This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36AA372/2DD27FE8BFC211F09C621AC9DAE4EC9C/RlaXNRFZ0UHlSS-N3AARcfbR5fI.mft
File:                     RlaXNRFZ0UHlSS-N3AARcfbR5fI.mft (raw, json)
Hash identifier:          BdHhmED5ALnnjZGrkUjaJHGe2gMwZR+8On63KVLTNYo=
Subject key identifier:   6E:74:AA:5A:CE:7E:34:66:4C:63:79:10:7A:CB:23:09:2E:F0:C8:A5
Authority key identifier: 46:56:97:35:11:59:D1:41:E5:49:2F:8D:DC:00:11:71:F6:D1:E5:F2
Certificate issuer:       /CN=F36AA372AF/serialNumber=465697351159D141E5492F8DDC001171F6D1E5F2
Certificate serial:       22
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/RlaXNRFZ0UHlSS-N3AARcfbR5fI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36AA372/2DD27FE8BFC211F09C621AC9DAE4EC9C/RlaXNRFZ0UHlSS-N3AARcfbR5fI.mft
Manifest number:          20
Signing time:             Tue 09 Dec 2025 05:19:51 +0000
Manifest this update:     Tue 09 Dec 2025 05:19:51 +0000
Manifest next update:     Thu 11 Dec 2025 05:19:51 +0000
Files and hashes:         1: RlaXNRFZ0UHlSS-N3AARcfbR5fI.crl (hash: QGBzbxQwG8IXpgMUnmXi/WwjtPEz/FqQI/AEPK3MlTE=)
                          2: 5771723CBFCC11F0B32C4386DAE4EC9C.roa (hash: GFNOWIn+BnzxN06/P09ij0NnM/A7yIAgr7oflS33glE=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36AA372/2DD27FE8BFC211F09C621AC9DAE4EC9C/RlaXNRFZ0UHlSS-N3AARcfbR5fI.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36AA372/2DD27FE8BFC211F09C621AC9DAE4EC9C/RlaXNRFZ0UHlSS-N3AARcfbR5fI.mft
                          rsync://rpki.afrinic.net/repository/afrinic/RlaXNRFZ0UHlSS-N3AARcfbR5fI.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 11 Dec 2025 05:19:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 34 (0x22)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36AA372AF, serialNumber=465697351159D141E5492F8DDC001171F6D1E5F2
        Validity
            Not Before: Dec  9 05:19:51 2025 GMT
            Not After : Dec 11 05:19:51 2025 GMT
        Subject: CN=6937b177-3d39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:00:3c:47:77:b9:50:2f:09:23:04:c1:70:94:
                    e9:8a:10:b9:fa:62:65:69:77:2e:25:c9:96:4d:de:
                    62:76:90:44:4c:8d:9b:3c:ec:d9:ad:fe:09:3a:b7:
                    f5:95:42:8b:ed:3f:cf:1d:bc:dd:82:ca:b4:8b:f0:
                    bd:1e:0e:d6:a9:2c:ba:d4:b1:01:98:d2:5a:45:0b:
                    21:0e:de:7c:50:63:22:df:83:6f:06:2e:ef:76:c8:
                    4f:65:c6:37:71:6b:74:57:90:34:86:d3:ce:94:a2:
                    e1:4d:57:1a:c9:5f:0d:14:4d:84:46:42:1f:4f:7d:
                    09:40:1c:3b:4a:ca:65:49:1c:f9:98:75:16:e1:34:
                    89:e3:bd:68:d5:0f:46:db:df:b6:b7:67:47:47:cf:
                    45:ce:90:6d:57:4a:cd:4b:16:bb:08:83:15:48:f1:
                    c5:20:4b:f4:bf:84:b8:9f:7a:47:41:38:0b:f0:79:
                    bc:92:38:13:1e:f8:cf:82:d8:ba:a2:67:08:ed:bb:
                    42:70:94:74:62:3c:7f:ac:a1:38:8e:82:36:9a:13:
                    c8:7c:68:52:73:53:9f:d0:c6:07:ed:13:5e:4f:a6:
                    90:c9:60:68:4e:73:95:f6:92:d3:12:b6:64:57:34:
                    cd:70:6d:eb:68:db:cc:c2:23:1b:ac:04:c4:a0:2d:
                    fc:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:74:AA:5A:CE:7E:34:66:4C:63:79:10:7A:CB:23:09:2E:F0:C8:A5
            X509v3 Authority Key Identifier:
                keyid:46:56:97:35:11:59:D1:41:E5:49:2F:8D:DC:00:11:71:F6:D1:E5:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36AA372/2DD27FE8BFC211F09C621AC9DAE4EC9C/RlaXNRFZ0UHlSS-N3AARcfbR5fI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/RlaXNRFZ0UHlSS-N3AARcfbR5fI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36AA372/2DD27FE8BFC211F09C621AC9DAE4EC9C/RlaXNRFZ0UHlSS-N3AARcfbR5fI.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:f6:12:4b:6d:6f:42:fa:2d:db:36:4a:ac:e1:21:95:a9:a3:
         23:78:2b:91:e1:08:e9:6f:0e:54:85:38:b6:b7:e6:1e:3d:b9:
         14:b9:79:28:3f:fb:80:5d:4e:74:3c:2c:e6:dc:88:46:22:a7:
         91:94:0c:11:16:28:19:2b:34:2a:91:6c:f0:0b:fd:a9:b8:e6:
         67:57:7e:f8:11:67:e6:46:db:16:7a:43:7e:06:5c:7c:a0:fb:
         de:c8:5d:1d:73:5b:1c:f2:ae:23:af:d8:4b:0c:c0:d6:c9:67:
         59:c7:fe:c3:5d:9b:38:d8:9a:2e:6e:67:16:ec:4b:d8:85:f6:
         b0:ed:12:ba:36:42:20:3d:92:2d:65:28:e3:b5:a5:8f:26:83:
         2b:39:c5:c6:9b:9b:c9:d3:e3:b4:cf:06:0e:17:fb:4c:d5:52:
         c9:07:1b:a7:b3:84:1f:a6:11:5f:4c:28:36:84:2b:00:55:8e:
         39:ad:bd:b3:6a:da:6a:5e:53:8e:c9:88:4f:0c:41:9f:9d:35:
         08:80:99:2d:c7:a8:1d:56:f9:02:de:74:8e:6e:3c:58:39:ef:
         c3:bb:da:bd:9a:49:d8:22:9a:c0:38:97:d9:0a:d8:de:38:aa:
         15:5d:95:cf:aa:40:48:d5:99:69:7c:24:dc:93:62:2a:9f:cf:
         70:bc:0e:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 9 12:03:17 2025 by rpki-client