This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3640DFD/B233BB2E909A11EFB949646B762E951A/xj3vPkSJRRRCc6POcAST0qDFrZo.mft
File:                     xj3vPkSJRRRCc6POcAST0qDFrZo.mft (raw, json)
Hash identifier:          V/FpRSa/AldfFQzwU0Uie/8tk3th1fCgXSR6DF4x/j8=
Subject key identifier:   DA:1C:15:B2:6B:77:46:81:79:92:6C:B0:3F:F7:84:9C:41:C4:DB:42
Authority key identifier: C6:3D:EF:3E:44:89:45:14:42:73:A3:CE:70:04:93:D2:A0:C5:AD:9A
Certificate issuer:       /CN=F3640DFDAF/serialNumber=C63DEF3E448945144273A3CE700493D2A0C5AD9A
Certificate serial:       01AA
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/xj3vPkSJRRRCc6POcAST0qDFrZo.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3640DFD/B233BB2E909A11EFB949646B762E951A/xj3vPkSJRRRCc6POcAST0qDFrZo.mft
Manifest number:          01A9
Signing time:             Mon 08 Dec 2025 04:38:43 +0000
Manifest this update:     Mon 08 Dec 2025 04:38:42 +0000
Manifest next update:     Wed 10 Dec 2025 04:38:42 +0000
Files and hashes:         1: xj3vPkSJRRRCc6POcAST0qDFrZo.crl (hash: 8IAydVvbouhS2lVuEXaSPr8CNrtc9w31/9FnN+jTwr8=)
                          2: 70BD095E911A11EF82BB6497762E951A.roa (hash: 5fyS1GERhUUgdGRbwBe9ouhJvbIYLSd3rIAGNjMRUFs=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3640DFD/B233BB2E909A11EFB949646B762E951A/xj3vPkSJRRRCc6POcAST0qDFrZo.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3640DFD/B233BB2E909A11EFB949646B762E951A/xj3vPkSJRRRCc6POcAST0qDFrZo.mft
                          rsync://rpki.afrinic.net/repository/afrinic/xj3vPkSJRRRCc6POcAST0qDFrZo.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 10 Dec 2025 00:06:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 426 (0x1aa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3640DFDAF, serialNumber=C63DEF3E448945144273A3CE700493D2A0C5AD9A
        Validity
            Not Before: Dec  8 04:38:42 2025 GMT
            Not After : Dec 10 04:38:42 2025 GMT
        Subject: CN=69365652-7317
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:8b:5f:d0:ce:42:1e:d5:fc:d1:ba:51:67:40:
                    b3:62:81:2c:38:cb:0f:e4:e3:58:a9:80:e7:de:dc:
                    cc:31:32:79:d8:35:28:b9:f9:14:c5:e4:9b:32:8d:
                    00:58:c4:c4:70:ce:ef:3b:94:11:5c:e3:bc:f4:03:
                    f8:6c:a6:ef:a1:9c:9b:10:56:dc:cd:dc:8c:b4:fa:
                    b0:7f:20:ef:a6:2e:1b:ee:eb:ea:36:22:7b:e3:11:
                    b1:60:19:bf:ef:1a:dd:c0:63:14:54:c9:61:64:c8:
                    4e:fa:bf:6e:72:c3:29:bb:f1:0b:ca:62:c5:ca:f8:
                    82:d8:94:5f:86:9b:da:19:c4:d7:88:60:66:2d:da:
                    f2:b1:b9:12:e5:05:40:b1:35:4f:d1:42:99:0a:29:
                    97:34:ce:ee:b2:9d:51:42:37:7b:96:0a:0f:11:11:
                    d0:48:1f:ca:54:a0:9a:88:d4:5d:b9:58:e7:87:51:
                    37:d5:00:02:c8:86:08:c1:c7:4c:0d:66:6f:f8:74:
                    21:2f:38:91:aa:c3:f7:a4:5c:db:04:10:71:1b:a7:
                    17:74:d8:16:24:9d:ac:b8:fc:66:e8:7b:96:38:ce:
                    2e:93:34:1f:8f:36:0b:93:a0:61:bd:94:e7:8b:45:
                    7e:11:5f:8b:2d:24:49:93:17:52:39:7b:1c:22:21:
                    32:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:1C:15:B2:6B:77:46:81:79:92:6C:B0:3F:F7:84:9C:41:C4:DB:42
            X509v3 Authority Key Identifier:
                keyid:C6:3D:EF:3E:44:89:45:14:42:73:A3:CE:70:04:93:D2:A0:C5:AD:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3640DFD/B233BB2E909A11EFB949646B762E951A/xj3vPkSJRRRCc6POcAST0qDFrZo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/xj3vPkSJRRRCc6POcAST0qDFrZo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3640DFD/B233BB2E909A11EFB949646B762E951A/xj3vPkSJRRRCc6POcAST0qDFrZo.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:49:d0:43:01:03:e7:f9:41:e0:93:38:cb:d2:5f:05:f0:51:
         3b:2e:58:2b:62:b6:50:34:20:43:84:b4:33:f1:f8:e0:0b:62:
         ac:9e:9e:07:a2:b5:e9:1e:05:cd:24:6e:1e:61:8e:45:57:40:
         bd:66:dd:28:3a:c9:90:1d:83:f2:cc:69:a5:02:c4:a5:9f:4c:
         73:af:7e:f3:4b:2c:22:d8:93:24:33:4a:49:28:6d:9d:85:f8:
         fa:3c:8d:38:f2:5c:53:b8:ec:1f:4f:c9:8a:94:e1:86:2c:67:
         e4:81:85:f5:1a:44:66:6a:e1:ce:fd:de:33:94:77:b9:b2:74:
         28:2e:da:c5:6e:7c:55:9b:ee:29:fc:a5:fe:2f:ad:ec:cb:97:
         50:76:b4:87:35:30:8b:2a:87:37:f1:1b:85:2e:04:bd:ca:b7:
         6e:62:0f:11:4d:7e:c7:98:dc:46:b5:0d:7c:08:69:fc:bc:65:
         f5:26:5c:be:9d:cf:21:ec:c5:d5:07:cd:3f:03:79:52:b8:1a:
         95:73:5c:b3:6c:1a:5e:52:a9:8e:1d:3f:d9:05:c3:a0:27:b8:
         51:20:b8:09:fc:97:8b:c2:b8:70:ba:23:0e:b8:99:9d:12:80:
         f1:6c:3b:9a:90:4d:cf:89:aa:d1:c6:7d:26:5d:2b:54:4a:02:
         71:e6:31:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 8 17:06:42 2025 by rpki-client