This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3632159/A24C983C4ABC11EDA0F57084F1222468/poVzBBtD85x4jvNbdksxjIhJyf4.mft
File:                     poVzBBtD85x4jvNbdksxjIhJyf4.mft (raw, json)
Hash identifier:          PLhodgKT3tnDyV30qHpXkaV2e9TyhLFP3Wys86LrAcc=
Subject key identifier:   3D:25:7A:B3:A4:FE:37:5D:AB:C7:A6:07:E9:91:2B:8B:2F:52:F7:C1
Authority key identifier: A6:85:73:04:1B:43:F3:9C:78:8E:F3:5B:76:4B:31:8C:88:49:C9:FE
Certificate issuer:       /CN=F3632159AF/serialNumber=A68573041B43F39C788EF35B764B318C8849C9FE
Certificate serial:       04A4
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/poVzBBtD85x4jvNbdksxjIhJyf4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3632159/A24C983C4ABC11EDA0F57084F1222468/poVzBBtD85x4jvNbdksxjIhJyf4.mft
Manifest number:          04A4
Signing time:             Mon 08 Dec 2025 03:03:33 +0000
Manifest this update:     Mon 08 Dec 2025 03:03:32 +0000
Manifest next update:     Wed 10 Dec 2025 03:03:32 +0000
Files and hashes:         1: poVzBBtD85x4jvNbdksxjIhJyf4.crl (hash: FH8iwzpfbuXEWMQhHUbp5iC0J2onSNex8QrTbSnvhd4=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3632159/A24C983C4ABC11EDA0F57084F1222468/poVzBBtD85x4jvNbdksxjIhJyf4.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3632159/A24C983C4ABC11EDA0F57084F1222468/poVzBBtD85x4jvNbdksxjIhJyf4.mft
                          rsync://rpki.afrinic.net/repository/afrinic/poVzBBtD85x4jvNbdksxjIhJyf4.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 10 Dec 2025 00:06:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1188 (0x4a4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3632159AF, serialNumber=A68573041B43F39C788EF35B764B318C8849C9FE
        Validity
            Not Before: Dec  8 03:03:32 2025 GMT
            Not After : Dec 10 03:03:32 2025 GMT
        Subject: CN=69364005-e75d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:01:69:28:0a:03:38:70:38:e6:d8:12:28:18:
                    9f:63:0b:b0:9b:b7:97:1c:79:2e:97:42:74:70:54:
                    e9:5e:53:f1:cb:75:49:67:8a:59:63:4d:55:72:4f:
                    d3:62:da:32:29:f0:75:68:09:0a:95:23:08:31:26:
                    2b:75:2d:1a:91:a9:62:09:50:07:3d:ae:de:a4:0c:
                    b2:a1:b8:8f:dc:a0:9d:28:69:39:2d:1a:9e:dd:d3:
                    3c:81:45:c4:95:db:bc:68:37:80:70:be:06:0f:a2:
                    e1:4c:b4:7f:d5:b9:88:90:9c:7b:93:82:c3:cf:5d:
                    83:8c:f8:7c:00:a0:75:10:a7:17:7e:ec:37:c0:0e:
                    3b:14:3b:2e:e2:6f:ed:b2:b6:92:0c:dd:54:9f:cb:
                    d8:c0:eb:08:3d:33:cf:0c:b6:de:8b:a6:97:b0:de:
                    0c:c0:23:7f:74:0d:0b:a9:4f:95:e8:40:a1:5d:0a:
                    88:ae:16:dc:6b:9d:3d:32:e4:c4:ff:f7:05:c7:58:
                    09:58:1d:c8:cf:04:9a:9f:e8:e3:d2:90:66:af:11:
                    6b:eb:2f:b6:4d:8b:2e:e5:0a:f8:01:7a:f4:2f:40:
                    f7:e3:13:23:b3:31:0a:28:af:85:d1:11:4d:c5:32:
                    49:0c:d6:69:76:a8:f2:ce:68:17:89:fd:c1:42:e7:
                    d0:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:25:7A:B3:A4:FE:37:5D:AB:C7:A6:07:E9:91:2B:8B:2F:52:F7:C1
            X509v3 Authority Key Identifier:
                keyid:A6:85:73:04:1B:43:F3:9C:78:8E:F3:5B:76:4B:31:8C:88:49:C9:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3632159/A24C983C4ABC11EDA0F57084F1222468/poVzBBtD85x4jvNbdksxjIhJyf4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/poVzBBtD85x4jvNbdksxjIhJyf4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3632159/A24C983C4ABC11EDA0F57084F1222468/poVzBBtD85x4jvNbdksxjIhJyf4.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b9:44:ae:1d:88:36:dd:24:b0:a9:40:0d:ca:9a:b6:ca:bb:ad:
         32:3b:2f:61:91:1b:a6:cd:56:2c:3f:01:f6:de:52:95:95:71:
         3e:43:48:b8:c6:bd:5a:e6:e1:44:8b:1a:e4:0f:63:99:76:d0:
         81:62:f7:b2:21:6b:80:be:da:d0:40:71:5c:1d:98:7b:d0:36:
         18:2f:ae:0b:4b:7d:88:0d:8d:f1:f4:00:6a:18:99:f4:7a:be:
         01:94:f5:bb:c6:ff:70:0e:ce:58:ed:d7:b2:8b:41:d1:6c:5a:
         1d:d9:53:16:1a:df:90:e7:35:da:69:4e:b9:55:8c:64:c1:4b:
         f8:75:2d:a4:0e:db:2a:71:e3:23:23:1d:ad:e1:17:bb:95:c7:
         43:58:75:01:02:30:d0:46:0b:61:31:92:13:60:89:cd:b2:f4:
         9d:92:74:d6:74:b8:1c:65:8e:a1:33:15:56:c4:28:b8:a5:62:
         d3:6f:11:be:fa:a5:61:35:2b:33:9a:e3:c9:a0:f4:b1:71:3b:
         3f:84:46:99:2c:8a:f6:c7:ee:58:4c:90:1f:81:90:41:2a:3a:
         ca:69:11:38:59:a0:84:60:e8:5e:26:3a:df:22:1b:94:08:be:
         70:ff:22:84:17:d8:0a:4a:49:d8:87:7c:b0:71:4c:fb:61:cc:
         00:2c:ca:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 8 17:09:16 2025 by rpki-client