This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A8AA3/947078EC9E5211EEACE10A1AD25BE465/vbHIMkQqFwa_d_xOxDcYGbo_waY.mft
File:                     vbHIMkQqFwa_d_xOxDcYGbo_waY.mft (raw, json)
Hash identifier:          wRpz49u/9yjgGUQ6rEe9r8clfKCb0xez5cuwcfOW6sU=
Subject key identifier:   D6:2C:9F:E7:13:09:1E:18:EA:4D:33:2D:F3:5E:7A:09:7A:31:8A:C6
Authority key identifier: BD:B1:C8:32:44:2A:17:06:BF:77:FC:4E:C4:37:18:19:BA:3F:C1:A6
Certificate issuer:       /CN=F36A8AA3AF/serialNumber=BDB1C832442A1706BF77FC4EC4371819BA3FC1A6
Certificate serial:       02E4
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/vbHIMkQqFwa_d_xOxDcYGbo_waY.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A8AA3/947078EC9E5211EEACE10A1AD25BE465/vbHIMkQqFwa_d_xOxDcYGbo_waY.mft
Manifest number:          02E3
Signing time:             Tue 09 Dec 2025 03:57:22 +0000
Manifest this update:     Tue 09 Dec 2025 03:57:21 +0000
Manifest next update:     Thu 11 Dec 2025 03:57:21 +0000
Files and hashes:         1: vbHIMkQqFwa_d_xOxDcYGbo_waY.crl (hash: cwCYTuEsmEs8Fjg1sfzgkUwZXToZNSwlrLkwCsOcv8U=)
                          2: E2C1EE3A9E5311EEAAC0551CD25BE465.roa (hash: a/6txB+MVfLWSEULkMJVclmn38cp7SIU8WSE2UEIKek=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A8AA3/947078EC9E5211EEACE10A1AD25BE465/vbHIMkQqFwa_d_xOxDcYGbo_waY.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A8AA3/947078EC9E5211EEACE10A1AD25BE465/vbHIMkQqFwa_d_xOxDcYGbo_waY.mft
                          rsync://rpki.afrinic.net/repository/afrinic/vbHIMkQqFwa_d_xOxDcYGbo_waY.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 11 Dec 2025 03:57:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 740 (0x2e4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A8AA3AF, serialNumber=BDB1C832442A1706BF77FC4EC4371819BA3FC1A6
        Validity
            Not Before: Dec  9 03:57:21 2025 GMT
            Not After : Dec 11 03:57:21 2025 GMT
        Subject: CN=69379e22-3479
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:a3:fc:31:fd:c1:e5:81:51:52:25:a9:12:24:
                    b7:55:af:7d:30:cc:59:47:12:4b:d2:4f:19:a1:82:
                    6a:2d:0c:ad:5e:dd:b3:b4:cf:24:54:e2:7d:ff:33:
                    dd:56:ff:8c:6b:e0:cd:6d:5c:07:97:30:c1:be:14:
                    af:10:03:4c:4a:42:d1:9c:61:b3:3f:c2:07:d1:50:
                    6d:27:38:38:0f:22:a1:3a:54:c5:7c:a4:2c:21:7f:
                    d9:de:05:6c:6d:5b:10:05:91:6e:36:fc:b7:b1:89:
                    27:c4:09:0e:7a:12:f8:f0:6d:01:46:bd:99:67:55:
                    f0:01:7f:6a:09:89:ec:f9:33:f5:6c:ba:d0:ed:9b:
                    af:1e:03:9b:a4:92:0b:72:76:d6:c9:e7:b2:49:f7:
                    3f:c4:7d:96:dc:d6:f4:9f:34:ff:3c:66:fe:ad:d7:
                    64:98:f3:a1:d1:47:46:c6:63:9f:7b:e1:05:1e:9f:
                    be:a7:c1:f8:56:ed:b8:67:9b:91:82:75:ed:30:dc:
                    d7:c7:ac:8b:d1:f1:c1:90:ed:57:93:d9:93:4c:23:
                    46:43:b2:a0:97:4e:46:38:e0:b0:48:6e:29:31:6b:
                    39:6b:87:3e:82:ce:f9:d1:3f:a4:fc:19:f4:19:86:
                    ac:66:f9:fe:0e:9a:c5:65:2f:1d:9b:19:0b:da:af:
                    53:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:2C:9F:E7:13:09:1E:18:EA:4D:33:2D:F3:5E:7A:09:7A:31:8A:C6
            X509v3 Authority Key Identifier:
                keyid:BD:B1:C8:32:44:2A:17:06:BF:77:FC:4E:C4:37:18:19:BA:3F:C1:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A8AA3/947078EC9E5211EEACE10A1AD25BE465/vbHIMkQqFwa_d_xOxDcYGbo_waY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/vbHIMkQqFwa_d_xOxDcYGbo_waY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A8AA3/947078EC9E5211EEACE10A1AD25BE465/vbHIMkQqFwa_d_xOxDcYGbo_waY.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:78:19:51:41:bb:c6:62:47:20:4c:77:f8:c4:a1:09:96:a9:
         da:ee:c3:b0:e5:a6:6f:e3:35:17:75:2c:38:4f:cd:29:06:06:
         dd:94:a0:19:78:ea:79:65:1f:56:21:18:37:64:c1:67:71:4d:
         f1:88:ae:3d:c4:4b:33:57:47:63:dc:50:86:d9:58:12:5a:ba:
         af:4d:4c:2e:de:59:34:da:0e:0e:59:6a:f3:77:67:72:99:ef:
         2d:d5:87:f9:d6:85:c4:83:f5:9a:34:42:34:04:05:a8:50:ef:
         1b:7f:cf:01:d5:53:82:e2:1d:56:f7:93:b3:04:f7:58:13:ea:
         6b:9a:20:e9:8b:61:90:9f:a4:1e:a1:5e:c2:8c:3d:db:ca:1d:
         20:e8:e6:7c:87:fb:ad:ed:36:13:3b:15:e1:e7:19:d1:19:00:
         d7:ed:7e:41:97:28:22:f1:94:fa:cf:c3:ca:ee:82:18:43:bb:
         41:5c:29:98:d2:2f:14:43:25:70:f8:ed:9c:6e:4f:c0:11:30:
         1a:ad:2f:ec:2e:59:49:f2:e1:91:09:16:44:92:0c:c2:6a:94:
         7d:c8:27:5b:67:72:f3:97:79:bf:36:57:bb:cc:8b:71:30:5c:
         de:7b:f5:4c:8f:3d:83:90:eb:e5:72:07:fa:d1:3c:91:61:1a:
         46:aa:25:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 9 12:18:04 2025 by rpki-client