This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3617560/1E87958AF25911ECB1BDF2C1F1222468/cvCHQUzi30S8T03_W-EUenpxqa4.mft
File:                     cvCHQUzi30S8T03_W-EUenpxqa4.mft (raw, json)
Hash identifier:          5ky8yzM8HES4WxCm6pQd9LnTPObuqvLnp34cxA8zJk4=
Subject key identifier:   E0:6E:16:3E:A9:D6:47:D4:CC:6D:3C:F8:E3:F0:D3:DF:FD:90:BC:CA
Authority key identifier: 72:F0:87:41:4C:E2:DF:44:BC:4F:4D:FF:5B:E1:14:7A:7A:71:A9:AE
Certificate issuer:       /CN=F3617560AP/serialNumber=72F087414CE2DF44BC4F4DFF5BE1147A7A71A9AE
Certificate serial:       052A
Authority info access:    rsync://rpki.afrinic.net/repository/apnic/cvCHQUzi30S8T03_W-EUenpxqa4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3617560/1E87958AF25911ECB1BDF2C1F1222468/cvCHQUzi30S8T03_W-EUenpxqa4.mft
Manifest number:          0527
Signing time:             Fri 19 Dec 2025 02:50:16 +0000
Manifest this update:     Fri 19 Dec 2025 02:50:15 +0000
Manifest next update:     Sun 21 Dec 2025 02:50:15 +0000
Files and hashes:         1: cvCHQUzi30S8T03_W-EUenpxqa4.crl (hash: ajk6kBhp6eFLJwogdTSS1W3ah/QWotyDo2q4JDHNSHU=)
                          2: F4B1DA0EF3B111ECBA4AC98DF1222468.roa (hash: BVR/waIvVkSnH8oG4jnugPkg0mpFTH8yh9hr63T0ym4=)
                          3: 467B6CDCF25A11ECB0A197C5F1222468.roa (hash: nyazJHmgaeSaThwXQennWPk+RG7afiy2fNVDqJDY42s=)
                          4: 435EB3FCF3B211EC9945E28EF1222468.roa (hash: qvMEmdrAoicNI7c3xjrgpNk9h06NSfKZgjizbA2v3kE=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3617560/1E87958AF25911ECB1BDF2C1F1222468/cvCHQUzi30S8T03_W-EUenpxqa4.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3617560/1E87958AF25911ECB1BDF2C1F1222468/cvCHQUzi30S8T03_W-EUenpxqa4.mft
                          rsync://rpki.afrinic.net/repository/apnic/cvCHQUzi30S8T03_W-EUenpxqa4.cer
                          rsync://rpki.afrinic.net/repository/apnic/bxoQPhQn_wNIOr_Z402svhUk_4s.crl
                          rsync://rpki.afrinic.net/repository/apnic/bxoQPhQn_wNIOr_Z402svhUk_4s.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/apnic-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 21 Dec 2025 00:15:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1322 (0x52a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3617560AP, serialNumber=72F087414CE2DF44BC4F4DFF5BE1147A7A71A9AE
        Validity
            Not Before: Dec 19 02:50:15 2025 GMT
            Not After : Dec 21 02:50:15 2025 GMT
        Subject: CN=6944bd68-e44c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:3d:56:c3:d6:d9:f4:d4:8a:3b:d3:c1:40:96:
                    95:bd:d3:ad:8d:5b:fb:bd:9f:54:1e:72:31:16:00:
                    4f:9d:e2:a1:fa:7f:7c:05:e5:9e:e9:43:f2:f5:fa:
                    6f:eb:26:31:a4:e2:c9:2e:c3:60:84:ad:cf:4f:9e:
                    9d:2e:9d:08:de:96:6d:14:30:84:95:34:83:72:2f:
                    3c:20:80:6b:22:c2:69:68:71:1c:a6:e8:b6:9d:36:
                    b4:44:87:a0:ac:61:08:58:8e:1f:b8:6b:51:42:79:
                    3f:cf:3c:9c:8f:85:28:d1:85:1c:db:27:7e:5a:d9:
                    62:71:5c:1b:18:ba:46:69:f4:41:e7:e8:ab:7e:ee:
                    61:fb:21:a1:ba:36:71:90:03:76:49:04:01:78:a7:
                    0a:b6:16:c4:b9:da:49:d5:a5:b0:41:67:fe:79:25:
                    b1:44:be:f5:e0:19:62:f5:be:70:3a:b7:57:39:b8:
                    89:6e:66:b2:8e:d8:4e:aa:4d:9d:1c:95:8c:7c:24:
                    e3:87:62:bd:90:db:63:56:80:fc:6e:13:91:7b:1c:
                    04:b4:45:48:9e:97:8b:0d:a9:2f:40:8c:86:37:90:
                    a9:65:7f:d5:9c:6f:41:ec:76:83:08:71:93:41:9c:
                    eb:60:25:0f:8d:6d:41:85:73:ee:80:f9:f4:44:07:
                    cf:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:6E:16:3E:A9:D6:47:D4:CC:6D:3C:F8:E3:F0:D3:DF:FD:90:BC:CA
            X509v3 Authority Key Identifier:
                keyid:72:F0:87:41:4C:E2:DF:44:BC:4F:4D:FF:5B:E1:14:7A:7A:71:A9:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3617560/1E87958AF25911ECB1BDF2C1F1222468/cvCHQUzi30S8T03_W-EUenpxqa4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/apnic/cvCHQUzi30S8T03_W-EUenpxqa4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3617560/1E87958AF25911ECB1BDF2C1F1222468/cvCHQUzi30S8T03_W-EUenpxqa4.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:d8:e8:c7:c7:3b:72:b6:27:fd:a7:83:08:b8:9c:ad:1c:3b:
         ca:6c:a6:7b:6b:6c:ae:2f:f2:41:7b:4e:62:ab:0c:c2:fe:a0:
         27:0a:ff:e9:fd:88:5f:5c:55:a8:c5:47:68:ae:7e:09:ac:2a:
         68:75:09:ab:45:5f:94:6e:d8:2f:ed:fc:b4:d3:d6:ff:eb:94:
         d8:e8:6e:6b:e3:d2:50:fa:a7:52:88:6e:37:cb:6d:17:80:0a:
         e5:fa:64:a0:3e:f6:54:e3:f6:fa:46:66:87:11:9b:e3:37:90:
         de:db:6f:13:cd:ee:f0:a2:ce:21:26:3a:a9:22:07:b6:2b:c1:
         c8:4f:58:57:cb:c4:c5:c6:f9:ed:22:98:c3:33:ad:89:50:e1:
         9a:9b:c2:a5:84:fb:72:50:d7:e8:da:82:d9:4e:74:47:bc:d2:
         2c:33:8d:93:da:a0:6c:3d:96:5a:17:73:d1:65:e3:26:74:4a:
         95:b9:fe:d4:db:dc:7d:a9:92:f1:cb:6d:68:e2:07:c3:03:d9:
         3d:6e:25:b7:5f:37:cf:3b:0c:06:6f:ea:12:4f:2f:a7:62:f5:
         7c:19:d4:aa:90:c3:57:af:76:27:81:ba:df:8a:73:f5:61:08:
         b6:c6:85:51:e5:e3:b2:7c:aa:55:27:3a:f3:a7:59:17:76:59:
         91:d2:05:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 23:58:57 2025 by rpki-client