This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3619CE0/FC275A24AD5F11EF91E30957762E951A/v1plQpwwfXk7DXBa2V_P60lCIWo.mft
File:                     v1plQpwwfXk7DXBa2V_P60lCIWo.mft (raw, json)
Hash identifier:          OJJKQlSQgvo+V9GrL7rZ+9Wg5H6xeQ4mS6GWonvIW1o=
Subject key identifier:   D2:4E:EF:88:00:7F:83:31:2A:EC:E9:4E:85:27:AE:8B:1D:6F:E9:ED
Authority key identifier: BF:5A:65:42:9C:30:7D:79:3B:0D:70:5A:D9:5F:CF:EB:49:42:21:6A
Certificate issuer:       /CN=F3619CE0AF/serialNumber=BF5A65429C307D793B0D705AD95FCFEB4942216A
Certificate serial:       0183
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/v1plQpwwfXk7DXBa2V_P60lCIWo.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3619CE0/FC275A24AD5F11EF91E30957762E951A/v1plQpwwfXk7DXBa2V_P60lCIWo.mft
Manifest number:          0182
Signing time:             Mon 08 Dec 2025 04:42:46 +0000
Manifest this update:     Mon 08 Dec 2025 04:42:46 +0000
Manifest next update:     Wed 10 Dec 2025 04:42:46 +0000
Files and hashes:         1: v1plQpwwfXk7DXBa2V_P60lCIWo.crl (hash: OmO76HWc4wIv50eekaMQC88GGGsUxp8Cm2QlrgYfgMg=)
                          2: 3995E772B22911EF8FFA5C88762E951A.roa (hash: q5GdnXuThvMc7lFNIre+h57AswQCqM5v2uH6+3ENceQ=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3619CE0/FC275A24AD5F11EF91E30957762E951A/v1plQpwwfXk7DXBa2V_P60lCIWo.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3619CE0/FC275A24AD5F11EF91E30957762E951A/v1plQpwwfXk7DXBa2V_P60lCIWo.mft
                          rsync://rpki.afrinic.net/repository/afrinic/v1plQpwwfXk7DXBa2V_P60lCIWo.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 10 Dec 2025 00:06:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 387 (0x183)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3619CE0AF, serialNumber=BF5A65429C307D793B0D705AD95FCFEB4942216A
        Validity
            Not Before: Dec  8 04:42:46 2025 GMT
            Not After : Dec 10 04:42:46 2025 GMT
        Subject: CN=69365746-afab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:0e:b9:1b:cb:14:81:47:6f:96:4d:3e:26:59:
                    9a:42:d6:0d:25:c2:03:49:20:ac:bd:4b:1b:c5:e2:
                    4c:aa:01:63:ac:95:c7:cc:bc:c6:cb:95:69:9d:7f:
                    c1:09:42:18:df:8e:2f:50:2f:f8:23:61:dd:ee:b4:
                    ba:2a:24:97:7d:83:50:5e:85:c1:54:60:6f:d8:b8:
                    f0:b5:d6:d1:fb:89:f6:d1:1d:c4:77:30:84:a7:5a:
                    f0:a2:d9:13:e9:34:0a:97:6d:70:9b:9e:e5:8f:b4:
                    ba:84:64:df:e1:75:92:83:e0:f3:2c:bd:f6:93:76:
                    d3:f9:7a:da:80:53:1b:47:ae:af:81:5b:cf:e6:ea:
                    8c:02:bc:c8:40:39:6e:18:55:39:89:26:0d:39:27:
                    21:6f:23:16:fd:83:e3:b0:b4:dd:25:85:26:03:5e:
                    1d:a0:db:f9:66:12:2e:bc:37:48:e8:5d:ed:96:23:
                    20:0f:ef:96:d5:ab:4a:84:ce:b9:c7:b5:d8:7a:79:
                    4a:53:fe:00:cc:8f:41:c9:43:ca:45:6a:c2:cc:99:
                    3c:68:35:9d:8e:98:52:82:39:6b:4f:d4:2c:5f:cf:
                    44:4d:3d:0e:ce:0c:e7:3a:50:0b:65:a7:2b:d0:b0:
                    16:d0:c7:6e:06:33:ea:a3:45:0e:04:e3:1b:54:1e:
                    e0:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:4E:EF:88:00:7F:83:31:2A:EC:E9:4E:85:27:AE:8B:1D:6F:E9:ED
            X509v3 Authority Key Identifier:
                keyid:BF:5A:65:42:9C:30:7D:79:3B:0D:70:5A:D9:5F:CF:EB:49:42:21:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3619CE0/FC275A24AD5F11EF91E30957762E951A/v1plQpwwfXk7DXBa2V_P60lCIWo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/v1plQpwwfXk7DXBa2V_P60lCIWo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3619CE0/FC275A24AD5F11EF91E30957762E951A/v1plQpwwfXk7DXBa2V_P60lCIWo.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c1:29:09:1c:9e:cb:68:76:4b:87:0f:f6:3f:99:33:64:d7:6c:
         9d:9d:44:2a:54:13:83:be:bb:fd:ef:dc:23:4d:84:8e:72:ca:
         2a:d7:72:e7:be:96:79:39:8e:f0:fa:a1:62:18:b7:21:c3:5e:
         2a:18:a8:6a:32:56:a1:ca:1e:95:71:8e:13:ba:2b:f2:a0:97:
         fa:a7:3d:fe:53:54:73:9d:e1:ae:dc:bd:05:7e:43:f4:73:33:
         68:42:d7:b7:b9:ad:b5:cc:80:f8:f0:7b:47:91:e3:c2:74:06:
         00:80:be:68:a1:25:43:19:c0:42:95:22:68:b4:6c:6a:3e:d5:
         ca:97:51:46:3a:bb:88:60:5d:9c:39:7f:4e:b7:ef:f4:e6:8a:
         bb:4f:d0:ca:a3:00:11:4b:9b:35:41:35:c5:c9:c7:e4:06:7f:
         9c:69:35:21:8d:ad:cc:e7:e8:f1:a5:d4:7b:5b:d8:b8:fa:a0:
         e3:b3:ce:a8:8f:79:98:3f:af:a9:b1:18:7a:35:62:d8:7f:60:
         1a:ae:c0:11:67:62:9a:ec:92:eb:f3:3f:ba:88:e3:db:a5:ed:
         4b:5f:9c:2b:d5:a2:17:ec:f5:56:a2:5f:69:64:fe:e6:de:99:
         53:ff:89:64:4b:f5:9a:ef:ef:08:80:b0:5a:6c:f1:99:0d:9a:
         a2:13:3e:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 8 17:04:46 2025 by rpki-client