ca:12:19:fc:15:dd:30:a6:ba:
                    c2:ea:4f:be:5d:47:2c:c2:3f:ce:e9:d0:a7:5c:1c:
                    79:53:e8:89:98:9a:42:fe:6f:34:39:c3:e6:5e:7b:
                    61:00:8f:a4:48:03:fd:d4:3b:fc:ca:53:33:75:2f:
                    d2:f4:5f:a7:a3:6e:04:fa:b1:a0:19:ee:26:7a:77:
                    de:08:46:e2:19:fe:71:44:1c:3f:ed:8c:61:ba:6f:
                    ac:07:b7:62:ac:24:3d:83:dc:de:3d:3e:f1:8a:2c:
                    57:71:6c:40:a1:b8:24:df:7d:24:23:00:c1:73:c4:
                    b6:75:f1:8a:54:61:12:34:08:1c:41:7e:59:68:96:
                    01:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:F1:8A:F4:87:1E:57:1C:BE:E3:B5:51:31:24:A7:53:17:AC:22:3F
            X509v3 Authority Key Identifier:
                keyid:BF:AD:AE:DC:D5:48:32:0F:C8:F2:C7:98:7C:0E:22:99:DC:BA:3A:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3617770/E57BA9D8DC0311EF9C482C52762E951A/v62u3NVIMg_I8seYfA4imdy6Opw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/v62u3NVIMg_I8seYfA4imdy6Opw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3617770/E57BA9D8DC0311EF9C482C52762E951A/v62u3NVIMg_I8seYfA4imdy6Opw.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         f2:f6:a5:06:ff:26:23:e7:6c:ce:3e:5b:e0:04:30:6d:7e:fb:
         ff:e9:30:8c:30:b8:f5:0f:7b:ec:ff:37:f5:18:0c:76:4c:f0:
         45:82:ff:19:37:05:4c:2e:65:6e:17:62:71:5c:a8:03:a1:f3:
         35:3e:31:c0:49:26:eb:1b:62:58:d5:ae:15:41:4f:39:c3:d6:
         d3:5b:d0:c1:07:e1:70:03:e6:04:f9:f4:bf:af:e8:ab:67:62:
         d9:24:17:57:0a:29:fd:50:d0:c6:12:53:5c:e8:50:9a:87:e7:
         ab:b1:bc:9f:5f:db:0c:c2:f9:bd:3e:3b:78:03:a5:56:db:37:
         8f:78:90:7f:93:7e:df:f2:b3:b4:4f:ff:c2:96:23:a2:8d:8a:
         20:cb:a4:ce:83:c9:b7:c6:5b:ef:98:df:3f:3f:57:02:2b:d6:
         4b:00:86:3e:06:e1:35:ed:cb:2a:99:00:bd:28:f2:16:23:d2:
         58:44:16:77:8e:6a:f6:6e:b4:26:0f:05:93:b0:39:2d:94:2b:
         7a:80:7f:bf:e7:c7:7b:1c:6a:8c:0d:1a:09:ff:ed:c3:a5:26:
         b7:12:11:3d:05:b9:63:4b:d2:5a:6a:13:60:be:e8:87:11:1c:
         ac:d3:c4:4d:13:54:98:d0:69:8e:92:e6:40:1e:65:76:9e:24:
         0f:94:59:8f
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICAUIwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
MTc3NzBBRjExMC8GA1UEBRMoQkZBREFFRENENTQ4MzIwRkM4RjJDNzk4N0MwRTIy
OTlEQ0JBM0E5QzAeFw0yNTEyMDgwNDQ4MTNaFw0yNTEyMTAwNDQ4MTNaMBgxFjAU
BgNVBAMTDTY5MzY1ODhlLTVhNmMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCpsJNYP9qFBaTgQ6oJNXLH1pDW4/vHdcMrNekSsDmk+ScaLHOanmu87C1B
+tII7uTG6SxLanHrE/oJdzXSe2cM1rsGYnzQJCHP6wzzzfO+fDraJJOizW0ZENWZ
tVue+Aq/dXL0zKOFRawtpZlSO1+W6iv2C+lE67NaJC2k1MoSGfwV3TCmusLqT75d
RyzCP87p0KdcHHlT6ImYmkL+bzQ5w+Zee2EAj6RIA/3UO/zKUzN1L9L0X6ejbgT6
saAZ7iZ6d94IRuIZ/nFEHD/tjGG6b6wHt2KsJD2D3N49PvGKLFdxbEChuCTffSQj
AMFzxLZ18YpUYRI0CBxBfllolgFzAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUffGK
9IceVxy+47VRMSSnUxesIj8wHwYDVR0jBBgwFoAUv62u3NVIMg/I8seYfA4imdy6
OpwwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjE3NzcwL0U1N0JBOUQ4REMwMzExRUY5QzQ4MkM1Mjc2MkU5NTFBL3Y2MnUz
TlZJTWdfSThzZVlmQTRpbWR5Nk9wdy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL3Y2MnUzTlZJTWdfSThzZVlmQTRpbWR5Nk9wdy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2MTc3NzAvRTU3QkE5RDhEQzAzMTFFRjlDNDgyQzUyNzYy
RTk1MUEvdjYydTNOVklNZ19JOHNlWWZBNGltZHk2T3B3Lm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQDy9qUG/yYj52zOPlvgBDBtfvv/6TCM
MLj1D3vs/zf1GAx2TPBFgv8ZNwVMLmVuF2JxXKgDofM1PjHASSbrG2JY1a4VQU85
w9bTW9DBB+FwA+YE+fS/r+irZ2LZJBdXCin9UNDGElNc6FCah+ersbyfX9sMwvm9
Pjt4A6VW2zePeJB/k37f8rO0T//CliOijYogy6TOg8m3xlvvmN8/P1cCK9ZLAIY+
BuE17csqmQC9KPIWI9JYRBZ3jmr2brQmDwWTsDktlCt6gH+/58d7HGqMDRoJ/+3D
pSa3EhE9BbljS9JaahNgvuiHERys08RNE1SY0GmOkuZAHmV2niQPlFmP
-----END CERTIFICATE-----
Generated at Mon Dec 8 17:27:09 2025 by rpki-client