This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3658AE0/E551C3EC9A3011ECB563A0B45A40D577/RQb8pqpV74TTpMAErIOrtQvu07k.mft
File:                     RQb8pqpV74TTpMAErIOrtQvu07k.mft (raw, json)
Hash identifier:          c+Qvp1V/3Wwn2fPYSXhaeg4PP4AsrBxnKns8oS2WCe4=
Subject key identifier:   3E:52:4A:98:C3:6B:17:98:33:86:A8:06:B7:6D:45:63:7B:65:62:51
Authority key identifier: 45:06:FC:A6:AA:55:EF:84:D3:A4:C0:04:AC:83:AB:B5:0B:EE:D3:B9
Certificate issuer:       /CN=F3658AE0AF/serialNumber=4506FCA6AA55EF84D3A4C004AC83ABB50BEED3B9
Certificate serial:       0596
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/RQb8pqpV74TTpMAErIOrtQvu07k.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3658AE0/E551C3EC9A3011ECB563A0B45A40D577/RQb8pqpV74TTpMAErIOrtQvu07k.mft
Manifest number:          0595
Signing time:             Fri 19 Dec 2025 02:40:26 +0000
Manifest this update:     Fri 19 Dec 2025 02:40:26 +0000
Manifest next update:     Sun 21 Dec 2025 02:40:26 +0000
Files and hashes:         1: RQb8pqpV74TTpMAErIOrtQvu07k.crl (hash: QeZ8ajFZLaEvkf45KyCMjfDKNhCxNVlTUrr7Fp047BI=)
                          2: 9DDD28FC9A3111EC8707D1B65A40D577.roa (hash: FZcB4QBBqx/jYH6PVYH2VRq/gBlCUQZrKAZfwhy/+S4=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3658AE0/E551C3EC9A3011ECB563A0B45A40D577/RQb8pqpV74TTpMAErIOrtQvu07k.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3658AE0/E551C3EC9A3011ECB563A0B45A40D577/RQb8pqpV74TTpMAErIOrtQvu07k.mft
                          rsync://rpki.afrinic.net/repository/afrinic/RQb8pqpV74TTpMAErIOrtQvu07k.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 21 Dec 2025 00:06:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1430 (0x596)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3658AE0AF, serialNumber=4506FCA6AA55EF84D3A4C004AC83ABB50BEED3B9
        Validity
            Not Before: Dec 19 02:40:26 2025 GMT
            Not After : Dec 21 02:40:26 2025 GMT
        Subject: CN=6944bb1a-c7dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:5a:e1:bf:cf:22:1d:1c:66:48:af:6a:82:fe:
                    56:6f:81:7e:32:fa:c4:a0:32:ef:6c:bd:68:14:6c:
                    8f:d9:b1:19:2d:b7:39:7f:07:d3:62:c6:b8:fb:71:
                    62:93:f4:bb:fc:c7:5f:41:a8:65:80:97:bc:12:9b:
                    34:87:2e:ce:dd:2c:4f:89:57:4b:6a:81:a5:8d:2d:
                    29:b2:41:85:89:ef:a3:12:17:75:16:f9:aa:05:eb:
                    58:35:49:82:e1:5f:ee:a9:18:3a:49:3c:35:0f:6b:
                    65:20:d8:e6:5a:fd:bb:c6:8a:e2:1b:0d:37:b4:4a:
                    fb:d9:5e:96:fb:a9:bd:9c:fc:73:2a:0c:e7:2b:f7:
                    1c:e5:d6:86:8e:a3:ff:65:83:34:a8:5f:f3:a6:46:
                    87:32:98:5c:03:c6:a1:b3:a6:e6:d6:13:ef:2c:dd:
                    73:95:09:37:63:ed:05:7c:53:79:a6:50:1e:e9:1a:
                    91:fa:27:a6:6c:07:48:14:dd:76:4f:70:77:f0:5e:
                    ff:95:1d:db:bb:19:2e:3c:f5:54:7d:eb:24:5b:53:
                    31:20:75:28:79:fd:f7:c6:ba:00:de:a1:0e:46:52:
                    12:07:c4:83:bf:f1:5f:da:51:f1:22:a3:02:66:89:
                    9c:e1:5d:fa:39:54:24:04:7c:77:ff:f4:ff:b7:9f:
                    e1:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:52:4A:98:C3:6B:17:98:33:86:A8:06:B7:6D:45:63:7B:65:62:51
            X509v3 Authority Key Identifier:
                keyid:45:06:FC:A6:AA:55:EF:84:D3:A4:C0:04:AC:83:AB:B5:0B:EE:D3:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3658AE0/E551C3EC9A3011ECB563A0B45A40D577/RQb8pqpV74TTpMAErIOrtQvu07k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/RQb8pqpV74TTpMAErIOrtQvu07k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3658AE0/E551C3EC9A3011ECB563A0B45A40D577/RQb8pqpV74TTpMAErIOrtQvu07k.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:d7:1e:15:42:b2:68:c2:2a:38:9a:df:a8:0c:66:44:ad:b2:
         10:a6:75:fa:c6:ef:d2:58:b5:54:7a:e6:2d:78:80:11:e2:f8:
         fa:eb:77:1d:f0:2a:d8:82:a8:a6:85:28:c0:f2:1e:78:95:61:
         52:63:1f:4d:05:9b:9d:a2:78:46:d0:af:69:b6:df:cc:71:16:
         ac:b5:fd:8b:95:67:44:fc:9b:01:b0:01:37:56:26:70:a2:0d:
         6f:7b:9d:29:85:eb:b1:aa:91:22:f7:6b:45:ff:ae:90:bf:79:
         03:a4:c6:58:ef:4b:e9:59:26:27:ed:3b:10:e5:40:f4:39:42:
         55:53:e5:6e:02:b3:22:bf:17:dc:52:f0:ff:4b:b3:45:6b:0d:
         5f:93:be:af:a6:65:d5:79:80:08:30:9d:fc:74:fe:53:de:fe:
         63:84:3b:f5:a8:fe:8f:0e:14:d2:90:15:d8:be:6a:76:ce:4f:
         96:5e:6b:65:70:bb:5a:cb:ac:91:85:43:ec:3e:a8:d6:95:8e:
         15:32:67:0f:fa:a1:46:98:53:48:ed:6f:1c:a8:77:26:79:f8:
         61:f9:92:79:92:17:d5:c3:b2:69:01:fc:6d:d4:1e:75:23:77:
         b0:c3:46:c4:61:d4:b0:b4:45:28:ad:02:b2:96:e2:fa:03:c9:
         57:ab:4d:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 12:55:44 2025 by rpki-client