This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F361D56A/918952F8DABF11EE9E12439B775412E6/3uv10iGxxI0Fn9-JTuoYZrA2_LE.mft
File:                     3uv10iGxxI0Fn9-JTuoYZrA2_LE.mft (raw, json)
Hash identifier:          QAWCpYts1k7M3/V4ckqCKpz6Zc9y9YIrwp8YoARAvXw=
Subject key identifier:   3F:94:C7:C1:CB:B8:D3:AB:32:0B:A0:A9:10:E1:5C:E3:32:9C:C9:00
Authority key identifier: DE:EB:F5:D2:21:B1:C4:8D:05:9F:DF:89:4E:EA:18:66:B0:36:FC:B1
Certificate issuer:       /CN=F361D56AAF/serialNumber=DEEBF5D221B1C48D059FDF894EEA1866B036FCB1
Certificate serial:       02A5
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/3uv10iGxxI0Fn9-JTuoYZrA2_LE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F361D56A/918952F8DABF11EE9E12439B775412E6/3uv10iGxxI0Fn9-JTuoYZrA2_LE.mft
Manifest number:          02A3
Signing time:             Sun 21 Dec 2025 04:06:08 +0000
Manifest this update:     Sun 21 Dec 2025 04:06:08 +0000
Manifest next update:     Tue 23 Dec 2025 04:06:08 +0000
Files and hashes:         1: 3uv10iGxxI0Fn9-JTuoYZrA2_LE.crl (hash: aUrW/rLN4YYv23CEYxFda3beGqvSOYcus4uPiriqumc=)
                          2: 181084A206B911EF877AA736017001B1.roa (hash: CNpzrTzZHNqI/KQx7+VeOW0cqEbnDDNqqbPZUxsZXi8=)
                          3: 7BBFF534DAC011EE9F02A59C775412E6.roa (hash: g+eSyoxBxFaA95GzZtzgap9h90ISnN1S4iw1SJsECZk=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F361D56A/918952F8DABF11EE9E12439B775412E6/3uv10iGxxI0Fn9-JTuoYZrA2_LE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F361D56A/918952F8DABF11EE9E12439B775412E6/3uv10iGxxI0Fn9-JTuoYZrA2_LE.mft
                          rsync://rpki.afrinic.net/repository/afrinic/3uv10iGxxI0Fn9-JTuoYZrA2_LE.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 23 Dec 2025 04:06:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 677 (0x2a5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F361D56AAF, serialNumber=DEEBF5D221B1C48D059FDF894EEA1866B036FCB1
        Validity
            Not Before: Dec 21 04:06:08 2025 GMT
            Not After : Dec 23 04:06:08 2025 GMT
        Subject: CN=69477230-c57f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:69:63:c7:44:ac:d7:3a:0d:63:5c:43:b5:cd:
                    b7:4c:3c:76:44:92:bf:01:60:b4:98:0f:ba:8b:61:
                    28:20:49:75:af:13:92:b5:50:cf:29:43:19:b1:99:
                    55:a0:46:ef:07:d4:ec:9c:d4:a6:a4:58:e8:33:14:
                    5f:59:b2:98:90:a7:11:81:48:ab:c9:e5:58:0d:b3:
                    01:e5:d8:34:22:1f:8d:65:ca:44:ab:e6:b5:d7:70:
                    e0:fe:83:1b:79:93:5a:bb:64:43:c2:be:ab:65:ec:
                    e0:ca:50:b2:17:fc:db:be:54:0f:7f:7f:92:86:36:
                    c8:08:2e:45:72:72:07:0f:50:d8:93:22:95:f0:e5:
                    30:ec:ae:89:66:1c:d8:62:6f:be:32:92:91:46:d7:
                    f3:26:ab:f2:3a:41:8f:ee:74:b2:50:55:b7:6b:0d:
                    a9:b1:85:78:60:ca:7d:38:ad:09:fa:f1:43:df:2a:
                    51:5b:02:37:18:3e:c9:61:b7:d7:ef:49:2e:be:27:
                    99:7f:56:cc:c0:dd:86:67:a2:fe:0e:61:00:73:d7:
                    1a:5f:8d:53:cd:29:a3:7d:1e:4a:4b:90:93:04:3f:
                    11:88:58:9f:5c:2a:9c:8b:aa:4c:1e:22:73:92:d8:
                    36:18:46:63:f6:f4:44:3a:35:f0:94:fc:b5:1b:42:
                    ec:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:94:C7:C1:CB:B8:D3:AB:32:0B:A0:A9:10:E1:5C:E3:32:9C:C9:00
            X509v3 Authority Key Identifier:
                keyid:DE:EB:F5:D2:21:B1:C4:8D:05:9F:DF:89:4E:EA:18:66:B0:36:FC:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F361D56A/918952F8DABF11EE9E12439B775412E6/3uv10iGxxI0Fn9-JTuoYZrA2_LE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/3uv10iGxxI0Fn9-JTuoYZrA2_LE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F361D56A/918952F8DABF11EE9E12439B775412E6/3uv10iGxxI0Fn9-JTuoYZrA2_LE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:b0:a0:84:40:6c:07:ba:41:ea:20:91:b6:25:f0:c8:f1:bd:
         29:22:34:41:f8:7a:d6:d1:b1:5f:77:18:05:9c:b9:19:5b:39:
         bd:50:ff:a6:17:b7:28:7e:49:8d:fd:8c:8b:88:e9:59:fa:a4:
         11:2d:ab:66:df:6a:ef:08:13:47:e3:9d:ad:c5:9a:9b:db:47:
         24:4f:fb:c0:16:e5:ce:66:3e:11:aa:b4:17:bb:b7:e3:a6:5d:
         af:b7:78:79:0d:b8:98:95:10:ee:3d:6a:6d:da:e2:e7:e8:e4:
         4c:d8:1d:65:39:f0:0e:74:01:50:db:7b:87:33:06:39:cb:a5:
         6b:4b:8f:72:7e:94:98:48:35:10:6c:ee:35:7d:39:25:a4:f5:
         0e:d3:29:33:84:11:7e:48:f7:6c:f1:11:15:b0:81:78:e7:14:
         10:92:d4:95:bc:20:c3:fa:ad:a0:4d:3e:f9:1d:24:41:6d:b1:
         10:78:fc:ac:35:00:07:aa:eb:4c:e3:dd:ac:fc:c3:5d:0d:0a:
         0b:ae:0f:42:29:31:00:6d:89:ce:a6:cc:93:e9:97:50:fa:f3:
         85:2d:75:56:1c:a9:d6:e6:ab:94:83:40:a7:a6:d7:ab:32:17:
         c7:67:5a:03:e1:ca:5b:42:2f:f6:d3:4f:7f:45:8c:54:80:72:
         8f:ce:65:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 23:16:07 2025 by rpki-client