This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3618B80/FFDBFDAA524811EEB96964164AD9E6FC/E1GrIbf03rgU81lO-IKc3VSFi8g.mft
File:                     E1GrIbf03rgU81lO-IKc3VSFi8g.mft (raw, json)
Hash identifier:          rcaYTPbrlXauxeov/midqAtpQffQ+KTmRsGeOpD1Ucc=
Subject key identifier:   7A:49:3C:56:BE:F1:6A:1F:C3:8E:47:14:A7:B4:60:54:DD:3A:31:0A
Authority key identifier: 13:51:AB:21:B7:F4:DE:B8:14:F3:59:4E:F8:82:9C:DD:54:85:8B:C8
Certificate issuer:       /CN=F3618B80AF/serialNumber=1351AB21B7F4DEB814F3594EF8829CDD54858BC8
Certificate serial:       0354
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/E1GrIbf03rgU81lO-IKc3VSFi8g.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3618B80/FFDBFDAA524811EEB96964164AD9E6FC/E1GrIbf03rgU81lO-IKc3VSFi8g.mft
Manifest number:          0350
Signing time:             Mon 08 Dec 2025 03:44:56 +0000
Manifest this update:     Mon 08 Dec 2025 03:44:55 +0000
Manifest next update:     Wed 10 Dec 2025 03:44:55 +0000
Files and hashes:         1: E1GrIbf03rgU81lO-IKc3VSFi8g.crl (hash: W5j3+XvrYxPxmIg4L+zJUuNyKuqhIrAVorqq5puitrU=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3618B80/FFDBFDAA524811EEB96964164AD9E6FC/E1GrIbf03rgU81lO-IKc3VSFi8g.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3618B80/FFDBFDAA524811EEB96964164AD9E6FC/E1GrIbf03rgU81lO-IKc3VSFi8g.mft
                          rsync://rpki.afrinic.net/repository/afrinic/E1GrIbf03rgU81lO-IKc3VSFi8g.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 10 Dec 2025 00:06:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 852 (0x354)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3618B80AF, serialNumber=1351AB21B7F4DEB814F3594EF8829CDD54858BC8
        Validity
            Not Before: Dec  8 03:44:55 2025 GMT
            Not After : Dec 10 03:44:55 2025 GMT
        Subject: CN=693649b7-c339
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:ee:63:76:5c:3d:57:9f:9b:e1:a4:5e:52:40:
                    e3:88:40:ab:ef:e6:67:54:d6:8c:ba:85:9b:5e:c6:
                    72:3d:2d:db:d5:2c:98:38:3d:c1:6e:c4:11:98:8b:
                    7d:59:c1:f2:7f:14:7f:0e:c7:90:35:60:21:a3:6a:
                    40:b2:7b:b9:3f:18:d8:34:ff:3d:42:5e:b3:48:1a:
                    24:db:27:96:4b:64:be:ef:e6:78:49:c4:28:ab:ca:
                    46:d4:18:06:45:62:bb:f4:fb:6e:e1:94:97:55:2a:
                    d3:ca:61:ba:99:22:92:da:28:9c:c2:ae:4d:0e:05:
                    df:3c:fa:0b:69:5e:33:a1:32:5d:15:14:44:d0:25:
                    dc:22:54:00:0a:db:c5:8f:e0:dd:07:00:a9:c4:c0:
                    ed:ab:38:3e:7c:b6:c5:97:7e:63:fa:34:d8:7f:b6:
                    d7:47:b9:c4:ea:08:fb:99:8f:e1:4c:a0:b8:28:eb:
                    94:57:ad:e1:6a:83:0f:df:de:2b:a0:2a:1d:f9:f4:
                    d7:22:34:c2:8f:c5:d6:27:e8:98:ef:b1:f1:9d:b4:
                    b4:2e:ab:13:e7:13:98:cd:d8:2c:9f:6d:a3:b4:2e:
                    5f:f9:62:ec:3c:30:19:a2:5f:46:37:43:80:09:60:
                    c2:fe:1a:54:ae:a2:c1:e0:91:d9:fa:ba:b1:cc:69:
                    41:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:49:3C:56:BE:F1:6A:1F:C3:8E:47:14:A7:B4:60:54:DD:3A:31:0A
            X509v3 Authority Key Identifier:
                keyid:13:51:AB:21:B7:F4:DE:B8:14:F3:59:4E:F8:82:9C:DD:54:85:8B:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3618B80/FFDBFDAA524811EEB96964164AD9E6FC/E1GrIbf03rgU81lO-IKc3VSFi8g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/E1GrIbf03rgU81lO-IKc3VSFi8g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3618B80/FFDBFDAA524811EEB96964164AD9E6FC/E1GrIbf03rgU81lO-IKc3VSFi8g.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:20:e4:58:4a:76:1b:cb:58:c7:73:cc:29:a5:d2:61:7a:ef:
         7d:18:70:e6:55:b6:43:44:43:cc:52:c0:81:7c:2e:e7:f2:3e:
         cd:38:d5:02:6d:b4:55:58:33:75:bb:39:9e:be:29:6d:c1:17:
         13:c1:fe:0d:e8:97:61:b8:5a:a2:17:f2:14:44:80:b5:e0:b0:
         77:69:e1:62:2a:6b:9b:6a:c8:06:c3:e4:66:1c:42:78:b0:07:
         ea:38:95:2a:eb:af:a4:b8:73:69:29:17:e9:3e:d6:e2:ea:e0:
         78:1b:ee:7d:e3:f2:55:cf:42:b3:56:ad:87:a8:d7:d9:f3:83:
         f0:c7:ab:c7:d5:8f:6c:04:1c:da:9e:95:22:a3:13:a9:5d:61:
         c3:b3:f1:35:aa:c4:81:8d:6a:84:3a:35:14:74:df:60:68:f6:
         c0:97:4a:b0:c3:89:d4:8b:80:fc:40:fe:2e:5a:a7:f2:29:7b:
         74:85:bd:05:ea:ef:fc:df:9a:51:90:6f:a1:77:84:dc:48:19:
         a0:9b:1b:6b:2d:84:7f:44:41:40:0f:ab:e3:0e:a2:da:77:54:
         2a:b5:61:00:53:b6:a2:cd:21:a4:f3:e7:9c:fc:74:75:0c:f7:
         cb:5d:29:e9:64:90:58:ea:7c:76:c4:84:62:82:56:eb:e2:58:
         2f:5f:e9:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 8 17:21:04 2025 by rpki-client