This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36280C9/892916D0895911F0B0F640C1DAE4EC9C/Vznp0pMq2FvMIkCBO_OrOUKEMCA.mft
File:                     Vznp0pMq2FvMIkCBO_OrOUKEMCA.mft (raw, json)
Hash identifier:          vPunbN71XD/0tcz0wXlmc2BZlHc2jz13fTbYTkhkC64=
Subject key identifier:   A3:0E:0F:A3:73:70:DB:3B:C3:9F:0B:69:B3:77:5C:D3:03:2C:90:83
Authority key identifier: 57:39:E9:D2:93:2A:D8:5B:CC:22:40:81:3B:F3:AB:39:42:84:30:20
Certificate issuer:       /CN=F36280C9AF/serialNumber=5739E9D2932AD85BCC2240813BF3AB3942843020
Certificate serial:       66
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/Vznp0pMq2FvMIkCBO_OrOUKEMCA.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36280C9/892916D0895911F0B0F640C1DAE4EC9C/Vznp0pMq2FvMIkCBO_OrOUKEMCA.mft
Manifest number:          65
Signing time:             Tue 09 Dec 2025 05:13:54 +0000
Manifest this update:     Tue 09 Dec 2025 05:13:53 +0000
Manifest next update:     Thu 11 Dec 2025 05:13:53 +0000
Files and hashes:         1: Vznp0pMq2FvMIkCBO_OrOUKEMCA.crl (hash: vyN4PeJl848ZSxDuayjdmfk5JDUNHTlMT332lVm+Sc8=)
                          2: A19BA40E895D11F0BE8951DBDAE4EC9C.roa (hash: Et+VW4knLp0d295uH8UgXrH5+8q9h3SexmR3jtKPDNI=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36280C9/892916D0895911F0B0F640C1DAE4EC9C/Vznp0pMq2FvMIkCBO_OrOUKEMCA.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36280C9/892916D0895911F0B0F640C1DAE4EC9C/Vznp0pMq2FvMIkCBO_OrOUKEMCA.mft
                          rsync://rpki.afrinic.net/repository/afrinic/Vznp0pMq2FvMIkCBO_OrOUKEMCA.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 11 Dec 2025 05:13:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 102 (0x66)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36280C9AF, serialNumber=5739E9D2932AD85BCC2240813BF3AB3942843020
        Validity
            Not Before: Dec  9 05:13:53 2025 GMT
            Not After : Dec 11 05:13:53 2025 GMT
        Subject: CN=6937b012-984d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:e1:10:ee:0e:89:f0:ed:35:41:3b:de:43:16:
                    02:b9:91:43:51:b4:f3:8a:6c:76:12:b8:81:e9:38:
                    c9:0c:4d:b6:db:7d:26:a5:54:1d:97:51:b9:fd:81:
                    0f:7d:f8:08:0a:69:6e:ab:11:f9:b5:58:2c:c5:73:
                    08:1b:12:7f:40:6a:b8:04:d2:06:4d:7d:a7:65:b0:
                    33:2f:2c:5c:89:1a:1c:30:e1:60:47:69:1b:4b:28:
                    06:c8:2b:f5:4d:ce:54:63:b5:83:69:05:c2:99:5e:
                    a5:5a:b0:b5:77:20:5f:ee:1c:20:86:cf:97:65:1e:
                    bd:16:05:cd:f3:6d:bb:36:b1:7e:44:01:2f:b8:30:
                    22:63:b6:fe:69:7c:99:9b:4d:17:91:8a:c9:5f:75:
                    a0:55:00:36:97:b3:62:7e:d6:e3:bf:7b:99:4c:57:
                    cd:10:8b:a5:14:0b:64:57:20:eb:af:16:1a:14:ab:
                    c4:d4:59:00:1c:1a:df:e6:ee:f3:e7:ca:39:4a:2d:
                    6b:71:91:0e:68:43:9e:f1:85:6c:b3:7b:a7:f3:4a:
                    98:67:df:c6:bd:b3:86:f0:14:6f:ea:4c:a1:e5:45:
                    90:d1:1e:ea:7a:8c:10:c7:60:64:c4:ee:27:20:a7:
                    b4:ed:cd:2b:f0:a1:97:a9:0d:f0:ec:1e:02:55:b4:
                    88:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:0E:0F:A3:73:70:DB:3B:C3:9F:0B:69:B3:77:5C:D3:03:2C:90:83
            X509v3 Authority Key Identifier:
                keyid:57:39:E9:D2:93:2A:D8:5B:CC:22:40:81:3B:F3:AB:39:42:84:30:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36280C9/892916D0895911F0B0F640C1DAE4EC9C/Vznp0pMq2FvMIkCBO_OrOUKEMCA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Vznp0pMq2FvMIkCBO_OrOUKEMCA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36280C9/892916D0895911F0B0F640C1DAE4EC9C/Vznp0pMq2FvMIkCBO_OrOUKEMCA.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:9d:b5:bc:e6:d4:73:76:36:70:5e:d2:e7:1e:3a:ae:c1:e9:
         1e:0a:69:89:0d:80:ca:fd:38:be:35:0b:47:83:22:80:6d:7e:
         49:99:35:d8:55:a2:c8:5e:41:49:30:78:77:c4:75:38:ed:23:
         99:75:83:10:9e:af:a5:f9:c9:8e:f2:ec:7b:57:ea:34:b1:4d:
         fa:ab:17:2e:bb:87:dd:42:95:08:a7:56:ab:47:dc:4a:69:fd:
         1e:cf:91:db:e7:21:2c:f5:fe:a2:90:1d:83:80:0f:01:2d:ba:
         3b:4a:8b:a2:c0:fe:ca:f9:80:03:ca:bd:d5:ab:90:c5:03:a4:
         04:a0:02:37:4d:b4:84:76:00:63:15:8d:22:0d:b2:f3:47:09:
         de:ff:6f:ff:64:0b:00:0a:5a:40:2a:e2:f9:4a:30:f3:a6:dd:
         89:01:d3:b7:3a:68:f7:91:2e:b7:f2:d9:31:97:6f:cb:16:cc:
         68:6e:28:ae:ed:26:4a:6f:07:2d:47:8e:f3:80:84:bc:6d:ab:
         70:7b:cb:9b:40:ac:e3:85:af:9c:84:bb:d2:55:58:e7:59:d9:
         c7:6c:de:0d:36:31:fc:00:c1:44:f2:8b:3f:5c:87:9f:dc:bd:
         80:f3:96:36:e9:15:0c:91:15:0f:2b:da:10:ca:48:0f:35:81:
         be:81:0f:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 9 12:16:43 2025 by rpki-client