This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3625D7B/3CE88D08BDA911F08CA0897ADAE4EC9C/4v5Wr-ZqsN8-OV7dtBiT4A32rvc.mft
File:                     4v5Wr-ZqsN8-OV7dtBiT4A32rvc.mft (raw, json)
Hash identifier:          X4BNUCgZPsPSB8WTZ5dRQH5xgQYBDUBzib027kJlLJo=
Subject key identifier:   20:13:C1:14:15:45:C9:C0:D2:87:D2:FF:2E:8B:54:3E:6A:C3:54:90
Authority key identifier: E2:FE:56:AF:E6:6A:B0:DF:3E:39:5E:DD:B4:18:93:E0:0D:F6:AE:F7
Certificate issuer:       /CN=F3625D7BAF/serialNumber=E2FE56AFE66AB0DF3E395EDDB41893E00DF6AEF7
Certificate serial:       52
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/4v5Wr-ZqsN8-OV7dtBiT4A32rvc.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3625D7B/3CE88D08BDA911F08CA0897ADAE4EC9C/4v5Wr-ZqsN8-OV7dtBiT4A32rvc.mft
Manifest number:          62
Signing time:             Fri 19 Dec 2025 05:18:53 +0000
Manifest this update:     Fri 19 Dec 2025 05:18:52 +0000
Manifest next update:     Sun 21 Dec 2025 05:18:52 +0000
Files and hashes:         1: 4v5Wr-ZqsN8-OV7dtBiT4A32rvc.crl (hash: hEa92F+tThy9bu8ly6tBH1SAx/+pOiAfJPLj2bQRCwo=)
                          2: 0DFB1610CFB411F0ACADEE97DAE4EC9C.roa (hash: oNtnDf8ut6TfrarC9fdRpoYpJaKwDjYLXntPcZiKhEo=)
                          3: BE77F3A4CFB511F0A7895EA2DAE4EC9C.roa (hash: aBMgrxCb/6HvnfERUlNb4dZkjtc9w7jnD9/Dl4m4NtQ=)
                          4: C43CA8C6CFB411F0A80C339CDAE4EC9C.roa (hash: YU0Mz0+xBwbICuOKhPlbTNIIJa5T3xaQhk9igOv4NOo=)
                          5: 676690CCBDAC11F0831D1C90DAE4EC9C.roa (hash: XdWDKXcmXYcv422+a15/XwULu5rKZP/wlv0cct+XoGM=)
                          6: E3368278CFB511F09DA22AA4DAE4EC9C.roa (hash: UmbZ34CSy4QaM4G3BT9GvNwUwyyD8ApbDtMH0IJg4ro=)
                          7: 1FB32634CFB611F0A31DAAA4DAE4EC9C.roa (hash: DZhYeLrVZ0weMplnQYlSAPus+IEMEVNVzO++jLpv0YY=)
                          8: 955A189CCFB711F096BC2FADDAE4EC9C.roa (hash: Jkt44yIX0lWC6HixdIwzEzPoo7kWFY38ZglZAMhMwDk=)
                          9: 34CEF68ECFB511F094C7EE9FDAE4EC9C.roa (hash: DOZkdMukh+v2DBjPXn5J+dS+3o+FoDrcyvSwkXpJNvE=)
                          10: 58302BAACFB711F0A097A8ACDAE4EC9C.roa (hash: CkHt7rAtBCp/QPk/zm1djDgp2QmYdp2PKLNfVgYviqY=)
                          11: EA178B88CFB411F0B28F1D9EDAE4EC9C.roa (hash: ZwYrxXtAM9XzzHF/9hbViIMZsHfzBZbOHuyEVywDODY=)
                          12: 9A4B1C1ECFB411F0BC19C49BDAE4EC9C.roa (hash: YGJdonhqiNxPWjkiBw/jIJCO9cM7sdqfJewzCOXf35k=)
                          13: 11EAFD34CFB511F0A85F229EDAE4EC9C.roa (hash: ktCsVGelnDxhF1brhkkAXgPNdkq/+H9UbhWPD7GDAWM=)
                          14: 13AACCE2CFB711F09229CCAADAE4EC9C.roa (hash: fS1ORJyrCWqpjqKTqGpU1u815FIRaBm8TD7If34NgsA=)
                          15: 678DD4CECFE111F0BD278CAEDAE4EC9C.roa (hash: +RuqPven+NHEM2Si5h21IV25PaXZhNuO+WJIWyUztcI=)
                          16: A7699538CFE111F0831786B0DAE4EC9C.roa (hash: rGEU7wb15ljnefLRJ9OZgSMtwFY9/ZN9iJIKv7H8jX4=)
                          17: 107ED0CACFE111F0957C53ACDAE4EC9C.roa (hash: RIkwUzoDd3XDed4hEq/jalYnrLUgJWyxDayVH4F6t5g=)
                          18: B48F3596CFE711F0828DCFD7DAE4EC9C.roa (hash: Wr1t59nNOd6ISD5g7N+kDQohsibxPi8uS73t8uqyDbA=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3625D7B/3CE88D08BDA911F08CA0897ADAE4EC9C/4v5Wr-ZqsN8-OV7dtBiT4A32rvc.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3625D7B/3CE88D08BDA911F08CA0897ADAE4EC9C/4v5Wr-ZqsN8-OV7dtBiT4A32rvc.mft
