This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3652C3A/D607CF289A8111EE8A7BF12BD25BE465/Pw7qWRltFKMq812hcQ8VDV-d3dg.mft
File:                     Pw7qWRltFKMq812hcQ8VDV-d3dg.mft (raw, json)
Hash identifier:          NRSCHK8uHvQxLtBiPIR5/CxqumhUn81OMKYlM2c5uWY=
Subject key identifier:   44:F0:9E:8D:7A:26:8F:AF:DA:6A:67:79:81:21:A2:7D:25:1C:33:8B
Authority key identifier: 3F:0E:EA:59:19:6D:14:A3:2A:F3:5D:A1:71:0F:15:0D:5F:9D:DD:D8
Certificate issuer:       /CN=F3652C3AAF/serialNumber=3F0EEA59196D14A32AF35DA1710F150D5F9DDDD8
Certificate serial:       02FE
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/Pw7qWRltFKMq812hcQ8VDV-d3dg.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3652C3A/D607CF289A8111EE8A7BF12BD25BE465/Pw7qWRltFKMq812hcQ8VDV-d3dg.mft
Manifest number:          02FA
Signing time:             Fri 19 Dec 2025 03:57:10 +0000
Manifest this update:     Fri 19 Dec 2025 03:57:09 +0000
Manifest next update:     Sun 21 Dec 2025 03:57:09 +0000
Files and hashes:         1: Pw7qWRltFKMq812hcQ8VDV-d3dg.crl (hash: QAII/cckSMzQEEnsTcOibru0XqV8agr6o3vq0bKs6hU=)
                          2: D15451B8AEF411EE804D56A3775412E6.roa (hash: YBWjlP8F+YdvA9ozU69TQggPOcEWkXW+zdvhhb0CYsA=)
                          3: 9DB45F1AAEF411EEBD21E1A2775412E6.roa (hash: zk4qjNpUR6ox7pi92CW344nHF3kKf96YYdu89XzhQ3o=)
                          4: B918F940B04E11EEBBD2E697775412E6.roa (hash: ZrUlsRanFtsZhQlEVluoYbwWKfggdoIE9yZOZzdy4S4=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3652C3A/D607CF289A8111EE8A7BF12BD25BE465/Pw7qWRltFKMq812hcQ8VDV-d3dg.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3652C3A/D607CF289A8111EE8A7BF12BD25BE465/Pw7qWRltFKMq812hcQ8VDV-d3dg.mft
                          rsync://rpki.afrinic.net/repository/afrinic/Pw7qWRltFKMq812hcQ8VDV-d3dg.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 21 Dec 2025 03:57:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 766 (0x2fe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3652C3AAF, serialNumber=3F0EEA59196D14A32AF35DA1710F150D5F9DDDD8
        Validity
            Not Before: Dec 19 03:57:09 2025 GMT
            Not After : Dec 21 03:57:09 2025 GMT
        Subject: CN=6944cd16-5051
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:32:dd:b0:db:da:9a:39:3b:b8:91:d1:e1:4f:
                    8a:55:ab:c1:26:39:6f:45:29:ca:c2:8b:9e:ad:0f:
                    90:ee:0c:62:47:bb:53:6c:14:89:ff:69:33:2e:d4:
                    9f:2b:17:42:ee:dc:2c:43:09:80:a6:e7:0b:75:da:
                    b2:03:b8:aa:2b:c1:f7:fb:e8:fe:4b:98:4f:7e:0b:
                    a6:43:a7:1b:c7:47:25:0d:a6:b5:d3:b9:5f:6b:13:
                    fd:84:38:aa:ee:3a:c6:bc:6c:46:d3:d1:75:79:16:
                    9a:99:d5:a4:1c:f7:dd:21:7e:84:f3:fe:48:e2:e3:
                    8e:79:b3:de:5f:9d:8d:e3:cd:aa:60:44:12:df:bf:
                    18:0f:66:7f:c2:4e:28:45:8e:23:4e:37:f4:d4:ed:
                    57:7c:1f:ec:b9:c1:27:52:05:21:16:94:6a:89:8d:
                    69:80:4d:30:54:01:19:80:25:ba:04:e8:77:fa:8e:
                    69:2e:ba:2a:56:f8:d3:af:df:36:cd:1f:15:36:59:
                    11:69:16:de:8a:f7:11:2a:50:07:6d:14:ed:66:60:
                    fe:c4:ee:38:72:89:d6:96:53:18:95:3b:5d:44:03:
                    a0:98:1c:27:d6:2d:26:4b:92:51:6e:5d:a2:24:9e:
                    c0:cd:18:cb:64:71:19:dc:77:a0:2c:55:3b:b1:82:
                    fb:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:F0:9E:8D:7A:26:8F:AF:DA:6A:67:79:81:21:A2:7D:25:1C:33:8B
            X509v3 Authority Key Identifier:
                keyid:3F:0E:EA:59:19:6D:14:A3:2A:F3:5D:A1:71:0F:15:0D:5F:9D:DD:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3652C3A/D607CF289A8111EE8A7BF12BD25BE465/Pw7qWRltFKMq812hcQ8VDV-d3dg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Pw7qWRltFKMq812hcQ8VDV-d3dg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3652C3A/D607CF289A8111EE8A7BF12BD25BE465/Pw7qWRltFKMq812hcQ8VDV-d3dg.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:fb:8d:ce:32:7d:1a:51:3d:84:4c:f7:8f:64:c1:fe:95:30:
         23:a4:2f:3a:88:ec:77:7a:96:b4:00:3a:83:58:f7:b2:92:24:
         d2:ba:7f:40:c3:fc:b2:3b:11:ee:89:f7:5b:be:f6:02:cc:df:
         2d:ae:8a:3c:83:55:53:01:2b:52:04:6e:b8:59:7b:9e:60:c6:
         e2:af:63:f0:00:86:60:a2:65:51:62:ad:5b:d5:4d:2f:ee:08:
         a8:e3:d3:23:90:d8:3e:91:ce:80:b4:cb:24:86:ec:66:1d:aa:
         7f:de:0a:ae:d4:fe:44:4d:42:e7:70:c0:14:8b:a5:90:cf:8c:
         67:e0:ae:f6:25:f4:c1:20:ad:70:e1:bd:07:fd:fc:0f:cb:33:
         79:f2:75:49:97:56:a5:d6:ee:14:31:67:57:83:a0:f3:62:75:
         d3:1a:f5:82:bd:c9:6f:28:b1:97:c4:66:4d:73:73:7a:f7:6b:
         87:c7:ca:02:5c:66:ad:ad:6d:71:17:66:ff:46:47:ef:e0:5b:
         1c:8c:3d:89:e9:d4:36:22:2b:37:78:cc:a2:46:e4:f1:47:37:
         0f:b2:6a:3c:b7:8b:7a:60:c2:cf:51:63:bf:51:67:ef:c3:09:
         c1:1d:47:7d:bc:a1:92:ee:e8:20:db:42:6c:a1:ce:ef:2c:cd:
         db:e0:70:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 04:58:45 2025 by rpki-client