This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36480E0/07087662563011E5AF29B284F8AEA228/eJm3WMTJ3dWaDS93JWFT9AY2y-E.mft
File:                     eJm3WMTJ3dWaDS93JWFT9AY2y-E.mft (raw, json)
Hash identifier:          loTon8VRerzpBN2JW5l+fSh9bZRNW0mgIucBtpfJDcI=
Subject key identifier:   F4:D9:82:D9:7B:E9:EA:13:78:E6:53:0C:1C:D3:46:8D:7F:BD:99:86
Authority key identifier: 78:99:B7:58:C4:C9:DD:D5:9A:0D:2F:77:25:61:53:F4:06:36:CB:E1
Certificate issuer:       /CN=F36480E0AF/serialNumber=7899B758C4C9DDD59A0D2F77256153F40636CBE1
Certificate serial:       0EEB
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/eJm3WMTJ3dWaDS93JWFT9AY2y-E.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36480E0/07087662563011E5AF29B284F8AEA228/eJm3WMTJ3dWaDS93JWFT9AY2y-E.mft
Manifest number:          0EEB
Signing time:             Tue 09 Dec 2025 00:55:39 +0000
Manifest this update:     Tue 09 Dec 2025 00:55:38 +0000
Manifest next update:     Thu 11 Dec 2025 00:55:38 +0000
Files and hashes:         1: eJm3WMTJ3dWaDS93JWFT9AY2y-E.crl (hash: CYOiDbGWoLozg5z/e7O4L8Tph30sqUmysf9402cBOZE=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36480E0/07087662563011E5AF29B284F8AEA228/eJm3WMTJ3dWaDS93JWFT9AY2y-E.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36480E0/07087662563011E5AF29B284F8AEA228/eJm3WMTJ3dWaDS93JWFT9AY2y-E.mft
                          rsync://rpki.afrinic.net/repository/afrinic/eJm3WMTJ3dWaDS93JWFT9AY2y-E.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 11 Dec 2025 00:55:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3819 (0xeeb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36480E0AF, serialNumber=7899B758C4C9DDD59A0D2F77256153F40636CBE1
        Validity
            Not Before: Dec  9 00:55:38 2025 GMT
            Not After : Dec 11 00:55:38 2025 GMT
        Subject: CN=6937738b-b366
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:ce:3e:1b:17:9d:4f:23:70:91:6f:07:e1:21:
                    39:1c:d6:ce:cc:0b:8f:e0:28:e1:f7:a5:64:68:89:
                    00:fa:dc:dd:82:51:25:37:7e:93:5f:ac:63:3e:f9:
                    63:85:2b:b3:53:bd:dd:ad:0b:75:0b:40:11:36:51:
                    9d:de:81:8d:64:a3:f5:f0:f1:bc:50:34:d3:33:da:
                    78:83:2f:00:10:6a:62:5a:05:f9:47:74:c8:1b:8a:
                    8d:da:e4:e8:f3:69:c9:67:e5:98:6a:21:66:58:90:
                    c4:f4:e0:e6:4c:da:d2:1f:d2:4a:30:2f:91:14:d0:
                    90:79:8e:53:5e:68:c9:fb:30:e4:30:71:ba:d7:79:
                    67:f8:21:21:79:32:52:bf:7e:fb:79:f3:09:18:a8:
                    31:ce:21:3d:ce:aa:4d:69:d3:f9:e1:0a:e6:60:de:
                    7a:6c:a7:52:35:2c:d9:3d:11:3d:fc:49:bd:c4:1f:
                    ad:54:2d:f9:d4:69:6c:67:6d:8d:38:9b:08:0e:ab:
                    3f:21:ef:47:3f:e2:25:54:d7:58:9e:50:4e:a1:b7:
                    ed:98:fc:7d:76:f2:07:54:b1:30:b6:cc:50:1d:98:
                    57:96:22:48:9b:3a:1c:af:c4:3a:d6:aa:c7:39:ad:
                    2c:30:d3:d8:65:67:56:67:0b:d5:81:40:a1:5c:17:
                    18:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:D9:82:D9:7B:E9:EA:13:78:E6:53:0C:1C:D3:46:8D:7F:BD:99:86
