This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3656BB8/D79EEB94891C11EEAF65C7604AD9E6FC/9nBmQ5rNnq_UiZ_GjGB1xwzjmtU.mft
File:                     9nBmQ5rNnq_UiZ_GjGB1xwzjmtU.mft (raw, json)
Hash identifier:          xTFQ8oPYv2lxLpXx3Lbv77XdNm1LgRLn88Toj6oFegM=
Subject key identifier:   4A:13:9D:C8:2E:A3:23:94:08:E7:4E:FB:48:F8:75:DC:DC:CF:1A:C6
Authority key identifier: F6:70:66:43:9A:CD:9E:AF:D4:89:9F:C6:8C:60:75:C7:0C:E3:9A:D5
Certificate issuer:       /CN=F3656BB8AF/serialNumber=F67066439ACD9EAFD4899FC68C6075C70CE39AD5
Certificate serial:       0328
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/9nBmQ5rNnq_UiZ_GjGB1xwzjmtU.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3656BB8/D79EEB94891C11EEAF65C7604AD9E6FC/9nBmQ5rNnq_UiZ_GjGB1xwzjmtU.mft
Manifest number:          031D
Signing time:             Sun 21 Dec 2025 03:53:03 +0000
Manifest this update:     Sun 21 Dec 2025 03:53:02 +0000
Manifest next update:     Tue 23 Dec 2025 03:53:02 +0000
Files and hashes:         1: 9nBmQ5rNnq_UiZ_GjGB1xwzjmtU.crl (hash: PlMxvTGt4tE9shiVKkEh5jmFBAOHS/n/zhcKyD87iJ8=)
                          2: 771608343F6511EFB9F4EABA762E951A.roa (hash: 9Q+GZAt0BfDQgU00GMZWd99zLhXCbOr7gAEaYiC7Dyo=)
                          3: 5A705AB83F6511EFB113C3BA762E951A.roa (hash: 46y6LOxfLG2hpzs8KqldDqb+T4CZAqoGN7kv9ge6l2Q=)
                          4: C37677449B4211EE97C01A0BD25BE465.roa (hash: BAmmlnMHUybbiPHqjjkYtKpac8mib54JfOVw/2b2OnA=)
                          5: 9C2FB4D49B4211EE82B8CF0AD25BE465.roa (hash: RKm1ONyaKM8MZ2trCs9RLFoAoaY0CDYQpfQjdSvu7io=)
                          6: D91B9FD2905311EF97DBC8B6762E951A.roa (hash: //pQLXl186UK+YngQ4Oqc4YBM5xFv+Ww/aM3Yp8J0R4=)
                          7: ACB50F14905311EF9F4DCCB4762E951A.roa (hash: 57inawtVdw1IaHCvXR36yukcxfO3Teh83tMpkhTAd4M=)
                          8: 5AA6ED769BE611EE88684334D25BE465.roa (hash: J9soXt+A2SzJz6ium1VPFEErWV44KnKWZA3DTIrB3Z8=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3656BB8/D79EEB94891C11EEAF65C7604AD9E6FC/9nBmQ5rNnq_UiZ_GjGB1xwzjmtU.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3656BB8/D79EEB94891C11EEAF65C7604AD9E6FC/9nBmQ5rNnq_UiZ_GjGB1xwzjmtU.mft
                          rsync://rpki.afrinic.net/repository/afrinic/9nBmQ5rNnq_UiZ_GjGB1xwzjmtU.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 23 Dec 2025 03:53:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 808 (0x328)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3656BB8AF, serialNumber=F67066439ACD9EAFD4899FC68C6075C70CE39AD5
        Validity
            Not Before: Dec 21 03:53:02 2025 GMT
            Not After : Dec 23 03:53:02 2025 GMT
        Subject: CN=69476f1f-0822
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:1f:ec:fe:62:74:47:6f:ae:40:83:c6:42:b1:
