This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36185D8/1C1348B45BD711EFAF2C3D5E762E951A/ZNS8Pq2RmuikZzKVELUgQYUzXFI.mft
File:                     ZNS8Pq2RmuikZzKVELUgQYUzXFI.mft (raw, json)
Hash identifier:          jAqXnnoKUAah7okxJ4UZfb1E7mT75M2EmFB5wxv0mSE=
Subject key identifier:   01:96:57:FD:5D:0B:77:63:AD:2B:12:1B:3A:FA:1C:12:8E:19:EB:58
Authority key identifier: 64:D4:BC:3E:AD:91:9A:E8:A4:67:32:95:10:B5:20:41:85:33:5C:52
Certificate issuer:       /CN=F36185D8AF/serialNumber=64D4BC3EAD919AE8A467329510B5204185335C52
Certificate serial:       01EE
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/ZNS8Pq2RmuikZzKVELUgQYUzXFI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36185D8/1C1348B45BD711EFAF2C3D5E762E951A/ZNS8Pq2RmuikZzKVELUgQYUzXFI.mft
Manifest number:          01ED
Signing time:             Tue 09 Dec 2025 04:28:50 +0000
Manifest this update:     Tue 09 Dec 2025 04:28:49 +0000
Manifest next update:     Thu 11 Dec 2025 04:28:49 +0000
Files and hashes:         1: ZNS8Pq2RmuikZzKVELUgQYUzXFI.crl (hash: F1+r2YNVwroK6VKvLeYh8rXRIQRzbXT6DUxE3hPhyU4=)
                          2: 17AC05D05BD811EF91C62F65762E951A.roa (hash: pGO0PAidVvZBgK+RWqWHGbvgRG1IKwi6oTcbF8OQHYY=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36185D8/1C1348B45BD711EFAF2C3D5E762E951A/ZNS8Pq2RmuikZzKVELUgQYUzXFI.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36185D8/1C1348B45BD711EFAF2C3D5E762E951A/ZNS8Pq2RmuikZzKVELUgQYUzXFI.mft
                          rsync://rpki.afrinic.net/repository/afrinic/ZNS8Pq2RmuikZzKVELUgQYUzXFI.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 11 Dec 2025 04:28:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 494 (0x1ee)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36185D8AF, serialNumber=64D4BC3EAD919AE8A467329510B5204185335C52
        Validity
            Not Before: Dec  9 04:28:49 2025 GMT
            Not After : Dec 11 04:28:49 2025 GMT
        Subject: CN=6937a582-cb57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:25:e5:f6:09:15:39:65:d6:6d:cc:d3:16:01:
                    72:5b:34:ab:b0:95:f3:bd:7b:35:ca:3f:38:7c:ef:
                    fb:be:84:27:dc:60:b0:b3:59:20:f4:17:a4:fc:7e:
                    f8:89:6c:d7:9a:f9:f5:d6:4b:91:72:ca:1a:e5:e3:
                    0d:71:bd:03:ca:ba:3a:56:66:ea:00:f2:56:92:93:
                    5a:4f:df:3c:c4:a6:08:5d:90:b8:57:ca:c5:98:0c:
                    90:f2:b5:93:27:61:1c:20:e3:c2:1f:58:63:26:3e:
                    20:88:fd:78:08:36:71:a7:55:db:65:07:6b:96:9d:
                    02:26:b1:10:a9:59:f3:87:59:87:e1:69:ac:8c:42:
                    92:5e:91:72:e1:c2:b3:59:e1:2a:69:eb:a0:a5:f3:
                    d0:38:44:3d:1c:ef:80:55:ed:45:8b:0c:94:89:48:
                    56:2e:57:c0:1e:d7:cd:2f:7c:e1:67:0d:ba:c7:71:
                    60:18:ac:bb:8e:c4:0d:8d:d6:37:86:2a:12:9c:2d:
                    6f:3f:96:25:ad:2c:16:32:9c:6c:e4:a1:b8:da:1f:
                    60:89:4e:0c:47:d0:32:0f:cb:91:1e:5c:3a:35:ae:
                    9f:8e:c6:84:f1:06:1c:7f:5b:a8:eb:de:a4:4f:10:
                    28:1b:1d:89:68:56:24:e2:c2:64:3e:2c:70:0f:8c:
                    b3:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:96:57:FD:5D:0B:77:63:AD:2B:12:1B:3A:FA:1C:12:8E:19:EB:58
            X509v3 Authority Key Identifier:
                keyid:64:D4:BC:3E:AD:91:9A:E8:A4:67:32:95:10:B5:20:41:85:33:5C:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36185D8/1C1348B45BD711EFAF2C3D5E762E951A/ZNS8Pq2RmuikZzKVELUgQYUzXFI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/ZNS8Pq2RmuikZzKVELUgQYUzXFI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36185D8/1C1348B45BD711EFAF2C3D5E762E951A/ZNS8Pq2RmuikZzKVELUgQYUzXFI.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:93:b7:c1:53:ed:a3:15:6d:ed:18:d1:20:cf:2b:99:ce:84:
         5b:f0:b2:95:a1:07:40:78:c3:39:df:f6:df:64:f9:89:24:bb:
         d7:94:c0:9d:1c:e9:9f:95:de:ed:e0:37:25:18:4a:6d:3e:f4:
         9f:ff:85:d5:d9:9a:3b:8b:ec:76:c8:8e:38:79:46:6b:13:46:
         ec:57:49:9f:72:2e:ef:12:17:d6:02:3e:26:6b:66:7e:79:42:
         fe:5f:c6:7d:96:45:09:d6:2a:b2:1d:7a:51:d7:3f:89:a4:86:
         20:1d:21:73:d7:a7:e9:41:c3:53:0b:2f:32:4c:0b:8e:ed:b7:
         2c:e7:da:5a:76:1a:f1:8b:87:cd:ae:87:6e:0a:bd:95:c1:24:
         2c:76:a9:16:79:d8:e8:80:4d:45:04:23:29:f4:4e:b6:08:13:
         a2:7c:a6:c8:d0:9e:17:d1:e0:03:61:99:05:17:57:48:be:ef:
         4d:85:17:bb:bc:a0:af:1d:15:26:8d:d0:97:3b:97:6b:ea:c5:
         0c:47:1a:22:7f:83:3f:ee:8e:e3:01:7a:c9:f6:e2:3e:d2:e6:
         45:43:6f:35:38:13:85:a2:96:d4:56:58:c0:c8:61:b8:80:0b:
         0c:b2:d0:f3:b1:53:1f:87:70:bc:b0:f6:b0:be:b3:7b:89:6b:
         6f:e4:3f:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 9 12:18:26 2025 by rpki-client