This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3645590/95C1A38A27F811EFA48126167DDC24C2/PdV0GGdrVqud5W-qgMJ4h5vZRc4.mft
File:                     PdV0GGdrVqud5W-qgMJ4h5vZRc4.mft (raw, json)
Hash identifier:          pS2aXOX6Nq+gR2Sb+Mv2gHUW7A6Jbg3rZOHwlq5bmSo=
Subject key identifier:   D5:78:D8:33:C2:93:36:ED:57:6B:7C:40:ED:A4:98:3D:A8:FC:89:F6
Authority key identifier: 3D:D5:74:18:67:6B:56:AB:9D:E5:6F:AA:80:C2:78:87:9B:D9:45:CE
Certificate issuer:       /CN=F3645590AF/serialNumber=3DD57418676B56AB9DE56FAA80C278879BD945CE
Certificate serial:       022F
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/PdV0GGdrVqud5W-qgMJ4h5vZRc4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3645590/95C1A38A27F811EFA48126167DDC24C2/PdV0GGdrVqud5W-qgMJ4h5vZRc4.mft
Manifest number:          022E
Signing time:             Sun 07 Dec 2025 04:15:22 +0000
Manifest this update:     Sun 07 Dec 2025 04:15:21 +0000
Manifest next update:     Tue 09 Dec 2025 04:15:21 +0000
Files and hashes:         1: PdV0GGdrVqud5W-qgMJ4h5vZRc4.crl (hash: 607PRty6F0X7YXuQLjmRelSZ0+SWT1ezl4G/6Ht1RzU=)
                          2: 098CB55C27F911EF9DB4BD167DDC24C2.roa (hash: MnuSnmQB8rdokjiI++mFKj9UCdOQLKSSBfHFFf46+p0=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3645590/95C1A38A27F811EFA48126167DDC24C2/PdV0GGdrVqud5W-qgMJ4h5vZRc4.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3645590/95C1A38A27F811EFA48126167DDC24C2/PdV0GGdrVqud5W-qgMJ4h5vZRc4.mft
                          rsync://rpki.afrinic.net/repository/afrinic/PdV0GGdrVqud5W-qgMJ4h5vZRc4.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 09 Dec 2025 04:15:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 559 (0x22f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3645590AF, serialNumber=3DD57418676B56AB9DE56FAA80C278879BD945CE
        Validity
            Not Before: Dec  7 04:15:21 2025 GMT
            Not After : Dec  9 04:15:21 2025 GMT
        Subject: CN=6934ff5a-4279
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:92:89:8f:b6:60:30:1b:20:1f:d3:3a:88:cd:
                    1a:68:f2:6c:d6:d8:72:4f:60:2a:7e:f1:c0:f5:49:
                    ee:16:71:9d:c2:b6:7c:06:ee:05:37:f0:d3:33:da:
                    9e:19:29:cf:50:5a:3d:1f:4a:8e:02:14:d3:77:5f:
                    f0:59:d4:64:24:dd:c5:bb:9c:83:4d:c5:bd:3b:ab:
                    0e:db:16:7e:ef:60:ad:7f:9f:e2:07:38:3d:a1:09:
                    74:51:a6:57:67:f5:34:b4:e5:d5:d7:b7:70:e2:06:
                    9c:e9:4a:9c:0b:5a:e5:97:e8:cf:d1:90:e9:44:7d:
                    0e:92:32:98:9c:6e:df:2c:f2:db:d3:7e:e8:cc:79:
                    47:fa:9d:18:48:ac:40:24:63:e5:58:9d:1e:3c:be:
                    67:cd:41:28:2d:fe:db:2b:75:2d:b6:28:0c:b6:08:
                    10:32:85:ef:0a:a1:97:dd:67:7b:77:1b:c7:2e:e5:
                    86:e8:54:2e:ca:c8:5c:4e:6f:2b:e3:11:f3:3d:8f:
                    4e:a8:27:70:14:e3:81:36:18:f6:cb:2e:f7:53:29:
                    88:03:b5:c9:cf:3e:2e:12:fb:e0:d3:8f:9f:2d:3c:
                    0f:93:84:50:1e:12:f1:19:eb:ed:26:33:14:70:e9:
                    9f:f4:95:af:24:9e:a6:23:08:7c:99:d0:8a:a5:df:
                    14:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:78:D8:33:C2:93:36:ED:57:6B:7C:40:ED:A4:98:3D:A8:FC:89:F6
            X509v3 Authority Key Identifier:
                keyid:3D:D5:74:18:67:6B:56:AB:9D:E5:6F:AA:80:C2:78:87:9B:D9:45:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3645590/95C1A38A27F811EFA48126167DDC24C2/PdV0GGdrVqud5W-qgMJ4h5vZRc4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/PdV0GGdrVqud5W-qgMJ4h5vZRc4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3645590/95C1A38A27F811EFA48126167DDC24C2/PdV0GGdrVqud5W-qgMJ4h5vZRc4.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:73:07:b4:6a:34:88:01:00:65:bd:53:63:49:31:59:1d:04:
         af:35:09:84:81:e4:00:db:ba:6e:72:b2:1c:d4:02:95:8d:06:
         89:9f:a2:42:de:cf:8d:4a:ec:d1:13:fa:c4:a3:67:6e:18:d6:
         e1:42:20:a2:55:b7:fa:0c:35:87:9c:30:63:77:b8:90:28:6e:
         a9:ea:94:88:9b:ca:75:97:fd:c7:fb:ac:75:51:05:15:50:dc:
         33:8f:9c:a7:6f:59:e8:e3:aa:db:f6:47:6f:84:f0:ad:e3:cc:
         3d:9b:f1:61:dd:ca:30:e7:22:36:65:68:3e:61:49:bc:a3:31:
         fb:6c:27:68:63:f9:07:9a:ce:77:8d:35:76:70:76:61:18:7d:
         c9:cb:c2:8e:df:10:7d:87:08:c2:40:ec:21:db:35:98:9c:9a:
         55:d8:34:db:84:e9:3f:58:41:b0:b0:e7:30:a0:83:dc:f5:46:
         99:0e:25:55:4b:a8:25:00:ec:27:40:69:dd:62:da:2b:05:b6:
         93:43:a5:fa:0c:fb:fe:50:08:e8:21:da:e3:e5:1c:22:84:13:
         26:59:9d:ee:a7:bb:c0:14:02:28:77:7f:f9:8a:ad:79:b1:a6:
         98:35:95:0b:58:ac:4a:29:55:54:6e:60:73:c0:86:38:f4:7f:
         13:36:08:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 8 01:21:25 2025 by rpki-client