This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3696A10/CBB5DFACC38C11F0A2712CBBDAE4EC9C/EbTv4fMc1cj0SqlTE_0Nw1yuJLw.mft
File:                     EbTv4fMc1cj0SqlTE_0Nw1yuJLw.mft (raw, json)
Hash identifier:          6uBjBsHKm/JsRuzLNdhJtwSsytocbx5LBKJfH4IWAQc=
Subject key identifier:   25:FE:6C:9A:D3:2D:47:2D:BF:CD:D0:20:99:38:15:EF:A1:FD:A4:1B
Authority key identifier: 11:B4:EF:E1:F3:1C:D5:C8:F4:4A:A9:53:13:FD:0D:C3:5C:AE:24:BC
Certificate issuer:       /CN=F3696A10AF/serialNumber=11B4EFE1F31CD5C8F44AA95313FD0DC35CAE24BC
Certificate serial:       17
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/EbTv4fMc1cj0SqlTE_0Nw1yuJLw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3696A10/CBB5DFACC38C11F0A2712CBBDAE4EC9C/EbTv4fMc1cj0SqlTE_0Nw1yuJLw.mft
Manifest number:          17
Signing time:             Mon 08 Dec 2025 05:21:09 +0000
Manifest this update:     Mon 08 Dec 2025 05:21:08 +0000
Manifest next update:     Wed 10 Dec 2025 05:21:08 +0000
Files and hashes:         1: EbTv4fMc1cj0SqlTE_0Nw1yuJLw.crl (hash: KAPZF8gTcdRj0GgOh/GOtveJynzuVDeVW8a8YRJMSSo=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3696A10/CBB5DFACC38C11F0A2712CBBDAE4EC9C/EbTv4fMc1cj0SqlTE_0Nw1yuJLw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3696A10/CBB5DFACC38C11F0A2712CBBDAE4EC9C/EbTv4fMc1cj0SqlTE_0Nw1yuJLw.mft
                          rsync://rpki.afrinic.net/repository/afrinic/EbTv4fMc1cj0SqlTE_0Nw1yuJLw.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 10 Dec 2025 00:06:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 23 (0x17)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3696A10AF, serialNumber=11B4EFE1F31CD5C8F44AA95313FD0DC35CAE24BC
        Validity
            Not Before: Dec  8 05:21:08 2025 GMT
            Not After : Dec 10 05:21:08 2025 GMT
        Subject: CN=69366044-5abc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:06:d2:e0:e9:e5:32:2c:ca:ed:ac:69:6e:7a:
                    53:7e:7a:70:40:45:93:43:5c:97:d7:cc:e5:ea:72:
                    98:f5:8b:93:7e:a7:e0:5d:74:50:17:80:4b:15:fa:
                    6f:b4:f0:5f:22:98:d9:eb:8c:4a:53:61:4b:44:8c:
                    95:55:2b:ba:2a:f1:1b:0f:cb:f9:75:6e:6f:b7:a9:
                    1f:b0:db:54:f0:2b:9d:b6:de:90:08:16:e8:bf:75:
                    8a:e1:c4:11:68:a2:a9:00:82:6c:6e:aa:fb:c6:31:
                    3c:b4:a1:a8:17:3b:38:41:3c:d9:f0:05:bd:8c:69:
                    ce:dc:cc:ac:b3:99:98:3d:b5:03:3b:f7:b5:be:78:
                    ea:2c:68:f0:e0:9f:cc:21:72:ff:03:79:28:ce:3a:
                    74:f9:67:6c:10:ba:9e:dc:8e:64:97:0d:f7:04:91:
                    ff:e6:3e:67:ae:af:91:dd:05:45:e5:a5:b0:c2:d5:
                    8d:50:b0:95:4e:13:38:87:b5:ea:77:26:04:50:88:
                    f8:98:79:32:ce:0a:f2:7f:57:14:14:d0:6b:7b:61:
                    14:83:03:64:47:f5:00:4e:ec:fd:19:9d:c6:24:6e:
                    49:96:ed:f6:ac:38:8a:40:73:4c:22:29:93:07:13:
                    bb:d7:58:1d:03:9e:95:ea:d8:d5:84:08:37:89:6a:
                    6e:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:FE:6C:9A:D3:2D:47:2D:BF:CD:D0:20:99:38:15:EF:A1:FD:A4:1B
            X509v3 Authority Key Identifier:
                keyid:11:B4:EF:E1:F3:1C:D5:C8:F4:4A:A9:53:13:FD:0D:C3:5C:AE:24:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3696A10/CBB5DFACC38C11F0A2712CBBDAE4EC9C/EbTv4fMc1cj0SqlTE_0Nw1yuJLw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/EbTv4fMc1cj0SqlTE_0Nw1yuJLw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3696A10/CBB5DFACC38C11F0A2712CBBDAE4EC9C/EbTv4fMc1cj0SqlTE_0Nw1yuJLw.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:8d:94:84:a8:0a:c8:68:34:53:c8:14:63:3b:aa:5e:ea:0a:
         a1:bc:e9:05:9f:10:89:83:fe:f1:50:75:4c:ba:b0:3a:b4:e1:
         70:9b:99:4f:de:34:6d:cb:aa:9c:99:b5:e3:20:64:45:cf:ca:
         3b:1b:ba:bc:a5:f8:d9:57:1a:11:f5:0a:26:d6:1f:59:94:9e:
         ec:b5:66:72:0b:42:92:6c:70:c9:9a:f7:7b:1e:f3:3a:cc:1f:
         2b:51:91:a6:54:f3:8f:51:f6:1a:d8:48:af:94:93:bc:47:0a:
         f3:25:e7:cd:53:9d:68:17:a6:7c:62:42:bf:de:b2:de:36:f7:
         fd:04:37:65:ec:70:5e:bc:d1:07:ba:1a:81:b5:1c:51:46:dd:
         53:3a:d7:af:69:8d:cf:e1:70:60:2a:4c:56:b4:f3:6d:15:6b:
         db:9c:58:de:05:4c:16:f0:64:14:99:cc:7c:bb:a3:ae:13:af:
         8c:72:1b:b9:ce:25:79:e9:b9:e6:ad:bc:25:75:f8:3e:8b:65:
         3d:b8:95:55:c7:fb:0d:29:5d:a6:f5:25:4d:8c:1d:a6:10:29:
         8f:19:bf:b3:ac:b8:63:b9:5a:00:81:a4:18:92:02:64:0f:2f:
         5d:1c:1a:37:a3:43:6f:87:65:52:ee:4e:31:7b:1f:b4:56:a4:
         0d:85:46:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 8 17:16:36 2025 by rpki-client