This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A31C5/6F90618AAD7F11EFA5498697762E951A/gSd0TaTuADsp3hEDT3LeuN_sKP0.mft
File:                     gSd0TaTuADsp3hEDT3LeuN_sKP0.mft (raw, json)
Hash identifier:          +kZ/55bG0wnY3xoj9tGAR6njYMrHtqbNa4w2stOtp9s=
Subject key identifier:   D8:B1:43:B4:FA:CB:74:52:7D:6F:60:B9:FE:86:30:B6:8A:C1:F6:EF
Authority key identifier: 81:27:74:4D:A4:EE:00:3B:29:DE:11:03:4F:72:DE:B8:DF:EC:28:FD
Certificate issuer:       /CN=F36A31C5AF/serialNumber=8127744DA4EE003B29DE11034F72DEB8DFEC28FD
Certificate serial:       0180
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/gSd0TaTuADsp3hEDT3LeuN_sKP0.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A31C5/6F90618AAD7F11EFA5498697762E951A/gSd0TaTuADsp3hEDT3LeuN_sKP0.mft
Manifest number:          017F
Signing time:             Thu 04 Dec 2025 04:44:51 +0000
Manifest this update:     Thu 04 Dec 2025 04:44:50 +0000
Manifest next update:     Sat 06 Dec 2025 04:44:50 +0000
Files and hashes:         1: gSd0TaTuADsp3hEDT3LeuN_sKP0.crl (hash: zlXZJGUYIYJlm/5rD9lyvii51kLBdX0c6TqZsydaYms=)
                          2: 7AE36338AD8011EF9210379E762E951A.roa (hash: XKLpYRyjT4GR/+JJ89LUWYlPWbTP8lT2SU+RbEft1XA=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A31C5/6F90618AAD7F11EFA5498697762E951A/gSd0TaTuADsp3hEDT3LeuN_sKP0.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A31C5/6F90618AAD7F11EFA5498697762E951A/gSd0TaTuADsp3hEDT3LeuN_sKP0.mft
                          rsync://rpki.afrinic.net/repository/afrinic/gSd0TaTuADsp3hEDT3LeuN_sKP0.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 06 Dec 2025 04:44:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 384 (0x180)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A31C5AF, serialNumber=8127744DA4EE003B29DE11034F72DEB8DFEC28FD
        Validity
            Not Before: Dec  4 04:44:50 2025 GMT
            Not After : Dec  6 04:44:50 2025 GMT
        Subject: CN=693111c3-571a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:77:dc:85:a7:4c:c7:4f:d3:11:9e:79:57:c4:
                    e5:db:31:00:b9:d9:3f:c4:bc:fd:e1:ed:c2:65:d4:
                    e2:4f:4b:f0:d0:77:bf:aa:2a:96:28:cb:e9:66:6e:
                    5a:49:10:26:0f:d3:cc:bd:ff:85:fe:43:44:6e:05:
                    d4:4a:e2:ea:e2:10:c7:9d:71:f8:2e:9e:1b:4c:0d:
                    17:2d:14:02:85:d6:ef:41:17:b0:01:23:b8:08:35:
                    84:c7:8f:1c:ef:04:1d:e9:41:a9:f0:ab:5e:f8:d7:
                    b4:b0:e5:3b:9c:10:d5:f8:47:c5:ef:38:f8:bc:02:
                    57:33:1e:02:4f:9e:47:fc:31:0b:d8:a4:50:58:fb:
                    97:46:ee:d1:47:f0:97:98:26:81:70:12:10:55:ff:
                    ac:2a:66:16:11:ea:db:ae:6e:d9:bc:9f:a4:de:da:
                    28:5b:d4:d6:6c:d5:44:b6:a5:61:7a:8f:95:56:6b:
                    cf:32:16:6a:eb:f6:a8:1e:73:9d:e1:29:16:3f:b4:
                    cc:fc:d9:c4:fd:13:3f:3f:6a:f7:17:90:87:c6:4b:
                    df:2f:db:8b:d2:0a:45:aa:13:ab:6d:a5:6f:81:1c:
                    23:82:b7:11:3b:97:7c:8c:18:90:b4:cd:7e:4d:8c:
                    b1:80:ad:59:70:ad:06:69:e1:c4:0e:10:6e:20:01:
                    44:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:B1:43:B4:FA:CB:74:52:7D:6F:60:B9:FE:86:30:B6:8A:C1:F6:EF
            X509v3 Authority Key Identifier:
                keyid:81:27:74:4D:A4:EE:00:3B:29:DE:11:03:4F:72:DE:B8:DF:EC:28:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A31C5/6F90618AAD7F11EFA5498697762E951A/gSd0TaTuADsp3hEDT3LeuN_sKP0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/gSd0TaTuADsp3hEDT3LeuN_sKP0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A31C5/6F90618AAD7F11EFA5498697762E951A/gSd0TaTuADsp3hEDT3LeuN_sKP0.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:98:ce:78:e0:68:1b:9b:12:4d:4e:de:dc:a6:1b:e9:46:b7:
         4d:cd:86:84:05:af:f3:7a:00:a9:f3:ff:04:ad:64:22:84:b9:
         0b:9d:4d:7c:ed:ed:16:d3:c3:e7:d0:de:f6:00:c8:30:bc:0b:
         77:9c:d8:fe:7b:ca:61:58:2d:50:fd:63:83:ad:0d:a6:1d:0e:
         b1:1e:ed:b9:27:67:b1:a9:55:2a:c4:6e:b5:09:32:53:67:27:
         99:f5:28:7b:60:29:4a:61:73:24:bb:1e:78:f2:21:10:69:a3:
         39:26:c1:00:65:61:c8:c0:c8:37:1e:92:c4:67:4b:2a:38:1f:
         73:f0:49:2b:ec:fa:03:45:9d:c4:84:94:a4:e5:15:ef:20:dc:
         d3:1c:cd:7e:c9:34:82:47:ca:0d:70:71:8a:8e:fb:ca:34:35:
         19:21:b2:98:f5:00:a5:e0:24:79:d1:a4:ef:f6:71:8e:83:ea:
         22:58:7d:50:f8:12:f9:fd:09:51:50:e7:d1:7e:3e:44:d2:ec:
         47:a5:df:2e:b8:0f:22:49:b8:50:39:83:05:5f:c2:cb:87:75:
         e1:eb:40:38:d2:61:09:61:09:dc:c6:1e:5c:e2:83:c3:16:81:
         97:9b:ad:27:b3:86:f2:a4:c5:1e:a8:1b:f2:e1:89:69:ea:27:
         d4:da:53:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 5 02:29:16 2025 by rpki-client