This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36596DE/965DA4FAB33A11F097B64ACDDAE4EC9C/UpunS83yaGnfBI9JzaZV3lnZgeE.mft
File:                     UpunS83yaGnfBI9JzaZV3lnZgeE.mft (raw, json)
Hash identifier:          vFwG9m9sCQ5g/MNwy1iNuYTEuVYk3OUkUw747OpquQ8=
Subject key identifier:   29:7C:30:5F:49:62:30:99:B3:87:20:AA:54:7D:34:7A:91:7A:87:5B
Authority key identifier: 52:9B:A7:4B:CD:F2:68:69:DF:04:8F:49:CD:A6:55:DE:59:D9:81:E1
Certificate issuer:       /CN=F36596DEAF/serialNumber=529BA74BCDF26869DF048F49CDA655DE59D981E1
Certificate serial:       2F
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/UpunS83yaGnfBI9JzaZV3lnZgeE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36596DE/965DA4FAB33A11F097B64ACDDAE4EC9C/UpunS83yaGnfBI9JzaZV3lnZgeE.mft
Manifest number:          2E
Signing time:             Tue 09 Dec 2025 05:17:15 +0000
Manifest this update:     Tue 09 Dec 2025 05:17:14 +0000
Manifest next update:     Thu 11 Dec 2025 05:17:14 +0000
Files and hashes:         1: UpunS83yaGnfBI9JzaZV3lnZgeE.crl (hash: 1MpS0JiOD1MjNm46y6OZy4lk9BlI5N4d65N0967DmQ4=)
                          2: 6FAF0A32B3C711F0B62E26D6DAE4EC9C.roa (hash: WZmCRWW8TtxV2D+03+Gg2hGc4lK2ghh6H+qHzsYjVjY=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36596DE/965DA4FAB33A11F097B64ACDDAE4EC9C/UpunS83yaGnfBI9JzaZV3lnZgeE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36596DE/965DA4FAB33A11F097B64ACDDAE4EC9C/UpunS83yaGnfBI9JzaZV3lnZgeE.mft
                          rsync://rpki.afrinic.net/repository/afrinic/UpunS83yaGnfBI9JzaZV3lnZgeE.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 11 Dec 2025 05:17:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 47 (0x2f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36596DEAF, serialNumber=529BA74BCDF26869DF048F49CDA655DE59D981E1
        Validity
            Not Before: Dec  9 05:17:14 2025 GMT
            Not After : Dec 11 05:17:14 2025 GMT
        Subject: CN=6937b0db-f16c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:9d:26:2a:d4:2c:06:b8:1c:ef:af:1c:fd:58:
                    52:e1:c2:66:46:ab:33:4a:cd:d0:ca:a8:5e:53:08:
                    98:6a:da:36:e3:12:47:87:d5:eb:bd:fb:e0:f3:32:
                    42:c3:a7:c1:59:bb:80:e4:fe:f3:6d:2b:58:c7:b8:
                    0a:d0:55:ca:69:03:24:aa:d8:31:dc:af:81:e0:fa:
                    35:99:34:2e:49:cf:de:b2:4b:8d:c5:f9:a4:4f:1e:
                    57:fe:d3:e0:c1:9a:fe:95:1c:bf:a4:61:a5:6c:dd:
                    9e:50:cf:3a:b1:b3:a9:a0:0e:62:e5:2c:3a:6a:71:
                    55:1a:9a:69:e9:3c:7c:2a:06:d7:68:83:92:3c:cf:
                    6e:e3:0d:e5:55:71:65:f7:26:33:ea:93:a9:dc:30:
                    cb:fa:e9:04:3c:31:79:e7:ad:5e:d1:a6:29:2c:51:
                    23:9a:0c:bb:2b:b6:45:17:fa:30:9d:f1:ec:6e:8e:
                    90:23:a5:0c:44:4f:75:a6:33:0b:46:65:25:71:34:
                    07:6c:81:2f:3c:17:7f:81:a3:4e:2b:bd:a2:ca:aa:
                    76:f4:3e:37:1d:31:3b:c4:8b:38:34:03:53:aa:46:
                    7e:bf:87:70:5a:5f:b5:06:9c:04:79:f9:f1:86:f5:
                    26:ca:85:40:68:c4:e1:52:83:bb:6e:85:94:5d:48:
                    52:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:7C:30:5F:49:62:30:99:B3:87:20:AA:54:7D:34:7A:91:7A:87:5B
            X509v3 Authority Key Identifier:
                keyid:52:9B:A7:4B:CD:F2:68:69:DF:04:8F:49:CD:A6:55:DE:59:D9:81:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36596DE/965DA4FAB33A11F097B64ACDDAE4EC9C/UpunS83yaGnfBI9JzaZV3lnZgeE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/UpunS83yaGnfBI9JzaZV3lnZgeE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36596DE/965DA4FAB33A11F097B64ACDDAE4EC9C/UpunS83yaGnfBI9JzaZV3lnZgeE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:70:46:08:78:bc:f0:07:76:03:7a:c6:25:2d:86:30:e1:2a:
         e1:37:5d:f2:a5:1d:4b:77:94:58:73:ae:e9:61:4e:2b:e2:43:
         d8:00:d5:3b:28:4a:1d:df:93:be:f4:77:35:77:d8:6b:eb:d2:
         e6:04:16:ad:00:fa:03:5d:77:c1:68:b7:fc:1b:05:4c:e1:a9:
         d6:dc:83:b8:d0:ad:c5:64:68:cb:1c:7f:ce:da:07:ce:0f:ac:
         9f:2c:34:7a:9f:15:79:64:11:6f:69:4f:27:89:56:72:af:9d:
         14:cc:e3:3b:78:a7:6c:ab:b1:5a:bf:0a:46:cc:6f:75:ba:a7:
         57:63:05:3c:9e:f4:2b:01:24:9c:5a:06:dc:ba:3f:5a:21:88:
         ba:ae:e0:f4:c5:36:d1:e3:cb:f7:d5:47:99:e6:34:20:a6:48:
         7f:f6:7c:03:92:ee:81:cf:10:c8:1d:15:94:99:8d:8f:a1:9a:
         27:d2:95:b8:47:17:d4:1a:6f:2b:c5:6a:b4:81:0d:12:50:9a:
         b5:79:09:7a:88:43:9f:e6:4c:99:32:6b:50:9f:f7:36:8c:b1:
         22:86:cf:82:27:67:d5:a7:c3:2d:1d:3e:4c:96:40:95:ad:d3:
         20:bb:53:73:bf:78:9c:d4:7c:51:c8:e8:34:a2:a7:76:7b:b9:
         db:ef:dd:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 9 12:03:25 2025 by rpki-client