This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3654E24/A318A10892FB11ECA71411895A40D577/2pwGSilziJ8Q063Z_fEqiDYTZL8.mft
File:                     2pwGSilziJ8Q063Z_fEqiDYTZL8.mft (raw, json)
Hash identifier:          Y7LW+2IwKgkZwprS8X2dzEihXyiMUHHpW29VXoX9rRg=
Subject key identifier:   6E:17:5A:4A:33:1D:DC:9F:81:BC:C2:10:29:AA:9B:83:EC:36:97:9A
Authority key identifier: DA:9C:06:4A:29:73:88:9F:10:D3:AD:D9:FD:F1:2A:88:36:13:64:BF
Certificate issuer:       /CN=F3654E24AF/serialNumber=DA9C064A2973889F10D3ADD9FDF12A88361364BF
Certificate serial:       05A7
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/2pwGSilziJ8Q063Z_fEqiDYTZL8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3654E24/A318A10892FB11ECA71411895A40D577/2pwGSilziJ8Q063Z_fEqiDYTZL8.mft
Manifest number:          05A6
Signing time:             Mon 29 Dec 2025 02:39:21 +0000
Manifest this update:     Mon 29 Dec 2025 02:39:20 +0000
Manifest next update:     Wed 31 Dec 2025 02:39:20 +0000
Files and hashes:         1: 2pwGSilziJ8Q063Z_fEqiDYTZL8.crl (hash: RjT8W1gyAo9HPmla1Xh2CrWivpHn4gfJbmpAkDjWARA=)
                          2: 58BE8A3A92FD11EC9A66148E5A40D577.roa (hash: p/Nwn6WbMbiqBh52brLCSrPTezSi2w7+mCvrJxVr0pE=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3654E24/A318A10892FB11ECA71411895A40D577/2pwGSilziJ8Q063Z_fEqiDYTZL8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3654E24/A318A10892FB11ECA71411895A40D577/2pwGSilziJ8Q063Z_fEqiDYTZL8.mft
                          rsync://rpki.afrinic.net/repository/afrinic/2pwGSilziJ8Q063Z_fEqiDYTZL8.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 31 Dec 2025 00:06:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1447 (0x5a7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3654E24AF, serialNumber=DA9C064A2973889F10D3ADD9FDF12A88361364BF
        Validity
            Not Before: Dec 29 02:39:20 2025 GMT
            Not After : Dec 31 02:39:20 2025 GMT
        Subject: CN=6951e9d9-6d99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:25:30:45:31:94:ad:d8:b9:27:7f:3d:97:23:
                    67:62:b6:be:b1:89:34:8f:06:18:57:84:ae:92:89:
                    6f:52:4d:41:8e:39:28:bc:2b:fe:6b:4f:c2:0d:33:
                    56:9e:89:3b:b7:27:f9:12:54:f0:7c:f9:1f:f0:0d:
                    41:46:b5:37:08:ae:ba:04:0c:dc:68:14:30:49:31:
                    2e:4c:37:9a:2d:75:87:5e:4b:6a:7a:97:7c:8f:9a:
                    44:6e:ee:3f:f9:7a:3c:6d:8a:be:f9:46:8b:0b:c6:
                    73:09:ba:15:2b:be:e7:d1:2b:cc:ff:e3:70:c3:87:
                    d6:d5:34:88:6c:74:d3:dd:88:1e:96:1e:59:9c:ab:
                    53:18:e8:50:97:7e:c7:dd:28:24:aa:26:ba:fa:aa:
                    e2:5e:65:42:46:69:f4:cd:17:27:73:a7:20:6c:4d:
                    c4:b9:09:fa:b8:ec:5d:30:34:48:5b:6c:b2:5b:74:
                    9a:66:b0:ad:7b:af:79:ab:c0:65:c1:47:6b:21:9e:
                    59:bb:cd:2b:d3:1c:6f:43:2b:58:21:c9:5c:c4:4d:
                    a4:19:24:d3:86:c7:83:9f:ea:38:67:84:84:a2:12:
                    b1:bd:f4:56:ca:b4:95:dd:b9:f5:a0:f6:19:0f:04:
                    93:97:94:d7:4f:ca:60:82:bc:b3:97:38:58:5f:b0:
                    93:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:17:5A:4A:33:1D:DC:9F:81:BC:C2:10:29:AA:9B:83:EC:36:97:9A
            X509v3 Authority Key Identifier:
                keyid:DA:9C:06:4A:29:73:88:9F:10:D3:AD:D9:FD:F1:2A:88:36:13:64:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3654E24/A318A10892FB11ECA71411895A40D577/2pwGSilziJ8Q063Z_fEqiDYTZL8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/2pwGSilziJ8Q063Z_fEqiDYTZL8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3654E24/A318A10892FB11ECA71411895A40D577/2pwGSilziJ8Q063Z_fEqiDYTZL8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:7d:5f:31:bb:82:33:fe:d3:57:70:f5:3c:99:e2:e2:18:05:
         d9:bc:66:56:1f:4d:0e:ec:43:a6:8e:9f:cb:6d:77:65:83:29:
         01:e8:ae:f0:00:a5:60:37:e8:1c:98:7a:df:5e:41:db:09:4c:
         87:0c:c3:86:9c:36:52:c6:00:13:4e:7a:7c:b2:1e:f8:c8:44:
         30:54:03:b3:31:9f:f3:a3:37:a5:fe:63:cb:5d:90:63:df:32:
         e0:00:51:36:a1:18:81:4c:b3:dd:59:78:6f:e7:4e:1b:4f:10:
         1f:c6:e0:5f:b7:de:6f:8b:19:b2:91:fe:b2:a2:94:91:51:48:
         33:9a:c7:d8:5d:87:b0:99:9d:5d:38:01:cb:ea:3b:70:03:a6:
         94:a4:c2:2a:8c:24:ef:32:41:f1:bf:7b:c5:cd:b8:39:14:f1:
         0f:b0:10:c1:56:86:4a:c1:39:cc:6a:ff:c0:d2:cc:35:e6:14:
         b1:80:b6:6c:b8:b8:d3:1c:ac:a9:bd:61:e7:dd:35:fb:4b:bf:
         7a:7e:56:94:d4:eb:0f:5a:b7:e5:ef:5e:66:b9:a4:a8:f5:48:
         cd:2d:17:7a:79:ea:f3:34:53:32:e9:cc:54:8e:30:00:d5:d5:
         76:39:70:25:38:c9:62:84:68:87:7f:3b:67:d0:f1:8f:3e:da:
         95:98:c8:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 29 08:29:03 2025 by rpki-client