This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3625D7B/3CE88D08BDA911F08CA0897ADAE4EC9C/4gVuyP8ZNJISyrk8jWZWxw8lSj8.mft
File:                     4gVuyP8ZNJISyrk8jWZWxw8lSj8.mft (raw, json)
Hash identifier:          qmN3/+I1UnUJET+lXeYTRMHPrsYCHtTAbty9U4Rsgns=
Subject key identifier:   9C:EB:20:4B:F9:21:D1:22:3A:63:6B:2C:19:AD:17:D4:61:57:3E:9D
Authority key identifier: E2:05:6E:C8:FF:19:34:92:12:CA:B9:3C:8D:66:56:C7:0F:25:4A:3F
Certificate issuer:       /CN=F3625D7BAF/serialNumber=E2056EC8FF19349212CAB93C8D6656C70F254A3F
Certificate serial:       22
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/4gVuyP8ZNJISyrk8jWZWxw8lSj8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3625D7B/3CE88D08BDA911F08CA0897ADAE4EC9C/4gVuyP8ZNJISyrk8jWZWxw8lSj8.mft
Manifest number:          61
Signing time:             Fri 19 Dec 2025 05:18:47 +0000
Manifest this update:     Fri 19 Dec 2025 05:18:46 +0000
Manifest next update:     Sun 21 Dec 2025 05:18:46 +0000
Files and hashes:         1: 4gVuyP8ZNJISyrk8jWZWxw8lSj8.crl (hash: XYx6oxlC1G2535wTM86cDpIMeZrb4gPWZLMs5aFzCKY=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3625D7B/3CE88D08BDA911F08CA0897ADAE4EC9C/4gVuyP8ZNJISyrk8jWZWxw8lSj8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3625D7B/3CE88D08BDA911F08CA0897ADAE4EC9C/4gVuyP8ZNJISyrk8jWZWxw8lSj8.mft
                          rsync://rpki.afrinic.net/repository/afrinic/4gVuyP8ZNJISyrk8jWZWxw8lSj8.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 21 Dec 2025 00:06:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 34 (0x22)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3625D7BAF, serialNumber=E2056EC8FF19349212CAB93C8D6656C70F254A3F
        Validity
            Not Before: Dec 19 05:18:46 2025 GMT
            Not After : Dec 21 05:18:46 2025 GMT
        Subject: CN=6944e037-74e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:ab:95:5c:e8:78:79:66:77:61:54:92:c9:6e:
                    1a:78:ca:b3:01:0c:26:c7:dc:b2:cb:28:d9:16:e7:
                    20:fd:1a:17:97:a9:91:1b:45:85:ca:5e:e6:dd:64:
                    ee:70:b3:46:ee:78:61:d2:c7:2e:9e:09:97:9b:d0:
                    9b:4c:d4:92:de:2f:d4:49:ba:50:ba:b4:a1:bd:30:
                    3e:6b:94:01:2f:c1:b2:d0:51:b3:b4:cd:e1:d6:40:
                    15:d2:9b:9f:5d:69:5d:4b:c0:23:23:d2:75:94:36:
                    b8:58:e7:76:65:17:f2:eb:f4:fd:d5:aa:a1:60:94:
                    71:eb:7c:01:a5:48:ea:8f:99:a7:f5:15:94:82:ce:
                    f2:a3:89:39:77:c7:f5:e5:19:c9:31:1a:e9:cf:42:
                    86:8a:2f:2f:7a:21:35:53:bd:42:aa:c9:3b:24:be:
                    98:11:9f:4e:db:a6:3e:e4:ee:28:f7:be:87:a9:a7:
                    ee:e8:fb:45:0e:1c:9c:73:5d:23:f1:dd:da:b8:bb:
                    4b:f7:31:5a:07:5e:0b:21:98:f5:17:99:bd:ac:35:
                    17:19:74:08:b3:c3:8d:20:16:95:50:d4:6d:95:5e:
                    25:3c:35:f4:52:e8:4e:10:b4:3d:11:e5:68:43:f3:
                    45:2c:95:a6:83:f0:a0:14:e7:7a:7d:01:21:bb:8e:
                    e5:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:EB:20:4B:F9:21:D1:22:3A:63:6B:2C:19:AD:17:D4:61:57:3E:9D
            X509v3 Authority Key Identifier:
                keyid:E2:05:6E:C8:FF:19:34:92:12:CA:B9:3C:8D:66:56:C7:0F:25:4A:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3625D7B/3CE88D08BDA911F08CA0897ADAE4EC9C/4gVuyP8ZNJISyrk8jWZWxw8lSj8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/4gVuyP8ZNJISyrk8jWZWxw8lSj8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3625D7B/3CE88D08BDA911F08CA0897ADAE4EC9C/4gVuyP8ZNJISyrk8jWZWxw8lSj8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:00:13:11:e7:90:0f:b0:77:43:0d:bd:cf:cc:05:b3:f9:20:
         cd:77:3e:8d:42:d5:45:14:18:5d:c0:ea:1e:77:94:af:ec:3c:
         ec:8d:dd:f8:3d:00:46:88:ce:95:30:08:3d:e6:a6:4a:15:70:
         b7:fc:92:53:74:10:5d:85:5d:68:2d:61:98:d3:05:89:8d:81:
         26:c2:ec:8c:0f:ba:ec:03:b5:2d:d7:77:42:ed:e3:18:9d:38:
         4d:34:93:7d:e3:8d:ec:5c:47:30:03:d6:40:1f:d9:c4:73:30:
         f2:b4:62:c7:f9:cd:6b:06:ec:94:4e:44:66:f9:ab:11:ec:1d:
         2b:6f:03:bb:19:02:9d:98:8f:c2:21:7f:2b:68:ad:6b:64:7e:
         b0:91:8b:df:c1:84:4c:37:03:00:7d:1c:cc:4f:b9:3e:c8:1f:
         51:00:b4:58:ad:fc:e7:ca:ef:a7:1b:17:49:7c:4d:67:a9:ec:
         35:04:19:37:55:4c:f3:c7:99:12:77:ed:70:48:4e:50:ec:9a:
         0e:cf:c4:32:c1:5a:db:27:c0:3b:94:da:0f:2a:f9:9f:fe:1a:
         6e:69:f9:d7:e8:cf:db:dc:fe:f0:ff:3f:e7:54:e6:e4:c1:e9:
         f5:4c:6d:3a:66:d0:51:89:5d:f4:b8:69:c9:a6:81:5d:65:2d:
         5f:af:e9:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 01:04:15 2025 by rpki-client