            X509v3 Authority Key Identifier:
                keyid:78:99:B7:58:C4:C9:DD:D5:9A:0D:2F:77:25:61:53:F4:06:36:CB:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36480E0/07087662563011E5AF29B284F8AEA228/eJm3WMTJ3dWaDS93JWFT9AY2y-E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/eJm3WMTJ3dWaDS93JWFT9AY2y-E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36480E0/07087662563011E5AF29B284F8AEA228/eJm3WMTJ3dWaDS93JWFT9AY2y-E.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:91:c4:a0:b5:62:11:8e:d8:e1:ca:d5:22:8b:43:21:b1:78:
         df:2f:05:c0:86:3e:58:1c:1b:97:56:51:3d:84:6e:18:5f:27:
         6a:9d:4a:73:e3:15:7c:34:b6:79:38:9f:48:d0:44:9c:2c:60:
         8a:2f:6d:55:bc:52:f2:74:09:aa:7c:33:65:08:72:6b:7a:8a:
         67:8b:0b:49:dc:4f:49:29:7f:3f:ea:8c:71:6e:d8:73:88:08:
         b9:b9:b4:c0:f5:0d:c6:21:89:7c:43:4d:42:53:56:29:e2:97:
         9f:32:b5:83:4b:c2:20:ff:85:43:ff:1f:62:0a:5a:f7:6a:f8:
         5e:4c:c7:ae:63:79:26:f6:d0:0b:1e:b5:9d:81:03:03:e3:82:
         55:ef:21:52:65:e1:0a:5e:5c:e7:6b:9b:f0:db:79:ec:83:18:
         83:db:87:1a:af:88:1b:6d:b6:2d:43:f9:89:c7:82:fc:e0:a0:
         31:22:9f:a1:e9:21:b8:c2:b7:fb:1a:62:21:f1:ff:83:39:4c:
         68:0d:9b:9d:2a:c9:bf:68:b8:ba:f5:2a:68:75:f9:32:ea:2f:
         37:ca:7d:eb:f1:69:28:34:e4:59:55:f6:81:20:d4:ee:d4:1f:
         d8:52:82:80:25:51:07:41:f8:02:5c:e4:76:10:b1:6c:d0:76:
         3f:f9:4c:58
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICDuswDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NDgwRTBBRjExMC8GA1UEBRMoNzg5OUI3NThDNEM5RERENTlBMEQyRjc3MjU2MTUz
RjQwNjM2Q0JFMTAeFw0yNTEyMDkwMDU1MzhaFw0yNTEyMTEwMDU1MzhaMBgxFjAU
BgNVBAMTDTY5Mzc3MzhiLWIzNjYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDTzj4bF51PI3CRbwfhITkc1s7MC4/gKOH3pWRoiQD63N2CUSU3fpNfrGM+
+WOFK7NTvd2tC3ULQBE2UZ3egY1ko/Xw8bxQNNMz2niDLwAQamJaBflHdMgbio3a
5Ojzacln5ZhqIWZYkMT04OZM2tIf0kowL5EU0JB5jlNeaMn7MOQwcbrXeWf4ISF5
MlK/fvt58wkYqDHOIT3Oqk1p0/nhCuZg3npsp1I1LNk9ET38Sb3EH61ULfnUaWxn
bY04mwgOqz8h70c/4iVU11ieUE6ht+2Y/H128gdUsTC2zFAdmFeWIkibOhyvxDrW
qsc5rSww09hlZ1ZnC9WBQKFcFxj7AgMBAAGjggK4MIICtDAdBgNVHQ4EFgQU9NmC
2Xvp6hN45lMMHNNGjX+9mYYwHwYDVR0jBBgwFoAUeJm3WMTJ3dWaDS93JWFT9AY2
y+EwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjQ4MEUwLzA3MDg3NjYyNTYzMDExRTVBRjI5QjI4NEY4QUVBMjI4L2VKbTNX
TVRKM2RXYURTOTNKV0ZUOUFZMnktRS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2VKbTNXTVRKM2RXYURTOTNKV0ZUOUFZMnktRS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2NDgwRTAvMDcwODc2NjI1NjMwMTFFNUFGMjlCMjg0RjhB
RUEyMjgvZUptM1dNVEozZFdhRFM5M0pXRlQ5QVkyeS1FLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBKkcSgtWIRjtjhytUii0MhsXjfLwXA
hj5YHBuXVlE9hG4YXydqnUpz4xV8NLZ5OJ9I0EScLGCKL21VvFLydAmqfDNlCHJr
eopniwtJ3E9JKX8/6oxxbthziAi5ubTA9Q3GIYl8Q01CU1Yp4pefMrWDS8Ig/4VD
/x9iClr3avheTMeuY3km9tALHrWdgQMD44JV7yFSZeEKXlzna5vw23nsgxiD24ca
r4gbbbYtQ/mJx4L84KAxIp+h6SG4wrf7GmIh8f+DOUxoDZudKsm/aLi69Spodfky
6i83yn3r8WkoNORZVfaBINTu1B/YUoKAJVEHQfgCXOR2ELFs0HY/+UxY
-----END CERTIFICATE-----
Generated at Tue Dec 9 12:06:15 2025 by rpki-client