                          rsync://rpki.afrinic.net/repository/afrinic/4v5Wr-ZqsN8-OV7dtBiT4A32rvc.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 21 Dec 2025 00:06:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 82 (0x52)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3625D7BAF, serialNumber=E2FE56AFE66AB0DF3E395EDDB41893E00DF6AEF7
        Validity
            Not Before: Dec 19 05:18:52 2025 GMT
            Not After : Dec 21 05:18:52 2025 GMT
        Subject: CN=6944e03d-5dc1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:63:87:8e:2c:4c:75:bd:89:f1:eb:fe:df:bf:
                    69:4f:78:0e:17:db:8e:26:2c:47:2e:84:b2:83:22:
                    f1:25:07:16:ba:61:15:b6:55:42:83:a1:9a:7f:af:
                    65:85:38:0e:09:44:af:33:d9:36:f6:32:24:1f:04:
                    47:36:0e:91:aa:82:3e:39:9f:4c:50:3c:f3:4b:07:
                    13:14:a5:32:77:0e:57:21:1c:aa:c6:d1:90:86:57:
                    8b:52:87:7c:92:42:fb:03:00:9a:4d:c0:55:f5:8f:
                    61:8b:4d:8d:eb:27:fa:d5:24:a6:6f:0b:4b:14:58:
                    a3:6a:a4:22:a7:5b:6d:68:b0:88:22:8b:1d:8d:e1:
                    3d:c0:66:3e:08:9a:cb:6e:a6:83:6a:59:6e:cd:57:
                    63:82:d1:d9:20:0a:d7:d1:3b:f8:4a:8e:5d:9d:ed:
                    79:50:d6:7f:81:49:72:12:2b:c9:2a:85:c7:f1:1f:
                    e1:7d:c4:93:76:7e:e6:9d:94:b6:75:6f:25:98:5a:
                    b3:1c:ca:6b:da:be:53:9a:28:44:31:15:04:49:f2:
                    da:1d:12:e3:d2:0b:00:2f:f7:5a:b4:d4:a9:ee:3d:
                    6c:9e:03:b4:ed:26:82:ea:60:d1:ec:65:50:08:94:
                    3c:96:14:52:59:e8:07:2b:82:2c:04:35:bd:9a:5f:
                    fa:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:13:C1:14:15:45:C9:C0:D2:87:D2:FF:2E:8B:54:3E:6A:C3:54:90
            X509v3 Authority Key Identifier:
                keyid:E2:FE:56:AF:E6:6A:B0:DF:3E:39:5E:DD:B4:18:93:E0:0D:F6:AE:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3625D7B/3CE88D08BDA911F08CA0897ADAE4EC9C/4v5Wr-ZqsN8-OV7dtBiT4A32rvc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/4v5Wr-ZqsN8-OV7dtBiT4A32rvc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3625D7B/3CE88D08BDA911F08CA0897ADAE4EC9C/4v5Wr-ZqsN8-OV7dtBiT4A32rvc.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:f9:b4:69:b1:ee:67:4c:1d:2a:21:3c:d8:d7:d1:36:c4:7a:
         60:04:ff:0f:44:af:23:49:1f:55:5a:2a:27:d3:77:33:b3:88:
         a1:c6:10:dc:75:8a:96:5a:55:0b:b4:ff:97:f2:68:0a:97:47:
         e8:6d:87:ae:ee:a1:79:dd:19:c1:dd:0e:e7:ed:b1:a6:05:2d:
         be:46:c7:31:bb:3c:71:6e:f1:c1:a2:76:b1:89:fa:b0:5e:28:
         30:e9:5a:82:c4:95:94:96:02:a4:5d:ea:3d:6b:24:39:38:0b:
         bc:e1:02:4f:9f:d3:fa:e5:d5:1e:94:0f:1d:2c:d0:7f:66:12:
         46:80:07:5c:a5:fd:3c:da:ee:d2:07:10:08:f9:1c:19:f3:78:
         21:3d:d6:e8:e9:60:cd:fc:00:2f:cc:aa:6d:fe:e9:84:16:ed:
         b2:16:f9:1e:4d:5f:76:43:e4:87:94:b3:cf:cf:26:f1:50:02:
         e4:d5:90:73:90:79:88:e9:06:f6:b4:0b:62:e6:de:41:02:36:
         e1:5a:36:ea:e1:70:b2:2c:4a:4b:90:23:1b:00:28:ea:da:f1:
         07:38:90:f8:3d:e6:55:7f:e1:64:6a:25:12:32:05:59:71:49:
         c8:21:f1:25:9d:22:8f:12:d5:ed:41:c5:1b:80:10:88:0f:6a:
         c0:cd:9e:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 01:10:09 2025 by rpki-client