This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3639454/AF906B7EF92F11EC815BF183F1222468/4L4sQqYq5tdSnBfTRMLSF3Y3qWY.mft
File:                     4L4sQqYq5tdSnBfTRMLSF3Y3qWY.mft (raw, json)
Hash identifier:          /ccOQ+yNyDsCIhOSaUjRHgxfSW5VrVcSQQp2kO1hVsw=
Subject key identifier:   89:50:96:43:9C:72:CD:36:60:10:CC:C8:F6:08:F0:6E:B6:E6:F9:FF
Authority key identifier: E0:BE:2C:42:A6:2A:E6:D7:52:9C:17:D3:44:C2:D2:17:76:37:A9:66
Certificate issuer:       /CN=F3639454AF/serialNumber=E0BE2C42A62AE6D7529C17D344C2D2177637A966
Certificate serial:       0511
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/4L4sQqYq5tdSnBfTRMLSF3Y3qWY.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3639454/AF906B7EF92F11EC815BF183F1222468/4L4sQqYq5tdSnBfTRMLSF3Y3qWY.mft
Manifest number:          050F
Signing time:             Mon 08 Dec 2025 02:50:10 +0000
Manifest this update:     Mon 08 Dec 2025 02:50:09 +0000
Manifest next update:     Wed 10 Dec 2025 02:50:09 +0000
Files and hashes:         1: 4L4sQqYq5tdSnBfTRMLSF3Y3qWY.crl (hash: tuPbARg/VvAKqn+03liYsXDxYfgFyWHMmAYTrzMGoZw=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3639454/AF906B7EF92F11EC815BF183F1222468/4L4sQqYq5tdSnBfTRMLSF3Y3qWY.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3639454/AF906B7EF92F11EC815BF183F1222468/4L4sQqYq5tdSnBfTRMLSF3Y3qWY.mft
                          rsync://rpki.afrinic.net/repository/afrinic/4L4sQqYq5tdSnBfTRMLSF3Y3qWY.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 10 Dec 2025 00:06:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1297 (0x511)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3639454AF, serialNumber=E0BE2C42A62AE6D7529C17D344C2D2177637A966
        Validity
            Not Before: Dec  8 02:50:09 2025 GMT
            Not After : Dec 10 02:50:09 2025 GMT
        Subject: CN=69363ce1-ab5e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:03:54:56:10:fc:80:3b:ca:02:c0:83:17:6e:
                    20:90:96:5a:fb:cb:40:bb:0a:45:3d:0c:d0:5e:35:
                    94:16:ea:be:35:aa:bb:c5:89:7e:29:04:37:98:7b:
                    26:70:7d:d8:4e:13:0c:09:8a:99:7e:08:0d:1c:9e:
                    39:6a:56:29:cb:0f:89:ad:74:bf:35:d6:52:58:dd:
                    38:84:76:a8:0f:4c:e3:1f:60:68:6f:6a:15:ef:20:
                    5e:e8:24:e6:9b:9c:4f:fc:4f:5a:bc:ee:1d:31:05:
                    f3:5d:ab:03:ba:ab:36:8f:34:0f:68:95:cf:79:7c:
                    e7:22:a4:85:44:3b:fc:eb:f0:b5:fc:84:af:de:c3:
                    42:55:14:fc:4f:12:17:f5:b7:0a:96:1a:c6:4a:1d:
                    3e:f9:b5:fb:46:c1:4f:24:5a:73:18:fd:92:4a:f5:
                    bc:fd:be:1e:d1:a7:02:60:75:94:fd:1d:b0:2f:a8:
                    70:83:72:34:98:07:5c:53:e5:8c:27:a3:ca:95:88:
                    23:50:f1:59:17:89:35:71:bc:0d:ff:b2:57:2d:9d:
                    7a:33:2c:2f:18:66:bc:1d:e8:30:34:8e:1c:7b:f9:
                    90:f0:46:6a:7c:c6:cc:ff:8c:5d:e9:c1:e3:f4:78:
                    67:63:2f:f6:7e:cd:8b:34:70:f3:69:fc:23:ee:12:
                    1f:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:50:96:43:9C:72:CD:36:60:10:CC:C8:F6:08:F0:6E:B6:E6:F9:FF
