This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3614DFD/9187C5D4776711EE99DFD9724AD9E6FC/POdKxSWrybUFEx5W069Lqgyoa8c.mft
File:                     POdKxSWrybUFEx5W069Lqgyoa8c.mft (raw, json)
Hash identifier:          kmTByIE+4oEz+D2Ob4VDgI/dm6A/BHEVfxAIAlXJILg=
Subject key identifier:   A0:D7:F5:B0:93:B4:FA:FE:CD:36:3D:F4:E4:04:94:73:A5:D3:37:1B
Authority key identifier: 3C:E7:4A:C5:25:AB:C9:B5:05:13:1E:56:D3:AF:4B:AA:0C:A8:6B:C7
Certificate issuer:       /CN=F3614DFDAF/serialNumber=3CE74AC525ABC9B505131E56D3AF4BAA0CA86BC7
Certificate serial:       032E
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/POdKxSWrybUFEx5W069Lqgyoa8c.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3614DFD/9187C5D4776711EE99DFD9724AD9E6FC/POdKxSWrybUFEx5W069Lqgyoa8c.mft
Manifest number:          032A
Signing time:             Sun 21 Dec 2025 03:48:46 +0000
Manifest this update:     Sun 21 Dec 2025 03:48:45 +0000
Manifest next update:     Tue 23 Dec 2025 03:48:45 +0000
Files and hashes:         1: POdKxSWrybUFEx5W069Lqgyoa8c.crl (hash: 3sTqePbgYYTTHeQoRc5KJ/Ir0Qa2KAkHXSJSR/ilsFI=)
                          2: AF323FA6BEB611EE92751B56775412E6.roa (hash: GK2/9/UfmXeWntRnu6M2Z7FCwh1Nn+0g0buRneYltSM=)
                          3: 40F84818776811EEA27107754AD9E6FC.roa (hash: nFqZ/v55EZimpFy2xDwmiE1oDV8eSlURy0csO3fvt1E=)
                          4: BEC2B6AE7FD611EEA15ECB6C4AD9E6FC.roa (hash: fJFVTiESI7QrywlkzoasbC83KVzfgYWTl7sxxTe7Lrk=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3614DFD/9187C5D4776711EE99DFD9724AD9E6FC/POdKxSWrybUFEx5W069Lqgyoa8c.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3614DFD/9187C5D4776711EE99DFD9724AD9E6FC/POdKxSWrybUFEx5W069Lqgyoa8c.mft
                          rsync://rpki.afrinic.net/repository/afrinic/POdKxSWrybUFEx5W069Lqgyoa8c.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 23 Dec 2025 03:48:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 814 (0x32e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3614DFDAF, serialNumber=3CE74AC525ABC9B505131E56D3AF4BAA0CA86BC7
        Validity
            Not Before: Dec 21 03:48:45 2025 GMT
            Not After : Dec 23 03:48:45 2025 GMT
        Subject: CN=69476e1e-1def
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:53:9e:de:aa:a0:5b:51:a7:df:4a:d5:21:42:
                    0f:4c:9e:b0:64:17:cb:96:01:2b:a1:da:7e:bf:47:
                    94:06:9d:5b:3d:81:a9:29:68:04:b5:8c:3a:43:19:
                    3e:98:86:f0:e7:30:8a:6b:f1:c6:1f:ac:0f:84:7c:
                    d1:ca:51:b2:b4:37:70:6e:0f:ac:69:e3:f5:f2:3c:
                    bd:26:82:89:40:68:d1:5f:4a:c1:01:b7:1d:0c:40:
                    30:8b:79:5f:a1:29:16:7a:f6:97:de:36:5d:f3:d7:
                    62:bf:5c:23:d5:43:e3:a2:c4:1a:eb:95:18:47:20:
                    0f:a6:d2:de:ee:32:93:16:3e:25:cb:48:79:11:69:
                    99:b1:00:f2:fd:67:e0:10:cc:71:94:8c:ef:ce:08:
                    5c:0d:83:ce:b7:3e:23:f9:e0:43:f6:55:ab:9a:f8:
                    53:6a:b5:af:9a:69:b2:cc:9e:25:c2:74:3b:fc:27:
                    41:a1:fc:6e:cd:b7:0b:29:d6:9c:a9:13:8f:ed:6f:
                    c2:3b:c4:44:9f:28:a9:c9:b0:c2:c0:17:dc:98:ac:
                    6f:af:4e:d5:98:39:48:19:4e:53:d8:8a:d4:c5:e4:
                    05:71:11:af:11:d4:b8:88:c4:e7:a1:6f:98:82:44:
