This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3666CFF/0176B1000AA011EE910F9E3A4AD9E6FC/PgnVw6wnv_ldjOWvAEEaAXaAZUs.mft
File:                     PgnVw6wnv_ldjOWvAEEaAXaAZUs.mft (raw, json)
Hash identifier:          tZON4BG8fMOtDY6apO7mGNQvSh4jdDelA9jkm+Z/6sE=
Subject key identifier:   D5:AB:4D:12:F9:FA:7F:45:B3:57:29:DD:71:4B:C8:F5:A9:D8:DD:06
Authority key identifier: 3E:09:D5:C3:AC:27:BF:F9:5D:8C:E5:AF:00:41:1A:01:76:80:65:4B
Certificate issuer:       /CN=F3666CFFAF/serialNumber=3E09D5C3AC27BFF95D8CE5AF00411A017680654B
Certificate serial:       03A5
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/PgnVw6wnv_ldjOWvAEEaAXaAZUs.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3666CFF/0176B1000AA011EE910F9E3A4AD9E6FC/PgnVw6wnv_ldjOWvAEEaAXaAZUs.mft
Manifest number:          03A5
Signing time:             Mon 08 Dec 2025 03:31:25 +0000
Manifest this update:     Mon 08 Dec 2025 03:31:25 +0000
Manifest next update:     Wed 10 Dec 2025 03:31:25 +0000
Files and hashes:         1: PgnVw6wnv_ldjOWvAEEaAXaAZUs.crl (hash: hay0mY8zD5Q+Gf/fXuXhRLkDT0oJRd1TBX/aEuG8wng=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3666CFF/0176B1000AA011EE910F9E3A4AD9E6FC/PgnVw6wnv_ldjOWvAEEaAXaAZUs.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3666CFF/0176B1000AA011EE910F9E3A4AD9E6FC/PgnVw6wnv_ldjOWvAEEaAXaAZUs.mft
                          rsync://rpki.afrinic.net/repository/afrinic/PgnVw6wnv_ldjOWvAEEaAXaAZUs.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 10 Dec 2025 00:06:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 933 (0x3a5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3666CFFAF, serialNumber=3E09D5C3AC27BFF95D8CE5AF00411A017680654B
        Validity
            Not Before: Dec  8 03:31:25 2025 GMT
            Not After : Dec 10 03:31:25 2025 GMT
        Subject: CN=6936468d-06ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:52:e6:cd:d2:50:9a:2a:1e:28:19:b3:ae:2c:
                    2f:00:db:7b:46:b2:09:f1:28:b3:6f:74:2a:2e:f8:
                    f2:fc:7a:d1:06:b2:c9:d6:fc:63:c4:43:06:fa:19:
                    40:c9:82:76:fe:0f:49:7a:69:4e:86:c9:b9:7a:07:
                    3f:82:af:ec:cc:d0:db:6a:54:3b:7b:06:6b:3e:f2:
                    d7:10:d7:a9:53:a2:c1:35:27:22:d1:bd:ef:36:c8:
                    ed:a9:17:4e:9c:37:d3:6a:f1:58:e4:23:72:aa:a1:
                    1b:6f:c0:97:0e:86:52:39:72:aa:b0:cb:79:09:cc:
                    f3:d6:79:76:55:fe:63:60:5f:36:a1:fd:30:a6:5b:
                    db:82:72:bf:7f:45:b4:b0:ad:e2:77:8b:ee:0a:c7:
                    37:68:53:2f:a1:2d:ff:7a:b2:f5:a7:4c:db:94:07:
                    03:dd:14:37:a2:e1:f8:65:fd:f0:7d:2c:f8:50:df:
                    8d:96:90:c5:9b:e9:ba:78:ba:60:53:af:6d:16:fb:
                    73:01:2b:c6:27:4b:a5:11:d9:e6:a9:7e:9a:0d:a5:
                    31:8d:ee:40:44:b3:a0:12:8b:eb:db:7c:13:6d:22:
                    87:1f:a6:be:75:16:70:29:30:cc:a6:8d:f4:9b:76:
                    2d:98:14:2a:e5:8f:e0:cc:95:00:1f:f6:b0:ac:d5:
                    e7:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:AB:4D:12:F9:FA:7F:45:B3:57:29:DD:71:4B:C8:F5:A9:D8:DD:06
