This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3681ED0/5251C078CE2411EDA092D0ACF1222468/SoPzGxsGBMptC3KkU9qj61h7TII.mft
File:                     SoPzGxsGBMptC3KkU9qj61h7TII.mft (raw, json)
Hash identifier:          /C9k12cG9W9RjZpz5FElmmIHoYghvdlmezUEA4DPEbI=
Subject key identifier:   53:DE:6A:EE:9A:08:B3:F6:18:38:62:C3:95:05:E6:84:D3:8B:8D:5C
Authority key identifier: 4A:83:F3:1B:1B:06:04:CA:6D:0B:72:A4:53:DA:A3:EB:58:7B:4C:82
Certificate issuer:       /CN=F3681ED0AF/serialNumber=4A83F31B1B0604CA6D0B72A453DAA3EB587B4C82
Certificate serial:       0418
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/SoPzGxsGBMptC3KkU9qj61h7TII.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3681ED0/5251C078CE2411EDA092D0ACF1222468/SoPzGxsGBMptC3KkU9qj61h7TII.mft
Manifest number:          0409
Signing time:             Mon 08 Dec 2025 03:22:16 +0000
Manifest this update:     Mon 08 Dec 2025 03:22:15 +0000
Manifest next update:     Wed 10 Dec 2025 03:22:15 +0000
Files and hashes:         1: SoPzGxsGBMptC3KkU9qj61h7TII.crl (hash: pkHjRW+rhMXzUEl9A9JyXP2suvZidoetbJORi9eRW8E=)
                          2: C644833AEE7111EE86F7F361775412E6.roa (hash: YgdlYAvq9L3YlpIV33voCNPfR5sCeCWFkjxpZfRsE/k=)
                          3: 7B89F0F65C1011F097764BA7DAE4EC9C.roa (hash: eGy/v5dJ9Sg7LBFixJArYusJNOZkmFriL3Cy5EJmVsc=)
                          4: BFD118C27C3E11F0A02173AEDAE4EC9C.roa (hash: E8rOx5Kz5JNVd/9IEaiBcjxCcyJDlnKMUqqptEDdwRw=)
                          5: 42CC1EC00B7611EEA5D28A444AD9E6FC.roa (hash: hsH3WbP2I/ts2EY2aQeTrcaXJgp89zEB64yilwHc5pg=)
                          6: 1E00E01A052911EE84BBD2454AD9E6FC.roa (hash: sJsPXhS2u3JarGDtOh1UZa0tPJmz8vwB7/YeLKri/dk=)
                          7: F8481206047B11EE91F2EF354AD9E6FC.roa (hash: jtUAjy0+9QV2iQ02jzkoPCkRiaIb/F60j3I68U9pgH4=)
                          8: F65930865B2911F0A6F411CCDAE4EC9C.roa (hash: zlBIS1j6PkXW4nIJqeYYZE1QxvGn2R6vJr3qJUI1Apc=)
                          9: C210ED2E064611F094E66494762E951A.roa (hash: Gw9d4UydYI1TKn6YtgmxyrXffZXD7vcLeB5cryG7IG4=)
                          10: F4E7AB82052811EE94115E454AD9E6FC.roa (hash: 0f6Udr5nVgdqIgPgxaXYb0TifWritIk3wQmsNXYsjss=)
                          11: 1587E6CCEE7111EEAAFBB25C775412E6.roa (hash: zasoVhr4ZDA3BPJ+ug5ooyH3/rY2lwS6n6p8BUEgx2w=)
                          12: 4F0B564AF51511EEB208C151775412E6.roa (hash: XNyDHYdBwPvc7NbnPS7pTjwqkoohEdJw312l57VSDB8=)
                          13: 4A7830A0D18B11EFAB9E6B88762E951A.roa (hash: xV745XWxYsFhNII926E/fN4gSuSPSdyN3viLNfdZy9M=)
                          14: 31CFB30C052C11EEAC0EDC4E4AD9E6FC.roa (hash: 707c2EgzG32Mlw18CbzTHauUb9G8+7v2J+8ka2UNIbA=)
                          15: 506B37B0FD0A11EEA3B5DB34017001B1.roa (hash: 12EkqcvUqaX3EcpZliJ64g6Wrfs7WAZ3LR6j5D262RI=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3681ED0/5251C078CE2411EDA092D0ACF1222468/SoPzGxsGBMptC3KkU9qj61h7TII.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3681ED0/5251C078CE2411EDA092D0ACF1222468/SoPzGxsGBMptC3KkU9qj61h7TII.mft
