This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3665E95/BB835CD0AD5E11EF9618654E762E951A/wZn8M3XABV4cIAIEqXeWkq9n_bE.mft
File:                     wZn8M3XABV4cIAIEqXeWkq9n_bE.mft (raw, json)
Hash identifier:          9NUJONAMVqsw5i0fcktWrylojllUp3zOWQMcLoaoA3A=
Subject key identifier:   E4:20:D4:F4:7C:5D:73:50:D7:5F:D5:EF:50:03:04:8C:F2:A0:EE:47
Authority key identifier: C1:99:FC:33:75:C0:05:5E:1C:20:02:04:A9:77:96:92:AF:67:FD:B1
Certificate issuer:       /CN=F3665E95AF/serialNumber=C199FC3375C0055E1C200204A9779692AF67FDB1
Certificate serial:       0183
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/wZn8M3XABV4cIAIEqXeWkq9n_bE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3665E95/BB835CD0AD5E11EF9618654E762E951A/wZn8M3XABV4cIAIEqXeWkq9n_bE.mft
Manifest number:          0182
Signing time:             Mon 08 Dec 2025 04:42:34 +0000
Manifest this update:     Mon 08 Dec 2025 04:42:33 +0000
Manifest next update:     Wed 10 Dec 2025 04:42:33 +0000
Files and hashes:         1: wZn8M3XABV4cIAIEqXeWkq9n_bE.crl (hash: 6IpcmAwBh/5hlcEr3sMpUjxHXojGomajcVAcv8a0SlE=)
                          2: 5AF585EAB22811EFB73F1584762E951A.roa (hash: M9j4j96vg9g40Cd6Oyoi8y4djAsi7G1lD1LSmjWcsgA=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3665E95/BB835CD0AD5E11EF9618654E762E951A/wZn8M3XABV4cIAIEqXeWkq9n_bE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3665E95/BB835CD0AD5E11EF9618654E762E951A/wZn8M3XABV4cIAIEqXeWkq9n_bE.mft
                          rsync://rpki.afrinic.net/repository/afrinic/wZn8M3XABV4cIAIEqXeWkq9n_bE.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 10 Dec 2025 00:06:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 387 (0x183)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3665E95AF, serialNumber=C199FC3375C0055E1C200204A9779692AF67FDB1
        Validity
            Not Before: Dec  8 04:42:33 2025 GMT
            Not After : Dec 10 04:42:33 2025 GMT
        Subject: CN=6936573a-4336
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:5e:71:76:a0:e9:13:f9:63:cb:85:13:5d:90:
                    69:ea:fe:af:4b:90:3a:65:e8:7a:f9:74:2e:f9:3c:
                    5c:63:81:3f:0e:71:6e:a3:f6:e5:a9:f0:f0:c1:86:
                    d0:1f:b9:35:5a:c4:85:06:5c:99:c6:f4:9e:a4:98:
                    99:4d:24:83:fa:15:d8:98:73:e3:85:b2:f6:ea:d1:
                    10:57:dc:f4:97:a3:43:aa:b2:77:d3:10:ce:dc:46:
                    c0:52:02:67:e6:2c:65:b0:75:ce:ea:b8:2b:04:90:
                    9d:95:47:75:d5:6c:22:27:71:48:d5:2b:d4:f7:e7:
                    e5:de:db:a3:02:f1:5d:5d:d0:56:4a:af:a3:cd:bf:
                    34:73:6c:9c:28:ef:e2:b2:30:53:81:3e:4a:84:63:
                    34:73:6a:02:21:ad:31:34:bc:de:f5:a2:e8:32:00:
                    be:cf:bc:aa:96:60:a5:e4:11:04:f8:33:aa:cb:f2:
                    9c:69:7a:0a:a3:96:26:a0:f4:4e:70:1b:1b:50:d9:
                    19:c4:0e:f7:c6:eb:dd:32:c6:2a:30:c3:3c:b2:12:
                    f1:7c:b3:4a:c7:d6:38:29:89:fd:78:51:cc:76:71:
                    ca:32:ee:a6:47:9c:e1:64:53:0e:fd:31:5f:ed:2f:
                    b0:a0:39:92:6a:88:3c:b9:c4:98:8d:de:b4:ef:27:
