This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A05AB/98015F36DBF311EBAE6FAD33F8AEA228/nWdNqh0x5rcSPGSUgdEU-pO97R8.mft
File:                     nWdNqh0x5rcSPGSUgdEU-pO97R8.mft (raw, json)
Hash identifier:          rEnJLY6TJD4JLhnvFGFzi3sUClyQn7kLBBK5sg5KNUs=
Subject key identifier:   9E:10:02:9D:69:D5:E6:4B:B6:0C:4E:0F:BE:34:1B:FE:B8:3D:8E:1A
Authority key identifier: 9D:67:4D:AA:1D:31:E6:B7:12:3C:64:94:81:D1:14:FA:93:BD:ED:1F
Certificate issuer:       /CN=F36A05ABAF/serialNumber=9D674DAA1D31E6B7123C649481D114FA93BDED1F
Certificate serial:       068D
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/nWdNqh0x5rcSPGSUgdEU-pO97R8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A05AB/98015F36DBF311EBAE6FAD33F8AEA228/nWdNqh0x5rcSPGSUgdEU-pO97R8.mft
Manifest number:          068C
Signing time:             Sat 20 Dec 2025 02:16:22 +0000
Manifest this update:     Sat 20 Dec 2025 02:16:22 +0000
Manifest next update:     Mon 22 Dec 2025 02:16:22 +0000
Files and hashes:         1: nWdNqh0x5rcSPGSUgdEU-pO97R8.crl (hash: AldtzMaYz5mWZd+erm3d+cvShBi3ryt4bgw+BJlgyas=)
                          2: 4E6BBD02DBF411EBBD1CB334F8AEA228.roa (hash: /m66F8lyHu8eSfVoSMkwDMFHVEqCkE2FHy0314I43Lc=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A05AB/98015F36DBF311EBAE6FAD33F8AEA228/nWdNqh0x5rcSPGSUgdEU-pO97R8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A05AB/98015F36DBF311EBAE6FAD33F8AEA228/nWdNqh0x5rcSPGSUgdEU-pO97R8.mft
                          rsync://rpki.afrinic.net/repository/afrinic/nWdNqh0x5rcSPGSUgdEU-pO97R8.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 22 Dec 2025 00:06:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1677 (0x68d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A05ABAF, serialNumber=9D674DAA1D31E6B7123C649481D114FA93BDED1F
        Validity
            Not Before: Dec 20 02:16:22 2025 GMT
            Not After : Dec 22 02:16:22 2025 GMT
        Subject: CN=694606f6-f954
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:f0:82:21:ca:85:ce:9c:ce:c5:d4:2a:00:c6:
                    33:a9:f8:20:4e:fb:b5:c9:ec:a5:0d:1b:0f:ea:5c:
                    6d:03:fb:09:3a:30:88:2d:d9:10:79:80:b8:16:a3:
                    d0:71:2b:d4:16:0b:bd:20:69:11:bc:56:73:6d:46:
                    55:49:46:96:7a:32:14:22:0c:ac:76:7e:eb:37:b5:
                    47:8b:c8:86:18:85:2f:67:9a:5a:e8:52:1f:81:96:
                    7c:ac:64:e9:c7:b0:51:74:d5:e7:2a:87:1a:51:80:
                    de:2a:e3:25:48:39:98:a0:da:c2:68:d3:fa:e2:13:
                    94:5f:c5:61:89:05:19:fd:07:cd:42:f0:f6:cb:c5:
                    93:13:68:32:8c:cf:fa:95:f7:7f:3c:24:df:ce:61:
                    4c:8b:a7:8e:50:54:6d:4c:57:74:57:a0:49:55:51:
                    f6:9c:59:6d:02:58:06:5e:6a:75:51:64:7f:fd:fc:
                    70:72:6f:4a:61:f6:25:68:85:8f:57:dc:75:0d:f0:
                    3f:17:a0:66:e0:d6:b0:37:d9:f3:a7:9c:e4:52:8f:
                    d4:75:7f:80:60:90:4f:02:44:59:91:15:4d:f8:bc:
                    e3:40:0e:22:0a:34:60:1f:fa:ff:e9:f0:41:fe:ab:
                    ca:9b:72:22:50:9c:bc:46:a0:47:43:85:2c:43:61:
                    b8:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:10:02:9D:69:D5:E6:4B:B6:0C:4E:0F:BE:34:1B:FE:B8:3D:8E:1A
            X509v3 Authority Key Identifier:
                keyid:9D:67:4D:AA:1D:31:E6:B7:12:3C:64:94:81:D1:14:FA:93:BD:ED:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A05AB/98015F36DBF311EBAE6FAD33F8AEA228/nWdNqh0x5rcSPGSUgdEU-pO97R8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/nWdNqh0x5rcSPGSUgdEU-pO97R8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A05AB/98015F36DBF311EBAE6FAD33F8AEA228/nWdNqh0x5rcSPGSUgdEU-pO97R8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:c6:91:05:f4:e4:26:38:17:18:1a:83:af:54:9b:33:47:92:
         08:3c:a3:80:d1:99:bc:ce:6d:cd:89:01:de:32:d8:98:4e:34:
         9b:55:5f:7b:20:36:4c:c5:1c:37:8d:2c:f5:24:ed:19:c5:b9:
         bf:19:91:33:6e:6f:82:77:32:a0:74:75:4f:36:3b:eb:4a:34:
         71:83:53:a5:66:89:69:1b:9d:53:ef:23:00:a3:c3:da:5a:4b:
         49:02:0b:30:bb:a6:91:69:44:a3:f7:b0:8b:5e:86:7c:98:b5:
         39:02:88:72:a6:d8:cb:7f:0d:30:a3:af:7d:2d:76:50:23:d3:
         a8:2d:8d:cb:4e:38:0c:f4:f2:e1:46:38:44:47:46:d9:aa:de:
         88:81:fa:7f:4d:d3:3c:62:18:0e:79:4e:be:3e:eb:0f:b6:36:
         02:65:41:21:e1:21:0b:a9:66:e2:9a:6b:31:1a:c4:5d:03:6e:
         49:d3:52:32:ad:a2:3b:e3:97:ca:cd:ab:73:55:48:3e:91:a7:
         93:e4:f9:70:c3:09:08:e7:0a:d6:77:aa:bc:3e:3e:2f:93:9e:
         4a:10:ac:ce:47:dc:f2:4e:e1:a8:07:da:5a:3b:5e:0a:81:64:
         e4:7a:97:d6:32:c1:2c:65:d6:76:f3:40:87:e4:9b:96:49:f4:
         12:a5:3b:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 21:56:20 2025 by rpki-client