                          rsync://rpki.afrinic.net/repository/afrinic/SoPzGxsGBMptC3KkU9qj61h7TII.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 10 Dec 2025 00:06:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1048 (0x418)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3681ED0AF, serialNumber=4A83F31B1B0604CA6D0B72A453DAA3EB587B4C82
        Validity
            Not Before: Dec  8 03:22:15 2025 GMT
            Not After : Dec 10 03:22:15 2025 GMT
        Subject: CN=69364467-39d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:88:46:86:0c:76:ef:1e:32:b5:bf:cc:7e:34:
                    74:2c:c5:49:8c:5d:1c:a3:f2:85:85:27:38:4b:e5:
                    aa:b7:5f:1a:30:af:02:7a:82:2e:fe:36:d2:41:0e:
                    de:2f:34:9e:fe:be:72:0a:af:65:9a:6e:a9:d7:dc:
                    67:b4:41:0a:f9:1d:6f:e3:2f:0c:d5:fc:41:b1:ff:
                    e4:ee:8d:8f:3a:b8:49:a8:d6:0a:f7:f2:47:c9:aa:
                    c4:46:81:60:46:02:3a:de:8a:98:e1:a0:29:9e:33:
                    b7:65:d0:9b:1a:26:86:89:8d:be:e1:cb:90:26:60:
                    18:89:19:d7:f7:de:f4:57:b3:d5:fd:68:8b:2f:ea:
                    e0:80:c0:ea:7b:a9:fd:5e:2c:67:7d:99:23:78:ee:
                    4b:7d:7c:b3:a9:2e:42:17:c0:53:a1:23:ff:2e:96:
                    bb:d0:4d:4f:d7:53:db:87:93:42:d3:3f:96:8b:a2:
                    46:8c:4e:5b:6d:87:cb:3f:15:cb:a1:95:ef:af:77:
                    2c:25:75:94:ae:3e:72:f0:93:3a:1c:33:b8:0d:c0:
                    9f:13:f5:f3:45:93:f9:cb:13:a1:c4:b9:1d:19:31:
                    d5:46:5d:bb:1a:e8:3b:47:b8:ac:cf:44:c5:87:f1:
                    cc:16:0b:5e:12:b5:74:c3:08:6c:21:87:67:33:d4:
                    18:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:DE:6A:EE:9A:08:B3:F6:18:38:62:C3:95:05:E6:84:D3:8B:8D:5C
            X509v3 Authority Key Identifier:
                keyid:4A:83:F3:1B:1B:06:04:CA:6D:0B:72:A4:53:DA:A3:EB:58:7B:4C:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3681ED0/5251C078CE2411EDA092D0ACF1222468/SoPzGxsGBMptC3KkU9qj61h7TII.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SoPzGxsGBMptC3KkU9qj61h7TII.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3681ED0/5251C078CE2411EDA092D0ACF1222468/SoPzGxsGBMptC3KkU9qj61h7TII.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:28:47:28:9e:aa:a9:93:b0:30:a6:b1:5e:eb:ae:30:ee:f0:
         12:b3:0f:6c:35:45:c7:5e:67:72:d8:ff:e1:ad:ad:d3:1f:ba:
         df:59:ce:04:85:13:4d:78:57:22:3c:a0:6b:4b:73:c9:79:59:
         c8:90:95:bc:b9:f6:4c:cf:d8:a3:ab:78:78:c4:c1:74:04:cd:
         73:7c:d3:e5:ca:b9:3d:69:e2:bf:d9:c7:c5:b2:e6:e2:59:4d:
         92:e2:b6:7a:82:a8:2d:c5:b7:02:98:b4:2e:61:66:fd:38:86:
         ba:8a:9d:44:c2:25:1b:60:14:0c:11:09:3f:db:71:83:bc:f0:
         46:87:4f:93:5d:25:f0:b4:1b:37:ad:56:af:70:2f:54:15:83:
         1e:f1:89:93:5d:23:fe:6b:1c:0a:f2:71:f3:ca:11:94:b8:bc:
         d6:2a:3c:e2:dd:7c:cf:a3:be:cc:2d:81:2c:bf:a8:a8:59:0b:
         d6:7a:7a:39:18:d3:5e:a3:e3:bf:d9:ad:11:b7:ad:be:85:50:
         3e:81:e4:b1:8f:a8:78:8c:cb:3b:0b:0d:0b:43:69:c6:52:58:
         40:32:5b:1e:42:fb:15:5a:29:0d:c4:29:e4:ee:ae:86:7a:1b:
         b0:11:b7:64:09:66:ee:78:50:5d:82:a1:e5:68:23:fd:5a:a0:
         f7:73:97:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 8 17:08:58 2025 by rpki-client