This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3693944/16AA8A44207611ECB3060925D8A014CE/0YHpHtFz9k17-C2OC--ZTVmG31I.mft
File:                     0YHpHtFz9k17-C2OC--ZTVmG31I.mft (raw, json)
Hash identifier:          +UNqQ8U1IY8kFhTn8JN01bB5t/Q+5oRwj5izO/EzEVc=
Subject key identifier:   98:0E:5A:0A:E6:2F:12:AA:5D:7F:5D:5C:5F:17:2B:E0:D7:21:2C:5E
Authority key identifier: D1:81:E9:1E:D1:73:F6:4D:7B:F8:2D:8E:0B:EF:99:4D:59:86:DF:52
Certificate issuer:       /CN=F3693944AF/serialNumber=D181E91ED173F64D7BF82D8E0BEF994D5986DF52
Certificate serial:       0631
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/0YHpHtFz9k17-C2OC--ZTVmG31I.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3693944/16AA8A44207611ECB3060925D8A014CE/0YHpHtFz9k17-C2OC--ZTVmG31I.mft
Manifest number:          062C
Signing time:             Mon 08 Dec 2025 02:26:18 +0000
Manifest this update:     Mon 08 Dec 2025 02:26:17 +0000
Manifest next update:     Wed 10 Dec 2025 02:26:17 +0000
Files and hashes:         1: 0YHpHtFz9k17-C2OC--ZTVmG31I.crl (hash: kryUbfOG1FWL/b1zLhQs3gnVFgqhTziQQIrJeo5+4HI=)
                          2: 9AECDB08EE3411ED9B086D5C4AD9E6FC.roa (hash: 7TbXwTAAA29/ssAknCIxCJNoExHtrE/m255Mx4kSiPE=)
                          3: 2CA2D93A038811EF9019CA30017001B1.roa (hash: Be78PaUHhsuszKdQPF/EsSUZ0AmEaz6Xf0Gf8dw0Abs=)
                          4: FE6EB5FE1A4311ED966281A5F1222468.roa (hash: lfZWe5DsRVIlTxGTn/2XYFuZb+ctw8ovU8wMMSRVTV8=)
                          5: 7F3D996AEE3411ED84E7435C4AD9E6FC.roa (hash: HFYeFndb2JxxOdKSqCujEOpY8n28a0y4vmxd4LvSXs4=)
                          6: 35E0C666207711ECA71BBD26D8A014CE.roa (hash: +cVurkAhF+yeR1OYxL2MVt7cz6AGWHeKwMma50XfssM=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3693944/16AA8A44207611ECB3060925D8A014CE/0YHpHtFz9k17-C2OC--ZTVmG31I.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3693944/16AA8A44207611ECB3060925D8A014CE/0YHpHtFz9k17-C2OC--ZTVmG31I.mft
                          rsync://rpki.afrinic.net/repository/afrinic/0YHpHtFz9k17-C2OC--ZTVmG31I.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 10 Dec 2025 00:06:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1585 (0x631)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3693944AF, serialNumber=D181E91ED173F64D7BF82D8E0BEF994D5986DF52
        Validity
            Not Before: Dec  8 02:26:17 2025 GMT
            Not After : Dec 10 02:26:17 2025 GMT
        Subject: CN=6936374a-fc5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:75:be:ff:28:b9:2b:ea:bf:55:4a:e9:54:a9:
                    48:8d:83:43:1c:8a:68:38:b1:1d:7d:dc:5e:b6:22:
                    c1:ec:52:68:3a:58:78:3d:4f:e9:ca:da:35:42:35:
                    fb:c2:f5:78:3a:e7:bc:cc:ce:29:ab:d2:cf:d3:2f:
                    6a:07:91:d1:55:4d:06:71:f7:ae:d2:30:7e:4b:bc:
                    8c:a8:89:1c:3d:1b:2a:c2:c3:39:d0:90:4b:c0:45:
                    e6:14:31:3c:2c:17:2f:1a:bc:84:3e:98:c2:dc:19:
                    2e:97:3e:8a:a2:21:b6:c1:5c:a5:78:6f:00:6c:d6:
                    b0:68:91:83:83:97:72:03:0a:81:ce:f0:2e:24:07:
                    8a:f6:26:d5:22:e7:9a:ff:14:78:ca:af:a3:9a:74:
                    31:e8:95:5c:73:fd:e7:51:13:2b:70:f8:94:6c:69:
                    00:e7:3a:4a:bc:44:fe:5f:83:e0:83:d8:94:b3:0a:
                    c9:41:0b:fd:df:bf:bb:dc:d8:43:37:fe:e8:32:02:
                    1e:98:2f:81:ce:82:3a:6d:15:e5:61:3d:03:81:c4:
                    46:59:9f:77:43:de:1e:37:a0:1e:f0:b5:f5:12:e0:
                    71:fd:57:8c:41:88:13:55:85:65:b1:87:0a:9a:42:
                    70:7e:f9:12:d3:04:0b:ea:b3:83:60:84:e5:45:08:
                    67:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:0E:5A:0A:E6:2F:12:AA:5D:7F:5D:5C:5F:17:2B:E0:D7:21:2C:5E
            X509v3 Authority Key Identifier:
                keyid:D1:81:E9:1E:D1:73:F6:4D:7B:F8:2D:8E:0B:EF:99:4D:59:86:DF:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3693944/16AA8A44207611ECB3060925D8A014CE/0YHpHtFz9k17-C2OC--ZTVmG31I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/0YHpHtFz9k17-C2OC--ZTVmG31I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3693944/16AA8A44207611ECB3060925D8A014CE/0YHpHtFz9k17-C2OC--ZTVmG31I.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:b9:28:a2:33:5a:5a:50:2a:25:06:e2:32:58:99:9a:66:4f:
         35:dc:fb:27:36:51:1b:2a:48:96:66:0a:81:18:9c:0a:17:e1:
         84:48:f2:2a:3f:95:eb:ed:75:cd:69:8e:cc:df:9b:80:9f:35:
         43:c0:38:9f:c7:e1:ea:c5:ef:8b:70:06:29:fd:08:a9:89:b6:
         85:68:9d:f5:df:8b:1d:dd:64:80:82:86:1c:21:a0:35:57:a6:
         9a:89:d3:ad:99:96:be:68:b5:7e:7f:89:48:0d:9c:c0:98:91:
         68:64:2f:c6:3a:c3:05:8f:c7:ab:16:19:22:54:b9:fa:44:17:
         16:91:2f:3d:82:bf:40:f2:53:09:cb:9e:b9:f9:a2:6e:3c:6e:
         ca:5e:a5:40:a0:d8:6c:f0:3a:c4:e0:53:bf:73:37:c1:70:b5:
         d5:81:3d:de:27:c0:c4:1f:de:22:77:4d:2a:a7:db:f5:56:d7:
         9a:e3:40:2d:d0:2f:1c:a9:8f:ff:6c:b2:c6:b1:b8:9f:d5:93:
         a0:33:30:76:2d:3a:33:81:6e:ce:04:60:d1:21:6c:e4:46:27:
         b6:a7:03:cf:fe:fe:cc:84:9d:96:fd:ab:84:96:aa:c8:73:3a:
         72:d0:48:87:a4:2f:6e:b2:7d:ff:f2:09:3a:62:d7:9e:e5:1f:
         42:35:e3:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 8 17:26:47 2025 by rpki-client