This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3664036/4840029A4D9211EF9858CABB762E951A/BW6zzs3ua4NtH6CPCHznRGcD3qE.mft
File:                     BW6zzs3ua4NtH6CPCHznRGcD3qE.mft (raw, json)
Hash identifier:          jhp1AgdJJJnGHJJAhQJy9X7ijvBk8ywRIuQTJiT4v8w=
Subject key identifier:   9B:72:48:2D:96:E4:7B:6C:46:0A:7B:F0:72:8C:CA:B0:8E:D0:DE:10
Authority key identifier: 05:6E:B3:CE:CD:EE:6B:83:6D:1F:A0:8F:08:7C:E7:44:67:03:DE:A1
Certificate issuer:       /CN=F3664036AF/serialNumber=056EB3CECDEE6B836D1FA08F087CE7446703DEA1
Certificate serial:       020E
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/BW6zzs3ua4NtH6CPCHznRGcD3qE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3664036/4840029A4D9211EF9858CABB762E951A/BW6zzs3ua4NtH6CPCHznRGcD3qE.mft
Manifest number:          020D
Signing time:             Mon 22 Dec 2025 04:26:37 +0000
Manifest this update:     Mon 22 Dec 2025 04:26:36 +0000
Manifest next update:     Wed 24 Dec 2025 04:26:36 +0000
Files and hashes:         1: BW6zzs3ua4NtH6CPCHznRGcD3qE.crl (hash: F9ybYJITYEQ1S1Ak1fjOXF28ny8aBdzhj6E8p0iads8=)
                          2: 66B953BA4D9311EFA7586846762E951A.roa (hash: byh4Eg9udfVVMXX0HCkdJJZ1KKKQasdGqUIYmXZmtrg=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3664036/4840029A4D9211EF9858CABB762E951A/BW6zzs3ua4NtH6CPCHznRGcD3qE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3664036/4840029A4D9211EF9858CABB762E951A/BW6zzs3ua4NtH6CPCHznRGcD3qE.mft
                          rsync://rpki.afrinic.net/repository/afrinic/BW6zzs3ua4NtH6CPCHznRGcD3qE.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 24 Dec 2025 00:06:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 526 (0x20e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3664036AF, serialNumber=056EB3CECDEE6B836D1FA08F087CE7446703DEA1
        Validity
            Not Before: Dec 22 04:26:36 2025 GMT
            Not After : Dec 24 04:26:36 2025 GMT
        Subject: CN=6948c87d-3b14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:e7:ac:11:01:96:04:ef:6e:91:bd:eb:19:59:
                    51:2a:eb:90:39:73:96:12:96:9a:ce:91:a7:e8:32:
                    80:1a:6e:89:2b:07:f6:f6:63:f5:85:3c:47:0e:6b:
                    c9:8f:40:ff:9e:c4:9e:60:fe:2b:95:88:d4:cd:fa:
                    70:24:9d:d5:e9:8c:cc:e0:6c:9e:28:73:39:34:11:
                    e5:5f:b1:f7:7a:53:62:4e:c7:4d:9f:c6:79:a7:6e:
                    11:6c:d0:49:1b:e2:10:85:b8:05:47:34:28:23:d8:
                    d5:54:37:d6:c0:10:b9:a7:51:c7:73:8f:dd:86:72:
                    38:17:75:e7:63:10:fc:8c:b2:d1:da:20:52:71:15:
                    65:73:ca:93:0b:d8:d0:39:48:71:bf:36:f2:d6:8f:
                    b0:8c:ae:e2:8b:7b:0b:28:70:59:3e:01:be:91:fe:
                    be:47:d1:98:4d:23:df:e3:48:38:14:d0:f9:87:a0:
                    0c:c7:c2:ea:9f:92:f2:97:9d:85:5a:e4:e9:2e:33:
                    24:c7:b2:8b:f3:91:10:93:c8:e8:ab:76:f9:ee:a4:
                    19:2c:5b:50:58:7d:82:16:a4:0f:eb:0f:4b:3f:60:
                    27:e5:b8:93:bc:6c:a9:9c:d4:b6:93:df:32:a8:e4:
                    7e:02:62:53:b9:ff:63:46:c7:05:29:6d:49:af:aa:
                    87:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:72:48:2D:96:E4:7B:6C:46:0A:7B:F0:72:8C:CA:B0:8E:D0:DE:10
            X509v3 Authority Key Identifier:
                keyid:05:6E:B3:CE:CD:EE:6B:83:6D:1F:A0:8F:08:7C:E7:44:67:03:DE:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3664036/4840029A4D9211EF9858CABB762E951A/BW6zzs3ua4NtH6CPCHznRGcD3qE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/BW6zzs3ua4NtH6CPCHznRGcD3qE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3664036/4840029A4D9211EF9858CABB762E951A/BW6zzs3ua4NtH6CPCHznRGcD3qE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:45:11:f3:14:d2:d4:60:cc:8f:3f:eb:ef:b3:ca:6e:9d:f9:
         6d:5c:be:d1:e3:45:48:19:d3:0e:b4:e0:79:03:8d:46:fc:8e:
         0b:91:22:a0:1c:f8:88:4f:80:fc:b6:a1:c1:27:5e:35:08:eb:
         4e:b5:e7:06:52:8c:cd:1b:ef:17:fc:fa:c0:86:b5:f5:f5:63:
         8b:70:ba:f0:e1:26:75:1c:03:fe:0f:68:c3:04:1e:a4:ee:28:
         02:4a:71:13:14:4f:33:fd:7a:38:ec:9b:7c:cf:3c:6b:06:10:
         cc:53:75:38:ed:d0:c2:79:7b:0d:24:49:6c:70:f0:a4:32:e2:
         84:ee:c5:4b:a5:48:ee:27:66:0d:98:9d:01:2c:7f:8c:ef:65:
         1e:57:48:3a:c4:4f:78:aa:a5:a0:e8:61:ea:81:42:42:20:7f:
         a3:68:84:1b:9b:94:e4:50:81:04:3f:21:f1:f8:70:2f:2e:b4:
         cd:7d:36:1d:3f:e1:da:7e:b3:c7:87:4b:44:19:04:ab:e0:10:
         5b:93:c4:20:be:b2:b6:fd:33:9d:b0:99:08:91:90:23:fc:50:
         7b:85:f6:68:18:0b:11:ea:f5:1b:57:32:73:1f:35:6b:25:85:
         c8:3a:8a:7c:d5:e0:e6:a4:90:a7:70:91:14:93:1a:b6:03:8e:
         2f:f8:7a:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 18:58:23 2025 by rpki-client