This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F8F4F/8A377BBC2A7511EC90817559D8A014CE/3Beg7FhlLTGJYSOmVhDDoyBGVWs.mft
File:                     3Beg7FhlLTGJYSOmVhDDoyBGVWs.mft (raw, json)
Hash identifier:          ZjWMsLaj9wOqyJgfL9ATJe7PcVlwATsufX2F67cbdL8=
Subject key identifier:   DA:65:E5:0F:63:69:5F:3E:91:5F:07:3B:F4:75:BE:4F:00:C9:B1:DF
Authority key identifier: DC:17:A0:EC:58:65:2D:31:89:61:23:A6:56:10:C3:A3:20:46:55:6B
Certificate issuer:       /CN=F36F8F4FAF/serialNumber=DC17A0EC58652D31896123A65610C3A32046556B
Certificate serial:       065B
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/3Beg7FhlLTGJYSOmVhDDoyBGVWs.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36F8F4F/8A377BBC2A7511EC90817559D8A014CE/3Beg7FhlLTGJYSOmVhDDoyBGVWs.mft
Manifest number:          0640
Signing time:             Mon 08 Dec 2025 02:28:32 +0000
Manifest this update:     Mon 08 Dec 2025 02:28:32 +0000
Manifest next update:     Wed 10 Dec 2025 02:28:32 +0000
Files and hashes:         1: 3Beg7FhlLTGJYSOmVhDDoyBGVWs.crl (hash: 0Pbai50k7Bg1Z2tkfnfI24x3E6Vbbfw6NCKDdpomOzg=)
                          2: C0B67590BC5311EEA497C07F775412E6.roa (hash: 91oXBpg4I1tftytyNzYw21bZjbkIw+S8V4YAG0kXWMc=)
                          3: 6F7B2D9CE6EB11EFAF676182762E951A.roa (hash: ywXo19J7zzDJozIEEmOFi9+A4iofR1mYhpmq35OcaZk=)
                          4: F3B29612C8E711EFAC3B3EA9762E951A.roa (hash: OETANewi1spwDI+wuFRp4Ft8bl6bEviyIyR18XaKaRE=)
                          5: 6A5D847ABD6111F0A69CE1BFDAE4EC9C.roa (hash: fHB735+tbv3iVDIq2ZhU4RWinWdYCJgEt4jlNj33RYU=)
                          6: 0EB8532CE6E611EFA1284861762E951A.roa (hash: +Ok9dLqiCTNEexkoRFgNd4UM629LDyyikx+fFXEssiA=)
                          7: CEBF9F2CBD9B11F0AACFB4A9DAE4EC9C.roa (hash: Y3SPEfa9FhnRnBcfIvNCeFJG2P0gudqhEmqdjsID6Jo=)
                          8: 5F5BD7A8C90511EF919C5060762E951A.roa (hash: CP9UE+jBOHX8oQ6s2JYHUVcCyElYEvB82K2Sr0b1faI=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36F8F4F/8A377BBC2A7511EC90817559D8A014CE/3Beg7FhlLTGJYSOmVhDDoyBGVWs.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36F8F4F/8A377BBC2A7511EC90817559D8A014CE/3Beg7FhlLTGJYSOmVhDDoyBGVWs.mft
                          rsync://rpki.afrinic.net/repository/afrinic/3Beg7FhlLTGJYSOmVhDDoyBGVWs.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 10 Dec 2025 00:06:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1627 (0x65b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36F8F4FAF, serialNumber=DC17A0EC58652D31896123A65610C3A32046556B
        Validity
            Not Before: Dec  8 02:28:32 2025 GMT
            Not After : Dec 10 02:28:32 2025 GMT
        Subject: CN=693637d0-2004
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:05:74:e6:88:d4:68:8f:99:8a:97:1b:af:df:
                    b1:16:ce:ed:9b:8f:fa:06:c4:b6:15:9e:c4:03:a5:
                    04:cc:84:63:c4:a3:a9:6d:67:50:31:15:18:90:cb:
                    c0:39:2f:d4:32:7b:e0:fd:9a:64:50:65:ad:34:3f:
                    5a:60:9b:39:26:b3:dc:68:5a:06:8b:b6:f2:7f:94:
                    fe:09:a3:9a:2e:f3:92:87:d3:02:7a:f6:50:46:4d:
                    8f:da:4b:c8:36:7c:12:5c:31:23:9b:d3:e2:54:70:
                    c1:ed:06:b6:17:cf:63:83:6c:6e:48:e7:b3:ba:07:
                    19:53:8c:d4:3d:68:70:9f:72:9b:d2:00:5f:a2:27:
                    14:b1:a3:87:34:a3:6a:28:cc:ce:2c:38:71:60:f6:
                    1a:2c:56:64:e8:0b:0e:94:8c:08:a0:c1:86:f6:a1:
                    25:cc:00:53:bb:01:66:9f:81:9f:06:67:a0:50:65:
