This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3644DAB/B511F7E4F24911ECA2791192F1222468/XVwqlrLjcrCsR_SNvcfX_R-9sTI.mft
File:                     XVwqlrLjcrCsR_SNvcfX_R-9sTI.mft (raw, json)
Hash identifier:          dimQNEityUmMJ+hMaE6DQjIW2mYkr8bnL9hUoS0m+tk=
Subject key identifier:   03:C1:7A:CD:92:62:21:53:91:76:C4:4B:05:0B:E4:4A:FE:CE:FD:49
Authority key identifier: 5D:5C:2A:96:B2:E3:72:B0:AC:47:F4:8D:BD:C7:D7:FD:1F:BD:B1:32
Certificate issuer:       /CN=F3644DABAF/serialNumber=5D5C2A96B2E372B0AC47F48DBDC7D7FD1FBDB132
Certificate serial:       0531
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/XVwqlrLjcrCsR_SNvcfX_R-9sTI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3644DAB/B511F7E4F24911ECA2791192F1222468/XVwqlrLjcrCsR_SNvcfX_R-9sTI.mft
Manifest number:          052F
Signing time:             Sat 27 Dec 2025 02:50:20 +0000
Manifest this update:     Sat 27 Dec 2025 02:50:19 +0000
Manifest next update:     Mon 29 Dec 2025 02:50:19 +0000
Files and hashes:         1: XVwqlrLjcrCsR_SNvcfX_R-9sTI.crl (hash: fisNZFvevGSvbGLo1k8IZlRayPNDvK3RWpPTmpF5lBM=)
                          2: 23D327BA3B9111EF8FF3E059762E951A.roa (hash: ZJ3xXOXKk7e28z2xIgECvNbu0qz58iXckPb6BX56yvQ=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3644DAB/B511F7E4F24911ECA2791192F1222468/XVwqlrLjcrCsR_SNvcfX_R-9sTI.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3644DAB/B511F7E4F24911ECA2791192F1222468/XVwqlrLjcrCsR_SNvcfX_R-9sTI.mft
                          rsync://rpki.afrinic.net/repository/afrinic/XVwqlrLjcrCsR_SNvcfX_R-9sTI.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 29 Dec 2025 00:06:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1329 (0x531)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3644DABAF, serialNumber=5D5C2A96B2E372B0AC47F48DBDC7D7FD1FBDB132
        Validity
            Not Before: Dec 27 02:50:19 2025 GMT
            Not After : Dec 29 02:50:19 2025 GMT
        Subject: CN=694f496c-5e30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:ab:f0:99:0f:f6:3f:51:4b:3f:80:4e:18:87:
                    ea:00:da:21:31:a3:5a:1f:8e:ec:32:a6:bb:87:3f:
                    ea:eb:20:84:5e:e3:46:11:a8:05:28:25:6d:93:2c:
                    1b:bf:dd:e8:aa:33:69:4d:4c:5a:dd:dc:7f:ee:d7:
                    3f:1b:8f:d0:24:79:78:fb:14:9d:a4:81:1a:23:8b:
                    d7:92:74:57:63:06:08:90:9a:c4:6f:9c:15:e5:45:
                    0a:c7:f4:28:59:9d:b1:4c:c7:0f:4a:aa:67:1e:03:
                    e3:a3:7a:1b:a1:fe:69:f2:da:74:ec:7c:1a:5a:97:
                    16:cf:98:c9:f7:8a:77:a1:1f:41:6e:eb:da:2d:4d:
                    59:58:39:1f:f3:59:33:f5:52:49:83:de:7b:f1:48:
                    f9:1f:d2:0e:f6:c4:c6:ab:9a:90:f0:7a:55:d8:10:
                    c5:3b:f7:92:46:3e:b8:ab:8e:d5:b6:98:d3:ce:3b:
                    41:35:38:da:9a:2e:d9:e5:1e:27:e8:d7:9f:90:1d:
                    1d:0b:c5:62:5f:e9:29:32:87:20:ed:00:58:2f:e5:
                    78:2f:b0:86:92:0b:83:84:03:af:16:d0:a0:33:18:
                    59:94:69:d2:36:8e:5f:44:86:1e:aa:0b:be:d4:d3:
                    37:84:0e:94:4d:45:a7:03:79:84:3d:e3:73:aa:6f:
                    07:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:C1:7A:CD:92:62:21:53:91:76:C4:4B:05:0B:E4:4A:FE:CE:FD:49
            X509v3 Authority Key Identifier:
                keyid:5D:5C:2A:96:B2:E3:72:B0:AC:47:F4:8D:BD:C7:D7:FD:1F:BD:B1:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3644DAB/B511F7E4F24911ECA2791192F1222468/XVwqlrLjcrCsR_SNvcfX_R-9sTI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/XVwqlrLjcrCsR_SNvcfX_R-9sTI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3644DAB/B511F7E4F24911ECA2791192F1222468/XVwqlrLjcrCsR_SNvcfX_R-9sTI.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:12:06:6f:c0:a2:69:7d:5d:17:35:3e:c4:84:bc:4b:74:4d:
         3c:82:a9:96:31:79:de:60:bf:20:44:10:c3:88:9f:05:14:2d:
         da:f0:9b:f8:85:2e:75:12:f6:4b:eb:5c:bb:0e:e6:6c:82:88:
         d4:c3:58:eb:83:62:10:a2:93:33:cc:ad:00:5c:f7:37:9f:58:
         3d:32:9b:bc:9b:b5:a9:b3:70:33:04:09:0a:de:a2:f4:45:7e:
         fc:84:a5:46:55:60:30:3e:ba:38:01:db:33:dd:8e:1b:68:59:
         d2:9d:11:b1:4d:4a:7a:ed:a2:a0:1a:81:6d:19:f5:b2:94:c6:
         fa:8c:b3:0d:bd:54:72:e8:9a:66:b1:88:e4:32:b7:b8:a3:95:
         5e:dc:d2:f5:e2:71:aa:2a:5a:01:66:de:e9:a0:f2:7b:b1:89:
         21:93:4b:54:b5:4f:39:59:12:4f:61:1a:26:c4:07:c0:77:8d:
         d7:15:66:29:70:00:34:46:5b:6f:64:35:14:37:7e:8d:d0:4e:
         97:40:aa:88:69:5c:40:06:62:c8:e2:f9:49:46:d0:e9:66:34:
         a2:bb:66:da:ea:37:a2:82:09:f9:2c:26:62:f8:93:72:26:f9:
         79:d1:2a:23:4f:48:f1:a0:1d:64:49:3b:8d:ce:d9:83:f8:14:
         6f:6a:a0:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 27 22:33:57 2025 by rpki-client