This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3614ABB/A6BA4A94900911ED93517389F1222468/eAFgO7LzcEbg-v3Xp0_LBuPECBg.mft
File:                     eAFgO7LzcEbg-v3Xp0_LBuPECBg.mft (raw, json)
Hash identifier:          ZINnI9ty64b6kz0phfSjytxJ3YWrFHAE4X4Okr8SFCg=
Subject key identifier:   56:7D:74:2D:48:BA:38:51:3E:CA:4A:EA:0F:70:27:E3:90:43:D5:97
Authority key identifier: 78:01:60:3B:B2:F3:70:46:E0:FA:FD:D7:A7:4F:CB:06:E3:C4:08:18
Certificate issuer:       /CN=F3614ABBAF/serialNumber=7801603BB2F37046E0FAFDD7A74FCB06E3C40818
Certificate serial:       0468
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/eAFgO7LzcEbg-v3Xp0_LBuPECBg.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3614ABB/A6BA4A94900911ED93517389F1222468/eAFgO7LzcEbg-v3Xp0_LBuPECBg.mft
Manifest number:          0463
Signing time:             Thu 25 Dec 2025 03:09:32 +0000
Manifest this update:     Thu 25 Dec 2025 03:09:32 +0000
Manifest next update:     Sat 27 Dec 2025 03:09:32 +0000
Files and hashes:         1: eAFgO7LzcEbg-v3Xp0_LBuPECBg.crl (hash: Ef+EE4deYUoFqyTI5CAqPwv4/FYKQ5qE6kCTjR72WuI=)
                          2: C1DD39CACFBF11EEA8FB4574775412E6.roa (hash: Q5pUSksntCvIgKgWSWWYT5WZcxdon8uSCDfTyZBPILk=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3614ABB/A6BA4A94900911ED93517389F1222468/eAFgO7LzcEbg-v3Xp0_LBuPECBg.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3614ABB/A6BA4A94900911ED93517389F1222468/eAFgO7LzcEbg-v3Xp0_LBuPECBg.mft
                          rsync://rpki.afrinic.net/repository/afrinic/eAFgO7LzcEbg-v3Xp0_LBuPECBg.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 27 Dec 2025 00:06:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1128 (0x468)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3614ABBAF, serialNumber=7801603BB2F37046E0FAFDD7A74FCB06E3C40818
        Validity
            Not Before: Dec 25 03:09:32 2025 GMT
            Not After : Dec 27 03:09:32 2025 GMT
        Subject: CN=694caaec-37d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:03:e7:97:11:32:6c:e4:e3:f5:6d:b9:11:a6:
                    44:8b:5b:e8:51:52:55:93:bc:18:6f:0a:44:b9:da:
                    76:c0:2f:c5:0a:a0:58:29:f0:c6:4e:b7:8b:a9:73:
                    57:76:dd:cb:9b:b3:4f:63:9f:91:5d:61:80:3e:33:
                    68:55:fb:1d:b3:f2:b3:95:5b:a8:70:92:6d:6b:11:
                    5c:43:f2:73:7b:3e:a7:d1:98:59:d8:dc:88:fa:d8:
                    7d:32:8f:85:d9:03:21:9e:51:1d:9f:fc:86:57:ad:
                    01:93:bd:af:5b:3d:91:c9:fd:32:3a:22:c1:aa:d0:
                    e8:f3:96:30:71:ab:c4:6e:59:4e:1c:c9:3e:76:39:
                    eb:36:ba:50:3d:8c:2f:b2:b5:bd:07:5b:ea:d1:64:
                    1d:9b:b0:92:a0:66:a2:ad:8c:90:a9:c5:d1:47:03:
                    9b:6f:90:07:19:93:d8:76:c5:fe:6c:76:c6:58:62:
                    28:2b:1c:86:61:10:3d:2c:b2:d4:54:1e:40:08:e8:
                    b7:71:cd:76:59:13:29:cf:46:91:99:34:f4:b3:83:
                    3e:fc:f2:df:d1:77:14:62:fd:9e:f7:ca:e3:3b:76:
                    08:55:f9:a4:e0:d5:62:8f:55:3d:68:e4:5a:1a:46:
                    87:3f:42:51:f8:7d:67:51:03:51:6e:b6:a6:39:46:
                    39:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:7D:74:2D:48:BA:38:51:3E:CA:4A:EA:0F:70:27:E3:90:43:D5:97
            X509v3 Authority Key Identifier:
                keyid:78:01:60:3B:B2:F3:70:46:E0:FA:FD:D7:A7:4F:CB:06:E3:C4:08:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3614ABB/A6BA4A94900911ED93517389F1222468/eAFgO7LzcEbg-v3Xp0_LBuPECBg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/eAFgO7LzcEbg-v3Xp0_LBuPECBg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3614ABB/A6BA4A94900911ED93517389F1222468/eAFgO7LzcEbg-v3Xp0_LBuPECBg.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ce:de:da:01:98:02:92:b1:41:03:86:43:83:d1:1d:14:07:64:
         31:57:fd:26:26:ff:1f:cd:7f:90:c6:b9:7c:89:d3:3f:2d:4a:
         e2:ac:08:1b:bb:81:ac:56:72:0a:c6:ac:54:df:d0:2b:c8:9c:
         85:37:e2:d3:5e:ec:5f:9f:be:b7:d1:db:3a:2e:c6:60:87:38:
         50:a9:b0:43:4d:a7:55:cc:01:c6:c3:03:0c:ab:7b:d5:e4:38:
         f6:63:9c:27:c0:50:b6:c6:59:0b:99:77:34:54:0a:90:01:42:
         df:11:34:2a:e2:f3:db:a1:39:0a:c4:1c:11:7c:12:46:29:64:
         0b:d0:a6:70:06:3c:09:47:de:78:3b:25:bd:14:a1:bf:58:56:
         0f:3c:3d:b5:0e:73:52:11:a9:1c:80:8a:31:7e:ff:f8:0f:0a:
         92:cb:a6:10:ce:4e:03:2a:77:45:f4:20:70:07:3c:44:f1:ba:
         aa:3e:ae:97:d3:0a:71:ce:42:2a:4f:b8:cc:05:c5:50:79:83:
         fd:66:9c:94:9d:38:b6:6b:b5:ed:83:bc:77:fe:2b:83:f0:89:
         08:5d:5b:56:1d:b3:e4:21:5b:14:f1:79:c7:88:8e:59:42:ef:
         d1:b2:a5:78:25:07:82:d3:dc:fc:eb:ac:06:57:f3:98:e2:1a:
         65:08:16:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 25 09:14:22 2025 by rpki-client