This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36886B3/3535CA1AB8EF11EDA9B341DAF1222468/PW7ZBQN8g8VzeAsMzccNXYzvA4s.mft
File:                     PW7ZBQN8g8VzeAsMzccNXYzvA4s.mft (raw, json)
Hash identifier:          iEd/HxkNJGcb0Wu64gUiUcPL/L1fj31LPaaFX/NrtnA=
Subject key identifier:   09:F5:C9:97:75:87:1E:30:89:F5:23:42:DF:43:BB:07:9E:33:D4:8C
Authority key identifier: 3D:6E:D9:05:03:7C:83:C5:73:78:0B:0C:CD:C7:0D:5D:8C:EF:03:8B
Certificate issuer:       /CN=F36886B3AF/serialNumber=3D6ED905037C83C573780B0CCDC70D5D8CEF038B
Certificate serial:       0448
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/PW7ZBQN8g8VzeAsMzccNXYzvA4s.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36886B3/3535CA1AB8EF11EDA9B341DAF1222468/PW7ZBQN8g8VzeAsMzccNXYzvA4s.mft
Manifest number:          042F
Signing time:             Sun 07 Dec 2025 03:17:01 +0000
Manifest this update:     Sun 07 Dec 2025 03:17:00 +0000
Manifest next update:     Tue 09 Dec 2025 03:17:00 +0000
Files and hashes:         1: PW7ZBQN8g8VzeAsMzccNXYzvA4s.crl (hash: 4tb63uI36bpHmYZF8v213kanBYkKC/xwQJTr4XcLqvk=)
                          2: 4533CC40B91311EDA26291C6F1222468.roa (hash: uGFYvGCNbxCuuh0wibkKXQKGhe4pjJXmtLBEpIrE66k=)
                          3: 1DEB7B6C613B11EEB5C645474AD9E6FC.roa (hash: /ErXEoW0e3+UCMayKYaaeAaWHsb5XTpte5tdQ4ZnfGA=)
                          4: 7DF1A778B90E11EDBC79B1B8F1222468.roa (hash: k3GwCfINv0mvGU/BLwW/oIfhjiuTSdQ3PzvAnkVobV8=)
                          5: EB0E0D70B90D11ED810EF2B6F1222468.roa (hash: qjnrwe3aS+ux+xzqGjAAbOm7cFsu1KPed2tIU2bivU0=)
                          6: 6693E35CB91311ED8675F6C6F1222468.roa (hash: 6JhXHPZF0zRHLFTuJnEgTJ4LTU9hLAslWS4MPzo2NtI=)
                          7: D723225EB90E11ED8875AFB9F1222468.roa (hash: Kn9nxXMbZkD7/JtPdi9k9kabkdwN9RHHmYUqtxe5CgQ=)
                          8: 9E8E161AB90E11ED9A8907B9F1222468.roa (hash: H3Pq9ilGAR4aK1isd9uFYe7Pyx0ixqxwxPuUeqJSQs0=)
                          9: 17ABBADAB90E11ED91A064B7F1222468.roa (hash: 74bYn1UZ1KvUPzN2OSoZA6NmbYaUfQGtHKW8VwNxGn0=)
                          10: 469FD1D2B90E11EDA4D709B8F1222468.roa (hash: DwCiq+yl1LO0Hky4qis9ittQ4gAvggd/ZDmtdnICEP0=)
                          11: 90EE2C2EB90F11ED9409C1BBF1222468.roa (hash: bLZoCDQRzljU6a7QZaQ/7m8zC+sEgUgzOUOZvGfwhno=)
                          12: 1FECC31AB90411EDABCE3C9AF1222468.roa (hash: 6Uqqk7kzConxMnvXRs+CVD9wVfEepdxTtUAqdhrHQ0g=)
                          13: F4DE17FEB90E11ED9DADF2B9F1222468.roa (hash: tOXvv0qQ2rd5TLKqCJZzCM6weckNfsiTf+bbdsmvZM0=)
                          14: EA38FC82B90A11ED85FF5EAEF1222468.roa (hash: U/DFwFJXSPn3zdoS1fQC4dnFVphKMbL7mbtwJ9Z/d5w=)
                          15: 0E435AD2B90B11EDA524C7AEF1222468.roa (hash: 3pi1Vkolg9TLskhvKL2ooaCwse7gRq1ZH74gOxNR6rE=)
                          16: A1485D08B90D11EDB7DC21B6F1222468.roa (hash: UL0BFEayVaVlnK7SHN/JGWP9FuMMQ0RUBTzgrpcNFxg=)
                          17: 1445B006B90611ED953613A0F1222468.roa (hash: E2Pi3VCICYk9gP/HP2vBzXaAEevEu5qcMVBYIRi4msY=)
                          18: 2ACB0B7EB90511EDA3D72E9DF1222468.roa (hash: Y26Di5Mtx4+qnesb2dE9YlwXzFR6VIjMiaa+c4P6/vM=)
                          19: EA518BD2B90311ED9B1C9F99F1222468.roa (hash: J1Vz1rVLXnQTG3uxuAEebjvTI4ey+M4i/uYDE0Z3cIA=)
                          20: 239555A4B91311EDBDD805C6F1222468.roa (hash: TMW3XM4heg7B+zbYk8n88UWO5D0/PgqY4J8jVrpyTf4=)
                          21: 07F1B9A4B90511ED97E8D59CF1222468.roa (hash: Z5jkWScZAF0iUScwlLtH91pr6etSX7YQoMC+lv2EUy8=)
