This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3634F1B/A133C32A299511F0B2F717B2DAE4EC9C/SbTWGQldlDKvZGCFPhR7710cSLA.mft
File:                     SbTWGQldlDKvZGCFPhR7710cSLA.mft (raw, json)
Hash identifier:          tXELKZtlU87CxV8UUhPGE96cl9hDXaZiXF6rMDOcYfM=
Subject key identifier:   19:E6:D4:EA:25:A3:B0:64:96:C3:CD:92:B8:49:A0:1C:7C:87:D7:0C
Authority key identifier: 49:B4:D6:19:09:5D:94:32:AF:64:60:85:3E:14:7B:EF:5D:1C:48:B0
Certificate issuer:       /CN=F3634F1BAF/serialNumber=49B4D619095D9432AF6460853E147BEF5D1C48B0
Certificate serial:       F6
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/SbTWGQldlDKvZGCFPhR7710cSLA.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3634F1B/A133C32A299511F0B2F717B2DAE4EC9C/SbTWGQldlDKvZGCFPhR7710cSLA.mft
Manifest number:          EB
Signing time:             Mon 08 Dec 2025 04:55:23 +0000
Manifest this update:     Mon 08 Dec 2025 04:55:22 +0000
Manifest next update:     Wed 10 Dec 2025 04:55:22 +0000
Files and hashes:         1: SbTWGQldlDKvZGCFPhR7710cSLA.crl (hash: VD1tM0CrUB/cDHZeuV9z1NDNgHR0tkuLeIrik03kQ9o=)
                          2: 5CCD6440299D11F0AD38AFE3DAE4EC9C.roa (hash: v4mhR83sjeZ2vAC+mHBy4f+8KOxUX5jeOYSaA7j55RU=)
                          3: A16D1040299E11F0A0371BECDAE4EC9C.roa (hash: ZIN6qTu+myOk/8/Xm5JH6ilbBdHCnz+M7KKnKepnBtM=)
                          4: 61D2FD9229B111F0B5081FE6DAE4EC9C.roa (hash: Brop1ncWpX/uNNO0gkigSNxXGhoMQh9wWM/lUreXu7I=)
                          5: 1B78052229B111F0A88218E6DAE4EC9C.roa (hash: lTtW4+RgQEGUJjKPbZNiHvs7ergbcAvfTNYM91hQFPM=)
                          6: 4C7A7612299A11F0B84321CFDAE4EC9C.roa (hash: Nlw1hIVnnrnHZycVHji07xpZ7hIoViBxXu2uxKW1+Ms=)
                          7: E383333E299D11F0A8FCB4E5DAE4EC9C.roa (hash: WNjVtEQEJnEB14WwlXqxjZdHQ29UrTDBkSgpJfcS8fE=)
                          8: 8B97C97C29B211F0BE9210EFDAE4EC9C.roa (hash: YWliehZSLVKOUVOtFDH1Zw4P9bTGn6VPsgJOpr2PpdI=)
                          9: C5A5AC4229B211F0881C16EFDAE4EC9C.roa (hash: 2J30cLTQTWAiY7lgicRA7cWnsPM0f3v7LmXj0giF2nM=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3634F1B/A133C32A299511F0B2F717B2DAE4EC9C/SbTWGQldlDKvZGCFPhR7710cSLA.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3634F1B/A133C32A299511F0B2F717B2DAE4EC9C/SbTWGQldlDKvZGCFPhR7710cSLA.mft
                          rsync://rpki.afrinic.net/repository/afrinic/SbTWGQldlDKvZGCFPhR7710cSLA.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 10 Dec 2025 00:06:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 246 (0xf6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3634F1BAF, serialNumber=49B4D619095D9432AF6460853E147BEF5D1C48B0
        Validity
            Not Before: Dec  8 04:55:22 2025 GMT
            Not After : Dec 10 04:55:22 2025 GMT