                    49:c1:be:85:5b:12:ca:1c:12:e5:3d:e3:c7:b5:d1:
                    cd:23:54:d7:37:92:65:45:76:56:58:aa:3f:42:e5:
                    a2:31:3f:93:a5:21:6d:ad:68:20:d1:95:8b:e9:8d:
                    41:45:af:b8:e3:86:15:94:c9:f2:1b:be:b6:54:74:
                    a6:16:fe:a4:42:fb:85:7c:10:47:0a:aa:5e:bf:a7:
                    90:72:cb:58:5f:ee:09:b5:d5:88:30:1c:e6:53:63:
                    74:89:f8:13:41:fa:02:fc:79:b6:ff:4e:92:be:f1:
                    b3:bd:46:3e:33:f0:16:1b:3e:89:65:1c:c2:4c:f3:
                    6d:67:13:55:cf:be:52:54:92:fe:06:e5:aa:67:bd:
                    9e:f4:c0:e2:2c:a1:1b:4f:16:55:d4:5b:e4:1d:5d:
                    ad:0f:ea:0a:95:7f:c1:e7:fd:8f:28:51:ad:b7:d5:
                    8a:d1:2f:b8:28:13:fc:e2:c4:4a:b1:46:58:8b:d1:
                    9d:4f:fd:05:cb:6d:7f:99:9d:98:4f:c1:47:63:17:
                    3c:24:51:b0:d8:75:d3:83:53:67:6e:93:c0:aa:fe:
                    f7:0a:a1:a4:1b:ae:ec:f3:1c:22:64:89:75:c0:c5:
                    3a:2f:f0:14:86:62:3a:76:21:88:49:fc:be:fd:0e:
                    60:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:13:9D:C8:2E:A3:23:94:08:E7:4E:FB:48:F8:75:DC:DC:CF:1A:C6
            X509v3 Authority Key Identifier:
                keyid:F6:70:66:43:9A:CD:9E:AF:D4:89:9F:C6:8C:60:75:C7:0C:E3:9A:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3656BB8/D79EEB94891C11EEAF65C7604AD9E6FC/9nBmQ5rNnq_UiZ_GjGB1xwzjmtU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/9nBmQ5rNnq_UiZ_GjGB1xwzjmtU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3656BB8/D79EEB94891C11EEAF65C7604AD9E6FC/9nBmQ5rNnq_UiZ_GjGB1xwzjmtU.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:3d:4b:77:d2:e3:62:30:61:fa:48:39:93:e4:7c:74:41:25:
         b0:b3:9f:67:77:b5:14:31:ce:5a:7f:ac:68:6a:39:7d:15:1c:
         c9:b5:29:0f:ec:2b:71:02:e8:a8:85:38:ab:58:d4:00:6f:35:
         5d:1e:14:be:d2:8a:77:6f:38:6a:74:f8:51:44:63:7b:b4:5e:
         e7:ba:65:34:6f:46:3e:06:68:75:4e:9b:a3:05:db:14:30:1b:
         94:38:8e:18:66:5c:18:bb:02:b4:c1:d7:69:17:c2:92:26:11:
         c0:7a:7f:26:f5:27:b8:f6:d2:29:ea:e2:6a:31:f6:3d:66:11:
         be:22:4e:93:03:5b:c2:08:e3:d8:73:7d:5a:df:05:0b:69:2e:
         40:22:4f:97:b5:21:12:dd:f4:c6:2f:47:ee:e1:7f:b9:c1:1e:
         8b:f0:77:67:6b:e3:01:67:b4:01:96:96:5f:70:29:b5:fc:95:
         61:2d:f8:0d:b3:e7:bc:f0:4a:b0:93:30:87:98:bf:84:f8:1a:
         36:37:54:81:b3:a2:21:bf:27:c3:54:42:6b:b9:7f:c8:5a:d8:
         18:86:f0:75:c1:60:f1:83:53:b0:f5:41:0d:4b:76:43:a9:d6:
         1a:c1:42:23:e1:76:ad:08:a9:59:30:0f:fd:de:d3:0f:16:23:
         e6:3e:92:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 04:39:14 2025 by rpki-client