This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36312D2/FFA25144F0FD11EBA85B643ED8A014CE/Mbpazle_Ha-6iN2u9C7I8VFeE8I.mft
File:                     Mbpazle_Ha-6iN2u9C7I8VFeE8I.mft (raw, json)
Hash identifier:          ekyZoWDGF3QTc5/y7ysabNYSbhR62e5XY44zWtk7q7A=
Subject key identifier:   9B:19:F7:0C:74:3B:C4:71:98:21:8E:20:DD:DB:3B:72:F0:9A:B2:43
Authority key identifier: 31:BA:5A:CE:57:BF:1D:AF:BA:88:DD:AE:F4:2E:C8:F1:51:5E:13:C2
Certificate issuer:       /CN=F36312D2AF/serialNumber=31BA5ACE57BF1DAFBA88DDAEF42EC8F1515E13C2
Certificate serial:       068E
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/Mbpazle_Ha-6iN2u9C7I8VFeE8I.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36312D2/FFA25144F0FD11EBA85B643ED8A014CE/Mbpazle_Ha-6iN2u9C7I8VFeE8I.mft
Manifest number:          067F
Signing time:             Tue 09 Dec 2025 02:19:14 +0000
Manifest this update:     Tue 09 Dec 2025 02:19:13 +0000
Manifest next update:     Thu 11 Dec 2025 02:19:13 +0000
Files and hashes:         1: Mbpazle_Ha-6iN2u9C7I8VFeE8I.crl (hash: Y8UUxD1JdSVcqNYZAbW+DmMyrFv8MsIQcdtntpELphs=)
                          2: FACAD9883BCD11F0B6605CB3DAE4EC9C.roa (hash: dP2wxzdL+Mv6hC2VyEDiD2GektX+aPyV3i8xOTvVXKs=)
                          3: B7965ED03BA511F0AE50DEB1DAE4EC9C.roa (hash: LcgEafdHU0U0vp+b5LwucpjcHDyrMR5HiQFsJwwtMlQ=)
                          4: 76C70DC43B9511F0B3A3FDC7DAE4EC9C.roa (hash: 2RqGsOATA4GGZI26i6ZoRArJDh+WeGnm6XzuaOGnVv8=)
                          5: 07BBBA5C3B8F11F09C92B0A0DAE4EC9C.roa (hash: U2a0ITRHf1IuAJ5KpfWkY3ULXGlixjjNGCb+4/SV9BA=)
                          6: D9C9265C3B4811F0BD3E03C7DAE4EC9C.roa (hash: WX47Gw3TZT5QjWXrGtccIQ15rYUyz9sGAY2dpNSREuY=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36312D2/FFA25144F0FD11EBA85B643ED8A014CE/Mbpazle_Ha-6iN2u9C7I8VFeE8I.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36312D2/FFA25144F0FD11EBA85B643ED8A014CE/Mbpazle_Ha-6iN2u9C7I8VFeE8I.mft
                          rsync://rpki.afrinic.net/repository/afrinic/Mbpazle_Ha-6iN2u9C7I8VFeE8I.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 11 Dec 2025 02:19:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1678 (0x68e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36312D2AF, serialNumber=31BA5ACE57BF1DAFBA88DDAEF42EC8F1515E13C2
        Validity
            Not Before: Dec  9 02:19:13 2025 GMT
            Not After : Dec 11 02:19:13 2025 GMT
        Subject: CN=69378722-947b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:4f:2e:6e:b9:1f:d8:e9:0b:b5:44:ad:3d:a1:
                    cb:8c:f7:82:7d:d5:01:ab:1f:9e:f6:79:9c:50:42:
                    f5:69:32:34:c4:8f:52:9d:16:ba:1a:83:62:4a:ed:
                    51:a3:fc:53:a9:7f:ad:af:08:a4:ff:98:51:01:eb:
                    1b:6e:05:16:cc:e2:fc:50:ee:e9:37:ab:72:0a:24:
                    6c:f3:f3:aa:a4:32:8d:da:bc:26:39:48:ed:8a:2b:
                    f5:d4:96:c8:88:49:2a:29:57:4b:2c:93:f6:5f:74:
                    32:e3:09:ef:61:34:bf:71:20:63:1d:de:1c:d2:fe:
                    28:44:a6:d5:f7:38:e0:ea:51:6a:d9:4e:30:fb:7c:
                    5b:2b:4e:ab:52:09:29:62:07:ee:a1:28:61:c6:e3:
                    06:be:8e:0e:f6:b0:fe:d8:0b:18:82:08:c6:60:a6:
                    92:b4:01:06:81:9d:5f:1a:00:1c:d0:64:ff:ab:58:
                    8e:8f:2e:d6:c1:f9:d6:5f:c0:dd:0a:d1:4c:44:23:
                    44:53:2c:19:04:15:bb:25:aa:69:89:be:60:ea:1b:
                    2e:74:28:f3:76:4a:d3:6f:00:9d:0a:aa:77:c8:cc:
                    7c:92:10:7c:68:da:f6:57:d2:91:7b:f6:00:b7:20:
                    e8:45:a1:ea:17:2b:dc:1d:d1:14:58:92:a5:ed:8b:
                    cf:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:19:F7:0C:74:3B:C4:71:98:21:8E:20:DD:DB:3B:72:F0:9A:B2:43
            X509v3 Authority Key Identifier:
                keyid:31:BA:5A:CE:57:BF:1D:AF:BA:88:DD:AE:F4:2E:C8:F1:51:5E:13:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36312D2/FFA25144F0FD11EBA85B643ED8A014CE/Mbpazle_Ha-6iN2u9C7I8VFeE8I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Mbpazle_Ha-6iN2u9C7I8VFeE8I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36312D2/FFA25144F0FD11EBA85B643ED8A014CE/Mbpazle_Ha-6iN2u9C7I8VFeE8I.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:9b:2a:30:ad:7b:c6:2d:a1:d3:57:e7:85:76:13:2a:fc:de:
         df:e7:52:be:b3:63:a2:08:62:fe:e0:06:fb:4f:6c:4e:a6:2d:
         cd:a1:ae:d5:66:a6:48:ac:a3:98:03:b8:39:04:ae:1f:2a:e3:
         8a:7f:b2:0f:e5:c3:89:9b:38:88:71:ff:b6:dc:19:78:35:45:
         5c:a5:93:d5:ae:34:25:8e:05:01:e9:fc:58:a7:97:eb:08:c0:
         a6:2e:32:fb:4e:1b:52:4c:e8:cd:37:d0:29:01:77:c4:cd:7a:
         b5:09:05:de:3e:6f:81:e5:c9:db:cf:90:e7:3d:19:45:04:0e:
         a5:57:1a:d9:ae:4b:b2:53:94:94:80:ac:08:71:5e:fe:d9:94:
         fa:47:c1:e5:1e:07:3f:6b:c5:61:07:04:08:3c:45:ba:42:cf:
         de:ae:14:15:68:ce:04:55:bc:52:99:53:c9:34:39:c2:00:b9:
         98:92:15:fd:95:b8:12:fa:a6:62:6f:a0:4c:1b:bb:0f:96:0e:
         cc:b7:bc:a4:a7:d1:97:01:66:47:2d:67:a2:35:84:54:45:8c:
         67:bb:f2:e9:d9:c7:c0:9c:6e:a2:04:c3:70:bb:77:c9:08:65:
         5e:88:c4:eb:1e:44:e4:e2:46:51:b6:38:15:f1:1e:44:4d:a3:
         77:d8:40:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 9 12:18:15 2025 by rpki-client