                    ef:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:20:D4:F4:7C:5D:73:50:D7:5F:D5:EF:50:03:04:8C:F2:A0:EE:47
            X509v3 Authority Key Identifier:
                keyid:C1:99:FC:33:75:C0:05:5E:1C:20:02:04:A9:77:96:92:AF:67:FD:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3665E95/BB835CD0AD5E11EF9618654E762E951A/wZn8M3XABV4cIAIEqXeWkq9n_bE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/wZn8M3XABV4cIAIEqXeWkq9n_bE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3665E95/BB835CD0AD5E11EF9618654E762E951A/wZn8M3XABV4cIAIEqXeWkq9n_bE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:cd:0c:4d:59:f9:1c:b8:f5:c2:58:03:06:bb:9e:a5:ed:57:
         8a:79:18:93:a4:64:2e:a9:4e:31:21:fd:3f:57:cf:8f:c9:45:
         4c:90:6f:00:d7:50:b0:c5:ae:84:93:a0:9f:fa:d1:31:af:e1:
         60:b9:7f:e3:b4:b7:83:d7:6b:d5:34:15:8e:d5:ee:00:99:12:
         c6:e7:bb:11:95:d1:f2:63:4e:94:a7:2b:d6:c3:72:a6:8f:c1:
         26:92:26:10:21:91:09:2c:27:ae:43:d1:e0:7f:a9:a2:b3:25:
         bf:2a:c6:09:b7:86:69:2f:58:b5:df:ef:64:af:ef:23:03:5f:
         4c:ec:52:d9:6e:f9:05:65:7a:aa:f0:dc:14:80:33:59:31:a5:
         70:d5:be:ee:95:39:10:68:b3:70:51:62:3e:25:19:d9:0f:ba:
         02:51:3e:a2:0f:4d:1b:d8:e8:36:ce:65:42:33:f4:e5:24:97:
         88:f8:c8:69:79:93:d8:84:5e:4f:c2:30:52:5d:8f:d3:3b:df:
         ff:b7:4b:72:49:29:82:c8:c5:bc:15:7c:c8:dd:bc:75:a0:86:
         05:c1:7b:40:c5:66:32:f9:0f:d8:5e:a8:27:83:08:8b:d8:3f:
         e9:b4:96:8e:33:b8:7a:4a:32:08:a4:f9:7a:fa:c1:75:b5:31:
         f6:eb:a8:8f
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICAYMwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NjVFOTVBRjExMC8GA1UEBRMoQzE5OUZDMzM3NUMwMDU1RTFDMjAwMjA0QTk3Nzk2
OTJBRjY3RkRCMTAeFw0yNTEyMDgwNDQyMzNaFw0yNTEyMTAwNDQyMzNaMBgxFjAU
BgNVBAMTDTY5MzY1NzNhLTQzMzYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDPXnF2oOkT+WPLhRNdkGnq/q9LkDpl6Hr5dC75PFxjgT8OcW6j9uWp8PDB
htAfuTVaxIUGXJnG9J6kmJlNJIP6FdiYc+OFsvbq0RBX3PSXo0OqsnfTEM7cRsBS
AmfmLGWwdc7quCsEkJ2VR3XVbCIncUjVK9T35+Xe26MC8V1d0FZKr6PNvzRzbJwo
7+KyMFOBPkqEYzRzagIhrTE0vN71ougyAL7PvKqWYKXkEQT4M6rL8pxpegqjliag
9E5wGxtQ2RnEDvfG690yxiowwzyyEvF8s0rH1jgpif14Ucx2ccoy7qZHnOFkUw79
MV/tL7CgOZJqiDy5xJiN3rTvJ++lAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQU5CDU
9Hxdc1DXX9XvUAMEjPKg7kcwHwYDVR0jBBgwFoAUwZn8M3XABV4cIAIEqXeWkq9n
/bEwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjY1RTk1L0JCODM1Q0QwQUQ1RTExRUY5NjE4NjU0RTc2MkU5NTFBL3dabjhN
M1hBQlY0Y0lBSUVxWGVXa3E5bl9iRS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL3dabjhNM1hBQlY0Y0lBSUVxWGVXa3E5bl9iRS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2NjVFOTUvQkI4MzVDRDBBRDVFMTFFRjk2MTg2NTRFNzYy
RTk1MUEvd1puOE0zWEFCVjRjSUFJRXFYZVdrcTluX2JFLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQA/zQxNWfkcuPXCWAMGu56l7VeKeRiT
pGQuqU4xIf0/V8+PyUVMkG8A11Cwxa6Ek6Cf+tExr+FguX/jtLeD12vVNBWO1e4A
mRLG57sRldHyY06UpyvWw3Kmj8EmkiYQIZEJLCeuQ9Hgf6misyW/KsYJt4ZpL1i1
3+9kr+8jA19M7FLZbvkFZXqq8NwUgDNZMaVw1b7ulTkQaLNwUWI+JRnZD7oCUT6i
D00b2Og2zmVCM/TlJJeI+MhpeZPYhF5PwjBSXY/TO9//t0tySSmCyMW8FXzI3bx1
oIYFwXtAxWYy+Q/YXqgngwiL2D/ptJaOM7h6SjIIpPl6+sF1tTH266iP
-----END CERTIFICATE-----
Generated at Mon Dec 8 17:18:31 2025 by rpki-client