This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A1982/2F0CD68E45D211F0B09667D4DAE4EC9C/mN_xVrpdOxH6ps0Beov2VCUd68c.mft
File:                     mN_xVrpdOxH6ps0Beov2VCUd68c.mft (raw, json)
Hash identifier:          PpFnkLD5MiFfAqqqSgTrRefFQLxh/cqYj7zLth5e4Z8=
Subject key identifier:   B5:CD:87:6F:C8:5B:76:B8:E2:85:A6:31:7F:0F:47:E2:13:0F:71:E6
Authority key identifier: 98:DF:F1:56:BA:5D:3B:11:FA:A6:CD:01:7A:8B:F6:54:25:1D:EB:C7
Certificate issuer:       /CN=F36A1982AF/serialNumber=98DFF156BA5D3B11FAA6CD017A8BF654251DEBC7
Certificate serial:       BC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/mN_xVrpdOxH6ps0Beov2VCUd68c.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A1982/2F0CD68E45D211F0B09667D4DAE4EC9C/mN_xVrpdOxH6ps0Beov2VCUd68c.mft
Manifest number:          BB
Signing time:             Tue 09 Dec 2025 05:00:16 +0000
Manifest this update:     Tue 09 Dec 2025 05:00:16 +0000
Manifest next update:     Thu 11 Dec 2025 05:00:16 +0000
Files and hashes:         1: mN_xVrpdOxH6ps0Beov2VCUd68c.crl (hash: w12gHg6nlftFO5rk9bQWvvvEbZpCHO70/dlUmuvW8Zo=)
                          2: 7832FB8A45D311F0AC0634DDDAE4EC9C.roa (hash: cfPkV/3/J2Pr+p9FB17NDz/hy3nd+JaytMl2veZxtBo=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A1982/2F0CD68E45D211F0B09667D4DAE4EC9C/mN_xVrpdOxH6ps0Beov2VCUd68c.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A1982/2F0CD68E45D211F0B09667D4DAE4EC9C/mN_xVrpdOxH6ps0Beov2VCUd68c.mft
                          rsync://rpki.afrinic.net/repository/afrinic/mN_xVrpdOxH6ps0Beov2VCUd68c.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 11 Dec 2025 05:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 188 (0xbc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A1982AF, serialNumber=98DFF156BA5D3B11FAA6CD017A8BF654251DEBC7
        Validity
            Not Before: Dec  9 05:00:16 2025 GMT
            Not After : Dec 11 05:00:16 2025 GMT
        Subject: CN=6937ace0-ec14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:c3:a5:91:ca:f1:51:bf:db:5a:74:88:83:1b:
                    75:3e:59:d8:12:72:18:c7:02:48:06:53:87:63:05:
                    36:9b:bf:3a:b5:2f:c9:de:97:aa:88:5f:02:54:60:
                    12:25:04:8e:64:11:38:38:fb:4d:55:44:dc:b8:1f:
                    93:e3:53:b4:a9:93:4b:d7:50:9c:ad:73:ae:99:03:
                    9b:22:c9:be:6d:e7:5a:70:77:11:c7:30:b4:aa:e9:
                    47:23:69:b3:3e:7a:a9:26:bb:5a:6e:4f:c9:2e:20:
                    4c:3d:d7:09:68:fe:93:3b:cb:f5:0c:89:f8:da:37:
                    3a:70:7b:bc:e6:c0:c7:9c:87:69:1d:ae:46:a9:d4:
                    af:62:41:26:d5:0e:7e:c5:c2:9a:b0:86:51:0d:fd:
                    56:e1:d4:1f:e8:bb:86:b1:89:71:82:04:04:09:99:
                    5a:c2:9e:4a:c7:4a:ac:89:bc:b4:51:8e:9a:75:17:
                    c5:cf:17:84:50:b9:01:2f:64:1d:e7:aa:49:82:eb:
                    5d:36:92:7f:a1:49:e0:83:1e:df:16:66:a9:ff:d6:
                    f3:42:9b:a7:97:34:04:07:7a:c4:a4:92:b6:b4:4c:
                    43:53:a9:32:16:f4:0e:ad:c2:3b:ff:ee:0b:8b:db:
                    e5:21:a1:d8:9d:6c:ea:12:dd:a8:ed:2c:3e:86:9c:
                    11:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:CD:87:6F:C8:5B:76:B8:E2:85:A6:31:7F:0F:47:E2:13:0F:71:E6
            X509v3 Authority Key Identifier:
                keyid:98:DF:F1:56:BA:5D:3B:11:FA:A6:CD:01:7A:8B:F6:54:25:1D:EB:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A1982/2F0CD68E45D211F0B09667D4DAE4EC9C/mN_xVrpdOxH6ps0Beov2VCUd68c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/mN_xVrpdOxH6ps0Beov2VCUd68c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A1982/2F0CD68E45D211F0B09667D4DAE4EC9C/mN_xVrpdOxH6ps0Beov2VCUd68c.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:16:82:ae:18:45:d0:49:69:73:5a:a4:04:81:82:54:a5:c0:
         7e:1d:76:a5:27:d9:ef:02:8f:d0:6e:be:23:98:b6:0c:fb:5a:
         e7:7f:cf:37:51:de:fe:28:c8:35:3c:7f:86:b5:af:06:7f:5b:
         c8:e5:9f:d0:99:df:de:de:f0:6b:c3:39:c7:1b:1a:14:65:e4:
         8d:56:b6:9f:e6:0e:52:69:94:4b:77:ba:14:21:b6:1a:8d:b5:
         9b:df:c4:83:26:02:64:81:9b:a2:fc:6d:a7:51:c7:9d:0e:b6:
         4c:86:60:4a:a8:79:01:5d:84:1c:5f:b0:97:10:19:e2:ba:8d:
         07:01:9b:37:5b:f9:77:2d:0e:99:07:20:26:ba:68:db:65:fd:
         b9:e8:19:91:8c:68:01:b9:71:98:f7:a8:30:20:11:fd:55:c3:
         30:ca:21:81:db:68:af:92:6c:7d:28:8c:83:eb:c9:78:85:b1:
         6d:94:93:da:bd:72:35:9b:3b:0a:48:48:70:b1:19:ae:25:e9:
         a3:56:c8:75:52:da:3a:f6:18:e9:bb:fa:5d:4f:0f:4e:00:24:
         e1:64:bd:e6:40:51:f0:42:19:dc:37:ea:cc:0a:df:30:d7:29:
         d7:7c:48:6a:92:ad:f1:d8:29:24:f9:e5:65:57:24:fa:71:0f:
         67:7d:f8:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 9 12:22:26 2025 by rpki-client