This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363A48B/103FED46574711F0BA585979DAE4EC9C/4-0KKxQeZZxFITmco8yPgYx19x0.mft
File:                     4-0KKxQeZZxFITmco8yPgYx19x0.mft (raw, json)
Hash identifier:          o2gOGFrhyKNFj3rnO8ul7WPwMl+k1zIWetHpzayVONU=
Subject key identifier:   A9:0B:B5:92:AD:B4:58:87:52:4C:D5:5A:1A:34:E7:62:FE:4E:B7:EE
Authority key identifier: E3:ED:0A:2B:14:1E:65:9C:45:21:39:9C:A3:CC:8F:81:8C:75:F7:1D
Certificate issuer:       /CN=F363A48BAF/serialNumber=E3ED0A2B141E659C4521399CA3CC8F818C75F71D
Certificate serial:       A4
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/4-0KKxQeZZxFITmco8yPgYx19x0.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F363A48B/103FED46574711F0BA585979DAE4EC9C/4-0KKxQeZZxFITmco8yPgYx19x0.mft
Manifest number:          A3
Signing time:             Mon 08 Dec 2025 05:01:54 +0000
Manifest this update:     Mon 08 Dec 2025 05:01:53 +0000
Manifest next update:     Wed 10 Dec 2025 05:01:53 +0000
Files and hashes:         1: 4-0KKxQeZZxFITmco8yPgYx19x0.crl (hash: YTZ/rFEKs4PQYqnHcA+r/3QD+kLVGpAlqI7w8n5Si+4=)
                          2: 075271E4574811F0A7DC6D7EDAE4EC9C.roa (hash: zOGSgi/1KJ9xQcEdBGnV40++jUsJYV1/+BcJ8fXP1w8=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F363A48B/103FED46574711F0BA585979DAE4EC9C/4-0KKxQeZZxFITmco8yPgYx19x0.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F363A48B/103FED46574711F0BA585979DAE4EC9C/4-0KKxQeZZxFITmco8yPgYx19x0.mft
                          rsync://rpki.afrinic.net/repository/afrinic/4-0KKxQeZZxFITmco8yPgYx19x0.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 10 Dec 2025 00:06:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 164 (0xa4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F363A48BAF, serialNumber=E3ED0A2B141E659C4521399CA3CC8F818C75F71D
        Validity
            Not Before: Dec  8 05:01:53 2025 GMT
            Not After : Dec 10 05:01:53 2025 GMT
        Subject: CN=69365bc2-9ead
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:53:61:65:a0:57:23:fc:8a:eb:f7:76:41:c5:
                    49:a7:27:88:4a:ad:9f:3d:6e:fc:61:06:e0:f6:92:
                    83:a1:60:2c:50:cd:08:19:89:7e:0b:80:30:35:1c:
                    c6:bb:c6:61:7c:4c:e2:54:e7:ed:84:8c:8e:93:d7:
                    9a:55:28:01:d9:36:2c:91:76:6c:3c:ed:3f:52:92:
                    17:95:31:7f:ae:51:40:00:09:43:40:af:6b:0b:8a:
                    db:76:93:0e:88:7e:37:60:dd:37:20:2a:85:94:a7:
                    ea:a8:24:fb:de:33:04:2d:49:38:db:69:4a:72:e4:
                    4c:65:75:2b:3b:af:77:64:c8:6e:fe:0d:8e:ee:a6:
                    d6:5d:53:1d:b1:02:e2:97:c7:9b:b4:33:64:70:70:
                    7d:71:ed:b5:10:da:e5:9c:31:8a:8d:5e:b0:f2:f8:
                    51:f4:f0:36:26:59:e9:06:dd:f1:69:12:be:a8:99:
                    b3:73:3d:bc:ad:63:89:22:52:44:62:92:de:38:14:
                    98:80:8d:61:0e:8c:e2:96:0c:5a:1b:23:75:39:ad:
                    ce:fd:a4:16:0c:fe:e2:67:4c:c6:61:f3:0d:d2:d3:
                    ca:d0:1a:ea:1f:ae:aa:5b:04:66:f5:2d:03:49:3a:
                    3f:03:16:0d:1d:1c:b5:d9:c9:68:3e:50:e3:d0:b2:
                    01:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:0B:B5:92:AD:B4:58:87:52:4C:D5:5A:1A:34:E7:62:FE:4E:B7:EE
            X509v3 Authority Key Identifier:
                keyid:E3:ED:0A:2B:14:1E:65:9C:45:21:39:9C:A3:CC:8F:81:8C:75:F7:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F363A48B/103FED46574711F0BA585979DAE4EC9C/4-0KKxQeZZxFITmco8yPgYx19x0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/4-0KKxQeZZxFITmco8yPgYx19x0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363A48B/103FED46574711F0BA585979DAE4EC9C/4-0KKxQeZZxFITmco8yPgYx19x0.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:7b:ab:dc:9b:01:f3:2a:9e:04:e8:87:2a:db:6c:c3:03:a5:
         80:e5:3f:b4:56:73:7d:68:a9:b4:f6:28:6f:19:b4:29:18:0c:
         75:cd:d2:c1:e2:66:c2:0b:ef:1f:f3:79:38:4b:30:6e:b9:76:
         d0:fd:9b:38:42:07:6e:9c:b6:48:2b:06:f6:64:27:da:3b:83:
         90:05:f6:bb:f0:d3:1f:0a:9e:5d:a9:a0:fe:6a:0d:84:b1:65:
         5a:3b:7c:6c:6a:5b:d0:9a:89:64:77:85:18:4e:9a:f2:79:a5:
         2c:e6:76:76:e8:63:59:0d:9a:bc:8f:c6:f6:c3:95:3a:3e:77:
         39:14:cd:d3:72:bf:3e:d5:2f:bd:b5:0c:30:32:76:e0:9b:e8:
         e9:a0:4a:70:17:99:76:73:08:d4:b3:7f:fe:4d:32:6a:80:15:
         04:44:92:28:5c:f1:74:91:94:9e:d2:c5:a9:11:a7:ff:c6:2f:
         70:57:b2:a1:13:e3:a3:a1:e1:63:a1:2f:12:4a:f2:ba:46:9c:
         8b:27:53:fd:20:3e:95:5c:cd:ea:c9:1a:3f:8c:f3:86:c0:e4:
         b6:26:28:89:8b:2d:6f:b2:e3:cb:67:cd:a1:f6:ba:c8:57:02:
         97:a8:c5:62:d9:4f:d9:f6:a9:e6:e3:f7:4e:33:b4:af:97:19:
         72:f6:7a:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 8 18:05:20 2025 by rpki-client