This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3620C16/B52E9370052311EE873C2D364AD9E6FC/FdMWS-J5kLCFK0i2ahVDO3cZAIw.mft
File:                     FdMWS-J5kLCFK0i2ahVDO3cZAIw.mft (raw, json)
Hash identifier:          VJmVVgljwTg6yarqcftBPYPhVw0fU5OTikOu0Nzl6vo=
Subject key identifier:   02:39:12:3D:95:07:22:80:3D:EF:F3:4B:78:5C:BE:8D:7F:FB:E0:DF
Authority key identifier: 15:D3:16:4B:E2:79:90:B0:85:2B:48:B6:6A:15:43:3B:77:19:00:8C
Certificate issuer:       /CN=F3620C16AF/serialNumber=15D3164BE27990B0852B48B66A15433B7719008C
Certificate serial:       03B7
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/FdMWS-J5kLCFK0i2ahVDO3cZAIw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3620C16/B52E9370052311EE873C2D364AD9E6FC/FdMWS-J5kLCFK0i2ahVDO3cZAIw.mft
Manifest number:          03B7
Signing time:             Thu 18 Dec 2025 05:43:18 +0000
Manifest this update:     Thu 18 Dec 2025 05:43:17 +0000
Manifest next update:     Sat 20 Dec 2025 05:43:17 +0000
Files and hashes:         1: FdMWS-J5kLCFK0i2ahVDO3cZAIw.crl (hash: 6uZ/JRS+awxY3+nLRvy4bfN77WSqCWpN135eOQbk9zE=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3620C16/B52E9370052311EE873C2D364AD9E6FC/FdMWS-J5kLCFK0i2ahVDO3cZAIw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3620C16/B52E9370052311EE873C2D364AD9E6FC/FdMWS-J5kLCFK0i2ahVDO3cZAIw.mft
                          rsync://rpki.afrinic.net/repository/afrinic/FdMWS-J5kLCFK0i2ahVDO3cZAIw.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 20 Dec 2025 00:07:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 951 (0x3b7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3620C16AF, serialNumber=15D3164BE27990B0852B48B66A15433B7719008C
        Validity
            Not Before: Dec 18 05:43:17 2025 GMT
            Not After : Dec 20 05:43:17 2025 GMT
        Subject: CN=69439475-f361
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:2d:de:4f:8d:5f:3f:83:31:6e:3e:c7:cb:27:
                    84:3e:6d:6a:af:e7:0b:69:ec:72:ca:22:3c:6d:8b:
                    3c:22:06:06:82:4e:7b:60:d3:36:77:9d:c0:fa:8f:
                    90:4a:1d:2e:40:5d:ba:62:28:b9:eb:bd:37:a3:45:
                    c3:2d:a6:bc:21:d7:7a:27:fa:12:a1:dc:f4:4e:82:
                    29:d4:30:1b:3d:92:6b:cc:68:eb:e1:4f:0f:01:82:
                    ba:00:74:1e:03:99:9b:77:40:b9:94:10:15:c4:05:
                    d7:02:07:2f:e3:47:3c:23:41:28:94:75:98:3c:30:
                    d7:4a:81:c1:e7:4a:43:8f:b1:8a:4e:ff:67:6a:5a:
                    82:d1:47:fa:4b:8b:7f:72:e5:3d:7c:81:b0:a8:a2:
                    b8:0f:c2:07:d9:73:11:6c:06:ff:a4:d9:47:47:cd:
                    83:15:b8:97:13:2a:96:45:b9:8e:3d:f4:57:e6:e3:
                    64:98:ed:69:e9:86:c1:79:4b:19:fd:34:02:a8:0b:
                    f7:84:f9:7f:0b:11:f2:3b:cf:74:2c:03:fd:47:43:
                    f4:ae:07:9a:76:85:40:3a:97:af:f3:be:f5:90:48:
                    e1:1d:0c:8f:58:01:5e:55:43:84:12:3a:b6:82:80:
                    d7:01:95:2b:a3:23:6f:37:36:6c:9a:d8:f6:e3:cc:
                    70:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:39:12:3D:95:07:22:80:3D:EF:F3:4B:78:5C:BE:8D:7F:FB:E0:DF
            X509v3 Authority Key Identifier:
                keyid:15:D3:16:4B:E2:79:90:B0:85:2B:48:B6:6A:15:43:3B:77:19:00:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3620C16/B52E9370052311EE873C2D364AD9E6FC/FdMWS-J5kLCFK0i2ahVDO3cZAIw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/FdMWS-J5kLCFK0i2ahVDO3cZAIw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3620C16/B52E9370052311EE873C2D364AD9E6FC/FdMWS-J5kLCFK0i2ahVDO3cZAIw.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:90:cd:ed:66:bb:b5:0a:21:7e:59:12:40:b1:52:fc:4e:4f:
         22:86:e2:b1:b1:9f:8b:84:5b:cf:fb:53:58:3c:3d:b1:21:bd:
         a0:25:dd:4f:a2:a7:aa:f8:f6:c9:ac:ab:8d:ac:28:2d:a0:36:
         e9:33:42:3b:e0:ee:d2:10:c4:26:18:7c:e1:45:80:71:0d:40:
         dd:66:f7:12:99:dd:c2:03:c7:66:90:c4:02:f9:78:fd:1f:fd:
         e4:e9:df:73:6b:f8:d1:e9:d7:69:c4:43:7f:77:e8:b4:85:86:
         e5:44:02:05:ec:1e:99:70:be:dd:96:f5:a4:12:67:d1:68:81:
         d2:85:1d:eb:bd:91:8f:eb:90:c9:c0:49:8c:b7:7b:f7:bf:e6:
         55:57:59:30:82:39:e7:1f:c4:43:9e:40:a1:71:e5:4d:22:6f:
         2e:61:23:aa:69:42:9d:00:18:8d:dc:e6:29:3b:a6:03:f4:63:
         f8:4d:d5:43:76:f4:d4:d3:b7:cf:44:6b:8f:1a:17:28:26:e5:
         ab:60:58:6e:8f:70:08:98:65:ff:03:5e:83:4a:a7:12:ef:d0:
         65:13:8d:43:8f:f6:b7:53:43:af:32:5a:9a:e8:ee:2f:da:ba:
         cc:7f:02:49:c8:bf:a0:29:ca:f0:2e:2b:d1:d6:70:20:42:eb:
         54:02:91:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 18 09:56:58 2025 by rpki-client