        Subject: CN=69365a3b-408e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:a6:9d:18:12:f9:ca:68:c3:5d:37:28:5e:c5:
                    2d:dc:db:a5:b1:ee:89:90:c5:8b:ad:05:98:e2:01:
                    23:c4:9b:9c:36:3e:fd:ce:00:96:e0:60:b9:1a:9c:
                    38:d4:40:9a:82:4f:68:f2:17:b9:a7:df:f5:a7:6b:
                    46:7d:c1:e7:7c:7c:88:7f:db:cc:9d:33:f1:ad:5e:
                    71:ab:05:47:06:bc:ea:86:5d:de:fb:f4:cb:37:e0:
                    e9:d8:de:71:4d:8e:7d:d5:43:26:90:2e:d1:62:b5:
                    ff:2c:e5:89:7e:12:1a:54:e5:15:9a:a4:95:0c:6a:
                    b4:e2:ce:ad:06:29:f1:62:00:a9:33:a7:64:c6:a4:
                    ba:99:27:e9:a4:f0:c2:e3:d4:3f:62:07:3a:f3:46:
                    d6:30:8a:1a:7e:7d:38:fe:70:5e:7d:db:15:e8:4a:
                    75:a7:b7:73:79:15:65:a8:35:7b:d6:a6:fa:29:e0:
                    80:34:33:89:88:99:89:e7:75:7c:cc:84:76:50:1f:
                    82:b1:d5:d7:d4:6b:84:32:c2:7b:e2:b1:db:57:5e:
                    48:ea:09:1a:16:aa:0b:a7:d2:ea:2a:78:5e:90:22:
                    ff:96:ca:7e:27:89:67:1e:03:ab:3e:9f:13:26:0f:
                    bf:79:6c:81:2b:48:a3:9e:aa:63:1a:18:99:07:a8:
                    3e:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:E6:D4:EA:25:A3:B0:64:96:C3:CD:92:B8:49:A0:1C:7C:87:D7:0C
            X509v3 Authority Key Identifier:
                keyid:49:B4:D6:19:09:5D:94:32:AF:64:60:85:3E:14:7B:EF:5D:1C:48:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3634F1B/A133C32A299511F0B2F717B2DAE4EC9C/SbTWGQldlDKvZGCFPhR7710cSLA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SbTWGQldlDKvZGCFPhR7710cSLA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3634F1B/A133C32A299511F0B2F717B2DAE4EC9C/SbTWGQldlDKvZGCFPhR7710cSLA.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:e4:d3:fe:a4:3a:20:62:05:36:93:74:b4:53:de:9b:22:c5:
         57:a1:30:f6:13:0b:42:b0:8d:4e:9b:66:f6:e8:58:bf:cc:9a:
         55:52:d0:70:ac:a3:0b:f0:40:2f:9d:2d:ee:6d:9b:30:62:64:
         d5:9a:61:d8:e1:27:fc:7a:2f:35:f2:70:e8:4a:cf:44:0a:1b:
         be:e8:66:fd:14:8b:bf:1e:9f:52:0a:f7:f5:bc:e7:b7:39:9f:
         c2:9d:70:c9:15:98:af:ff:3b:78:d1:a3:dd:07:8b:94:2c:dd:
         dc:da:c6:f7:d8:66:e6:a6:87:e3:70:03:5d:da:20:8a:04:89:
         70:4e:45:40:5d:c0:2e:18:07:54:2f:66:96:8b:95:b0:70:ce:
         46:ae:3c:32:d5:ab:0c:aa:a0:2f:10:f0:80:6f:d3:da:da:9f:
         62:c5:87:69:c9:65:82:eb:49:0c:16:3b:07:1e:19:c6:f6:c2:
         50:5e:96:17:8b:7f:cf:2a:f1:94:23:91:31:7c:57:fe:46:7e:
         d1:ad:9f:2d:da:ae:26:16:3b:20:28:7e:45:86:6f:00:ca:f5:
         96:bc:92:6e:02:0e:be:2b:c0:23:7f:0f:59:11:70:20:74:bf:
         8c:18:41:7e:3e:da:2c:61:a7:c8:8b:95:ff:05:7b:b7:6d:30:
         fa:52:fe:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 8 17:20:06 2025 by rpki-client