This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3627065/65AD365853D311EF9BB76F6F762E951A/XA6PHouQ_dKUtU1XMJAT_FoGo1s.mft
File:                     XA6PHouQ_dKUtU1XMJAT_FoGo1s.mft (raw, json)
Hash identifier:          Qvmf/j5vYvZnWuQNqNsR8nsftV/dLc/W/1jBeVzsUBs=
Subject key identifier:   08:F6:1D:BB:C1:C5:86:2C:82:9A:37:C7:0F:59:47:79:4C:4E:62:8F
Authority key identifier: 5C:0E:8F:1E:8B:90:FD:D2:94:B5:4D:57:30:90:13:FC:5A:06:A3:5B
Certificate issuer:       /CN=F3627065AF/serialNumber=5C0E8F1E8B90FDD294B54D57309013FC5A06A35B
Certificate serial:       01F8
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/XA6PHouQ_dKUtU1XMJAT_FoGo1s.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3627065/65AD365853D311EF9BB76F6F762E951A/XA6PHouQ_dKUtU1XMJAT_FoGo1s.mft
Manifest number:          01F7
Signing time:             Mon 08 Dec 2025 04:25:34 +0000
Manifest this update:     Mon 08 Dec 2025 04:25:33 +0000
Manifest next update:     Wed 10 Dec 2025 04:25:33 +0000
Files and hashes:         1: XA6PHouQ_dKUtU1XMJAT_FoGo1s.crl (hash: 7SlWiZ+XRPJMigGoR8H32kfHp8G8d9cQVrCyJovHpqM=)
                          2: 47D8021A53D411EFA7C83C74762E951A.roa (hash: QwK+XpG/BTzSdMaFzgcL2FXrrpo9GOI3wltkdoXtHnY=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3627065/65AD365853D311EF9BB76F6F762E951A/XA6PHouQ_dKUtU1XMJAT_FoGo1s.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3627065/65AD365853D311EF9BB76F6F762E951A/XA6PHouQ_dKUtU1XMJAT_FoGo1s.mft
                          rsync://rpki.afrinic.net/repository/afrinic/XA6PHouQ_dKUtU1XMJAT_FoGo1s.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 10 Dec 2025 00:06:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 504 (0x1f8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3627065AF, serialNumber=5C0E8F1E8B90FDD294B54D57309013FC5A06A35B
        Validity
            Not Before: Dec  8 04:25:33 2025 GMT
            Not After : Dec 10 04:25:33 2025 GMT
        Subject: CN=6936533e-22e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:3a:d9:63:02:0f:87:27:d1:fa:97:5a:bd:d3:
                    c3:f9:c9:42:7f:d1:2d:26:03:5d:d7:6c:a4:92:84:
                    5f:2a:d8:49:72:82:16:ad:2b:98:c1:fe:5d:1b:dc:
                    03:5d:ef:73:92:19:3d:39:d5:a4:76:fa:7c:e3:6a:
                    38:4d:11:fe:88:5f:2f:09:ab:eb:c3:01:c7:2f:b1:
                    09:ca:52:e4:68:e8:f0:0a:c4:d6:a1:42:42:49:11:
                    70:3a:77:1c:ca:80:1c:eb:a8:dc:c5:91:35:3f:a5:
                    d2:f0:80:da:d4:8d:84:df:51:07:26:94:04:39:8e:
                    75:f3:2b:1a:b1:06:05:ba:e2:f0:27:b2:ca:80:89:
                    6a:15:0a:d7:5a:b1:70:02:75:94:2b:24:dc:8f:83:
                    e0:d4:30:40:9a:58:58:e8:d7:3a:55:f3:aa:f9:8d:
                    4e:60:0a:4b:94:8b:63:62:81:bd:3e:94:16:5a:1b:
                    a2:0f:5f:5f:fb:39:59:21:e5:ce:d7:57:b4:68:0b:
                    53:80:5b:96:4b:60:83:fa:35:a2:4c:f7:3c:33:0e:
                    7c:2a:00:c2:30:c3:ed:ca:ab:5e:81:c1:7a:f0:9c:
                    c0:e3:3d:87:25:fb:8e:62:dc:a6:4e:07:2d:09:a3:
                    d2:0e:2a:90:34:8f:6c:d8:1b:53:22:78:6e:d8:a3:
                    a3:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:F6:1D:BB:C1:C5:86:2C:82:9A:37:C7:0F:59:47:79:4C:4E:62:8F
            X509v3 Authority Key Identifier:
                keyid:5C:0E:8F:1E:8B:90:FD:D2:94:B5:4D:57:30:90:13:FC:5A:06:A3:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3627065/65AD365853D311EF9BB76F6F762E951A/XA6PHouQ_dKUtU1XMJAT_FoGo1s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/XA6PHouQ_dKUtU1XMJAT_FoGo1s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3627065/65AD365853D311EF9BB76F6F762E951A/XA6PHouQ_dKUtU1XMJAT_FoGo1s.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:f2:1a:38:bf:f8:43:28:1b:16:36:3e:10:97:79:80:37:5a:
         7a:1e:6c:19:ba:43:6a:d0:02:41:e6:14:bf:dd:b7:20:a4:90:
         25:49:74:85:df:e6:78:6d:e6:d2:fc:c8:c2:c9:77:18:9b:ff:
         a1:7c:76:54:f5:ae:67:f1:a7:0b:dd:2f:32:b3:b3:43:d3:90:
         a8:29:f8:3d:60:fa:04:e0:98:a9:d9:70:0b:79:33:4f:6b:74:
         5f:2a:15:50:e4:51:ee:d1:fa:2b:4c:7d:42:99:59:3b:85:d9:
         7c:3c:b0:26:04:64:81:26:6a:1d:f8:6d:e2:9c:fb:29:3f:de:
         1e:54:db:d3:18:71:23:f1:0e:d8:2a:3b:26:18:af:aa:86:36:
         0e:cd:15:07:c1:fd:47:7d:d3:5d:f4:7f:24:63:57:54:88:21:
         5f:3e:ea:28:24:6f:ab:7b:40:fc:e1:2d:6e:ef:89:e4:be:6b:
         70:62:31:6e:c6:64:73:9a:40:b7:5d:3b:e5:72:2d:da:6d:28:
         94:75:e7:b0:0c:78:85:e8:72:99:a7:fd:b0:20:f9:5e:bb:b7:
         54:42:93:2e:90:bd:84:66:41:d4:29:38:02:59:aa:1d:08:2f:
         09:5f:0a:14:be:77:7f:89:bc:27:9a:41:84:b0:49:ab:05:87:
         5f:c9:ad:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 8 17:27:30 2025 by rpki-client