                          22: EDA6C45EB90411ED84A2979CF1222468.roa (hash: YbllMRgXv2ItWxHhyBf/RDeDvc8S+ilc9Tjl3XPHlSM=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36886B3/3535CA1AB8EF11EDA9B341DAF1222468/PW7ZBQN8g8VzeAsMzccNXYzvA4s.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36886B3/3535CA1AB8EF11EDA9B341DAF1222468/PW7ZBQN8g8VzeAsMzccNXYzvA4s.mft
                          rsync://rpki.afrinic.net/repository/afrinic/PW7ZBQN8g8VzeAsMzccNXYzvA4s.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 09 Dec 2025 00:06:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1096 (0x448)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36886B3AF, serialNumber=3D6ED905037C83C573780B0CCDC70D5D8CEF038B
        Validity
            Not Before: Dec  7 03:17:00 2025 GMT
            Not After : Dec  9 03:17:00 2025 GMT
        Subject: CN=6934f1ad-f6f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:d9:6f:14:49:ab:f4:03:4c:7f:a7:f0:8e:14:
                    04:9f:85:a6:9d:1c:9b:6e:3e:61:e9:d6:b9:bb:2f:
                    10:72:0c:2d:a6:3a:57:e6:0a:44:1b:e0:5d:cc:be:
                    ef:0e:92:d0:86:96:d1:b7:6e:28:7a:08:9a:e6:4a:
                    2e:dd:94:9f:69:e2:fc:55:21:e9:9a:bc:58:75:31:
                    3f:67:0c:ca:de:b6:a8:75:56:ae:2c:cb:d2:a0:db:
                    66:1d:81:81:50:98:74:1c:dc:3f:8f:94:65:2f:51:
                    89:a4:3e:0a:1b:d3:6b:5d:ec:e3:c4:b8:6a:63:39:
                    b6:f5:41:87:08:69:2c:6b:13:f8:f0:56:9e:6a:35:
                    e9:dc:37:0e:49:d3:c4:0e:73:0c:18:03:bd:ea:0a:
                    7f:d1:5e:b1:68:6a:f0:c4:b1:d5:89:d0:0a:6e:40:
                    eb:c3:07:82:1c:7d:cf:93:2b:20:1b:eb:e0:85:7a:
                    85:63:b7:0b:b9:78:d7:9d:f8:e0:a4:88:48:ab:93:
                    a7:5c:ec:d1:4a:50:9d:1c:da:4c:9b:f5:2c:2d:7d:
                    dd:82:65:c8:b4:7b:ef:55:72:a6:5c:51:04:3f:94:
                    2f:f9:db:69:ca:b6:60:fd:6b:92:4e:f6:7f:06:54:
                    10:eb:ee:0b:37:d4:f2:5f:b3:66:28:b2:3a:60:7e:
                    4b:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:F5:C9:97:75:87:1E:30:89:F5:23:42:DF:43:BB:07:9E:33:D4:8C
            X509v3 Authority Key Identifier:
                keyid:3D:6E:D9:05:03:7C:83:C5:73:78:0B:0C:CD:C7:0D:5D:8C:EF:03:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36886B3/3535CA1AB8EF11EDA9B341DAF1222468/PW7ZBQN8g8VzeAsMzccNXYzvA4s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/PW7ZBQN8g8VzeAsMzccNXYzvA4s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36886B3/3535CA1AB8EF11EDA9B341DAF1222468/PW7ZBQN8g8VzeAsMzccNXYzvA4s.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:b8:b9:5e:d2:ee:e1:06:1b:33:46:57:36:46:83:b2:ef:8d:
         0e:88:57:3e:b3:29:e7:23:ee:3c:68:ce:89:94:3a:49:5d:05:
         c1:24:e2:2e:d3:9b:29:6d:0c:65:72:e2:7f:59:48:ef:57:af:
         49:65:07:90:f8:61:ef:8e:77:3b:9c:d9:be:0f:3b:a2:c9:ab:
         37:b9:7a:88:44:bf:98:69:54:6f:76:12:b9:a6:eb:42:38:0f:
         b4:79:9c:68:14:e7:56:49:d6:b4:6c:32:c1:3c:2c:24:3f:6a:
         b9:ac:cd:10:82:df:e3:c4:4d:1a:3d:a9:9a:cf:c8:8c:4a:73:
         b5:a6:92:a5:21:9f:ff:dc:4d:8d:2a:22:e0:6a:9a:cd:c7:3e:
         5f:19:d7:d6:55:7f:fb:e8:0c:dc:85:82:84:2b:59:95:1c:66:
         6e:eb:84:7d:8d:da:77:52:d1:89:e9:1b:91:9a:d2:e4:ea:7d:
         26:62:75:41:32:92:0c:03:55:a6:ee:ba:2c:eb:57:a2:02:45:
         56:bb:66:86:3c:98:6f:33:99:c8:71:1f:3e:cd:f1:22:7b:6b:
         bc:fa:ab:dd:b0:90:f6:27:0e:6c:38:8a:76:72:45:59:a1:16:
         68:5e:59:1f:9f:ff:2e:a2:20:34:4b:9b:b6:25:10:99:01:ea:
         19:0f:a8:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 05:19:59 2025 by rpki-client