This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3698DD0/56C8EA4C667711ED967FC0A2F1222468/wD_daU9RquOPBRRWEBYXxW_YnEo.mft
File:                     wD_daU9RquOPBRRWEBYXxW_YnEo.mft (raw, json)
Hash identifier:          y3SEJzaUsFGnUYhgfBQWbKrC0ftY+c4jeVV6WsQDvc8=
Subject key identifier:   6D:9F:8F:D5:E4:CC:D4:B6:4A:12:D8:8C:EB:AB:E6:68:4C:7C:17:9C
Authority key identifier: C0:3F:DD:69:4F:51:AA:E3:8F:05:14:56:10:16:17:C5:6F:D8:9C:4A
Certificate issuer:       /CN=F3698DD0AF/serialNumber=C03FDD694F51AAE38F051456101617C56FD89C4A
Certificate serial:       04AE
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/wD_daU9RquOPBRRWEBYXxW_YnEo.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3698DD0/56C8EA4C667711ED967FC0A2F1222468/wD_daU9RquOPBRRWEBYXxW_YnEo.mft
Manifest number:          04A3
Signing time:             Tue 23 Dec 2025 03:06:56 +0000
Manifest this update:     Tue 23 Dec 2025 03:06:55 +0000
Manifest next update:     Thu 25 Dec 2025 03:06:55 +0000
Files and hashes:         1: wD_daU9RquOPBRRWEBYXxW_YnEo.crl (hash: BgoOsqfNQXslDfAEjVJzGRO0TPgaWUxz9Q8UvJEhim8=)
                          2: 2258DA46D9E611ED9991A6FC2F6D8C1D.roa (hash: zJWQpnOJZG73raUB2XV36ffD+zWbugbvO1hLTY3gu00=)
                          3: F998A4B4A68111EF83490D8F762E951A.roa (hash: gRJbn7TUJdVqzLN1VGDb0fJr1Lg413PCOuxRtaJJTFU=)
                          4: 7E60CCBE817511EDBB60FBE8F1222468.roa (hash: 3botBW7CxliYrIkkF4AkSGZ+nyL0LTvgw3z56nnf7ps=)
                          5: 6069E9FA190611EFAAC79456017001B1.roa (hash: qaWE3oZP6UDJiJvSf/qTz0gA6Weypu8kgh11g/Q7Yjc=)
                          6: E621A12E190511EF8A909B51017001B1.roa (hash: /esz7AIhM5t30ub8s0aOAXHtnxsPkykRU/r4aTbVw0Y=)
                          7: 6DC5038018FE11EF8B80B516017001B1.roa (hash: prIb+/59lGAY5m7ee/w0QfgAEg0BFXE2ZtOJctQ1wsI=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3698DD0/56C8EA4C667711ED967FC0A2F1222468/wD_daU9RquOPBRRWEBYXxW_YnEo.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3698DD0/56C8EA4C667711ED967FC0A2F1222468/wD_daU9RquOPBRRWEBYXxW_YnEo.mft
                          rsync://rpki.afrinic.net/repository/afrinic/wD_daU9RquOPBRRWEBYXxW_YnEo.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 25 Dec 2025 03:06:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1198 (0x4ae)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3698DD0AF, serialNumber=C03FDD694F51AAE38F051456101617C56FD89C4A
        Validity
            Not Before: Dec 23 03:06:55 2025 GMT
            Not After : Dec 25 03:06:55 2025 GMT
        Subject: CN=694a0750-08c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:4d:e7:07:24:83:45:c7:45:9d:2c:ff:df:92:
                    e5:ae:5c:d5:8c:61:ca:b7:6e:73:d3:79:50:04:55:
                    a4:02:bd:62:4c:ff:65:ed:ef:47:8e:f2:ed:15:35:
                    77:49:e6:2d:14:cf:b6:2f:ec:e5:0d:c8:8c:fa:6f:
                    94:f8:ac:ac:d8:dd:f3:75:17:49:be:d7:97:34:ba:
                    16:60:ba:54:ec:97:38:f5:03:84:81:75:96:cb:95:
                    8b:ee:90:d0:7d:23:be:a7:e7:93:e3:68:d6:6e:3d:
                    c7:5b:c3:bb:f1:a3:c2:32:80:d3:0a:d6:24:6d:b1:
                    2a:29:c9:8b:37:db:62:87:39:ee:fa:f5:2c:52:b8:
                    84:a4:2c:5b:6b:15:27:8b:72:5e:31:79:78:66:ab:
                    c9:bc:cb:fa:f9:19:06:55:02:1a:17:e7:13:0c:b1:
                    e9:ed:68:aa:9f:81:40:bc:c4:1a:62:6b:f7:d4:f5:
                    38:e7:60:2a:45:78:7b:a3:b7:36:aa:5c:d5:0c:ea:
                    81:4d:e0:51:aa:3d:c0:d8:84:60:aa:a9:f3:5e:28:
                    38:c0:e9:d7:80:c6:49:39:7f:85:b2:b1:6c:be:71:
                    6a:33:84:95:a4:1b:ff:b7:08:10:ac:a4:9b:f6:aa:
                    65:09:be:89:c5:57:43:ef:4c:54:98:2a:c7:70:bf:
                    15:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:9F:8F:D5:E4:CC:D4:B6:4A:12:D8:8C:EB:AB:E6:68:4C:7C:17:9C
            X509v3 Authority Key Identifier:
                keyid:C0:3F:DD:69:4F:51:AA:E3:8F:05:14:56:10:16:17:C5:6F:D8:9C:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3698DD0/56C8EA4C667711ED967FC0A2F1222468/wD_daU9RquOPBRRWEBYXxW_YnEo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/wD_daU9RquOPBRRWEBYXxW_YnEo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3698DD0/56C8EA4C667711ED967FC0A2F1222468/wD_daU9RquOPBRRWEBYXxW_YnEo.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:ba:d7:f1:04:90:e5:35:02:c6:86:bc:69:2c:a8:8e:d8:61:
         ab:fc:bd:2c:ba:dc:88:e5:92:09:f9:29:96:2a:b7:03:78:78:
         b3:e9:43:8f:8a:a1:a5:c8:11:c2:6e:f4:96:8a:ce:0f:cc:22:
         43:be:35:f9:4e:c8:11:19:c3:7e:fe:c7:ff:04:78:72:de:ff:
         42:58:ac:b9:ec:ed:d6:21:b5:de:65:28:b5:8e:c8:d8:86:56:
         a8:d4:b1:be:82:fc:67:2c:12:3e:d7:30:5c:ff:57:b2:3a:57:
         71:33:73:8e:68:20:aa:05:c3:36:3d:dd:95:08:ea:2d:2b:39:
         a4:39:38:cc:00:ea:45:48:10:82:2d:66:c3:71:98:a2:9d:d6:
         14:c2:e0:c4:dd:8c:30:ff:2d:ea:db:34:6c:44:13:9c:88:ee:
         72:95:f2:e0:79:89:3a:de:7c:f1:62:85:b0:1c:23:8c:35:6a:
         00:b4:6e:3e:f2:9b:24:46:10:6a:40:ee:ca:c2:b4:40:01:73:
         b2:70:c7:b0:c0:d3:f6:6a:99:9f:f7:46:ae:56:26:c9:d8:b7:
         fa:89:6a:5d:02:a0:36:37:f2:a4:e4:7e:30:22:91:f3:fd:a7:
         0c:eb:cf:2e:35:13:31:ac:60:d2:3d:b1:1e:3a:51:b3:84:ad:
         8b:12:83:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 10:52:53 2025 by rpki-client