This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3615A34/02B52692AC0E11ECB3BC0FB05A40D577/Ex3eTwA3nPTxQ9XQDhN9aXoOt4M.mft
File:                     Ex3eTwA3nPTxQ9XQDhN9aXoOt4M.mft (raw, json)
Hash identifier:          Xbbdu3weRDsLTlvVE1M9Ui7ENtsUjCGLNjEW7fgSPYk=
Subject key identifier:   D8:BB:76:1D:90:6F:50:0C:51:DB:0D:D7:FB:F8:8A:A6:65:FB:0D:D8
Authority key identifier: 13:1D:DE:4F:00:37:9C:F4:F1:43:D5:D0:0E:13:7D:69:7A:0E:B7:83
Certificate issuer:       /CN=F3615A34AF/serialNumber=131DDE4F00379CF4F143D5D00E137D697A0EB783
Certificate serial:       0592
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/Ex3eTwA3nPTxQ9XQDhN9aXoOt4M.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3615A34/02B52692AC0E11ECB3BC0FB05A40D577/Ex3eTwA3nPTxQ9XQDhN9aXoOt4M.mft
Manifest number:          0587
Signing time:             Sun 21 Dec 2025 02:39:41 +0000
Manifest this update:     Sun 21 Dec 2025 02:39:41 +0000
Manifest next update:     Tue 23 Dec 2025 02:39:41 +0000
Files and hashes:         1: Ex3eTwA3nPTxQ9XQDhN9aXoOt4M.crl (hash: DAZ4MHXCpw5HAHlkqQX14p9X6IC4NoJcV6Zqgo14LNM=)
                          2: 72BABCF46FFC11EFBB10279D762E951A.roa (hash: rlDq1sLVRqkoMbUERI8asuL0sKn6qOkKebzRsYaYfgo=)
                          3: 3BAA3D5C6FFC11EFA23C0A9B762E951A.roa (hash: ZnDxmAxeEfDaWqAukKaPEazhsegTXYgu0pD30UCvUW4=)
                          4: D1982E4E706711EF8FA752B1762E951A.roa (hash: 13e2tsP9vZSc4kP/9gYLRySR8RimddvRM/CF31h+Gls=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3615A34/02B52692AC0E11ECB3BC0FB05A40D577/Ex3eTwA3nPTxQ9XQDhN9aXoOt4M.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3615A34/02B52692AC0E11ECB3BC0FB05A40D577/Ex3eTwA3nPTxQ9XQDhN9aXoOt4M.mft
                          rsync://rpki.afrinic.net/repository/afrinic/Ex3eTwA3nPTxQ9XQDhN9aXoOt4M.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 23 Dec 2025 00:06:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1426 (0x592)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3615A34AF, serialNumber=131DDE4F00379CF4F143D5D00E137D697A0EB783
        Validity
            Not Before: Dec 21 02:39:41 2025 GMT
            Not After : Dec 23 02:39:41 2025 GMT
        Subject: CN=69475ded-4a2a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:3a:cf:77:2c:a8:78:f9:22:83:8d:99:f7:6c:
                    93:1c:cf:d2:0e:64:bf:ab:d8:51:65:6e:21:87:89:
                    6a:f8:0d:7d:1e:20:49:34:1f:20:de:d3:5c:7d:84:
                    ea:47:bd:aa:4c:0d:cb:e2:4d:d0:d2:fe:4e:8d:8d:
                    69:d3:10:37:6a:08:94:6e:dc:66:7a:78:f8:58:a1:
                    01:89:9f:ad:1d:33:96:7e:63:2e:1b:1d:ba:6e:aa:
                    eb:b8:72:9d:ab:71:df:6e:e4:57:55:96:2a:b2:db:
                    1f:97:49:21:2e:af:b9:63:21:f8:74:e1:e3:a6:ed:
                    25:f8:19:fc:42:92:79:03:89:d6:f2:1f:85:ff:8d:
                    22:6e:fc:78:b2:ba:1e:54:b7:45:f8:73:00:d9:14:
                    58:fa:9c:c7:d2:0b:47:2b:9a:e3:0f:1f:3a:b6:1e:
                    f7:34:35:bc:c4:a9:f6:6a:86:3a:1e:2b:5b:34:4a:
                    c7:5a:80:b4:a9:90:68:3d:3b:62:7a:95:a4:ce:27:
                    96:7d:46:6e:f9:82:fa:0b:50:98:41:26:00:cb:b3:
                    23:24:33:6e:ed:f8:06:21:28:e2:c5:0e:18:ca:a9:
                    a1:5a:64:0b:04:b9:c5:05:ab:20:9c:57:29:69:41:
                    6c:3f:de:f5:a9:ad:bb:fc:6a:ae:34:84:af:37:af:
                    7e:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:BB:76:1D:90:6F:50:0C:51:DB:0D:D7:FB:F8:8A:A6:65:FB:0D:D8
            X509v3 Authority Key Identifier:
                keyid:13:1D:DE:4F:00:37:9C:F4:F1:43:D5:D0:0E:13:7D:69:7A:0E:B7:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3615A34/02B52692AC0E11ECB3BC0FB05A40D577/Ex3eTwA3nPTxQ9XQDhN9aXoOt4M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Ex3eTwA3nPTxQ9XQDhN9aXoOt4M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3615A34/02B52692AC0E11ECB3BC0FB05A40D577/Ex3eTwA3nPTxQ9XQDhN9aXoOt4M.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:28:e3:18:e6:d9:95:d8:57:89:30:22:2e:b7:4f:97:03:fd:
         23:f7:34:29:56:dc:38:70:17:6e:b0:02:15:c4:d3:a8:e6:21:
         42:61:ad:c6:d9:6d:10:7a:cc:1d:0a:1a:d4:1d:56:ce:49:2d:
         1f:30:c0:c1:93:57:b4:43:12:ba:01:79:d0:19:69:9d:5c:a5:
         f2:49:ee:fd:7b:c1:a2:0e:23:fd:5b:64:2b:83:a3:f5:d6:75:
         db:f5:de:c9:b8:04:89:44:39:9e:c5:26:a4:24:91:14:89:75:
         14:03:bf:4d:72:7c:97:c6:3c:c6:6e:88:f8:1f:cd:f7:09:a5:
         7e:c1:de:ef:54:4a:86:15:60:d3:9a:68:ce:49:59:c8:09:94:
         a6:ff:a9:23:cb:f8:2c:fa:c7:99:de:42:db:f2:4e:2c:08:a6:
         fd:47:01:14:46:7f:0d:16:0a:15:9c:c1:f6:e3:06:a8:3e:69:
         d0:0c:20:66:00:b8:b3:5e:bc:9e:d7:62:c1:90:35:f3:a1:9e:
         62:2c:4b:63:ab:8f:ee:2e:05:2a:9c:3d:4e:04:f6:6e:be:4e:
         8c:92:04:91:2f:8c:03:41:58:b8:2d:ba:63:23:cd:fe:e7:36:
         32:05:e3:b3:30:f8:bc:aa:d3:08:e6:ea:03:38:97:f2:b4:af:
         6c:1f:ef:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 08:18:20 2025 by rpki-client