This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A2CD2/553F50F064E511E8968FEF2EF8AEA228/M1pTwRMuVAw6td9C8UiHszJN60Q.mft
File:                     M1pTwRMuVAw6td9C8UiHszJN60Q.mft (raw, json)
Hash identifier:          KPff02yYpNZr7MJ3rP/rfPxffhDoKgx8MX38GRjYqoY=
Subject key identifier:   DA:85:85:00:B7:BD:47:62:D1:5B:3A:23:13:D1:AA:09:B2:AC:EC:C8
Authority key identifier: 33:5A:53:C1:13:2E:54:0C:3A:B5:DF:42:F1:48:87:B3:32:4D:EB:44
Certificate issuer:       /CN=F36A2CD2AF/serialNumber=335A53C1132E540C3AB5DF42F14887B3324DEB44
Certificate serial:       0B05
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/M1pTwRMuVAw6td9C8UiHszJN60Q.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A2CD2/553F50F064E511E8968FEF2EF8AEA228/M1pTwRMuVAw6td9C8UiHszJN60Q.mft
Manifest number:          0B02
Signing time:             Tue 09 Dec 2025 01:11:30 +0000
Manifest this update:     Tue 09 Dec 2025 01:11:29 +0000
Manifest next update:     Thu 11 Dec 2025 01:11:29 +0000
Files and hashes:         1: M1pTwRMuVAw6td9C8UiHszJN60Q.crl (hash: UjS3dSmFVsWXY4QO2PH4GEJV5le9bBh1qwl9vaWFgxI=)
                          2: BE11892264E511E88A76232FF8AEA228.roa (hash: dOR90EcGn41sg/4MsNNizB3oHEFvm4Z1e3qb8Nhf7Q0=)
                          3: D8C2BDE0D02211EA8498CC41F8AEA228.roa (hash: I2gZAkM/7aE0lRi9sq+Qnq3RN4IGql/esMqczFTNr+A=)
                          4: FF05885C64E511E899B3422FF8AEA228.roa (hash: SEgUfNXNKuWS5w5moDpD2nIXtoeuFn9n8YpzM5ve1qs=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A2CD2/553F50F064E511E8968FEF2EF8AEA228/M1pTwRMuVAw6td9C8UiHszJN60Q.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A2CD2/553F50F064E511E8968FEF2EF8AEA228/M1pTwRMuVAw6td9C8UiHszJN60Q.mft
                          rsync://rpki.afrinic.net/repository/afrinic/M1pTwRMuVAw6td9C8UiHszJN60Q.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 11 Dec 2025 01:11:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2821 (0xb05)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A2CD2AF, serialNumber=335A53C1132E540C3AB5DF42F14887B3324DEB44
        Validity
            Not Before: Dec  9 01:11:29 2025 GMT
            Not After : Dec 11 01:11:29 2025 GMT
        Subject: CN=69377742-4c75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:2d:6c:6d:e2:13:65:74:20:86:8c:81:b6:c7:
                    c3:11:ef:81:24:d3:58:15:d0:c1:60:e0:a9:26:6e:
                    b3:aa:da:1f:39:31:07:63:4a:d6:5e:23:83:58:70:
                    8b:df:5e:9c:a3:89:96:df:7b:00:15:bb:93:06:b9:
                    a3:98:8f:68:bb:32:66:20:51:46:05:0d:75:24:3f:
                    62:2f:10:aa:55:3a:5d:d4:0f:90:f5:9a:a7:e3:6e:
                    db:56:09:f8:5a:1b:9d:4f:ca:2b:ba:65:1e:61:31:
                    8d:77:e1:7b:4d:85:3c:28:50:7d:f5:06:33:f2:44:
                    0e:b0:3a:e0:3c:2f:65:02:7f:c4:28:90:bc:63:e5:
                    e9:bb:44:1b:5d:39:de:79:29:02:58:53:84:77:9a:
                    96:0d:ce:0c:f8:60:f2:ee:14:31:e1:00:ad:42:5f:
                    b2:60:23:a4:29:bc:f8:fe:6a:21:0e:fd:65:76:0e:
                    77:90:96:3e:41:58:07:e7:98:88:fc:b1:f9:86:28:
                    aa:b5:34:d2:7c:ce:c9:55:37:53:87:69:de:eb:42:
                    68:46:6f:4a:00:a7:9b:d2:6f:4e:39:4a:8a:ce:0f:
                    dd:84:25:4d:eb:5e:e2:09:48:fb:da:38:7c:b5:f2:
