This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3658AF9/5C52F2F4783611F09A24A0E3DAE4EC9C/1X3hPvIcIQ_suBv_eMQUm-o6fDI.mft
File:                     1X3hPvIcIQ_suBv_eMQUm-o6fDI.mft (raw, json)
Hash identifier:          KpodWfpXJlWOL1OVqXhEQVvT70iyjz4BXO96lJsG1S0=
Subject key identifier:   0D:29:27:AA:8F:6A:36:FE:D8:98:CA:69:B9:B5:04:B7:94:62:08:0C
Authority key identifier: D5:7D:E1:3E:F2:1C:21:0F:EC:B8:1B:FF:78:C4:14:9B:EA:3A:7C:32
Certificate issuer:       /CN=F3658AF9RI/serialNumber=D57DE13EF21C210FECB81BFF78C4149BEA3A7C32
Certificate serial:       84
Authority info access:    rsync://rpki.afrinic.net/repository/ripe/1X3hPvIcIQ_suBv_eMQUm-o6fDI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3658AF9/5C52F2F4783611F09A24A0E3DAE4EC9C/1X3hPvIcIQ_suBv_eMQUm-o6fDI.mft
Manifest number:          84
Signing time:             Sat 20 Dec 2025 05:10:00 +0000
Manifest this update:     Sat 20 Dec 2025 05:09:59 +0000
Manifest next update:     Mon 22 Dec 2025 05:09:59 +0000
Files and hashes:         1: 1X3hPvIcIQ_suBv_eMQUm-o6fDI.crl (hash: 7vDQvBPgaY62KHQ0kXuooGf3gcFSrDCKgid+slMmCnA=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3658AF9/5C52F2F4783611F09A24A0E3DAE4EC9C/1X3hPvIcIQ_suBv_eMQUm-o6fDI.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3658AF9/5C52F2F4783611F09A24A0E3DAE4EC9C/1X3hPvIcIQ_suBv_eMQUm-o6fDI.mft
                          rsync://rpki.afrinic.net/repository/ripe/1X3hPvIcIQ_suBv_eMQUm-o6fDI.cer
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 22 Dec 2025 05:09:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 132 (0x84)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3658AF9RI, serialNumber=D57DE13EF21C210FECB81BFF78C4149BEA3A7C32
        Validity
            Not Before: Dec 20 05:09:59 2025 GMT
            Not After : Dec 22 05:09:59 2025 GMT
        Subject: CN=69462fa7-6c36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:25:c7:f1:94:fb:e7:1b:eb:66:58:2a:c7:ab:
                    2a:f5:0c:7d:10:09:53:82:dd:bc:ca:a3:21:11:be:
                    fd:9e:ce:c5:68:00:d6:7a:1a:f2:70:ac:4f:4c:58:
                    48:8e:ff:8c:14:71:16:88:26:9e:f1:20:93:92:9d:
                    93:b0:f3:e3:25:73:fb:8e:4e:68:84:9e:a5:33:93:
                    16:23:85:7d:d4:b9:31:34:dc:50:c1:10:9c:08:af:
                    ec:83:8f:31:ab:0e:84:52:4a:a9:17:0f:7b:d2:93:
                    e3:e3:2a:80:01:20:05:c7:60:b2:9f:dc:f6:e8:d7:
                    9b:2c:d9:84:6e:ee:b4:6b:be:9a:67:b5:f4:d8:5d:
                    09:c3:0d:cc:64:f1:9f:58:09:42:10:95:10:e8:be:
                    8f:fa:a3:9a:07:f8:f9:37:ce:92:01:5f:d3:f2:bc:
                    ef:38:1f:61:ac:b2:ac:6b:d2:35:3f:fc:cd:f2:34:
                    9a:ae:b2:8f:a8:31:1a:bd:86:10:30:99:95:d0:46:
                    46:54:47:2d:34:65:ea:ee:61:74:67:53:c5:f5:c5:
                    30:ac:86:36:61:07:3a:b4:95:24:2b:64:1e:9b:d5:
                    19:05:a3:fa:77:83:31:98:9d:03:4e:0a:05:32:ea:
                    6d:c8:df:14:83:e9:1d:e7:05:29:73:46:ef:b0:63:
                    f6:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:29:27:AA:8F:6A:36:FE:D8:98:CA:69:B9:B5:04:B7:94:62:08:0C
            X509v3 Authority Key Identifier:
                keyid:D5:7D:E1:3E:F2:1C:21:0F:EC:B8:1B:FF:78:C4:14:9B:EA:3A:7C:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3658AF9/5C52F2F4783611F09A24A0E3DAE4EC9C/1X3hPvIcIQ_suBv_eMQUm-o6fDI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/1X3hPvIcIQ_suBv_eMQUm-o6fDI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3658AF9/5C52F2F4783611F09A24A0E3DAE4EC9C/1X3hPvIcIQ_suBv_eMQUm-o6fDI.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:d6:36:0b:a0:f4:4b:e5:e4:6d:d5:ec:bb:dd:f0:35:3c:f3:
         03:b9:bd:d0:3a:0b:a5:d5:ac:26:f0:a4:45:e4:19:07:c4:f0:
         98:43:0b:fb:6a:c5:25:8c:55:5e:21:2b:63:4b:d3:5e:97:0e:
         3b:d0:04:5f:fa:a3:92:0e:3f:7b:bd:28:eb:cb:5e:ce:b1:80:
         43:65:de:43:3d:58:87:b3:be:32:66:a3:fe:b0:7d:d4:b6:55:
         74:b4:18:24:65:d2:ff:54:be:0e:7b:24:23:21:e6:41:01:60:
         1a:1f:73:87:23:46:2f:1a:fe:64:d3:7a:df:10:ee:5c:72:b8:
         62:e1:43:03:4a:67:9b:40:2c:e6:26:3d:c1:29:88:7f:eb:f7:
         99:ae:4a:78:86:5c:11:44:97:57:a7:87:71:53:31:e7:d0:ba:
         75:1b:15:a3:ee:a8:3b:dd:f7:1c:f5:96:5f:f5:1f:9d:67:9c:
         18:76:ec:9b:c0:0c:a0:8b:28:37:42:36:c7:4c:9d:c5:9e:30:
         81:68:35:bd:3f:53:cc:a2:90:42:90:c7:1d:61:a8:c5:f2:38:
         d9:6b:0d:05:3a:e5:26:e5:82:a8:31:8e:4e:fa:1b:14:d3:74:
         61:76:b3:8d:5c:b7:6f:69:4e:a0:56:a3:60:5d:2f:6c:dd:c2:
         a3:7d:e5:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 05:52:13 2025 by rpki-client