                    09:55:93:df:af:dc:17:59:3e:a4:67:d2:97:62:05:
                    9f:81:97:d6:1d:2c:0c:a4:2b:d3:88:1d:99:cd:e0:
                    a8:1c:50:3f:af:0f:7f:99:e3:d9:cb:86:16:43:5b:
                    f2:90:b2:8c:e5:b3:23:da:f4:4a:8a:f7:61:9b:20:
                    6f:e3:a4:90:e6:40:31:64:34:85:e3:1a:75:f9:68:
                    f7:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:65:E5:0F:63:69:5F:3E:91:5F:07:3B:F4:75:BE:4F:00:C9:B1:DF
            X509v3 Authority Key Identifier:
                keyid:DC:17:A0:EC:58:65:2D:31:89:61:23:A6:56:10:C3:A3:20:46:55:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36F8F4F/8A377BBC2A7511EC90817559D8A014CE/3Beg7FhlLTGJYSOmVhDDoyBGVWs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/3Beg7FhlLTGJYSOmVhDDoyBGVWs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F8F4F/8A377BBC2A7511EC90817559D8A014CE/3Beg7FhlLTGJYSOmVhDDoyBGVWs.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:3f:8c:ca:cb:c7:95:ce:b2:5d:ed:a8:12:11:a5:db:31:ac:
         b2:a8:f5:95:12:01:7b:3b:3a:bf:cf:a9:65:66:d9:38:b5:25:
         a6:f3:9b:73:fc:7d:b9:84:74:e9:99:1e:83:bd:0d:f1:e1:45:
         9a:f1:e9:c1:c9:b9:61:ed:1c:14:7e:8f:1e:ea:ff:12:45:0c:
         5a:00:06:05:36:64:d0:8f:3e:b0:89:ff:55:4c:3f:a3:b9:8d:
         b1:c0:26:89:0c:a4:76:9e:15:50:9d:01:08:5f:34:fa:d3:a0:
         3a:76:bb:48:ef:5c:2b:ec:84:a4:5d:f8:c2:8c:7d:f8:9d:dc:
         3e:9b:12:18:ef:ec:f1:de:40:3a:2f:b0:0c:d1:e8:3f:46:d8:
         04:26:9d:24:5d:89:ec:14:b5:5a:40:1e:69:8a:8e:2e:5e:13:
         3b:15:6c:50:e7:48:0f:d1:e1:b8:96:57:a4:27:a9:9b:9b:90:
         0a:ec:ca:21:64:7a:8f:32:06:80:86:ac:f9:05:9e:e3:6a:8b:
         0b:40:c3:3c:a1:50:b8:39:3f:90:15:7a:2a:41:16:42:7e:8a:
         b3:2e:87:2d:67:3e:04:7f:9a:32:cf:3c:9a:3b:7c:a0:1b:40:
         4b:31:b6:1e:22:0d:7c:c5:4d:5a:ea:dc:99:04:b3:93:a9:05:
         71:52:2c:2b
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICBlswDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
RjhGNEZBRjExMC8GA1UEBRMoREMxN0EwRUM1ODY1MkQzMTg5NjEyM0E2NTYxMEMz
QTMyMDQ2NTU2QjAeFw0yNTEyMDgwMjI4MzJaFw0yNTEyMTAwMjI4MzJaMBgxFjAU
BgNVBAMTDTY5MzYzN2QwLTIwMDQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCxBXTmiNRoj5mKlxuv37EWzu2bj/oGxLYVnsQDpQTMhGPEo6ltZ1AxFRiQ
y8A5L9Qye+D9mmRQZa00P1pgmzkms9xoWgaLtvJ/lP4Jo5ou85KH0wJ69lBGTY/a
S8g2fBJcMSOb0+JUcMHtBrYXz2ODbG5I57O6BxlTjNQ9aHCfcpvSAF+iJxSxo4c0
o2oozM4sOHFg9hosVmToCw6UjAigwYb2oSXMAFO7AWafgZ8GZ6BQZQlVk9+v3BdZ
PqRn0pdiBZ+Bl9YdLAykK9OIHZnN4KgcUD+vD3+Z49nLhhZDW/KQsozlsyPa9EqK
92GbIG/jpJDmQDFkNIXjGnX5aPfHAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQU2mXl
D2NpXz6RXwc79HW+TwDJsd8wHwYDVR0jBBgwFoAU3Beg7FhlLTGJYSOmVhDDoyBG
VWswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkY4RjRGLzhBMzc3QkJDMkE3NTExRUM5MDgxNzU1OUQ4QTAxNENFLzNCZWc3
RmhsTFRHSllTT21WaEREb3lCR1ZXcy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljLzNCZWc3RmhsTFRHSllTT21WaEREb3lCR1ZXcy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2RjhGNEYvOEEzNzdCQkMyQTc1MTFFQzkwODE3NTU5RDhB
MDE0Q0UvM0JlZzdGaGxMVEdKWVNPbVZoRERveUJHVldzLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAEP4zKy8eVzrJd7agSEaXbMayyqPWV
EgF7Ozq/z6llZtk4tSWm85tz/H25hHTpmR6DvQ3x4UWa8enByblh7RwUfo8e6v8S
RQxaAAYFNmTQjz6wif9VTD+juY2xwCaJDKR2nhVQnQEIXzT606A6drtI71wr7ISk
XfjCjH34ndw+mxIY7+zx3kA6L7AM0eg/RtgEJp0kXYnsFLVaQB5pio4uXhM7FWxQ
50gP0eG4llekJ6mbm5AK7MohZHqPMgaAhqz5BZ7jaosLQMM8oVC4OT+QFXoqQRZC
foqzLoctZz4Ef5oyzzyaO3ygG0BLMbYeIg18xU1a6tyZBLOTqQVxUiwr
-----END CERTIFICATE-----
Generated at Mon Dec 8 17:22:02 2025 by rpki-client