This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3640D65/D6E7DE72669211F0B236DBEBDAE4EC9C/AIjURX5EJgLXZtupDh_CJL1-i7Y.mft
File:                     AIjURX5EJgLXZtupDh_CJL1-i7Y.mft (raw, json)
Hash identifier:          50HRCQ1VPYBaHknLQz5UyoXH4+m/JcKJHp0tbXIf+cY=
Subject key identifier:   E1:76:B8:72:58:EE:0D:A0:BA:00:B6:24:FD:F6:FA:82:3C:16:8C:8B
Authority key identifier: 00:88:D4:45:7E:44:26:02:D7:66:DB:A9:0E:1F:C2:24:BD:7E:8B:B6
Certificate issuer:       /CN=F3640D65AF/serialNumber=0088D4457E442602D766DBA90E1FC224BD7E8BB6
Certificate serial:       91
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/AIjURX5EJgLXZtupDh_CJL1-i7Y.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3640D65/D6E7DE72669211F0B236DBEBDAE4EC9C/AIjURX5EJgLXZtupDh_CJL1-i7Y.mft
Manifest number:          90
Signing time:             Mon 08 Dec 2025 05:04:45 +0000
Manifest this update:     Mon 08 Dec 2025 05:04:44 +0000
Manifest next update:     Wed 10 Dec 2025 05:04:44 +0000
Files and hashes:         1: AIjURX5EJgLXZtupDh_CJL1-i7Y.crl (hash: E2lNhjDVTzl8WxfNoWIqH5U1M9OhAiMztNRLBtwfxgM=)
                          2: AF736D22669511F0AE6F0B7FDAE4EC9C.roa (hash: z5Q6Me8+hrh2wppVl3E0nnD4XDb7iRxKouJNGG6mdYs=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3640D65/D6E7DE72669211F0B236DBEBDAE4EC9C/AIjURX5EJgLXZtupDh_CJL1-i7Y.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3640D65/D6E7DE72669211F0B236DBEBDAE4EC9C/AIjURX5EJgLXZtupDh_CJL1-i7Y.mft
                          rsync://rpki.afrinic.net/repository/afrinic/AIjURX5EJgLXZtupDh_CJL1-i7Y.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 10 Dec 2025 00:06:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 145 (0x91)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3640D65AF, serialNumber=0088D4457E442602D766DBA90E1FC224BD7E8BB6
        Validity
            Not Before: Dec  8 05:04:44 2025 GMT
            Not After : Dec 10 05:04:44 2025 GMT
        Subject: CN=69365c6d-f7d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:b1:d7:2a:86:9a:d0:a2:d3:97:ae:97:68:07:
                    5b:10:9e:4c:cb:3d:27:11:52:fd:ff:03:60:59:0e:
                    3a:00:98:f3:b1:0a:dc:21:ce:da:ad:57:b9:8e:42:
                    c9:f7:7b:77:a9:44:9e:6b:6a:1e:c8:f2:ff:f6:4f:
                    31:e5:4e:28:57:36:7d:c8:61:eb:3a:0a:c6:ee:f9:
                    5b:3d:a3:a9:02:54:11:15:32:c1:3e:d9:0f:b9:91:
                    9b:fd:67:d2:00:3a:d7:e6:b7:21:66:2a:58:8a:6a:
                    eb:d7:4d:de:8e:b3:da:36:e9:15:59:aa:f8:6b:4d:
                    79:90:13:07:7c:14:5b:ae:fb:7e:24:c4:8a:16:93:
                    c6:d9:77:89:24:14:77:16:01:7b:8d:b0:05:03:74:
                    07:e5:70:e9:8a:bb:43:2e:92:59:9d:0a:e7:4b:61:
                    9c:33:93:e5:31:c6:b4:52:af:f1:9a:42:c2:70:d8:
                    ce:19:49:aa:57:58:fa:68:20:f0:5a:e6:ae:ec:23:
                    7e:d6:4a:68:d8:05:87:54:b2:4e:d5:43:92:31:11:
                    8d:13:9f:4a:95:f0:ab:ad:f1:d5:73:c9:b6:7a:13:
                    bd:00:45:a2:0b:7e:59:9f:54:ea:d5:95:34:cd:50:
                    08:4f:50:d8:ca:08:ce:d6:30:eb:82:ab:a1:84:11:
                    e8:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:76:B8:72:58:EE:0D:A0:BA:00:B6:24:FD:F6:FA:82:3C:16:8C:8B
            X509v3 Authority Key Identifier:
                keyid:00:88:D4:45:7E:44:26:02:D7:66:DB:A9:0E:1F:C2:24:BD:7E:8B:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3640D65/D6E7DE72669211F0B236DBEBDAE4EC9C/AIjURX5EJgLXZtupDh_CJL1-i7Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/AIjURX5EJgLXZtupDh_CJL1-i7Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3640D65/D6E7DE72669211F0B236DBEBDAE4EC9C/AIjURX5EJgLXZtupDh_CJL1-i7Y.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:97:3a:6c:43:84:29:ee:21:fd:21:be:1e:2f:c1:68:02:0e:
         10:91:67:b7:43:5d:b7:d2:aa:ef:13:fc:ce:8b:b3:4c:4a:84:
         67:38:4c:87:8e:1d:bb:10:4b:3c:93:f8:a9:a7:b6:ff:31:d9:
         80:48:0f:5c:62:e8:9f:b3:44:a6:02:95:18:17:aa:89:a7:17:
         6b:f8:25:27:51:a7:6a:01:dc:f3:76:ba:b3:da:dd:58:32:13:
         68:a9:f4:c8:50:c2:1e:68:cb:53:42:bd:52:62:cb:35:b5:0b:
         b4:25:34:4a:5c:b8:b1:fd:8a:79:09:44:20:d2:b2:ac:13:a1:
         dd:b4:9d:00:56:04:24:46:f5:d8:23:73:67:57:ed:44:43:50:
         a3:4b:10:43:39:64:c2:04:6a:29:bd:a9:05:70:c7:8f:a5:f7:
         53:fc:1b:36:99:27:e7:45:8a:92:93:19:71:e0:3c:8b:b5:2f:
         58:e6:0c:da:0f:fb:92:73:37:a5:85:38:3e:6d:b7:c1:c4:e3:
         15:0e:5d:73:78:44:91:6f:2b:95:5c:e5:bf:46:a0:1d:f5:04:
         99:9f:64:18:e7:a2:5b:16:24:b8:a6:04:43:55:f3:17:ce:ce:
         95:e4:4e:68:49:6e:de:14:dc:4f:e8:4f:b8:d1:6e:d8:8d:67:
         e7:d1:ce:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 8 17:04:29 2025 by rpki-client