This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3628C37/B37EA5C2EA1511EBA6126201D8A014CE/A5qvf-n2C_CXdIb6dLWHGFmuoT0.mft
File:                     A5qvf-n2C_CXdIb6dLWHGFmuoT0.mft (raw, json)
Hash identifier:          fU5+e32aLiSTLkYcIFRRHWOFagPzncJEnY7T9eLaP6A=
Subject key identifier:   0F:5A:E0:2E:41:22:84:59:36:DE:DD:84:66:C4:78:B0:56:93:2B:B2
Authority key identifier: 03:9A:AF:7F:E9:F6:0B:F0:97:74:86:FA:74:B5:87:18:59:AE:A1:3D
Certificate issuer:       /CN=F3628C37AF/serialNumber=039AAF7FE9F60BF0977486FA74B5871859AEA13D
Certificate serial:       0678
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/A5qvf-n2C_CXdIb6dLWHGFmuoT0.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3628C37/B37EA5C2EA1511EBA6126201D8A014CE/A5qvf-n2C_CXdIb6dLWHGFmuoT0.mft
Manifest number:          0672
Signing time:             Sat 06 Dec 2025 02:16:56 +0000
Manifest this update:     Sat 06 Dec 2025 02:16:55 +0000
Manifest next update:     Mon 08 Dec 2025 02:16:55 +0000
Files and hashes:         1: A5qvf-n2C_CXdIb6dLWHGFmuoT0.crl (hash: IuK7FnlDmP0BeiYmC54hGekmUjDAZBzp4iq2FACVBUU=)
                          2: 4F5FB340BB9B11F0A4FC7890DAE4EC9C.roa (hash: 3j3JDrZJ5kzeoEP9B0zAHrKvWgUKuEoaaWh/f6w0w/E=)
                          3: 5BF8D2D2BB4E11F096D4D5A3DAE4EC9C.roa (hash: 5Sk/Y26ERaFugAQyGneW8BLkYqkzkn2e5hTPTauSWpQ=)
                          4: D9591C72EA1611EBA09F1503D8A014CE.roa (hash: ULu6v5Xd4RylQXz/DNaRnBo4gOCnbUZvm9Y1D6Eb7lc=)
                          5: CAF715B4BB4D11F0A4D09D9FDAE4EC9C.roa (hash: LMV8zXhxDB9mr3rYVm2LJ0jTK/1jhcnobRpbQ4acSio=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3628C37/B37EA5C2EA1511EBA6126201D8A014CE/A5qvf-n2C_CXdIb6dLWHGFmuoT0.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3628C37/B37EA5C2EA1511EBA6126201D8A014CE/A5qvf-n2C_CXdIb6dLWHGFmuoT0.mft
                          rsync://rpki.afrinic.net/repository/afrinic/A5qvf-n2C_CXdIb6dLWHGFmuoT0.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 08 Dec 2025 00:06:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1656 (0x678)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3628C37AF, serialNumber=039AAF7FE9F60BF0977486FA74B5871859AEA13D
        Validity
            Not Before: Dec  6 02:16:55 2025 GMT
            Not After : Dec  8 02:16:55 2025 GMT
        Subject: CN=69339218-0d77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:9f:49:4a:21:95:08:b0:9b:06:e3:e9:6d:d8:
                    d1:a2:47:60:66:11:ce:0f:65:57:08:f5:f3:b3:f7:
                    d8:ca:97:ca:95:f4:26:47:a8:ea:1e:6a:cf:3a:ab:
                    12:1c:d7:52:17:26:92:e8:f3:12:6f:cb:05:8f:8d:
                    14:1f:cd:98:1c:d1:de:2d:8c:a5:d3:74:94:fb:8f:
                    7b:3d:5a:36:65:91:ca:d1:a9:30:e4:44:a5:02:a8:
                    e7:b0:49:a3:99:15:bb:ec:cb:0b:48:67:14:50:97:
                    38:c8:1f:d3:76:8d:28:67:21:ec:7e:9c:39:da:8b:
                    e9:1d:5e:ae:61:06:64:c5:b4:3e:d8:74:0c:9a:2f:
                    01:65:79:96:87:e6:4e:98:2d:2c:ee:82:66:b2:80:
                    8c:61:13:90:eb:08:52:2f:8d:db:d1:70:10:d8:6c:
                    c5:e8:7a:04:92:7d:4a:09:10:82:db:da:c3:56:e7:
                    5f:ad:1b:4c:f3:0f:85:e1:3c:a4:72:ef:65:94:16:
                    fc:93:bc:08:e0:36:85:70:40:5f:67:45:9d:44:5f:
                    49:97:cb:dd:14:3c:90:b2:b3:33:9b:92:63:f7:8f:
                    7b:81:76:6e:7a:c7:2c:56:d1:98:b7:4d:e5:3d:b2:
                    1f:9e:c8:8b:be:72:61:1e:b4:23:00:8c:5a:27:08:
                    e4:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:5A:E0:2E:41:22:84:59:36:DE:DD:84:66:C4:78:B0:56:93:2B:B2
            X509v3 Authority Key Identifier:
                keyid:03:9A:AF:7F:E9:F6:0B:F0:97:74:86:FA:74:B5:87:18:59:AE:A1:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3628C37/B37EA5C2EA1511EBA6126201D8A014CE/A5qvf-n2C_CXdIb6dLWHGFmuoT0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/A5qvf-n2C_CXdIb6dLWHGFmuoT0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3628C37/B37EA5C2EA1511EBA6126201D8A014CE/A5qvf-n2C_CXdIb6dLWHGFmuoT0.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:23:f3:0a:5b:a3:7e:91:f6:a6:25:59:90:ab:7f:9e:ff:e3:
         ed:8c:6b:f1:41:0f:4c:bc:8c:1d:8c:6f:f7:59:db:1f:f6:b0:
         c0:45:fe:20:46:2f:d1:bd:a4:6d:4a:9a:94:5a:38:6c:92:03:
         3b:d3:a9:5a:de:5e:72:b6:38:d2:79:03:ea:2d:a1:1c:a2:6d:
         80:00:27:c6:34:d4:e0:1d:b9:5a:38:5b:11:5f:03:a3:d9:44:
         2c:03:af:8d:4b:d3:5c:8b:b4:bd:ad:15:66:ae:0e:22:11:8b:
         f7:c6:2f:0e:c8:ce:43:dd:a7:28:97:5b:8e:83:eb:d0:ce:10:
         1c:6b:3f:11:23:23:ab:5d:69:02:0d:32:92:98:82:34:64:f1:
         4c:05:c0:44:8a:b4:1c:7f:67:e1:6f:6a:1e:10:a6:80:64:8d:
         ff:39:bf:e9:7f:fd:70:9a:3a:95:71:8a:a4:eb:46:e5:a6:0e:
         a8:4d:d6:04:c7:4d:1e:3f:c0:e2:cb:4e:47:3d:12:be:93:c0:
         0b:94:61:92:e3:c5:cb:40:8d:e4:22:6e:29:01:d3:16:bf:e6:
         68:a7:e6:a0:d8:e4:27:7c:aa:cd:bf:ae:b0:d9:b3:e7:8b:f2:
         e2:fa:f2:ab:6e:a5:e7:96:71:8e:a0:e1:cd:6e:2b:9e:66:f7:
         7a:e7:3b:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 22:44:27 2025 by rpki-client