This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36598F5/A410D350DC0211EC99E36188F1222468/PUpO_QKaES64mqyOyp2RekfLbFw.mft
File:                     PUpO_QKaES64mqyOyp2RekfLbFw.mft (raw, json)
Hash identifier:          oODdV5MpzwT3kXcssheGqoGn+GAwtSBZ6ynU30noH5E=
Subject key identifier:   92:00:CC:EB:13:E5:F0:A8:A4:52:FB:BC:ED:29:EC:9D:0A:E0:72:58
Authority key identifier: 3D:4A:4E:FD:02:9A:11:2E:B8:9A:AC:8E:CA:9D:91:7A:47:CB:6C:5C
Certificate issuer:       /CN=F36598F5AF/serialNumber=3D4A4EFD029A112EB89AAC8ECA9D917A47CB6C5C
Certificate serial:       053C
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/PUpO_QKaES64mqyOyp2RekfLbFw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36598F5/A410D350DC0211EC99E36188F1222468/PUpO_QKaES64mqyOyp2RekfLbFw.mft
Manifest number:          0539
Signing time:             Tue 09 Dec 2025 02:45:30 +0000
Manifest this update:     Tue 09 Dec 2025 02:45:29 +0000
Manifest next update:     Thu 11 Dec 2025 02:45:29 +0000
Files and hashes:         1: PUpO_QKaES64mqyOyp2RekfLbFw.crl (hash: We2HAMVZrxGNLskJALnT6p+ifup+/jsP54NCGLndRNo=)
                          2: FDE0E02C1E4611EF94A680057DDC24C2.roa (hash: 1djty5fRWOAsejw0HL8rgxOF0W9HT4RaKUN6d3OwjTM=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36598F5/A410D350DC0211EC99E36188F1222468/PUpO_QKaES64mqyOyp2RekfLbFw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36598F5/A410D350DC0211EC99E36188F1222468/PUpO_QKaES64mqyOyp2RekfLbFw.mft
                          rsync://rpki.afrinic.net/repository/afrinic/PUpO_QKaES64mqyOyp2RekfLbFw.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 11 Dec 2025 02:45:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1340 (0x53c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36598F5AF, serialNumber=3D4A4EFD029A112EB89AAC8ECA9D917A47CB6C5C
        Validity
            Not Before: Dec  9 02:45:29 2025 GMT
            Not After : Dec 11 02:45:29 2025 GMT
        Subject: CN=69378d4a-a7e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:01:f0:5e:65:ad:7d:b8:29:ac:c3:0c:dc:b4:
                    33:98:a1:a6:8e:3a:fe:b0:ae:c0:13:5e:16:b1:1c:
                    88:89:db:f9:62:df:f6:b9:c1:6b:b1:28:13:73:78:
                    cc:3f:d0:1b:37:7c:6c:3f:b2:6f:31:1d:cc:b4:49:
                    97:00:76:88:3f:b5:31:d1:49:6d:5a:e2:95:1b:98:
                    37:70:09:f3:c9:3e:06:17:5f:27:4d:76:3b:c3:c5:
                    7b:58:3f:76:21:6f:50:55:c5:ba:ae:3c:88:15:a8:
                    63:66:28:74:9b:48:36:cb:16:e0:d6:2b:08:68:aa:
                    31:03:ed:48:c0:a8:6c:8c:91:21:9b:f2:8c:2a:58:
                    35:9e:db:39:0c:31:78:d4:4e:1a:b5:e3:d4:a1:0c:
                    eb:7b:53:d0:b0:42:43:83:d9:ec:ea:4f:10:b9:43:
                    3a:78:d0:3e:12:4e:b1:60:71:a4:1a:3c:dd:1c:0e:
                    17:53:a8:38:c1:67:67:dd:ce:c8:92:1d:24:d9:99:
                    f2:f2:f5:f0:21:b4:0d:ef:3a:3a:11:54:a1:55:67:
                    f8:d5:ef:6e:d1:ba:e3:af:66:e6:fb:2b:68:24:69:
                    5c:a7:1c:80:8a:61:7c:43:4e:7f:a8:b3:93:07:a7:
                    0b:0d:c3:8d:a1:cd:f4:0b:14:32:6a:25:39:89:a4:
                    99:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:00:CC:EB:13:E5:F0:A8:A4:52:FB:BC:ED:29:EC:9D:0A:E0:72:58
            X509v3 Authority Key Identifier:
                keyid:3D:4A:4E:FD:02:9A:11:2E:B8:9A:AC:8E:CA:9D:91:7A:47:CB:6C:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36598F5/A410D350DC0211EC99E36188F1222468/PUpO_QKaES64mqyOyp2RekfLbFw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/PUpO_QKaES64mqyOyp2RekfLbFw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36598F5/A410D350DC0211EC99E36188F1222468/PUpO_QKaES64mqyOyp2RekfLbFw.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:4f:da:d9:09:2c:4a:79:9a:73:8e:cb:2d:10:9e:1a:03:ae:
         d7:ce:8f:8b:7b:d6:5d:0e:42:8c:34:d8:91:39:c0:5c:8c:b2:
         bd:5e:54:2c:01:dd:e9:e5:fc:83:5b:ea:cd:76:6f:fe:fe:80:
         6c:84:d4:04:52:45:c7:78:58:2e:07:fc:ea:f0:4f:18:6f:9a:
         14:a1:72:7f:2e:c7:d8:79:7b:01:c3:d3:b5:d7:ca:dc:c8:a9:
         db:47:89:b6:0b:e3:ee:8a:cf:46:21:d7:d3:16:72:60:45:9a:
         44:63:c2:b9:9a:62:e0:0c:be:d7:a9:c9:6e:89:dc:79:09:f0:
         39:2b:9b:4e:eb:7e:a4:b4:bd:f7:c1:f9:1f:f9:a3:8c:13:3d:
         4d:b2:ed:dc:29:99:0e:34:9f:8e:d3:32:a7:c7:75:f1:1f:95:
         dc:66:71:83:d0:9e:b8:15:b3:ed:fb:17:3b:09:6e:b3:bd:c8:
         43:b3:0f:67:78:54:c0:c4:d8:2b:54:31:d5:6f:a0:69:59:b2:
         e3:6b:a0:e4:0c:72:40:65:18:23:14:01:0d:6a:33:ff:e0:59:
         b1:93:92:cf:ca:29:e1:ce:7c:8c:5d:05:0e:fc:d8:6b:f3:d9:
         61:e3:fd:29:9b:72:ce:ce:1f:40:59:01:ce:3e:74:c2:f0:5d:
         bc:f5:18:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 9 12:06:17 2025 by rpki-client