This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A3F9E/CFD8C1C01B8A11ECB488356ED8A014CE/W8bKYtbdbvSdoT50fsEHbd1PSrY.mft
File:                     W8bKYtbdbvSdoT50fsEHbd1PSrY.mft (raw, json)
Hash identifier:          KFcLbhV7MS/kp9tTnkkKvpfw/ImGULJsG3XT1xRapq0=
Subject key identifier:   68:49:88:C0:3C:BC:5E:21:18:D0:9B:6E:7D:0F:7E:34:BA:CA:0B:AD
Authority key identifier: 5B:C6:CA:62:D6:DD:6E:F4:9D:A1:3E:74:7E:C1:07:6D:DD:4F:4A:B6
Certificate issuer:       /CN=F36A3F9EAF/serialNumber=5BC6CA62D6DD6EF49DA13E747EC1076DDD4F4AB6
Certificate serial:       0634
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/W8bKYtbdbvSdoT50fsEHbd1PSrY.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A3F9E/CFD8C1C01B8A11ECB488356ED8A014CE/W8bKYtbdbvSdoT50fsEHbd1PSrY.mft
Manifest number:          0632
Signing time:             Fri 12 Dec 2025 02:34:28 +0000
Manifest this update:     Fri 12 Dec 2025 02:34:27 +0000
Manifest next update:     Sun 14 Dec 2025 02:34:27 +0000
Files and hashes:         1: W8bKYtbdbvSdoT50fsEHbd1PSrY.crl (hash: htLacv9wLPohsx9I5bDE2pcWl+SjsX/q6esDfP14GSs=)
                          2: 3CC373A0D18D11EFB9A08393762E951A.roa (hash: J/XCADMjL9YV56WDi2ZZxp5RHEw9w+Slr4XdI+atiNA=)
                          3: 28250A781B8B11EC8EF8C46ED8A014CE.roa (hash: atNX9l4Lt5C4wOsUaQVNLEfVh3JT5lZhEoK/V3WbZQo=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A3F9E/CFD8C1C01B8A11ECB488356ED8A014CE/W8bKYtbdbvSdoT50fsEHbd1PSrY.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A3F9E/CFD8C1C01B8A11ECB488356ED8A014CE/W8bKYtbdbvSdoT50fsEHbd1PSrY.mft
                          rsync://rpki.afrinic.net/repository/afrinic/W8bKYtbdbvSdoT50fsEHbd1PSrY.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 14 Dec 2025 00:06:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1588 (0x634)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A3F9EAF, serialNumber=5BC6CA62D6DD6EF49DA13E747EC1076DDD4F4AB6
        Validity
            Not Before: Dec 12 02:34:27 2025 GMT
            Not After : Dec 14 02:34:27 2025 GMT
        Subject: CN=693b7f34-e025
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:1a:2b:24:b6:e2:a6:ef:2d:58:3f:36:83:c5:
                    09:7e:d0:06:d7:e9:7d:13:c6:07:1e:09:a6:1e:64:
                    a6:3c:b7:17:d4:4b:d1:4f:2c:13:f5:35:59:1e:5b:
                    07:d4:f4:3e:91:28:70:39:f9:04:70:b1:d6:6e:65:
                    94:b6:60:b1:c3:88:be:75:76:d3:ac:97:68:6b:67:
                    ed:03:8e:8c:31:15:a3:c8:9d:e4:fc:ca:73:fc:d7:
                    5f:9e:cb:33:67:80:bd:3a:b9:a1:3f:88:b8:d0:df:
                    61:d3:7e:c8:a2:e9:1b:c3:ee:d0:67:f5:e7:64:67:
                    e1:84:2a:a5:57:88:df:25:ef:c4:aa:ca:ac:e9:a7:
                    29:36:cf:b3:cc:cc:5f:7a:93:44:f7:00:66:07:a8:
                    db:61:ab:a0:82:f4:5d:03:98:de:b6:12:29:53:31:
                    3c:e6:cc:e6:b5:bf:99:92:1c:f8:ab:a2:7f:d1:05:
                    b5:1f:1f:28:0e:cd:72:81:f6:de:9a:7d:7b:7a:93:
                    3c:8c:74:32:ea:c5:c6:06:af:95:64:7d:dd:82:f7:
                    14:f8:13:5b:6f:ca:65:35:13:33:80:5a:4a:5e:d4:
                    91:f0:09:d0:3b:89:3e:c8:2a:85:06:f1:5a:97:2e:
                    bc:fa:48:de:d3:d2:d9:74:9e:e6:cb:94:a0:3e:71:
                    00:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:49:88:C0:3C:BC:5E:21:18:D0:9B:6E:7D:0F:7E:34:BA:CA:0B:AD
            X509v3 Authority Key Identifier:
                keyid:5B:C6:CA:62:D6:DD:6E:F4:9D:A1:3E:74:7E:C1:07:6D:DD:4F:4A:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A3F9E/CFD8C1C01B8A11ECB488356ED8A014CE/W8bKYtbdbvSdoT50fsEHbd1PSrY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/W8bKYtbdbvSdoT50fsEHbd1PSrY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A3F9E/CFD8C1C01B8A11ECB488356ED8A014CE/W8bKYtbdbvSdoT50fsEHbd1PSrY.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:a4:60:c5:ab:48:79:bb:f2:5e:62:0c:31:ad:63:e2:5b:40:
         4d:dc:6e:d9:c9:c6:34:7f:01:93:c3:de:b4:07:17:e8:3d:9d:
         8c:1e:bb:6b:2d:91:ea:c1:00:0b:ec:d0:ab:39:5b:5a:4f:5a:
         37:0b:6a:93:2c:7b:22:e3:db:f1:04:2e:4c:67:f1:10:13:28:
         f6:7a:44:5f:63:eb:c3:aa:3c:5a:c4:75:84:1c:2f:3f:0b:4b:
         34:fc:3d:d6:70:c5:21:88:fa:da:93:a8:55:60:f7:22:da:11:
         d3:92:16:d5:51:04:6c:9c:a3:75:15:3d:9e:9d:73:e7:2e:f6:
         3c:1c:07:e2:e4:03:e8:58:a1:d6:9f:e6:25:e7:5c:21:ea:ba:
         6b:48:18:7a:fe:df:fb:2d:f9:ca:65:5f:a1:18:af:15:b0:3c:
         8d:35:1c:86:0c:4a:b9:08:51:55:f4:61:1c:2b:53:76:0b:a7:
         d2:4d:9b:47:5b:17:5c:72:85:56:bf:a2:2b:8c:c7:bc:b3:74:
         a9:f0:42:da:78:eb:86:bb:48:d0:1c:71:ab:68:91:b1:f9:b2:
         d8:fb:f7:c1:33:b2:08:d5:03:46:e0:a6:f1:6b:0c:05:5d:0e:
         41:05:e1:bc:7a:cc:b4:56:22:68:43:24:42:1c:f7:02:11:f6:
         3a:30:86:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 12 21:37:46 2025 by rpki-client