This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36858D5/CE72EFB840B311EEB99A38154AD9E6FC/0uDwPq7oAqkBwlcRKP55pj80aSw.mft
File:                     0uDwPq7oAqkBwlcRKP55pj80aSw.mft (raw, json)
Hash identifier:          zD8fJgGGH+lz7aRE2oPTG85zXrUM3B4mNVCc3r7pVo0=
Subject key identifier:   B9:AA:11:FD:0A:4B:E4:E1:25:99:9D:EE:D8:0F:02:60:3F:18:26:A0
Authority key identifier: D2:E0:F0:3E:AE:E8:02:A9:01:C2:57:11:28:FE:79:A6:3F:34:69:2C
Certificate issuer:       /CN=F36858D5AF/serialNumber=D2E0F03EAEE802A901C2571128FE79A63F34692C
Certificate serial:       0362
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/0uDwPq7oAqkBwlcRKP55pj80aSw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36858D5/CE72EFB840B311EEB99A38154AD9E6FC/0uDwPq7oAqkBwlcRKP55pj80aSw.mft
Manifest number:          0361
Signing time:             Tue 09 Dec 2025 03:42:14 +0000
Manifest this update:     Tue 09 Dec 2025 03:42:13 +0000
Manifest next update:     Thu 11 Dec 2025 03:42:13 +0000
Files and hashes:         1: 0uDwPq7oAqkBwlcRKP55pj80aSw.crl (hash: obUMHEFvECXL+RzfU1cjnYinYwwLRqWSM7yRYpCPlxc=)
                          2: 6C083968730911EEB676D5174AD9E6FC.roa (hash: GPazHsxOeA8iw549I//PnsuiDjidxxug1DVogvWrQ6I=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36858D5/CE72EFB840B311EEB99A38154AD9E6FC/0uDwPq7oAqkBwlcRKP55pj80aSw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36858D5/CE72EFB840B311EEB99A38154AD9E6FC/0uDwPq7oAqkBwlcRKP55pj80aSw.mft
                          rsync://rpki.afrinic.net/repository/afrinic/0uDwPq7oAqkBwlcRKP55pj80aSw.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 11 Dec 2025 03:42:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 866 (0x362)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36858D5AF, serialNumber=D2E0F03EAEE802A901C2571128FE79A63F34692C
        Validity
            Not Before: Dec  9 03:42:13 2025 GMT
            Not After : Dec 11 03:42:13 2025 GMT
        Subject: CN=69379a96-c2c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:ab:da:f2:0c:64:7f:58:da:7f:33:e0:6e:49:
                    34:a4:c3:14:72:20:20:6a:b1:ff:40:0f:67:5f:94:
                    4b:43:f5:74:1b:14:35:8f:9b:95:82:cb:1f:70:61:
                    43:ea:3a:00:17:92:33:1e:0c:12:b5:8f:55:61:cd:
                    bd:b3:ad:69:c1:47:0e:4e:aa:47:c9:9d:a3:5b:43:
                    54:c5:72:44:7b:1e:fa:29:1d:b1:8c:99:5d:3b:fd:
                    81:ee:86:50:11:48:b2:51:5e:8a:d3:22:2e:0c:53:
                    4a:2c:5a:41:3b:63:e0:7c:92:14:a5:55:16:ff:5a:
                    28:1d:8e:a6:37:15:bf:0f:4a:b1:78:41:c8:2d:96:
                    6c:3d:23:dd:92:62:7e:f5:f1:31:97:8d:40:46:a7:
                    67:f7:28:cb:61:13:59:7b:6e:53:f5:3c:46:2d:f4:
                    44:53:c5:ff:b5:88:29:f2:4f:48:eb:eb:a8:0e:fe:
                    9b:87:99:7d:77:45:62:46:88:79:27:20:29:ad:e9:
                    5f:1c:e0:e3:15:7a:12:a5:12:f5:4b:38:72:1b:5e:
                    91:b1:f0:10:a3:b7:c6:c0:23:65:c3:4e:51:b1:92:
                    72:00:9a:e4:0a:62:d7:4a:d0:87:50:ad:42:bc:41:
                    ee:1d:44:f9:fc:dc:c5:a3:a9:c1:41:3a:d3:1d:5a:
