This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3699B8E/FE20D820B12211E5B9294D4AF8AEA228/oTXgC5jL9934qvJiOG-OFAOqwBg.mft
File:                     oTXgC5jL9934qvJiOG-OFAOqwBg.mft (raw, json)
Hash identifier:          kyYRPlAqaiCMlxygB/Qfrd0HVFGv7dk4kBuDdW1jKAA=
Subject key identifier:   9B:2F:41:56:54:9E:E7:36:FB:6B:21:A7:3C:52:9A:2B:54:11:E6:B3
Authority key identifier: A1:35:E0:0B:98:CB:F7:DD:F8:AA:F2:62:38:6F:8E:14:03:AA:C0:18
Certificate issuer:       /CN=F3699B8EAF/serialNumber=A135E00B98CBF7DDF8AAF262386F8E1403AAC018
Certificate serial:       0E7B
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/oTXgC5jL9934qvJiOG-OFAOqwBg.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3699B8E/FE20D820B12211E5B9294D4AF8AEA228/oTXgC5jL9934qvJiOG-OFAOqwBg.mft
Manifest number:          0E76
Signing time:             Sat 06 Dec 2025 01:00:17 +0000
Manifest this update:     Sat 06 Dec 2025 01:00:16 +0000
Manifest next update:     Mon 08 Dec 2025 01:00:16 +0000
Files and hashes:         1: oTXgC5jL9934qvJiOG-OFAOqwBg.crl (hash: SYqaUJi9RiNeMxYoCSP14T9/3Lj2PYvcJ/qeHym/h9U=)
                          2: FE5120C28FC111EDA79FCAC6F1222468.roa (hash: lagFk2mFf27o4rt0Ohp9C1TojQSFtfsxgyTlz5cUfvY=)
                          3: 3C9EDFE23B6911EEA2301F794AD9E6FC.roa (hash: wWzG/QoAuMYgq7222Q1LjDeYdIF1ogj08piOCTP/j4s=)
                          4: 89433AF2042E11EBA6782612F8AEA228.roa (hash: fYVRQ0io2BTLFn2lqVJHMZb8a+nPwuovmeRLf5YAMDY=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3699B8E/FE20D820B12211E5B9294D4AF8AEA228/oTXgC5jL9934qvJiOG-OFAOqwBg.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3699B8E/FE20D820B12211E5B9294D4AF8AEA228/oTXgC5jL9934qvJiOG-OFAOqwBg.mft
                          rsync://rpki.afrinic.net/repository/afrinic/oTXgC5jL9934qvJiOG-OFAOqwBg.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 08 Dec 2025 00:06:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3707 (0xe7b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3699B8EAF, serialNumber=A135E00B98CBF7DDF8AAF262386F8E1403AAC018
        Validity
            Not Before: Dec  6 01:00:16 2025 GMT
            Not After : Dec  8 01:00:16 2025 GMT
        Subject: CN=69338021-3138
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:f2:43:77:6f:26:8c:8d:dc:51:12:6d:63:21:
                    80:25:1b:db:92:54:6a:53:12:79:80:b6:ca:7f:f6:
                    9f:2b:9b:2c:1e:c7:a1:fb:e6:b5:98:e8:ba:bf:61:
                    40:65:ae:31:3d:ca:a9:50:c2:c3:df:ec:76:66:b8:
                    af:5d:f7:ab:22:8a:dc:cf:4e:f7:35:db:02:15:ee:
                    99:95:5d:96:d5:ff:3e:81:62:bf:e4:14:01:06:b5:
                    35:12:f2:01:9a:4e:e5:74:0c:bb:f7:65:98:d3:53:
                    03:67:35:50:d5:9e:e6:41:68:5a:58:1f:3b:16:0f:
                    fd:ca:de:f3:79:3b:f8:69:8b:13:09:84:ed:24:01:
                    eb:49:56:fe:5e:2d:51:b3:30:5d:15:91:09:2c:27:
                    76:c8:b8:78:16:aa:77:c6:d4:77:43:cc:f0:1a:e3:
                    12:c4:f6:16:de:78:74:f7:b5:a6:8a:8b:9d:d7:26:
                    8d:e5:c4:b0:d1:86:e6:a8:0a:16:a6:ea:30:df:a0:
                    7d:84:07:ba:87:ba:54:70:81:4c:64:2b:4d:95:e8:
                    9b:e6:e8:39:15:79:1b:76:a1:34:bf:47:a6:22:3a:
                    4c:1f:81:6b:00:46:57:b1:58:e0:bd:49:0b:a3:5b:
                    fe:62:c1:07:a8:14:55:85:b1:66:51:4f:c1:35:e2:
                    d7:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:2F:41:56:54:9E:E7:36:FB:6B:21:A7:3C:52:9A:2B:54:11:E6:B3
            X509v3 Authority Key Identifier:
                keyid:A1:35:E0:0B:98:CB:F7:DD:F8:AA:F2:62:38:6F:8E:14:03:AA:C0:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3699B8E/FE20D820B12211E5B9294D4AF8AEA228/oTXgC5jL9934qvJiOG-OFAOqwBg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/oTXgC5jL9934qvJiOG-OFAOqwBg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3699B8E/FE20D820B12211E5B9294D4AF8AEA228/oTXgC5jL9934qvJiOG-OFAOqwBg.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:5e:5d:54:fc:3d:b8:99:32:70:b3:11:cf:81:f2:98:84:06:
         84:f2:1a:58:dc:9c:9f:93:c3:19:2c:1f:22:19:b6:77:af:60:
         2d:07:9d:bc:79:17:bf:5a:9a:0f:1e:82:c2:20:22:5c:9f:90:
         cf:7b:ef:18:ce:86:dc:08:8e:f9:96:95:68:01:97:9c:84:27:
         a6:6f:4c:19:a3:0b:0d:df:87:b4:26:4e:9c:07:48:48:c1:50:
         bc:97:08:b5:5d:7a:d2:64:c0:a8:65:ee:5c:af:9e:5c:9a:2f:
         25:f1:10:72:71:c2:bf:4f:93:77:4d:d1:4c:9f:d9:17:0d:04:
         13:b0:40:9c:66:df:1b:7e:56:45:bd:b0:d9:1a:4d:d9:f5:75:
         8e:93:82:7a:4d:46:5f:54:3e:64:88:b3:72:d9:81:70:9a:75:
         5d:cc:da:31:96:49:64:46:7d:55:70:a5:bb:f8:a4:42:b4:64:
         75:1d:04:f0:3e:2a:6a:17:32:9d:03:62:3a:02:67:a4:d4:eb:
         e3:c7:fa:bb:0e:6f:81:a8:ae:2a:f7:9b:ab:bd:55:83:d5:fb:
         82:37:da:25:ac:06:0b:dc:b5:73:b3:24:b2:7e:96:61:a8:d0:
         9b:92:db:4b:40:26:57:97:96:78:52:dc:d5:55:a0:42:fd:42:
         f4:f0:c4:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 18:24:25 2025 by rpki-client