This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A32F5/034990A4710811EFA7A9E4A3762E951A/FbwGKwtw6PfyC0oVvgUJAFtzEMs.mft
File:                     FbwGKwtw6PfyC0oVvgUJAFtzEMs.mft (raw, json)
Hash identifier:          QKXQFuGYCiA5EWWIriUAMMBDovHD08Z+fQyn5vwcFuA=
Subject key identifier:   40:C6:60:C3:7F:F5:8E:DB:80:67:2D:B7:C7:36:1C:7C:21:93:EA:FB
Authority key identifier: 15:BC:06:2B:0B:70:E8:F7:F2:0B:4A:15:BE:05:09:00:5B:73:10:CB
Certificate issuer:       /CN=F36A32F5AF/serialNumber=15BC062B0B70E8F7F20B4A15BE0509005B7310CB
Certificate serial:       01D1
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/FbwGKwtw6PfyC0oVvgUJAFtzEMs.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A32F5/034990A4710811EFA7A9E4A3762E951A/FbwGKwtw6PfyC0oVvgUJAFtzEMs.mft
Manifest number:          01D0
Signing time:             Sun 07 Dec 2025 04:30:27 +0000
Manifest this update:     Sun 07 Dec 2025 04:30:27 +0000
Manifest next update:     Tue 09 Dec 2025 04:30:27 +0000
Files and hashes:         1: FbwGKwtw6PfyC0oVvgUJAFtzEMs.crl (hash: YpXb4ugba8PCKzhUrP3B9TqBNTY5/7XoxUCwgRzSQto=)
                          2: B505C262710911EF82F828AE762E951A.roa (hash: xT25C22GG0twXqlKDHqtHM6ZD8MTGkUTk1OnWMySjRQ=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A32F5/034990A4710811EFA7A9E4A3762E951A/FbwGKwtw6PfyC0oVvgUJAFtzEMs.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A32F5/034990A4710811EFA7A9E4A3762E951A/FbwGKwtw6PfyC0oVvgUJAFtzEMs.mft
                          rsync://rpki.afrinic.net/repository/afrinic/FbwGKwtw6PfyC0oVvgUJAFtzEMs.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 09 Dec 2025 04:30:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 465 (0x1d1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A32F5AF, serialNumber=15BC062B0B70E8F7F20B4A15BE0509005B7310CB
        Validity
            Not Before: Dec  7 04:30:27 2025 GMT
            Not After : Dec  9 04:30:27 2025 GMT
        Subject: CN=693502e3-99e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:7d:ec:84:3a:ae:57:1f:9c:bc:e0:9a:29:28:
                    9b:42:cc:9d:70:1f:47:40:45:7f:e4:68:0f:f8:24:
                    6c:f3:8c:06:9c:cc:ce:17:22:a5:43:c9:57:77:2f:
                    02:0b:82:d0:fe:40:0b:51:ed:3f:ef:5d:6c:3e:aa:
                    5a:b4:58:d6:29:7b:11:e4:4a:b6:e5:bc:61:c0:b6:
                    ee:b6:87:5a:ff:ab:02:9a:c6:01:fe:9f:d7:01:10:
                    8d:e2:13:c1:c7:42:ef:5c:7d:4b:5f:3f:0f:21:26:
                    ef:9d:2b:69:15:eb:8e:76:9b:83:fd:46:d0:00:bc:
                    2b:2c:79:3e:6b:56:01:f2:a0:f7:95:2c:84:aa:6c:
                    f4:0d:fe:23:8f:1a:66:3b:7e:02:59:7f:90:1b:98:
                    65:4e:fc:fe:22:43:2b:4a:26:6a:75:8b:81:48:d3:
                    2e:2a:cb:2f:f5:ff:8d:b9:50:6e:75:f6:34:c1:be:
                    9d:b8:a8:5c:51:8e:46:65:53:c7:e5:92:7f:11:bc:
                    bb:b0:3f:09:3f:61:5a:b9:ed:63:63:09:1f:d6:99:
                    32:b5:19:d2:3d:2c:f9:ff:95:af:f8:17:37:9b:57:
                    d2:c6:de:d2:d7:22:fd:5a:03:c3:e5:de:2a:ee:c8:
                    5a:8f:60:2f:20:e0:f1:e5:a7:f0:c8:2d:c5:c5:3d:
                    8a:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:C6:60:C3:7F:F5:8E:DB:80:67:2D:B7:C7:36:1C:7C:21:93:EA:FB
            X509v3 Authority Key Identifier:
                keyid:15:BC:06:2B:0B:70:E8:F7:F2:0B:4A:15:BE:05:09:00:5B:73:10:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A32F5/034990A4710811EFA7A9E4A3762E951A/FbwGKwtw6PfyC0oVvgUJAFtzEMs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/FbwGKwtw6PfyC0oVvgUJAFtzEMs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A32F5/034990A4710811EFA7A9E4A3762E951A/FbwGKwtw6PfyC0oVvgUJAFtzEMs.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:ac:ec:08:dc:fc:d9:97:e4:c9:1d:32:f0:bc:10:69:49:27:
         68:8e:80:17:2d:2e:ea:98:df:51:fa:e7:17:63:3f:2b:eb:de:
         d3:5d:fe:41:c1:99:81:69:8c:ce:ea:f0:10:8b:ad:f2:53:8a:
         96:c1:a4:47:52:46:65:d7:ff:61:ed:95:12:50:a4:23:c5:2a:
         be:48:a8:36:a3:79:e2:0d:1d:ce:f2:85:54:4d:57:bf:12:e9:
         4c:44:9c:d9:a4:53:b3:3b:2c:a9:d1:ee:6d:89:8c:8c:2c:f2:
         b9:07:cd:fa:7c:68:cf:9d:9a:d9:d4:55:e9:fe:d8:9d:46:de:
         80:89:27:f3:b1:9c:71:74:7f:16:01:84:85:da:29:67:09:4f:
         16:ae:29:76:ba:22:a9:97:15:37:72:48:38:23:f3:a8:53:33:
         eb:7f:fb:6f:85:1b:8c:46:d7:bf:12:19:a1:4a:3c:d0:69:2e:
         52:aa:0d:c9:78:a7:6e:8b:c3:7f:25:af:5b:f9:fa:7d:60:f8:
         3f:f5:2d:a4:2c:2d:d9:8b:b9:af:9e:97:48:e2:40:72:64:93:
         04:91:7a:87:d4:28:c6:28:9e:87:eb:33:36:09:11:50:96:45:
         1b:a9:9e:6f:f9:67:12:a5:e5:33:19:16:a6:d3:21:93:4f:a3:
         5c:af:ba:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 8 03:58:57 2025 by rpki-client