                    37:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:AA:11:FD:0A:4B:E4:E1:25:99:9D:EE:D8:0F:02:60:3F:18:26:A0
            X509v3 Authority Key Identifier:
                keyid:D2:E0:F0:3E:AE:E8:02:A9:01:C2:57:11:28:FE:79:A6:3F:34:69:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36858D5/CE72EFB840B311EEB99A38154AD9E6FC/0uDwPq7oAqkBwlcRKP55pj80aSw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/0uDwPq7oAqkBwlcRKP55pj80aSw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36858D5/CE72EFB840B311EEB99A38154AD9E6FC/0uDwPq7oAqkBwlcRKP55pj80aSw.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         da:79:f6:77:f6:81:0b:8d:f1:f5:ff:88:e6:87:d1:d6:c8:12:
         d4:60:b3:4e:d7:1e:04:5e:39:22:99:0c:31:76:f6:2f:44:21:
         30:d7:df:11:f7:42:92:cd:fc:ae:2b:a7:1a:2d:11:7e:ee:5b:
         0e:35:00:2e:13:e1:7b:91:f0:a0:3f:eb:da:18:05:21:d0:c7:
         1e:d0:0d:9e:83:59:77:8c:58:b4:ac:30:bd:23:4c:c9:5c:74:
         28:11:a4:9c:de:6d:2e:fd:b5:c8:20:07:3e:4c:51:de:a3:30:
         97:8c:b1:30:66:7c:fc:59:d7:93:a8:38:13:c4:82:96:7a:89:
         34:a5:82:14:6f:b3:36:db:1a:bc:d0:1e:da:c2:8b:94:07:c8:
         57:de:ef:38:9a:b4:c0:65:18:ef:b0:89:44:86:dd:61:86:31:
         34:4f:93:54:2e:71:63:da:1d:55:ab:64:24:2c:da:a5:5d:dc:
         17:46:9d:9b:44:14:d0:8e:a8:10:99:a9:1b:91:61:d2:a5:af:
         25:a6:97:28:ae:d4:03:00:ea:80:28:a7:1b:8d:8b:5e:39:2c:
         16:20:83:85:38:30:c0:94:c0:38:22:e8:0d:c4:49:cd:88:26:
         a9:c5:b4:6c:55:7c:f3:15:4f:b4:05:c2:a9:4d:a3:47:d1:d4:
         d7:dd:b5:ca
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICA2IwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
ODU4RDVBRjExMC8GA1UEBRMoRDJFMEYwM0VBRUU4MDJBOTAxQzI1NzExMjhGRTc5
QTYzRjM0NjkyQzAeFw0yNTEyMDkwMzQyMTNaFw0yNTEyMTEwMzQyMTNaMBgxFjAU
BgNVBAMTDTY5Mzc5YTk2LWMyYzYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQD2q9ryDGR/WNp/M+BuSTSkwxRyICBqsf9AD2dflEtD9XQbFDWPm5WCyx9w
YUPqOgAXkjMeDBK1j1Vhzb2zrWnBRw5OqkfJnaNbQ1TFckR7HvopHbGMmV07/YHu
hlARSLJRXorTIi4MU0osWkE7Y+B8khSlVRb/WigdjqY3Fb8PSrF4Qcgtlmw9I92S
Yn718TGXjUBGp2f3KMthE1l7blP1PEYt9ERTxf+1iCnyT0jr66gO/puHmX13RWJG
iHknICmt6V8c4OMVehKlEvVLOHIbXpGx8BCjt8bAI2XDTlGxknIAmuQKYtdK0IdQ
rUK8Qe4dRPn83MWjqcFBOtMdWjcNAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUuaoR
/QpL5OElmZ3u2A8CYD8YJqAwHwYDVR0jBBgwFoAU0uDwPq7oAqkBwlcRKP55pj80
aSwwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjg1OEQ1L0NFNzJFRkI4NDBCMzExRUVCOTlBMzgxNTRBRDlFNkZDLzB1RHdQ
cTdvQXFrQndsY1JLUDU1cGo4MGFTdy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljLzB1RHdQcTdvQXFrQndsY1JLUDU1cGo4MGFTdy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2ODU4RDUvQ0U3MkVGQjg0MEIzMTFFRUI5OUEzODE1NEFE
OUU2RkMvMHVEd1BxN29BcWtCd2xjUktQNTVwajgwYVN3Lm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQDaefZ39oELjfH1/4jmh9HWyBLUYLNO
1x4EXjkimQwxdvYvRCEw198R90KSzfyuK6caLRF+7lsONQAuE+F7kfCgP+vaGAUh
0Mce0A2eg1l3jFi0rDC9I0zJXHQoEaSc3m0u/bXIIAc+TFHeozCXjLEwZnz8WdeT
qDgTxIKWeok0pYIUb7M22xq80B7awouUB8hX3u84mrTAZRjvsIlEht1hhjE0T5NU
LnFj2h1Vq2QkLNqlXdwXRp2bRBTQjqgQmakbkWHSpa8lppcortQDAOqAKKcbjYte
OSwWIIOFODDAlMA4IugNxEnNiCapxbRsVXzzFU+0BcKpTaNH0dTX3bXK
-----END CERTIFICATE-----
Generated at Tue Dec 9 12:03:44 2025 by rpki-client