This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3660442/2962801C4FB211ED837146D4F1222468/ndN95jYew89otu98PBKrOZx8L4s.mft
File:                     ndN95jYew89otu98PBKrOZx8L4s.mft (raw, json)
Hash identifier:          hj7zRNTVp5pU2WwSiB+LS1rai1dttpv8WUwPlqnOVN0=
Subject key identifier:   F6:72:12:ED:FC:E4:49:C1:A9:B1:20:62:A5:5E:AD:BF:C2:71:AD:16
Authority key identifier: 9D:D3:7D:E6:36:1E:C3:CF:68:B6:EF:7C:3C:12:AB:39:9C:7C:2F:8B
Certificate issuer:       /CN=F3660442AF/serialNumber=9DD37DE6361EC3CF68B6EF7C3C12AB399C7C2F8B
Certificate serial:       04A3
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/ndN95jYew89otu98PBKrOZx8L4s.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3660442/2962801C4FB211ED837146D4F1222468/ndN95jYew89otu98PBKrOZx8L4s.mft
Manifest number:          04A1
Signing time:             Mon 08 Dec 2025 03:04:34 +0000
Manifest this update:     Mon 08 Dec 2025 03:04:33 +0000
Manifest next update:     Wed 10 Dec 2025 03:04:33 +0000
Files and hashes:         1: ndN95jYew89otu98PBKrOZx8L4s.crl (hash: BDcrObEj5QXyw8bAWNgvtQjsSOf1fBhA7VzW0QlRRLo=)
                          2: CA173E5E37FF11EE925E9B3E4AD9E6FC.roa (hash: DTtlgrbmzzwxu3uoClo86Z6YZ7fh9HCMMfQJyujQvlA=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3660442/2962801C4FB211ED837146D4F1222468/ndN95jYew89otu98PBKrOZx8L4s.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3660442/2962801C4FB211ED837146D4F1222468/ndN95jYew89otu98PBKrOZx8L4s.mft
                          rsync://rpki.afrinic.net/repository/afrinic/ndN95jYew89otu98PBKrOZx8L4s.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 10 Dec 2025 00:06:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1187 (0x4a3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3660442AF, serialNumber=9DD37DE6361EC3CF68B6EF7C3C12AB399C7C2F8B
        Validity
            Not Before: Dec  8 03:04:33 2025 GMT
            Not After : Dec 10 03:04:33 2025 GMT
        Subject: CN=69364042-b6d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:8c:cd:48:85:5e:2d:c9:53:6e:08:c1:9f:61:
                    a7:69:7a:61:05:84:73:54:7f:0a:94:29:3b:50:67:
                    d2:50:3e:5b:e0:c5:f6:ba:f6:51:ca:3b:23:a1:ac:
                    1a:48:e7:25:e0:48:9d:6a:69:3b:8f:a9:22:b7:74:
                    61:34:16:aa:ec:ab:4b:1a:2b:e0:6e:a8:4a:00:bb:
                    cc:51:a7:a1:f4:55:ef:50:95:2b:85:6e:29:f3:8e:
                    03:d7:18:2c:21:79:c1:70:fa:c7:2e:a9:f2:1b:26:
                    f5:48:77:85:71:46:d3:45:b4:7e:4a:9a:7a:2c:db:
                    3a:57:c3:b0:2c:f3:79:b5:46:e9:c2:2f:47:46:12:
                    f7:d9:8c:ed:6e:12:94:00:a3:a2:04:0b:0b:8e:85:
                    6d:9b:c8:86:8d:55:fc:79:b2:45:7e:19:5c:38:28:
                    3d:bf:1d:57:9d:d5:8b:d5:5a:e6:a3:41:ce:54:d4:
                    58:49:75:bd:ee:7a:be:71:26:4a:4e:ec:ef:bb:73:
                    19:39:03:a9:55:ac:a8:f7:a6:c8:56:fb:ec:eb:6b:
                    e1:bb:80:a1:82:b4:9b:e7:2e:e6:b1:8b:05:60:d6:
                    a5:7c:41:db:6e:1f:e0:6a:87:ef:6d:34:3d:9e:b4:
                    ea:db:31:68:2f:60:2b:20:00:9b:b2:f1:0b:74:2a:
                    2b:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:72:12:ED:FC:E4:49:C1:A9:B1:20:62:A5:5E:AD:BF:C2:71:AD:16
            X509v3 Authority Key Identifier:
                keyid:9D:D3:7D:E6:36:1E:C3:CF:68:B6:EF:7C:3C:12:AB:39:9C:7C:2F:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3660442/2962801C4FB211ED837146D4F1222468/ndN95jYew89otu98PBKrOZx8L4s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/ndN95jYew89otu98PBKrOZx8L4s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3660442/2962801C4FB211ED837146D4F1222468/ndN95jYew89otu98PBKrOZx8L4s.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:41:96:77:77:59:35:4f:0c:f9:21:99:64:04:b0:bc:d7:18:
         f1:75:4a:c6:57:9d:1a:81:82:21:d1:59:ca:b4:f3:23:15:cc:
         ec:dc:74:dc:f0:dd:dc:b2:5b:68:29:9f:16:06:05:90:47:2e:
         28:17:b9:f9:bc:08:ce:b6:e8:89:62:f3:f1:4b:83:1f:f4:6e:
         f7:91:54:d8:16:17:de:04:3f:4a:29:29:91:ab:39:24:2c:ce:
         cb:66:c3:e7:1b:d3:7c:b6:bc:c0:22:92:dc:21:4b:95:70:b6:
         19:68:af:d9:32:14:a4:02:6f:34:a5:13:ff:07:cc:92:83:08:
         17:fe:13:ad:f4:09:3b:91:c9:33:b1:93:ea:83:bc:8e:41:be:
         06:7e:ef:bc:49:54:42:07:bf:41:e9:f9:1b:5d:07:cf:b2:e8:
         df:0b:bc:ac:e1:5c:e0:bb:07:dd:31:5a:8f:47:65:c8:ce:b3:
         ca:92:eb:bb:16:ea:99:48:f1:b2:47:fd:4b:c8:ce:01:d0:ed:
         a9:c3:ba:8e:05:37:b7:ba:a0:20:ab:7a:4b:11:4c:3f:ad:d8:
         2f:56:42:cd:82:af:06:16:2c:ef:55:f4:e2:77:63:57:64:04:
         a1:ad:d3:84:2d:2f:a4:8e:ac:79:f5:09:86:f0:c6:b2:7a:04:
         aa:30:b3:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 8 17:07:05 2025 by rpki-client