This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3645A60/24BB1812119011EE8D0BC44A4AD9E6FC/GAGTeoaGkejdxAoaQ6Y47cyb134.mft
File:                     GAGTeoaGkejdxAoaQ6Y47cyb134.mft (raw, json)
Hash identifier:          JyYJjhYt3EJZsj/BbETm30TXyhUJAgtI79APLKlpaQM=
Subject key identifier:   63:1E:22:5D:EF:45:2A:F2:D5:ED:FC:C1:AC:90:55:E2:9F:77:F4:1E
Authority key identifier: 18:01:93:7A:86:86:91:E8:DD:C4:0A:1A:43:A6:38:ED:CC:9B:D7:7E
Certificate issuer:       /CN=F3645A60AF/serialNumber=1801937A868691E8DDC40A1A43A638EDCC9BD77E
Certificate serial:       039E
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/GAGTeoaGkejdxAoaQ6Y47cyb134.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3645A60/24BB1812119011EE8D0BC44A4AD9E6FC/GAGTeoaGkejdxAoaQ6Y47cyb134.mft
Manifest number:          039D
Signing time:             Mon 08 Dec 2025 03:34:42 +0000
Manifest this update:     Mon 08 Dec 2025 03:34:41 +0000
Manifest next update:     Wed 10 Dec 2025 03:34:41 +0000
Files and hashes:         1: GAGTeoaGkejdxAoaQ6Y47cyb134.crl (hash: fX0cmWS5P/fhy9mYKOdCK2rd0twOmHW/tLJHqSgJxdo=)
                          2: D9BB7DAA119111EE9EC8824F4AD9E6FC.roa (hash: z8n6q+oUQGHtnZrxmlHyDPpdETGxOMXPu63Xt71Wevg=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3645A60/24BB1812119011EE8D0BC44A4AD9E6FC/GAGTeoaGkejdxAoaQ6Y47cyb134.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3645A60/24BB1812119011EE8D0BC44A4AD9E6FC/GAGTeoaGkejdxAoaQ6Y47cyb134.mft
                          rsync://rpki.afrinic.net/repository/afrinic/GAGTeoaGkejdxAoaQ6Y47cyb134.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 10 Dec 2025 00:06:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 926 (0x39e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3645A60AF, serialNumber=1801937A868691E8DDC40A1A43A638EDCC9BD77E
        Validity
            Not Before: Dec  8 03:34:41 2025 GMT
            Not After : Dec 10 03:34:41 2025 GMT
        Subject: CN=69364752-938e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:f0:7b:5a:29:57:b8:c7:fb:66:7e:cf:21:19:
                    de:57:d0:4f:b6:88:0c:0e:26:f7:08:cb:0e:61:a4:
                    53:19:9d:b9:a0:66:ec:1e:d8:45:eb:24:36:3d:bf:
                    63:bb:06:53:63:ce:5e:6b:02:89:bc:38:25:b6:db:
                    85:cc:3e:af:be:7c:79:1e:d0:94:e7:f7:6c:f5:ef:
                    8f:96:0b:c7:db:89:b6:78:85:ce:63:57:6a:2a:ba:
                    a1:4c:9f:8f:82:c0:85:da:31:d0:3f:68:75:da:86:
                    ff:80:11:97:d8:04:0b:90:96:75:45:ca:47:6b:f5:
                    e3:a8:1f:60:a9:e0:df:11:e9:cf:80:56:25:29:eb:
                    62:a1:0d:bc:45:c1:aa:b1:93:b9:4e:fd:64:c5:ad:
                    a4:2b:f9:82:2e:af:87:98:47:e9:3a:cf:a2:bb:99:
                    44:f7:1a:82:99:cc:ba:6f:02:99:2d:1b:e3:b6:63:
                    a5:09:95:49:c4:62:68:ef:d8:1d:77:22:47:9a:c0:
                    70:76:f3:c3:10:6a:97:52:84:61:8f:83:5d:20:0f:
                    71:61:63:b2:ae:7c:c7:e0:d1:20:1a:ae:26:bf:88:
                    c4:3e:b4:eb:3e:53:a6:81:b4:ea:2b:bf:53:78:da:
                    33:8c:68:a5:57:82:d2:cb:01:85:e4:af:f0:03:5f:
                    e1:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:1E:22:5D:EF:45:2A:F2:D5:ED:FC:C1:AC:90:55:E2:9F:77:F4:1E
            X509v3 Authority Key Identifier:
                keyid:18:01:93:7A:86:86:91:E8:DD:C4:0A:1A:43:A6:38:ED:CC:9B:D7:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3645A60/24BB1812119011EE8D0BC44A4AD9E6FC/GAGTeoaGkejdxAoaQ6Y47cyb134.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/GAGTeoaGkejdxAoaQ6Y47cyb134.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3645A60/24BB1812119011EE8D0BC44A4AD9E6FC/GAGTeoaGkejdxAoaQ6Y47cyb134.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:6d:76:5d:c9:19:47:35:19:94:7d:0d:a7:34:94:53:a5:3a:
         12:11:93:c8:9c:ee:90:62:6b:5e:54:ee:b7:8c:3c:7c:44:06:
         78:0e:e6:2b:5a:a8:de:3c:54:87:5d:51:ce:38:d0:5c:58:1f:
         02:b3:00:b8:3a:e5:af:4f:8e:84:e9:e6:a0:a6:33:d1:f0:a8:
         04:4a:84:0b:79:b8:13:e0:1c:6f:69:56:eb:e6:87:65:bf:5a:
         87:39:f5:d8:40:f6:65:dc:68:d0:8a:0a:73:6d:1b:76:a9:a1:
         77:ce:19:7e:3b:27:f4:66:45:f6:6d:73:43:c2:b9:3b:1c:0a:
         cb:33:c8:2f:53:1e:c4:f1:ef:1a:1d:37:29:ca:11:b6:70:0c:
         ac:0c:e9:9a:cc:83:8d:eb:3f:9b:bd:94:ce:fe:23:ce:4b:80:
         f8:2a:f6:f8:41:af:b2:b7:d3:13:b0:f9:5b:0b:c1:f7:84:25:
         72:98:f4:b5:62:b7:d3:e9:b3:38:bc:3b:9e:13:c2:f8:7f:4c:
         73:39:e5:2d:bc:72:2b:ef:73:3a:94:e7:31:a9:82:68:8f:26:
         7b:93:e5:8c:d7:10:e3:52:ea:9f:8b:d1:a0:7d:19:c2:26:e9:
         c5:b7:57:f9:f9:58:78:5d:97:3c:66:6e:70:ab:6e:d9:08:62:
         4a:89:23:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 8 17:22:00 2025 by rpki-client