                    f8:1f:eb:33:87:72:e5:36:61:21:e3:c5:b2:2e:dc:
                    7a:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:D7:F5:B0:93:B4:FA:FE:CD:36:3D:F4:E4:04:94:73:A5:D3:37:1B
            X509v3 Authority Key Identifier:
                keyid:3C:E7:4A:C5:25:AB:C9:B5:05:13:1E:56:D3:AF:4B:AA:0C:A8:6B:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3614DFD/9187C5D4776711EE99DFD9724AD9E6FC/POdKxSWrybUFEx5W069Lqgyoa8c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/POdKxSWrybUFEx5W069Lqgyoa8c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3614DFD/9187C5D4776711EE99DFD9724AD9E6FC/POdKxSWrybUFEx5W069Lqgyoa8c.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:de:62:14:1e:64:bd:68:32:29:36:bc:22:89:ce:23:eb:93:
         16:b6:6f:e0:55:c9:cd:c9:7c:bc:07:a9:08:67:2b:24:5d:40:
         c4:7e:39:27:12:2e:28:5b:bb:c6:4b:a9:9d:ae:8e:6b:98:3d:
         9b:36:2f:07:79:eb:60:97:64:48:0c:b4:22:d6:24:62:cc:3f:
         67:c2:2a:31:e8:02:53:08:4a:78:55:72:08:03:01:cd:e2:ff:
         23:fc:58:db:dc:5c:a9:1d:d9:9f:bb:29:4a:b4:30:e2:ef:f9:
         b7:14:38:9e:08:5c:58:b3:50:55:7d:b7:10:12:ad:7d:0b:30:
         82:5b:f2:23:10:27:64:08:8b:b1:88:c6:bf:d2:c7:08:5f:1f:
         d3:6f:a4:59:96:8c:9f:52:66:d5:e2:68:51:9d:25:34:08:05:
         8e:14:55:9b:6a:04:ad:cf:70:a9:64:52:11:2e:ae:79:ec:1b:
         43:15:0d:8a:5c:1c:9e:1a:f9:5a:62:9c:13:ed:26:c8:52:b1:
         64:63:b1:29:f6:76:80:e3:36:6d:73:4d:af:36:5b:3e:ae:e4:
         02:1f:af:c0:93:be:b3:be:d0:b6:b5:50:a7:23:a3:38:da:3a:
         6b:03:00:ca:70:ba:25:94:a4:95:6f:f4:3b:e7:6f:86:f8:28:
         63:b7:a4:a2
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICAy4wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
MTRERkRBRjExMC8GA1UEBRMoM0NFNzRBQzUyNUFCQzlCNTA1MTMxRTU2RDNBRjRC
QUEwQ0E4NkJDNzAeFw0yNTEyMjEwMzQ4NDVaFw0yNTEyMjMwMzQ4NDVaMBgxFjAU
BgNVBAMTDTY5NDc2ZTFlLTFkZWYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDAU57eqqBbUaffStUhQg9MnrBkF8uWASuh2n6/R5QGnVs9gakpaAS1jDpD
GT6YhvDnMIpr8cYfrA+EfNHKUbK0N3BuD6xp4/XyPL0mgolAaNFfSsEBtx0MQDCL
eV+hKRZ69pfeNl3z12K/XCPVQ+OixBrrlRhHIA+m0t7uMpMWPiXLSHkRaZmxAPL9
Z+AQzHGUjO/OCFwNg863PiP54EP2Vaua+FNqta+aabLMniXCdDv8J0Gh/G7Ntwsp
1pypE4/tb8I7xESfKKnJsMLAF9yYrG+vTtWYOUgZTlPYitTF5AVxEa8R1LiIxOeh
b5iCRPgf6zOHcuU2YSHjxbIu3HqpAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUoNf1
sJO0+v7NNj305ASUc6XTNxswHwYDVR0jBBgwFoAUPOdKxSWrybUFEx5W069Lqgyo
a8cwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjE0REZELzkxODdDNUQ0Nzc2NzExRUU5OURGRDk3MjRBRDlFNkZDL1BPZEt4
U1dyeWJVRkV4NVcwNjlMcWd5b2E4Yy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1BPZEt4U1dyeWJVRkV4NVcwNjlMcWd5b2E4Yy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2MTRERkQvOTE4N0M1RDQ3NzY3MTFFRTk5REZEOTcyNEFE
OUU2RkMvUE9kS3hTV3J5YlVGRXg1VzA2OUxxZ3lvYThjLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBV3mIUHmS9aDIpNrwiic4j65MWtm/g
VcnNyXy8B6kIZyskXUDEfjknEi4oW7vGS6mdro5rmD2bNi8Heetgl2RIDLQi1iRi
zD9nwiox6AJTCEp4VXIIAwHN4v8j/Fjb3FypHdmfuylKtDDi7/m3FDieCFxYs1BV
fbcQEq19CzCCW/IjECdkCIuxiMa/0scIXx/Tb6RZloyfUmbV4mhRnSU0CAWOFFWb
agStz3CpZFIRLq557BtDFQ2KXByeGvlaYpwT7SbIUrFkY7Ep9naA4zZtc02vNls+
ruQCH6/Ak76zvtC2tVCnI6M42jprAwDKcLollKSVb/Q752+G+Chjt6Si
-----END CERTIFICATE-----
Generated at Sun Dec 21 19:15:42 2025 by rpki-client