            X509v3 Authority Key Identifier:
                keyid:3E:09:D5:C3:AC:27:BF:F9:5D:8C:E5:AF:00:41:1A:01:76:80:65:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3666CFF/0176B1000AA011EE910F9E3A4AD9E6FC/PgnVw6wnv_ldjOWvAEEaAXaAZUs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/PgnVw6wnv_ldjOWvAEEaAXaAZUs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3666CFF/0176B1000AA011EE910F9E3A4AD9E6FC/PgnVw6wnv_ldjOWvAEEaAXaAZUs.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:e9:82:de:bb:f0:0c:c7:4b:a3:d1:46:0d:de:b2:8b:06:0e:
         8a:c0:13:61:04:d8:61:f9:f6:30:35:2b:44:1e:8a:9d:3c:d8:
         70:b9:a5:5a:9a:db:b0:01:d1:7a:78:da:8e:c1:23:ce:1c:7f:
         42:a6:26:c4:01:f2:09:10:f9:68:95:f1:64:c4:6f:ef:29:73:
         fa:eb:8a:50:ac:11:b6:29:67:c8:61:10:a9:21:98:95:fc:13:
         f8:1a:51:7f:f5:7d:8c:f7:7c:6d:f1:56:bf:17:06:a8:f3:ea:
         30:bf:d5:97:e1:15:a8:15:de:d4:e3:5a:f6:a5:55:9d:ec:ef:
         e9:f0:b6:8e:f5:4c:b6:fe:ca:7d:65:9a:4d:1c:50:a9:b5:63:
         b1:31:96:de:5c:98:d8:f6:74:b6:30:32:50:b2:60:7a:2c:47:
         cb:04:b3:df:63:cc:a0:20:24:0f:2f:5f:0f:ae:f0:8d:bb:75:
         9d:71:d0:a6:6d:7d:7f:fd:13:8c:88:ff:f1:65:fd:79:02:8d:
         b3:ce:5a:03:21:85:84:29:f4:24:a4:55:c9:b0:d1:25:4f:7f:
         ad:0b:99:33:23:11:e2:cb:76:05:87:45:c5:39:09:b0:e8:09:
         4d:d8:d1:59:ba:e2:35:e4:3f:95:a3:cb:6a:83:8f:3f:26:9e:
         da:e2:d9:ff
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICA6UwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NjZDRkZBRjExMC8GA1UEBRMoM0UwOUQ1QzNBQzI3QkZGOTVEOENFNUFGMDA0MTFB
MDE3NjgwNjU0QjAeFw0yNTEyMDgwMzMxMjVaFw0yNTEyMTAwMzMxMjVaMBgxFjAU
BgNVBAMTDTY5MzY0NjhkLTA2ZmYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDDUubN0lCaKh4oGbOuLC8A23tGsgnxKLNvdCou+PL8etEGssnW/GPEQwb6
GUDJgnb+D0l6aU6Gybl6Bz+Cr+zM0NtqVDt7Bms+8tcQ16lTosE1JyLRve82yO2p
F06cN9Nq8VjkI3KqoRtvwJcOhlI5cqqwy3kJzPPWeXZV/mNgXzah/TCmW9uCcr9/
RbSwreJ3i+4KxzdoUy+hLf96svWnTNuUBwPdFDei4fhl/fB9LPhQ342WkMWb6bp4
umBTr20W+3MBK8YnS6UR2eapfpoNpTGN7kBEs6ASi+vbfBNtIocfpr51FnApMMym
jfSbdi2YFCrlj+DMlQAf9rCs1ecTAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQU1atN
Evn6f0WzVyndcUvI9anY3QYwHwYDVR0jBBgwFoAUPgnVw6wnv/ldjOWvAEEaAXaA
ZUswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjY2Q0ZGLzAxNzZCMTAwMEFBMDExRUU5MTBGOUUzQTRBRDlFNkZDL1BnblZ3
Nndudl9sZGpPV3ZBRUVhQVhhQVpVcy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1BnblZ3Nndudl9sZGpPV3ZBRUVhQVhhQVpVcy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2NjZDRkYvMDE3NkIxMDAwQUEwMTFFRTkxMEY5RTNBNEFE
OUU2RkMvUGduVnc2d252X2xkak9XdkFFRWFBWGFBWlVzLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAL6YLeu/AMx0uj0UYN3rKLBg6KwBNh
BNhh+fYwNStEHoqdPNhwuaVamtuwAdF6eNqOwSPOHH9CpibEAfIJEPlolfFkxG/v
KXP664pQrBG2KWfIYRCpIZiV/BP4GlF/9X2M93xt8Va/Fwao8+owv9WX4RWoFd7U
41r2pVWd7O/p8LaO9Uy2/sp9ZZpNHFCptWOxMZbeXJjY9nS2MDJQsmB6LEfLBLPf
Y8ygICQPL18PrvCNu3WdcdCmbX1//ROMiP/xZf15Ao2zzloDIYWEKfQkpFXJsNEl
T3+tC5kzIxHiy3YFh0XFOQmw6AlN2NFZuuI15D+Vo8tqg48/Jp7a4tn/
-----END CERTIFICATE-----
Generated at Mon Dec 8 17:23:26 2025 by rpki-client