This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36217DF/54BDBB24E93811EF998A6679762E951A/OE9qPQyKkcXy3zehH1p7nFJb7hY.mft
File:                     OE9qPQyKkcXy3zehH1p7nFJb7hY.mft (raw, json)
Hash identifier:          OfS+ftfyTrm9yT+WC3TGL7//lmhrsV2XRg4x4UrRR6k=
Subject key identifier:   68:D3:D2:49:69:0F:1F:D7:A4:FC:BD:E7:12:83:E6:63:22:72:82:C0
Authority key identifier: 38:4F:6A:3D:0C:8A:91:C5:F2:DF:37:A1:1F:5A:7B:9C:52:5B:EE:16
Certificate issuer:       /CN=F36217DFAF/serialNumber=384F6A3D0C8A91C5F2DF37A11F5A7B9C525BEE16
Certificate serial:       0135
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/OE9qPQyKkcXy3zehH1p7nFJb7hY.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36217DF/54BDBB24E93811EF998A6679762E951A/OE9qPQyKkcXy3zehH1p7nFJb7hY.mft
Manifest number:          0132
Signing time:             Fri 05 Dec 2025 04:54:42 +0000
Manifest this update:     Fri 05 Dec 2025 04:54:41 +0000
Manifest next update:     Sun 07 Dec 2025 04:54:41 +0000
Files and hashes:         1: OE9qPQyKkcXy3zehH1p7nFJb7hY.crl (hash: YGGbo4gnGL2t39nm/AckaBJPRH1B0yahyF3r6Pv2yoo=)
                          2: 12C71FFA414211F08D0BA2A9DAE4EC9C.roa (hash: L0xlt1TQw2jjAYhdxTaR7ffVXvpBJOWHJHDBNeBUdlQ=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36217DF/54BDBB24E93811EF998A6679762E951A/OE9qPQyKkcXy3zehH1p7nFJb7hY.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36217DF/54BDBB24E93811EF998A6679762E951A/OE9qPQyKkcXy3zehH1p7nFJb7hY.mft
                          rsync://rpki.afrinic.net/repository/afrinic/OE9qPQyKkcXy3zehH1p7nFJb7hY.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 07 Dec 2025 00:06:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 309 (0x135)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36217DFAF, serialNumber=384F6A3D0C8A91C5F2DF37A11F5A7B9C525BEE16
        Validity
            Not Before: Dec  5 04:54:41 2025 GMT
            Not After : Dec  7 04:54:41 2025 GMT
        Subject: CN=69326592-8422
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:3b:b8:d8:ad:9c:4f:09:82:75:94:ff:a5:a6:
                    28:39:cc:9c:7a:dc:b5:8b:25:24:e5:9e:c7:38:ed:
                    b2:8d:de:df:86:d7:a1:db:8d:64:2c:01:81:77:ef:
                    36:74:e8:c5:ee:ec:7b:48:92:57:52:12:11:95:39:
                    a2:7a:f0:45:bc:3c:1b:70:43:35:fb:5e:a8:63:68:
                    74:2e:3a:1c:c8:ab:cd:f6:6f:f5:a7:3c:21:1b:81:
                    f9:41:a0:5c:8b:d8:cf:7a:09:5c:1b:66:c2:e0:b3:
                    2e:f5:f0:f3:b5:bb:e3:bf:85:bc:11:3f:9d:02:22:
                    7f:9b:ce:4a:84:70:fa:3e:ff:77:5d:25:da:67:f7:
                    6b:ed:8c:d9:70:a8:52:c8:e6:45:b2:1f:7b:ef:e7:
                    5a:71:3b:00:77:fa:2d:4d:73:76:27:2c:01:34:55:
                    ea:cb:2e:f1:26:44:e9:7e:31:b5:cb:3f:f4:20:bf:
                    4c:47:93:e0:c5:68:86:b4:51:7d:fc:fe:6a:23:55:
                    b0:28:5e:5a:d1:af:e4:ac:2d:b4:ba:5b:b2:02:e6:
                    b3:08:21:17:f0:b2:db:d6:a7:4b:70:1b:e9:12:ca:
                    81:39:b1:50:58:31:9a:63:38:63:70:86:77:aa:17:
                    e3:22:bd:ce:c8:c4:87:c0:6e:7f:2f:a7:57:7f:18:
                    5b:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:D3:D2:49:69:0F:1F:D7:A4:FC:BD:E7:12:83:E6:63:22:72:82:C0
            X509v3 Authority Key Identifier:
                keyid:38:4F:6A:3D:0C:8A:91:C5:F2:DF:37:A1:1F:5A:7B:9C:52:5B:EE:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36217DF/54BDBB24E93811EF998A6679762E951A/OE9qPQyKkcXy3zehH1p7nFJb7hY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/OE9qPQyKkcXy3zehH1p7nFJb7hY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36217DF/54BDBB24E93811EF998A6679762E951A/OE9qPQyKkcXy3zehH1p7nFJb7hY.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:ff:79:f5:83:ae:92:ad:be:42:dd:a3:a6:36:dd:8e:e8:47:
         20:05:01:66:c3:ba:7c:1a:32:45:a8:43:14:12:0d:c0:48:07:
         06:95:29:ac:69:a4:1c:e2:f7:34:e3:be:18:9f:57:c4:ba:7d:
         0a:48:e5:b7:51:1a:7d:74:8d:8d:21:1e:03:e1:2c:af:79:cb:
         d7:d0:06:b8:a3:f6:c7:06:f6:fe:f6:12:84:09:5e:ae:f9:39:
         5a:23:c4:90:41:38:01:b7:3c:19:41:8e:32:fd:22:7f:1f:91:
         65:85:d2:ce:bf:44:97:15:61:f7:ca:ed:17:88:16:7b:44:cd:
         d5:17:70:cb:12:09:47:df:e9:8f:39:80:6b:e1:e4:df:48:6b:
         22:2c:97:f9:6f:8d:e2:b4:02:67:6b:5a:80:ce:3a:09:21:8b:
         a2:a3:e0:61:08:97:ca:9d:c5:31:12:f5:a1:51:63:df:f6:42:
         d6:e5:82:49:7f:2f:be:91:14:ba:ac:77:fd:88:42:e1:74:12:
         1e:da:1b:6b:f9:a7:80:59:c2:0f:8b:d7:00:f3:64:72:88:e4:
         cd:7c:7e:ca:cc:69:8d:67:49:b7:e3:d2:60:ad:97:ef:a6:5f:
         e8:78:d8:ec:8f:99:cf:1f:53:52:6b:ee:b2:6a:58:17:e2:cb:
         1e:7e:1e:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 5 07:58:22 2025 by rpki-client