This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3645721/4D8578E037FD11EDB8A2ADF9F1222468/h_Otw6UKd3Y4Nq6ON_XZOGlXEco.mft
File:                     h_Otw6UKd3Y4Nq6ON_XZOGlXEco.mft (raw, json)
Hash identifier:          6hJTm4AxZvpPkbeuBWNI9Nxa7nLZ6c5VEmjp/rz/ik8=
Subject key identifier:   4B:1A:36:31:66:31:8B:1F:D7:FE:CA:15:53:C6:D9:94:E0:8A:92:B2
Authority key identifier: 87:F3:AD:C3:A5:0A:77:76:38:36:AE:8E:37:F5:D9:38:69:57:11:CA
Certificate issuer:       /CN=F3645721AF/serialNumber=87F3ADC3A50A77763836AE8E37F5D938695711CA
Certificate serial:       04F2
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/h_Otw6UKd3Y4Nq6ON_XZOGlXEco.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3645721/4D8578E037FD11EDB8A2ADF9F1222468/h_Otw6UKd3Y4Nq6ON_XZOGlXEco.mft
Manifest number:          04E7
Signing time:             Sat 20 Dec 2025 03:01:42 +0000
Manifest this update:     Sat 20 Dec 2025 03:01:42 +0000
Manifest next update:     Mon 22 Dec 2025 03:01:42 +0000
Files and hashes:         1: h_Otw6UKd3Y4Nq6ON_XZOGlXEco.crl (hash: x3K5dhmeVFEGYdF0l63kTKikkJ3uKc478/tPBOrOQ2M=)
                          2: 5C4F4AC8314B11F0BEA4E5C8DAE4EC9C.roa (hash: B4meKXMBx/VoIvCrgLDGhjqQbFQ+74jsI7Z9mpVTaGc=)
                          3: 05B9E9DAD17D11EF95C142AC762E951A.roa (hash: Q5K3U35zeD2bPxUENFXhYZ30yazfguSFLvJ7/QgC/Ko=)
                          4: 23ABB3A2D17C11EFB156ACA7762E951A.roa (hash: JnjC+h0l3NXiTvyHQEAdv5zJ5PF/QKPMrh4aJd626Kc=)
                          5: 548EDFBAD41611F09F8A6C9FDAE4EC9C.roa (hash: k8FRmBKTxWl53FchMRaZBeBDbnAPcS6cvBX3aUVupmA=)
                          6: 9D138D4CD17B11EF890791A3762E951A.roa (hash: YtOzzIAfQEjwyVcS0gx7UZKyYqAnn55LoVoqNlpKMPw=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3645721/4D8578E037FD11EDB8A2ADF9F1222468/h_Otw6UKd3Y4Nq6ON_XZOGlXEco.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3645721/4D8578E037FD11EDB8A2ADF9F1222468/h_Otw6UKd3Y4Nq6ON_XZOGlXEco.mft
                          rsync://rpki.afrinic.net/repository/afrinic/h_Otw6UKd3Y4Nq6ON_XZOGlXEco.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 22 Dec 2025 03:01:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1266 (0x4f2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3645721AF, serialNumber=87F3ADC3A50A77763836AE8E37F5D938695711CA
        Validity
            Not Before: Dec 20 03:01:42 2025 GMT
            Not After : Dec 22 03:01:42 2025 GMT
        Subject: CN=69461196-8718
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:22:3d:0c:68:e9:ef:c1:4f:dd:eb:a3:5a:25:
                    10:8e:7e:cb:54:7e:a1:5e:c0:0e:1c:fd:3f:05:10:
                    d0:53:a5:fe:6a:29:fb:87:d0:e5:81:1e:d0:97:26:
                    35:ac:03:18:77:4c:20:b6:b5:7d:b4:75:d7:8d:ec:
                    af:e7:1e:98:19:46:32:0c:16:c6:6f:1f:a3:91:9f:
                    7d:49:a4:6d:fb:f8:1f:4c:31:f0:44:5b:ff:20:26:
                    5e:c6:f8:31:69:79:ba:53:75:c2:6a:98:32:8d:ea:
                    ad:5f:d4:13:6d:86:3e:7c:61:e4:ca:26:52:57:b6:
                    47:c7:f1:a3:77:d0:e1:58:29:98:bf:27:97:6d:6e:
                    ec:44:5f:78:d6:6b:87:79:12:02:41:89:9d:9d:be:
                    ac:0a:96:73:cf:a1:13:a9:fb:7a:1e:02:51:14:09:
                    48:46:1f:d2:f7:bf:da:1f:b4:8a:e3:70:93:51:b9:
                    bc:eb:b6:e0:15:ad:7e:16:80:d8:78:40:c8:9b:12:
                    39:44:93:a0:e2:f7:cd:d0:d7:83:79:3e:c4:31:87:
                    41:fa:68:c2:4a:1e:5b:78:61:60:48:b4:43:52:58:
                    1d:83:0d:be:84:d7:53:f3:59:a1:b5:8e:c9:55:a8:
                    ab:59:d5:36:74:a7:92:ac:87:35:20:1b:e4:8a:1d:
                    19:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:1A:36:31:66:31:8B:1F:D7:FE:CA:15:53:C6:D9:94:E0:8A:92:B2
            X509v3 Authority Key Identifier:
                keyid:87:F3:AD:C3:A5:0A:77:76:38:36:AE:8E:37:F5:D9:38:69:57:11:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3645721/4D8578E037FD11EDB8A2ADF9F1222468/h_Otw6UKd3Y4Nq6ON_XZOGlXEco.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/h_Otw6UKd3Y4Nq6ON_XZOGlXEco.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3645721/4D8578E037FD11EDB8A2ADF9F1222468/h_Otw6UKd3Y4Nq6ON_XZOGlXEco.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:3b:0d:bc:50:84:d7:8b:2a:e9:da:88:60:5f:e8:ed:fc:97:
         64:1d:ed:d3:80:e0:4a:b7:f6:7f:48:f2:bb:a8:f0:8d:5b:99:
         e6:03:43:02:44:b0:e9:93:9a:06:1a:17:8d:b1:65:09:b9:4c:
         14:96:8b:38:a2:44:82:d2:6b:38:3a:04:7c:fd:41:39:10:c3:
         b4:28:d2:ee:5a:72:f2:22:b0:92:c3:f2:57:25:a2:06:bc:65:
         cd:bd:a0:c2:05:bb:d5:b8:11:d9:6a:64:9a:e8:08:a9:01:08:
         98:c7:bd:8e:cb:c3:36:37:da:a5:67:90:0b:72:88:c6:10:f3:
         c3:d1:3a:21:1a:45:da:f2:30:a2:97:bb:3a:8e:24:71:4b:b9:
         26:46:42:55:ef:84:a6:1e:0d:c7:8b:04:34:75:03:e7:11:36:
         39:d4:84:23:ba:66:99:ca:c3:51:88:90:f9:af:3a:ce:4e:5a:
         04:70:e9:a8:bd:76:fe:c5:3d:4b:db:16:ee:6f:9a:45:05:34:
         da:65:6e:aa:80:ce:8a:82:6c:ad:c2:5f:16:92:2c:cd:70:00:
         9a:18:5a:d0:ae:8d:8c:e9:b6:56:87:c6:90:b8:d4:35:03:2d:
         92:bd:dc:a1:bf:91:70:64:85:6d:a6:54:ae:04:44:7e:3e:3e:
         a3:0c:49:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 02:20:11 2025 by rpki-client