This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3640C3C/C5A61844D2BE11EFAD56CC98762E951A/fU328vfdsHN-2q2EhSP4cXbnzoE.mft
File:                     fU328vfdsHN-2q2EhSP4cXbnzoE.mft (raw, json)
Hash identifier:          33d9RRc9pALQeR6+3jDsDSDDH3Xvwq4UiuvGgDj6Qp4=
Subject key identifier:   F9:36:54:99:37:68:C2:81:E3:9E:4B:A6:06:44:FE:01:EB:0F:98:F0
Authority key identifier: 7D:4D:F6:F2:F7:DD:B0:73:7E:DA:AD:84:85:23:F8:71:76:E7:CE:81
Certificate issuer:       /CN=F3640C3CAF/serialNumber=7D4DF6F2F7DDB0737EDAAD848523F87176E7CE81
Certificate serial:       0160
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/fU328vfdsHN-2q2EhSP4cXbnzoE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3640C3C/C5A61844D2BE11EFAD56CC98762E951A/fU328vfdsHN-2q2EhSP4cXbnzoE.mft
Manifest number:          015F
Signing time:             Wed 24 Dec 2025 04:54:01 +0000
Manifest this update:     Wed 24 Dec 2025 04:54:01 +0000
Manifest next update:     Fri 26 Dec 2025 04:54:01 +0000
Files and hashes:         1: fU328vfdsHN-2q2EhSP4cXbnzoE.crl (hash: STr4lP7CNJufDoeLIFMVeJlGuhPj6qT0idE+Rdtbeks=)
                          2: 9E9AD310D2BF11EFBBD01F9D762E951A.roa (hash: sKmiIxBHJPr3OGeB7htmDk2gGj7RAu5zKpegjCoJFAY=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3640C3C/C5A61844D2BE11EFAD56CC98762E951A/fU328vfdsHN-2q2EhSP4cXbnzoE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3640C3C/C5A61844D2BE11EFAD56CC98762E951A/fU328vfdsHN-2q2EhSP4cXbnzoE.mft
                          rsync://rpki.afrinic.net/repository/afrinic/fU328vfdsHN-2q2EhSP4cXbnzoE.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 26 Dec 2025 04:53:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 352 (0x160)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3640C3CAF, serialNumber=7D4DF6F2F7DDB0737EDAAD848523F87176E7CE81
        Validity
            Not Before: Dec 24 04:54:01 2025 GMT
            Not After : Dec 26 04:54:01 2025 GMT
        Subject: CN=694b71e9-27a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:5d:16:60:e9:41:c5:d6:b2:d4:e1:5a:7b:52:
                    16:82:ab:46:c5:85:93:fa:5e:84:c5:16:eb:1b:7a:
                    bf:f5:48:c9:6e:cb:9b:13:14:64:16:18:d7:2b:c1:
                    06:be:8e:35:2b:db:45:48:17:26:23:3d:f2:de:f5:
                    8b:94:eb:b3:90:76:c2:aa:71:96:86:63:c2:cf:61:
                    f7:cd:f1:2d:88:52:4c:9e:84:55:33:60:b9:87:a9:
                    6b:7d:c5:7a:f0:86:58:79:f0:4a:ed:6e:64:95:df:
                    2a:01:0a:68:02:ce:7e:e7:5c:a9:01:25:50:d3:ac:
                    40:42:ed:9e:51:2f:2a:90:01:64:83:cb:dc:90:eb:
                    80:da:ee:cb:33:f5:08:ec:af:e0:8e:1d:ec:fc:f6:
                    dd:56:e3:53:72:d6:25:cd:94:c9:58:22:9d:84:95:
                    10:8d:fb:a2:80:b2:25:da:1b:0a:56:73:96:34:22:
                    a7:dd:5c:e7:5f:d6:2a:c4:61:ce:57:4e:67:d2:dd:
                    07:84:0e:b1:f9:13:05:ce:72:19:c3:32:5a:a2:93:
                    0a:c3:99:39:40:04:5d:1b:93:e3:8d:76:71:68:93:
                    96:34:69:54:bb:52:20:75:41:01:35:6a:44:72:48:
                    00:d0:84:59:04:e5:18:1b:23:af:96:68:5e:48:c7:
                    81:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:36:54:99:37:68:C2:81:E3:9E:4B:A6:06:44:FE:01:EB:0F:98:F0
            X509v3 Authority Key Identifier:
                keyid:7D:4D:F6:F2:F7:DD:B0:73:7E:DA:AD:84:85:23:F8:71:76:E7:CE:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3640C3C/C5A61844D2BE11EFAD56CC98762E951A/fU328vfdsHN-2q2EhSP4cXbnzoE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/fU328vfdsHN-2q2EhSP4cXbnzoE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3640C3C/C5A61844D2BE11EFAD56CC98762E951A/fU328vfdsHN-2q2EhSP4cXbnzoE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:12:09:bb:92:1d:ea:22:d4:fa:54:6c:d2:4d:7c:9a:dc:7d:
         35:7c:b0:87:b0:a9:8a:fd:4b:69:6a:4e:0b:b4:14:7b:74:70:
         5f:e5:0c:4f:b7:b8:fc:4b:f3:b8:cd:7a:ba:e2:75:8a:64:19:
         90:bd:49:db:63:27:6c:74:dc:15:32:62:7a:46:2c:b2:cd:4d:
         d1:14:ee:39:90:cf:f0:47:c0:db:2f:0e:17:23:ce:db:89:31:
         12:39:22:ed:fa:62:34:95:68:96:63:d4:41:44:f4:38:c8:45:
         bd:63:59:de:b2:ff:77:9d:04:d1:2c:4f:36:44:59:e9:97:a0:
         04:0c:91:16:a0:fb:54:2a:8a:dd:b9:4c:12:52:f8:b2:03:00:
         87:c2:92:5d:dd:67:d6:fd:35:20:c3:4b:16:49:4e:bc:52:b8:
         85:ae:9f:cc:c9:99:2a:c0:be:81:a2:c5:1d:ab:27:36:0c:e8:
         2e:94:71:fb:4d:c2:0f:9c:04:1d:0c:1a:6d:1d:1f:3b:ac:97:
         e9:a2:02:41:3d:4d:9f:ea:0d:46:58:ff:00:66:01:f0:cb:80:
         53:0b:38:c9:0c:a9:56:a7:c9:59:b4:cb:b7:50:76:2e:d4:6a:
         c5:95:70:fe:5f:2f:3c:ec:ef:1e:b0:94:41:6e:32:f4:80:c4:
         d7:4c:3c:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 23:26:50 2025 by rpki-client