This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3620C16/B52E9370052311EE873C2D364AD9E6FC/FdMWS-J5kLCFK0i2ahVDO3cZAIw.mft
File:                     FdMWS-J5kLCFK0i2ahVDO3cZAIw.mft (raw, json)
Hash identifier:          a1DNUfnwQLgv/Q4zmMZP8X/uG3GPA45czTfsTxEhPAw=
Subject key identifier:   33:F5:AD:E5:92:0C:35:43:6C:8E:95:25:D0:C7:1D:0F:6D:E6:BC:E1
Authority key identifier: 15:D3:16:4B:E2:79:90:B0:85:2B:48:B6:6A:15:43:3B:77:19:00:8C
Certificate issuer:       /CN=F3620C16AF/serialNumber=15D3164BE27990B0852B48B66A15433B7719008C
Certificate serial:       03AD
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/FdMWS-J5kLCFK0i2ahVDO3cZAIw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3620C16/B52E9370052311EE873C2D364AD9E6FC/FdMWS-J5kLCFK0i2ahVDO3cZAIw.mft
Manifest number:          03AD
Signing time:             Mon 08 Dec 2025 03:29:11 +0000
Manifest this update:     Mon 08 Dec 2025 03:29:10 +0000
Manifest next update:     Wed 10 Dec 2025 03:29:10 +0000
Files and hashes:         1: FdMWS-J5kLCFK0i2ahVDO3cZAIw.crl (hash: nBIvMFKmUZARqFbjvXR1PfOIamJTbxtDXRNFOCPHHVc=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3620C16/B52E9370052311EE873C2D364AD9E6FC/FdMWS-J5kLCFK0i2ahVDO3cZAIw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3620C16/B52E9370052311EE873C2D364AD9E6FC/FdMWS-J5kLCFK0i2ahVDO3cZAIw.mft
                          rsync://rpki.afrinic.net/repository/afrinic/FdMWS-J5kLCFK0i2ahVDO3cZAIw.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 10 Dec 2025 00:06:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 941 (0x3ad)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3620C16AF, serialNumber=15D3164BE27990B0852B48B66A15433B7719008C
        Validity
            Not Before: Dec  8 03:29:10 2025 GMT
            Not After : Dec 10 03:29:10 2025 GMT
        Subject: CN=69364607-004b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:2a:ec:3f:14:ca:6a:6d:8e:4b:65:f4:ad:0e:
                    ab:ec:96:11:d2:a0:0e:4e:c4:e0:c7:1b:d3:53:d2:
                    1a:9c:0d:2d:3e:6b:a6:11:71:5d:32:3b:ee:ac:e8:
                    57:fc:45:4b:b6:83:60:b6:c2:a0:63:38:6c:32:60:
                    df:06:ef:c1:b7:86:a2:d2:fe:4e:ce:82:dd:64:2d:
                    ad:7e:c8:28:c9:f9:d2:24:e6:64:bd:93:28:57:cc:
                    1d:dd:44:60:f4:a0:90:e4:9c:ed:d8:86:81:65:69:
                    92:64:6b:9d:bd:18:2a:f3:21:e3:88:4b:aa:6a:db:
                    6c:50:90:ad:19:9d:53:d4:ea:35:d2:00:dc:59:9e:
                    a6:61:81:e2:7a:b9:d6:7e:d8:35:37:0c:dd:93:ad:
                    2e:e3:b9:09:cc:fc:a9:f4:17:60:08:5c:77:bf:a0:
                    fe:6c:4c:1e:85:f0:71:47:21:53:38:8a:aa:27:b7:
                    a4:76:b4:8b:2d:d0:1f:f2:35:a7:0f:f6:13:d4:2a:
                    42:c0:d7:47:92:09:6f:18:a5:d9:7a:ce:49:e1:1a:
                    6a:2d:d3:bd:8d:7f:95:8f:e3:aa:80:2a:8b:74:98:
                    ca:ce:bd:d3:fe:2e:50:1f:8d:9b:74:ad:57:04:7b:
                    f5:1c:88:76:47:66:77:bb:c6:5c:73:1a:ac:3b:9e:
                    d4:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:F5:AD:E5:92:0C:35:43:6C:8E:95:25:D0:C7:1D:0F:6D:E6:BC:E1
            X509v3 Authority Key Identifier:
                keyid:15:D3:16:4B:E2:79:90:B0:85:2B:48:B6:6A:15:43:3B:77:19:00:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3620C16/B52E9370052311EE873C2D364AD9E6FC/FdMWS-J5kLCFK0i2ahVDO3cZAIw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/FdMWS-J5kLCFK0i2ahVDO3cZAIw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3620C16/B52E9370052311EE873C2D364AD9E6FC/FdMWS-J5kLCFK0i2ahVDO3cZAIw.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c0:69:bb:3e:17:d0:47:69:6f:ab:43:67:8e:91:0c:e1:53:d5:
         78:88:0b:0d:e7:b5:57:5c:26:ca:6b:98:82:3d:c3:c4:f8:a0:
         c4:f8:bd:60:5a:51:7c:86:80:1d:24:aa:00:29:62:16:c8:cc:
         40:4f:25:b3:a3:31:d4:f0:d6:4e:f5:62:4f:28:c8:f5:e7:ad:
         b9:d7:ef:9c:75:7e:30:2a:10:d4:9e:61:f9:73:a1:5e:6d:53:
         44:bd:1f:6d:49:08:db:91:1c:d4:5a:36:1d:48:8c:4a:5d:0b:
         2d:06:d7:6d:40:db:5f:50:b2:46:c5:3b:ed:e8:7f:74:6e:c5:
         af:49:41:2d:53:84:ba:cf:a6:e1:5f:c6:26:b5:cf:8a:28:3d:
         c5:cc:70:11:21:00:21:82:a4:47:f7:92:cf:05:dd:ba:f2:f7:
         cf:e4:2e:09:09:f8:19:8b:be:ba:5f:6c:44:a4:11:5c:e7:21:
         b5:ef:01:14:c4:da:e7:44:d3:ff:80:a1:cb:73:cf:c6:a0:fe:
         33:9f:33:32:cf:fb:fd:7f:27:d1:bb:f9:37:67:ac:f3:fe:c9:
         e7:18:f0:44:11:45:64:09:24:c0:ec:75:da:8a:c0:c0:c8:21:
         18:a7:cb:c7:a7:69:43:92:e4:eb:b3:ff:d8:90:61:01:c9:d5:
         a8:de:ec:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 8 17:04:48 2025 by rpki-client