This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3627A5B/6C5DCE44434411EFB7629DBE762E951A/hv5z7TaP-SiSCjS0l1tObR5U4GM.mft
File:                     hv5z7TaP-SiSCjS0l1tObR5U4GM.mft (raw, json)
Hash identifier:          mBOuBNifU/slh3BNnv7tGdCMnNtSBev0PJscZVti6c4=
Subject key identifier:   64:DE:05:EC:F1:CE:BC:8B:AF:EC:EC:30:70:FC:4A:39:FA:DA:95:71
Authority key identifier: 86:FE:73:ED:36:8F:F9:28:92:0A:34:B4:97:5B:4E:6D:1E:54:E0:63
Certificate issuer:       /CN=F3627A5BAF/serialNumber=86FE73ED368FF928920A34B4975B4E6D1E54E063
Certificate serial:       020B
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/hv5z7TaP-SiSCjS0l1tObR5U4GM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3627A5B/6C5DCE44434411EFB7629DBE762E951A/hv5z7TaP-SiSCjS0l1tObR5U4GM.mft
Manifest number:          020B
Signing time:             Mon 08 Dec 2025 04:22:17 +0000
Manifest this update:     Mon 08 Dec 2025 04:22:16 +0000
Manifest next update:     Wed 10 Dec 2025 04:22:16 +0000
Files and hashes:         1: hv5z7TaP-SiSCjS0l1tObR5U4GM.crl (hash: 6UOC1+EbeGYwMJ5Kem8RqIe3e88YHk2uTWPL/9ZU0Sw=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3627A5B/6C5DCE44434411EFB7629DBE762E951A/hv5z7TaP-SiSCjS0l1tObR5U4GM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3627A5B/6C5DCE44434411EFB7629DBE762E951A/hv5z7TaP-SiSCjS0l1tObR5U4GM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/hv5z7TaP-SiSCjS0l1tObR5U4GM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 10 Dec 2025 00:06:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 523 (0x20b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3627A5BAF, serialNumber=86FE73ED368FF928920A34B4975B4E6D1E54E063
        Validity
            Not Before: Dec  8 04:22:16 2025 GMT
            Not After : Dec 10 04:22:16 2025 GMT
        Subject: CN=69365279-d519
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:70:ed:54:53:cd:40:e2:a6:b4:28:5e:0b:25:
                    b0:ce:00:72:e5:c6:58:09:91:49:39:a3:c7:4e:52:
                    31:e7:07:41:23:27:04:cd:91:d5:8c:15:64:0e:3c:
                    5d:57:af:d4:19:20:56:87:60:f3:34:bc:51:28:a8:
                    3a:41:03:c0:99:56:47:dc:3e:f2:09:1e:99:0a:67:
                    5f:95:15:92:ba:25:9d:d0:93:0f:d2:5d:ab:58:1f:
                    10:76:29:74:97:a3:ac:f6:f6:4d:9e:8e:25:0e:89:
                    5d:dc:eb:0c:ef:10:48:7e:d9:ed:6a:2f:f6:8b:27:
                    3a:29:47:a7:f3:51:c8:43:3d:b0:14:02:30:f6:be:
                    46:43:73:f6:50:d6:75:cb:46:5d:7f:c2:25:6a:a1:
                    1c:e8:4c:c3:88:14:ce:16:d7:15:f4:87:7d:e4:7a:
                    60:e7:af:57:3e:63:f4:0f:98:81:10:a6:6e:9b:b3:
                    35:02:32:39:2f:8f:ec:ac:b5:37:fb:1d:30:0e:b1:
                    45:b1:63:60:8f:e6:da:05:7d:84:62:6c:54:f8:5a:
                    a9:e3:ef:be:60:8c:97:36:9a:51:97:1c:69:25:d5:
                    d1:8c:b8:73:6c:15:65:d4:c0:29:5a:2f:80:b9:1b:
                    ed:1f:32:f4:bc:75:00:13:ab:c4:67:7c:54:eb:41:
                    d6:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:DE:05:EC:F1:CE:BC:8B:AF:EC:EC:30:70:FC:4A:39:FA:DA:95:71
            X509v3 Authority Key Identifier:
                keyid:86:FE:73:ED:36:8F:F9:28:92:0A:34:B4:97:5B:4E:6D:1E:54:E0:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3627A5B/6C5DCE44434411EFB7629DBE762E951A/hv5z7TaP-SiSCjS0l1tObR5U4GM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/hv5z7TaP-SiSCjS0l1tObR5U4GM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3627A5B/6C5DCE44434411EFB7629DBE762E951A/hv5z7TaP-SiSCjS0l1tObR5U4GM.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:b8:2a:bf:75:d8:aa:e1:e8:e5:ae:a0:b2:78:0b:b3:9a:f2:
         96:1a:b6:c7:91:e9:fa:72:14:d5:27:54:4e:5f:d3:2e:5b:0d:
         5c:8d:4a:12:2c:09:d5:b9:61:4e:b7:a4:1b:1b:59:07:b3:c8:
         c4:14:0a:92:b3:9c:b4:8e:d0:c3:5c:4f:07:96:38:b1:75:d0:
         6f:bb:76:2f:7d:6f:a2:74:1f:90:12:4d:db:c0:63:c3:4b:58:
         25:1e:82:2b:bb:18:35:63:fa:47:fd:b0:9e:16:bc:0f:37:1e:
         78:61:95:bc:64:c3:82:68:1c:e3:25:9e:7a:8e:bb:da:81:82:
         bf:e0:43:78:97:70:2e:1b:f2:9f:db:a7:a8:93:f9:48:11:5a:
         b3:ea:e0:24:6c:9d:83:c4:04:25:db:a7:1e:22:ba:90:7c:bd:
         93:c1:2f:3b:7a:1f:bb:d0:1e:3e:fd:6f:b2:84:3b:52:a2:28:
         61:d2:79:e5:b1:d5:2f:bc:1f:64:c6:0f:bd:22:e5:8c:36:81:
         69:cf:4a:f7:f9:6a:fd:2e:a8:b5:30:7e:8c:90:a6:84:68:cb:
         f2:13:06:33:2d:65:14:a8:a2:18:e6:ee:4d:7d:9c:6b:3b:79:
         17:fa:e7:e5:4b:ae:69:6a:73:9f:39:34:b1:86:3d:35:d5:cd:
         14:a3:f4:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 8 17:18:50 2025 by rpki-client