This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3694A3E/A405B592984311EFB970F4B6762E951A/DoVnb92LLIvqeU6JUNJzTz-JMME.mft
File:                     DoVnb92LLIvqeU6JUNJzTz-JMME.mft (raw, json)
Hash identifier:          iz7Ac31HEfqkE9M6W7oGDgwWx0X9ZCX0FyOBbeocC20=
Subject key identifier:   89:0F:26:DF:39:E3:A0:76:C6:2F:DB:65:D5:2B:2F:0A:F8:37:92:C9
Authority key identifier: 0E:85:67:6F:DD:8B:2C:8B:EA:79:4E:89:50:D2:73:4F:3F:89:30:C1
Certificate issuer:       /CN=F3694A3EAF/serialNumber=0E85676FDD8B2C8BEA794E8950D2734F3F8930C1
Certificate serial:       01B3
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/DoVnb92LLIvqeU6JUNJzTz-JMME.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3694A3E/A405B592984311EFB970F4B6762E951A/DoVnb92LLIvqeU6JUNJzTz-JMME.mft
Manifest number:          01B1
Signing time:             Thu 25 Dec 2025 04:40:08 +0000
Manifest this update:     Thu 25 Dec 2025 04:40:07 +0000
Manifest next update:     Sat 27 Dec 2025 04:40:07 +0000
Files and hashes:         1: DoVnb92LLIvqeU6JUNJzTz-JMME.crl (hash: cdvUgqFA0X7QlAPc8dO3JJAyU93zyC/gp8iMi2K78Kw=)
                          2: 0F329508984711EF85483C4D762E951A.roa (hash: a0BidHbztDQTPkWjYpuerywnpAYxfdwn5c2aRLRiLtE=)
                          3: 551A9F322CCD11F09F73B0B5DAE4EC9C.roa (hash: qDJZJ73fwcMimn2oqNCcTPQF5DF0ccPRcwR3NYTQ2dI=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3694A3E/A405B592984311EFB970F4B6762E951A/DoVnb92LLIvqeU6JUNJzTz-JMME.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3694A3E/A405B592984311EFB970F4B6762E951A/DoVnb92LLIvqeU6JUNJzTz-JMME.mft
                          rsync://rpki.afrinic.net/repository/afrinic/DoVnb92LLIvqeU6JUNJzTz-JMME.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 27 Dec 2025 00:06:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 435 (0x1b3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3694A3EAF, serialNumber=0E85676FDD8B2C8BEA794E8950D2734F3F8930C1
        Validity
            Not Before: Dec 25 04:40:07 2025 GMT
            Not After : Dec 27 04:40:07 2025 GMT
        Subject: CN=694cc028-e06c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:ce:79:98:a6:05:95:ec:e5:55:9e:7f:d8:63:
                    a1:32:c4:04:2f:92:5a:f2:b8:62:d7:d7:94:8d:27:
                    4b:00:d3:c1:ab:e1:ac:d9:64:46:b4:55:cb:00:f7:
                    47:97:c1:9d:49:c7:d7:61:40:3a:58:29:ef:87:39:
                    e3:32:e4:ee:e8:75:94:76:5e:c7:f4:61:24:c9:42:
                    5e:15:0c:0b:18:38:70:14:56:ce:f5:ec:cf:78:b3:
                    7a:a9:bb:69:27:b1:28:4c:76:90:30:be:16:39:c9:
                    ab:c5:07:16:d8:94:57:a4:4c:d3:c9:9f:c1:be:02:
                    eb:5d:7b:93:aa:6b:e8:e7:4f:88:34:0d:ac:21:46:
                    72:3c:22:de:01:9b:9a:e2:0d:c4:46:8b:4c:74:3a:
                    97:b9:75:74:85:60:db:a7:08:54:80:24:14:65:a3:
                    39:ec:07:89:1a:1c:d5:18:9b:d6:d4:16:61:65:87:
                    02:00:4a:e4:00:76:90:ff:bc:6c:c7:69:64:9b:3e:
                    0c:46:fc:49:7a:7b:c3:c3:b5:f2:16:54:79:69:0a:
                    c3:61:c2:27:98:cc:82:de:8f:c1:f9:86:65:7c:43:
                    40:f5:73:95:af:c6:79:26:7b:a0:18:f5:7f:3a:dc:
                    ee:35:4f:33:34:30:48:69:54:7f:e1:58:58:6c:5c:
                    16:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:0F:26:DF:39:E3:A0:76:C6:2F:DB:65:D5:2B:2F:0A:F8:37:92:C9
            X509v3 Authority Key Identifier:
                keyid:0E:85:67:6F:DD:8B:2C:8B:EA:79:4E:89:50:D2:73:4F:3F:89:30:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3694A3E/A405B592984311EFB970F4B6762E951A/DoVnb92LLIvqeU6JUNJzTz-JMME.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/DoVnb92LLIvqeU6JUNJzTz-JMME.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3694A3E/A405B592984311EFB970F4B6762E951A/DoVnb92LLIvqeU6JUNJzTz-JMME.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:ca:09:c0:bf:c8:af:2a:f0:43:f0:ce:49:f6:6f:6f:ee:59:
         7b:70:22:ae:94:fb:61:ff:69:76:3b:6f:2d:37:aa:8b:fc:ab:
         db:8c:d1:8f:72:a6:d4:e8:63:b0:f0:04:68:28:48:49:8d:30:
         a4:f3:7e:27:de:86:bd:52:e1:3b:db:eb:a4:4c:9f:b2:0e:02:
         86:65:b4:97:28:20:ff:0c:46:3a:e1:af:c0:06:3d:f9:ff:aa:
         dd:a9:76:4d:42:01:e9:1e:76:39:e7:b4:e0:e0:68:fe:e2:9f:
         8e:bb:fa:60:93:18:96:32:0e:db:f7:82:6e:ed:b3:86:88:7e:
         c2:dc:2e:c9:ed:37:ef:15:a2:b6:a8:d7:e0:13:15:b4:2d:4e:
         42:02:0a:f6:0a:45:e0:f5:bd:fc:bd:31:49:96:7f:dd:41:07:
         0d:9b:86:7d:b4:12:6d:c4:85:85:c8:a2:4d:f4:1b:62:8b:a7:
         21:a6:ce:77:2d:57:ba:08:c3:ea:13:36:bd:95:fb:97:ca:c1:
         3f:24:87:af:a4:7e:f9:09:3e:bc:43:a8:76:38:8f:18:f8:98:
         9f:5c:f5:db:6e:de:a5:d3:19:51:ff:c6:a3:8b:d9:af:53:6b:
         88:76:d1:4c:25:9c:e1:7e:3e:06:20:b5:b1:33:4b:90:54:ed:
         c0:2f:11:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 25 11:16:12 2025 by rpki-client