This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3694A3E/A405B592984311EFB970F4B6762E951A/DoVnb92LLIvqeU6JUNJzTz-JMME.mft
File:                     DoVnb92LLIvqeU6JUNJzTz-JMME.mft (raw, json)
Hash identifier:          btKP/7vxIdssEki18WfTy46HPqtHEAgSnQVaiMQISDc=
Subject key identifier:   B0:2B:9E:E5:C9:79:18:E3:05:93:DA:D6:D8:6D:C4:76:C9:12:D4:21
Authority key identifier: 0E:85:67:6F:DD:8B:2C:8B:EA:79:4E:89:50:D2:73:4F:3F:89:30:C1
Certificate issuer:       /CN=F3694A3EAF/serialNumber=0E85676FDD8B2C8BEA794E8950D2734F3F8930C1
Certificate serial:       01A2
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/DoVnb92LLIvqeU6JUNJzTz-JMME.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3694A3E/A405B592984311EFB970F4B6762E951A/DoVnb92LLIvqeU6JUNJzTz-JMME.mft
Manifest number:          01A0
Signing time:             Mon 08 Dec 2025 04:39:43 +0000
Manifest this update:     Mon 08 Dec 2025 04:39:43 +0000
Manifest next update:     Wed 10 Dec 2025 04:39:43 +0000
Files and hashes:         1: DoVnb92LLIvqeU6JUNJzTz-JMME.crl (hash: Wt6hGbQxQiZvovkBkLHzEKz+iR4siB6N1QdanmNKxtE=)
                          2: 0F329508984711EF85483C4D762E951A.roa (hash: a0BidHbztDQTPkWjYpuerywnpAYxfdwn5c2aRLRiLtE=)
                          3: 551A9F322CCD11F09F73B0B5DAE4EC9C.roa (hash: qDJZJ73fwcMimn2oqNCcTPQF5DF0ccPRcwR3NYTQ2dI=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3694A3E/A405B592984311EFB970F4B6762E951A/DoVnb92LLIvqeU6JUNJzTz-JMME.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3694A3E/A405B592984311EFB970F4B6762E951A/DoVnb92LLIvqeU6JUNJzTz-JMME.mft
                          rsync://rpki.afrinic.net/repository/afrinic/DoVnb92LLIvqeU6JUNJzTz-JMME.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 10 Dec 2025 00:06:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 418 (0x1a2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3694A3EAF, serialNumber=0E85676FDD8B2C8BEA794E8950D2734F3F8930C1
        Validity
            Not Before: Dec  8 04:39:43 2025 GMT
            Not After : Dec 10 04:39:43 2025 GMT
        Subject: CN=6936568f-693e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:35:2e:c8:e9:c9:40:70:4a:83:0a:92:4c:9c:
                    e4:1d:12:c5:a5:39:61:bd:c2:a6:0d:b3:7e:10:dd:
                    6d:95:eb:6d:95:30:f0:8a:a1:a8:e6:9b:b1:25:28:
                    e1:9a:d7:e8:cc:77:f7:07:8b:9e:50:95:61:d4:f6:
                    fd:7a:5e:00:05:7d:fc:8a:c3:e8:e5:96:b9:9d:0a:
                    c7:97:b6:84:b4:8c:d0:e7:2e:5f:9a:ac:cf:5e:dc:
                    70:30:c0:21:20:42:ba:e4:aa:1c:42:94:44:07:db:
                    2e:d1:ff:19:a8:62:14:da:3f:90:55:d7:0d:f4:4a:
                    0b:51:dc:01:c9:62:9f:8d:90:90:6f:10:8f:2d:ac:
                    af:02:4c:3a:82:8b:e2:86:cf:25:16:d7:e5:87:c1:
                    0d:73:f6:58:03:42:ce:24:f0:2f:f5:6f:7e:d9:69:
                    b8:71:8f:94:6f:28:15:68:9d:d6:68:a4:32:33:32:
                    c6:5e:9d:d0:06:5c:f8:75:3c:f4:ad:a8:5d:03:f7:
                    4f:ed:7f:58:06:70:3a:e5:20:32:9e:16:ca:14:1e:
                    31:b6:4d:05:e5:3a:5d:90:68:95:5a:fc:07:86:d7:
                    b3:c9:63:14:b9:42:71:c3:01:93:c5:3c:a5:c6:b4:
                    9c:f9:f3:9c:e2:1e:7a:e9:2d:4e:a2:c8:db:38:a2:
                    5b:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:2B:9E:E5:C9:79:18:E3:05:93:DA:D6:D8:6D:C4:76:C9:12:D4:21
            X509v3 Authority Key Identifier:
                keyid:0E:85:67:6F:DD:8B:2C:8B:EA:79:4E:89:50:D2:73:4F:3F:89:30:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3694A3E/A405B592984311EFB970F4B6762E951A/DoVnb92LLIvqeU6JUNJzTz-JMME.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/DoVnb92LLIvqeU6JUNJzTz-JMME.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3694A3E/A405B592984311EFB970F4B6762E951A/DoVnb92LLIvqeU6JUNJzTz-JMME.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:87:df:e7:18:ca:f1:ca:ac:62:77:e4:74:b7:e9:92:80:dc:
         97:f8:b0:cb:c1:de:68:f3:cb:b4:0f:74:6c:21:09:00:0d:40:
         fa:c4:27:0d:aa:cd:b0:a2:fe:2b:c6:23:2f:42:ea:fb:51:c6:
         6a:64:78:44:ce:ba:a5:c9:b9:22:18:6d:50:2e:f0:4d:09:b5:
         2b:ba:24:90:8d:b9:0a:67:ba:c1:76:d4:fa:e9:c9:34:33:7d:
         65:8e:d0:f4:4f:c9:36:2b:ef:5d:b9:a8:48:79:d3:e7:ea:b1:
         f2:a1:5a:28:3a:13:60:06:d3:2f:73:18:31:5f:53:fe:7d:14:
         da:14:30:38:c3:d2:3d:62:8b:40:69:b0:00:b8:83:79:78:4f:
         f2:1e:90:0d:11:28:eb:81:a0:23:55:23:9d:03:3a:55:6f:0a:
         15:cc:13:03:e0:1d:50:4d:77:98:21:cb:c8:ad:3a:4b:6c:43:
         82:39:02:a4:c5:4c:7c:90:4f:03:83:42:55:61:5d:9b:17:04:
         11:ae:dd:ee:89:94:ae:01:d5:e4:88:09:29:43:95:4a:18:f0:
         8a:62:87:28:64:3c:e4:95:0c:f8:6d:0d:56:2a:26:4f:1a:85:
         31:a8:ad:76:c9:60:03:fa:c6:41:78:d0:78:be:8f:8e:87:cc:
         fb:48:8c:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 8 17:04:53 2025 by rpki-client