                    82:2d:46:8e:05:c4:4a:4e:d4:58:eb:54:bb:8b:14:
                    be:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:85:85:00:B7:BD:47:62:D1:5B:3A:23:13:D1:AA:09:B2:AC:EC:C8
            X509v3 Authority Key Identifier:
                keyid:33:5A:53:C1:13:2E:54:0C:3A:B5:DF:42:F1:48:87:B3:32:4D:EB:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A2CD2/553F50F064E511E8968FEF2EF8AEA228/M1pTwRMuVAw6td9C8UiHszJN60Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/M1pTwRMuVAw6td9C8UiHszJN60Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A2CD2/553F50F064E511E8968FEF2EF8AEA228/M1pTwRMuVAw6td9C8UiHszJN60Q.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:a3:e9:c7:55:c8:64:fd:dd:84:60:d3:1d:71:d1:bd:20:05:
         da:62:43:48:56:f3:c0:84:a4:83:24:dc:50:56:cd:47:80:40:
         4c:94:10:20:e0:7a:7c:1a:dc:f9:6a:74:c4:92:e5:d7:8a:2b:
         d5:81:57:de:3d:ab:43:43:0e:f2:0f:ec:07:44:cf:8f:89:8f:
         7a:38:ba:a1:a7:e9:95:7e:fe:2b:ea:26:af:25:91:43:02:8b:
         3a:0e:6d:aa:49:02:bd:60:06:4a:c3:c5:3f:23:44:ab:f4:9c:
         e3:49:42:eb:26:5e:70:84:1f:fa:5c:2e:fe:d4:de:15:ef:ec:
         89:96:05:a3:45:49:ee:86:54:c7:6c:d7:ed:9d:51:54:74:bd:
         48:12:02:65:cd:f1:9e:6f:6f:9a:42:8e:50:b2:00:25:27:61:
         8d:82:fa:19:1d:7a:14:19:a9:f3:62:e4:cd:3f:d2:45:15:f3:
         20:68:94:07:7a:bc:dc:e0:24:cd:eb:8d:76:c7:20:db:1e:ae:
         2d:09:53:3a:1b:d6:f7:5e:32:b5:cb:54:4c:d9:d6:ce:da:57:
         c5:9e:a7:4e:3b:a1:4a:41:32:8b:5b:30:5a:e9:2c:35:fe:8b:
         b5:34:ea:2a:06:27:66:0a:d6:12:a6:7a:23:d2:04:38:c4:bf:
         b0:76:21:52
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICCwUwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QTJDRDJBRjExMC8GA1UEBRMoMzM1QTUzQzExMzJFNTQwQzNBQjVERjQyRjE0ODg3
QjMzMjRERUI0NDAeFw0yNTEyMDkwMTExMjlaFw0yNTEyMTEwMTExMjlaMBgxFjAU
BgNVBAMTDTY5Mzc3NzQyLTRjNzUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDbLWxt4hNldCCGjIG2x8MR74Ek01gV0MFg4KkmbrOq2h85MQdjStZeI4NY
cIvfXpyjiZbfewAVu5MGuaOYj2i7MmYgUUYFDXUkP2IvEKpVOl3UD5D1mqfjbttW
CfhaG51Pyiu6ZR5hMY134XtNhTwoUH31BjPyRA6wOuA8L2UCf8QokLxj5em7RBtd
Od55KQJYU4R3mpYNzgz4YPLuFDHhAK1CX7JgI6QpvPj+aiEO/WV2DneQlj5BWAfn
mIj8sfmGKKq1NNJ8zslVN1OHad7rQmhGb0oAp5vSb045SorOD92EJU3rXuIJSPva
OHy18oItRo4FxEpO1FjrVLuLFL6RAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQU2oWF
ALe9R2LRWzojE9GqCbKs7MgwHwYDVR0jBBgwFoAUM1pTwRMuVAw6td9C8UiHszJN
60QwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkEyQ0QyLzU1M0Y1MEYwNjRFNTExRTg5NjhGRUYyRUY4QUVBMjI4L00xcFR3
Uk11VkF3NnRkOUM4VWlIc3pKTjYwUS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL00xcFR3Uk11VkF3NnRkOUM4VWlIc3pKTjYwUS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2QTJDRDIvNTUzRjUwRjA2NEU1MTFFODk2OEZFRjJFRjhB
RUEyMjgvTTFwVHdSTXVWQXc2dGQ5QzhVaUhzekpONjBRLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBAo+nHVchk/d2EYNMdcdG9IAXaYkNI
VvPAhKSDJNxQVs1HgEBMlBAg4Hp8Gtz5anTEkuXXiivVgVfePatDQw7yD+wHRM+P
iY96OLqhp+mVfv4r6iavJZFDAos6Dm2qSQK9YAZKw8U/I0Sr9JzjSULrJl5whB/6
XC7+1N4V7+yJlgWjRUnuhlTHbNftnVFUdL1IEgJlzfGeb2+aQo5QsgAlJ2GNgvoZ
HXoUGanzYuTNP9JFFfMgaJQHerzc4CTN6412xyDbHq4tCVM6G9b3XjK1y1RM2dbO
2lfFnqdOO6FKQTKLWzBa6Sw1/ou1NOoqBidmCtYSpnoj0gQ4xL+wdiFS
-----END CERTIFICATE-----
Generated at Tue Dec 9 12:18:16 2025 by rpki-client