            X509v3 Authority Key Identifier:
                keyid:E0:BE:2C:42:A6:2A:E6:D7:52:9C:17:D3:44:C2:D2:17:76:37:A9:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3639454/AF906B7EF92F11EC815BF183F1222468/4L4sQqYq5tdSnBfTRMLSF3Y3qWY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/4L4sQqYq5tdSnBfTRMLSF3Y3qWY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3639454/AF906B7EF92F11EC815BF183F1222468/4L4sQqYq5tdSnBfTRMLSF3Y3qWY.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:b3:52:be:cb:d1:22:5b:3b:6f:cb:c2:cd:9d:d6:f0:18:a9:
         9f:37:c5:87:52:63:86:0e:39:d5:53:85:47:8a:ea:7d:6f:6d:
         89:20:75:58:06:39:cb:1d:6f:dc:6d:41:93:b8:2f:56:a5:ff:
         2c:b2:7d:1f:e2:29:04:ee:e7:9f:d3:2d:67:3f:22:13:c2:05:
         5b:d7:06:d5:14:b0:cb:a6:47:ff:88:5f:b8:82:50:ba:f0:e6:
         10:70:2a:1c:ac:e4:87:ca:b3:46:59:78:32:63:41:94:e0:72:
         7e:49:72:d0:0b:c0:8e:cd:f6:eb:c5:79:2c:69:8e:37:15:b5:
         56:59:4a:7f:5d:17:b5:9a:10:ec:6c:09:75:5f:7d:cd:e8:3d:
         08:df:dc:7a:c1:1c:72:73:91:bb:4c:cc:3e:2d:39:38:80:b1:
         54:85:29:8f:63:26:9e:1b:45:66:f4:11:18:d7:cb:c8:65:b3:
         72:93:fa:9a:63:2d:41:31:30:45:99:f9:5a:bc:5d:5c:11:55:
         88:2a:62:f4:81:23:fb:af:c4:3e:ce:f4:18:46:a2:62:eb:3c:
         e4:fb:70:e3:6a:aa:a3:0d:a4:28:ed:08:f4:29:ea:b2:44:9e:
         c0:c9:ed:d2:8b:2c:1f:07:6b:3d:dc:b4:34:42:2f:cd:6f:cf:
         b2:09:05:ca
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICBREwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
Mzk0NTRBRjExMC8GA1UEBRMoRTBCRTJDNDJBNjJBRTZENzUyOUMxN0QzNDRDMkQy
MTc3NjM3QTk2NjAeFw0yNTEyMDgwMjUwMDlaFw0yNTEyMTAwMjUwMDlaMBgxFjAU
BgNVBAMTDTY5MzYzY2UxLWFiNWUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDpA1RWEPyAO8oCwIMXbiCQllr7y0C7CkU9DNBeNZQW6r41qrvFiX4pBDeY
eyZwfdhOEwwJipl+CA0cnjlqVinLD4mtdL811lJY3TiEdqgPTOMfYGhvahXvIF7o
JOabnE/8T1q87h0xBfNdqwO6qzaPNA9olc95fOcipIVEO/zr8LX8hK/ew0JVFPxP
Ehf1twqWGsZKHT75tftGwU8kWnMY/ZJK9bz9vh7RpwJgdZT9HbAvqHCDcjSYB1xT
5Ywno8qViCNQ8VkXiTVxvA3/slctnXozLC8YZrwd6DA0jhx7+ZDwRmp8xsz/jF3p
weP0eGdjL/Z+zYs0cPNp/CPuEh/BAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUiVCW
Q5xyzTZgEMzI9gjwbrbm+f8wHwYDVR0jBBgwFoAU4L4sQqYq5tdSnBfTRMLSF3Y3
qWYwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjM5NDU0L0FGOTA2QjdFRjkyRjExRUM4MTVCRjE4M0YxMjIyNDY4LzRMNHNR
cVlxNXRkU25CZlRSTUxTRjNZM3FXWS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljLzRMNHNRcVlxNXRkU25CZlRSTUxTRjNZM3FXWS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2Mzk0NTQvQUY5MDZCN0VGOTJGMTFFQzgxNUJGMTgzRjEy
MjI0NjgvNEw0c1FxWXE1dGRTbkJmVFJNTFNGM1kzcVdZLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQB1s1K+y9EiWztvy8LNndbwGKmfN8WH
UmOGDjnVU4VHiup9b22JIHVYBjnLHW/cbUGTuC9Wpf8ssn0f4ikE7uef0y1nPyIT
wgVb1wbVFLDLpkf/iF+4glC68OYQcCocrOSHyrNGWXgyY0GU4HJ+SXLQC8COzfbr
xXksaY43FbVWWUp/XRe1mhDsbAl1X33N6D0I39x6wRxyc5G7TMw+LTk4gLFUhSmP
YyaeG0Vm9BEY18vIZbNyk/qaYy1BMTBFmflavF1cEVWIKmL0gSP7r8Q+zvQYRqJi
6zzk+3DjaqqjDaQo7Qj0KeqyRJ7Aye3SiywfB2s93LQ0Qi/Nb8+yCQXK
-----END CERTIFICATE-----
Generated at Mon Dec 8 18:13:04 2025 by rpki-client