This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36675E3/DA6A1362D3EF11EEB0BF7F4F775412E6/ib0Ua61yHpyUGcUJxustXey5ZyE.mft
File:                     ib0Ua61yHpyUGcUJxustXey5ZyE.mft (raw, json)
Hash identifier:          +fXtg+DVGJVHrpZEXe/BgAVZa4qHUSoTk36oWH+7eH8=
Subject key identifier:   6A:54:BD:B6:82:A1:69:08:5C:17:5F:32:81:CB:5C:95:A1:55:5A:2B
Authority key identifier: 89:BD:14:6B:AD:72:1E:9C:94:19:C5:09:C6:EB:2D:5D:EC:B9:67:21
Certificate issuer:       /CN=F36675E3AF/serialNumber=89BD146BAD721E9C9419C509C6EB2D5DECB96721
Certificate serial:       02BF
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/ib0Ua61yHpyUGcUJxustXey5ZyE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36675E3/DA6A1362D3EF11EEB0BF7F4F775412E6/ib0Ua61yHpyUGcUJxustXey5ZyE.mft
Manifest number:          02BA
Signing time:             Tue 09 Dec 2025 04:06:42 +0000
Manifest this update:     Tue 09 Dec 2025 04:06:41 +0000
Manifest next update:     Thu 11 Dec 2025 04:06:41 +0000
Files and hashes:         1: ib0Ua61yHpyUGcUJxustXey5ZyE.crl (hash: sgzYi+rLFsthF42UyMHyrLFpTJIpBjNoPRH4Jkr7Y6g=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36675E3/DA6A1362D3EF11EEB0BF7F4F775412E6/ib0Ua61yHpyUGcUJxustXey5ZyE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36675E3/DA6A1362D3EF11EEB0BF7F4F775412E6/ib0Ua61yHpyUGcUJxustXey5ZyE.mft
                          rsync://rpki.afrinic.net/repository/afrinic/ib0Ua61yHpyUGcUJxustXey5ZyE.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 11 Dec 2025 04:06:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 703 (0x2bf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36675E3AF, serialNumber=89BD146BAD721E9C9419C509C6EB2D5DECB96721
        Validity
            Not Before: Dec  9 04:06:41 2025 GMT
            Not After : Dec 11 04:06:41 2025 GMT
        Subject: CN=6937a052-63bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:53:72:4b:70:84:f9:d7:ec:ef:ac:66:eb:1d:
                    a9:60:79:5e:e1:b9:d2:c8:fd:8e:67:4d:17:33:2a:
                    83:e6:23:5e:d2:91:89:0e:3f:e1:b7:4f:b6:f2:39:
                    e4:e9:bf:9d:36:a9:ec:f6:3b:3c:d0:3b:9b:bc:61:
                    9c:93:10:50:02:26:06:f3:73:d5:d6:f6:eb:eb:2e:
                    32:57:88:f0:48:39:e0:63:08:99:72:51:b8:2d:7a:
                    69:93:81:26:21:c1:10:fc:e8:72:a0:5a:05:0f:8a:
                    f3:7a:1d:92:fc:47:7a:a9:6a:57:a7:6e:1b:a3:78:
                    fa:69:e9:3a:d2:ff:4b:f7:05:b8:92:f0:6f:3c:8f:
                    ec:a9:71:c9:60:04:b4:36:5f:b9:bd:e6:09:db:8f:
                    01:d5:0b:c1:02:03:cf:82:c0:89:83:d8:a8:65:cf:
                    b5:38:24:17:13:ac:8a:1b:8d:5d:ef:8c:2e:9d:7b:
                    2c:e4:00:36:fa:3e:56:10:41:d3:81:44:18:c9:17:
                    4f:26:05:21:09:81:1e:e6:04:e4:6d:b7:05:51:44:
                    98:d3:10:41:8f:d2:48:f4:dd:00:ef:83:6e:fa:ed:
                    eb:4f:9a:77:32:e5:78:07:e9:53:3f:70:01:ed:1b:
                    62:4c:a6:2a:10:b0:00:09:94:31:aa:49:cb:43:85:
                    97:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:54:BD:B6:82:A1:69:08:5C:17:5F:32:81:CB:5C:95:A1:55:5A:2B
            X509v3 Authority Key Identifier:
                keyid:89:BD:14:6B:AD:72:1E:9C:94:19:C5:09:C6:EB:2D:5D:EC:B9:67:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36675E3/DA6A1362D3EF11EEB0BF7F4F775412E6/ib0Ua61yHpyUGcUJxustXey5ZyE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/ib0Ua61yHpyUGcUJxustXey5ZyE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36675E3/DA6A1362D3EF11EEB0BF7F4F775412E6/ib0Ua61yHpyUGcUJxustXey5ZyE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:8e:b0:ac:ed:20:fb:14:58:72:c6:33:b8:72:9a:26:b1:62:
         e0:a6:57:16:91:fa:47:88:a1:42:c0:b5:a2:0b:43:90:88:f6:
         f6:36:3f:c3:8a:6d:4c:79:ce:f5:fd:d0:5d:8d:6b:02:77:ff:
         fb:8f:5b:1a:38:0e:e6:3a:b4:41:a5:ea:04:a4:21:1f:14:f8:
         b7:62:2d:d1:45:59:0a:76:88:69:6d:db:a9:42:89:9e:ef:2b:
         08:6a:7b:1d:8d:17:2d:6b:05:c8:55:ff:8d:7d:28:99:2c:66:
         4c:3e:b1:f8:38:23:9c:12:36:95:1b:1c:b9:8a:53:22:a0:39:
         97:23:85:91:5d:cb:5b:14:51:50:e5:48:79:10:a0:15:b2:a9:
         8d:d6:9f:de:69:94:8b:53:20:e6:e0:65:b1:e7:17:21:0c:89:
         60:cd:b1:c2:c5:15:d7:b2:6d:c8:77:2e:b8:40:12:b7:7b:b5:
         ec:45:af:41:13:fb:4c:b8:59:9d:e9:17:de:bf:9f:40:0d:b8:
         95:40:1e:5a:48:dc:96:3e:ba:de:fc:6c:0c:fb:45:c1:74:47:
         cb:87:d9:d2:d9:b7:63:15:5a:47:69:d0:90:43:d6:4e:bb:1e:
         5d:cd:9f:dc:4d:6b:23:72:31:9b:a1:d7:b3:46:b9:aa:e4:ec:
         c7:ac:42:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 9 12:17:22 2025 by rpki-client