This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3625D7B/3CE88D08BDA911F08CA0897ADAE4EC9C/4gVuyP8ZNJISyrk8jWZWxw8lSj8.mft
File:                     4gVuyP8ZNJISyrk8jWZWxw8lSj8.mft (raw, json)
Hash identifier:          GDAViosG9g9ikfS12+fJJ+gXtMSniCL24jq1A5j4Axg=
Subject key identifier:   B3:F4:7A:80:0A:CE:17:62:FE:E3:DB:E1:0E:4E:5C:B3:06:D6:92:18
Authority key identifier: E2:05:6E:C8:FF:19:34:92:12:CA:B9:3C:8D:66:56:C7:0F:25:4A:3F
Certificate issuer:       /CN=F3625D7BAF/serialNumber=E2056EC8FF19349212CAB93C8D6656C70F254A3F
Certificate serial:       17
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/4gVuyP8ZNJISyrk8jWZWxw8lSj8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3625D7B/3CE88D08BDA911F08CA0897ADAE4EC9C/4gVuyP8ZNJISyrk8jWZWxw8lSj8.mft
Manifest number:          4B
Signing time:             Mon 08 Dec 2025 05:18:50 +0000
Manifest this update:     Mon 08 Dec 2025 05:18:49 +0000
Manifest next update:     Wed 10 Dec 2025 05:18:49 +0000
Files and hashes:         1: 4gVuyP8ZNJISyrk8jWZWxw8lSj8.crl (hash: j2Ag/lS7ZqMW+5RKe63zgWomaNn2yMbXDOsBJgaANso=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3625D7B/3CE88D08BDA911F08CA0897ADAE4EC9C/4gVuyP8ZNJISyrk8jWZWxw8lSj8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3625D7B/3CE88D08BDA911F08CA0897ADAE4EC9C/4gVuyP8ZNJISyrk8jWZWxw8lSj8.mft
                          rsync://rpki.afrinic.net/repository/afrinic/4gVuyP8ZNJISyrk8jWZWxw8lSj8.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 10 Dec 2025 00:06:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 23 (0x17)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3625D7BAF, serialNumber=E2056EC8FF19349212CAB93C8D6656C70F254A3F
        Validity
            Not Before: Dec  8 05:18:49 2025 GMT
            Not After : Dec 10 05:18:49 2025 GMT
        Subject: CN=69365fba-f1e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:13:b3:61:c8:31:fd:eb:cd:7a:d8:5b:76:67:
                    64:8d:91:00:8f:a0:c2:17:c9:ae:e7:7c:d2:6e:e7:
                    f0:97:ea:3d:98:be:42:3b:93:ae:b9:79:42:1c:09:
                    78:af:31:04:36:df:52:98:aa:ef:cd:81:61:3a:60:
                    ea:0d:ac:e3:28:6e:02:0e:22:cc:b6:a4:11:b7:9a:
                    a4:89:44:e1:dc:f4:67:69:d4:e8:e4:26:89:eb:3c:
                    bf:79:b2:fb:30:d5:48:0d:09:c7:41:c0:c8:8e:c5:
                    4e:dd:cd:5a:a7:48:e8:8f:26:a3:82:9f:5f:de:6d:
                    fe:32:45:73:12:f6:05:38:fd:9b:a0:98:1b:c2:a1:
                    88:e6:2c:0c:41:e6:fa:31:7a:ee:f6:2b:70:c7:c1:
                    9d:bd:ca:b7:2a:0b:98:27:d5:6d:59:12:98:55:7f:
                    6c:8f:db:ed:2f:6a:23:97:8d:61:d1:df:6c:2b:7c:
                    d3:7a:cc:a2:70:a4:83:d4:f8:8c:1a:ef:a4:9a:50:
                    12:e0:3e:0d:d8:e2:32:0a:a5:27:38:65:01:23:18:
                    f9:dd:95:c7:b2:d1:1d:16:a9:98:dc:a8:0e:2b:a6:
                    b6:ba:6a:6c:ad:80:9e:cc:27:bf:fb:78:1c:89:58:
                    a0:7c:2c:e3:18:e3:14:bb:c8:d0:2b:42:24:e3:61:
                    f8:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:F4:7A:80:0A:CE:17:62:FE:E3:DB:E1:0E:4E:5C:B3:06:D6:92:18
            X509v3 Authority Key Identifier:
                keyid:E2:05:6E:C8:FF:19:34:92:12:CA:B9:3C:8D:66:56:C7:0F:25:4A:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3625D7B/3CE88D08BDA911F08CA0897ADAE4EC9C/4gVuyP8ZNJISyrk8jWZWxw8lSj8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/4gVuyP8ZNJISyrk8jWZWxw8lSj8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3625D7B/3CE88D08BDA911F08CA0897ADAE4EC9C/4gVuyP8ZNJISyrk8jWZWxw8lSj8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:f8:5e:ee:fa:9b:80:70:d9:71:88:a5:62:19:a6:47:26:cb:
         63:8b:b4:b8:f1:62:e6:7e:a5:6c:79:f4:8f:3a:a9:5c:35:d6:
         78:28:21:df:78:d8:7d:4f:fb:4d:1b:02:aa:20:9b:fd:c9:c7:
         11:3b:69:fd:01:a8:69:32:de:8e:ba:a5:e5:e0:22:87:07:e7:
         82:59:b9:eb:f8:d0:74:8b:79:20:0d:d2:86:45:0e:ae:2a:83:
         38:8f:02:09:41:f5:05:69:55:fb:7a:4c:5c:e1:61:64:ea:a6:
         7e:1d:68:6e:4c:e4:f6:63:8e:c5:b5:57:30:68:f6:1f:39:48:
         0a:eb:a7:2c:d2:e3:2d:b5:11:2f:8d:26:d4:2d:e3:e4:10:61:
         7d:0a:74:ce:66:6f:8e:39:e2:23:1b:67:99:f9:24:b9:3d:d8:
         6a:98:b7:2b:db:26:89:47:69:1a:57:2a:52:32:01:47:15:31:
         9f:2f:21:b4:a3:24:b6:c1:c9:11:81:71:f3:b9:15:28:70:32:
         34:43:6d:e1:e5:c9:7c:41:a2:55:50:54:28:62:42:1e:1c:5d:
         8f:4c:df:0f:93:aa:4b:13:dd:55:f6:14:4e:72:d2:60:9a:3c:
         68:5a:cf:8e:f1:e6:70:6a:fa:10:4e:83:f0:f4:60:c8:77:46:
         c5:06:9c:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 8 17:17:00 2025 by rpki-client