This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36AC63A/1C75D54040C311EE91B571434AD9E6FC/pZcz3KUuEYvmm3dYljNX3ajFFCg.mft
File:                     pZcz3KUuEYvmm3dYljNX3ajFFCg.mft (raw, json)
Hash identifier:          B07bzwBGhkiM9HJRjMoFEALPSWiga8JewN0Nle7iPBc=
Subject key identifier:   A8:87:62:F9:50:34:4A:B0:E9:80:E7:A1:75:38:32:9A:69:13:1B:D5
Authority key identifier: A5:97:33:DC:A5:2E:11:8B:E6:9B:77:58:96:33:57:DD:A8:C5:14:28
Certificate issuer:       /CN=F36AC63AAF/serialNumber=A59733DCA52E118BE69B7758963357DDA8C51428
Certificate serial:       0365
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/pZcz3KUuEYvmm3dYljNX3ajFFCg.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36AC63A/1C75D54040C311EE91B571434AD9E6FC/pZcz3KUuEYvmm3dYljNX3ajFFCg.mft
Manifest number:          0365
Signing time:             Tue 09 Dec 2025 03:42:41 +0000
Manifest this update:     Tue 09 Dec 2025 03:42:40 +0000
Manifest next update:     Thu 11 Dec 2025 03:42:40 +0000
Files and hashes:         1: pZcz3KUuEYvmm3dYljNX3ajFFCg.crl (hash: EDDwrA3kZFewf/RdGSWmQ08LlIGC2y6QcnXXlQSHYKQ=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36AC63A/1C75D54040C311EE91B571434AD9E6FC/pZcz3KUuEYvmm3dYljNX3ajFFCg.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36AC63A/1C75D54040C311EE91B571434AD9E6FC/pZcz3KUuEYvmm3dYljNX3ajFFCg.mft
                          rsync://rpki.afrinic.net/repository/afrinic/pZcz3KUuEYvmm3dYljNX3ajFFCg.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 11 Dec 2025 03:42:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 869 (0x365)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36AC63AAF, serialNumber=A59733DCA52E118BE69B7758963357DDA8C51428
        Validity
            Not Before: Dec  9 03:42:40 2025 GMT
            Not After : Dec 11 03:42:40 2025 GMT
        Subject: CN=69379ab1-6334
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:85:7b:d4:9d:9f:65:83:38:a6:73:f9:53:8b:
                    9e:c3:cc:da:bd:58:e0:0f:b5:18:20:a0:0d:84:e7:
                    b9:d5:05:f5:8e:53:05:20:75:1f:8d:6c:7e:4c:21:
                    f3:fc:5a:3d:42:13:d7:61:61:87:bb:0c:9a:f2:2f:
                    f8:39:2d:1a:c6:eb:20:e6:c5:4a:f7:72:bd:58:b6:
                    88:64:3d:b9:7a:81:1f:74:bf:fc:9a:16:1e:72:09:
                    de:d8:a4:52:26:d1:de:0d:b4:96:30:61:67:b6:1a:
                    a2:18:e4:64:ae:37:55:b1:e0:52:50:ee:df:30:b0:
                    26:9f:1d:a5:73:83:13:56:64:6a:5b:92:da:97:e5:
                    f1:8a:97:f0:7a:5e:88:7e:ca:28:5b:5d:7f:ee:fa:
                    d3:0c:ce:db:75:8f:3a:99:2e:97:97:a4:11:3b:d6:
                    02:12:df:55:2a:e8:11:9f:ea:09:e5:16:74:6a:e7:
                    db:ab:0c:a1:97:77:8d:3b:fc:38:6c:e9:5a:dd:92:
                    61:e9:1e:0b:6c:1a:e2:16:42:aa:23:8c:38:40:3f:
                    33:7f:c2:67:cb:60:c8:05:9a:46:44:bd:ca:f2:8e:
                    4d:d0:df:9d:a2:74:69:57:59:ad:19:ae:11:f7:d4:
                    97:f4:ee:c4:8b:f2:5b:86:a9:88:ae:11:44:9a:8c:
                    85:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:87:62:F9:50:34:4A:B0:E9:80:E7:A1:75:38:32:9A:69:13:1B:D5
            X509v3 Authority Key Identifier:
                keyid:A5:97:33:DC:A5:2E:11:8B:E6:9B:77:58:96:33:57:DD:A8:C5:14:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36AC63A/1C75D54040C311EE91B571434AD9E6FC/pZcz3KUuEYvmm3dYljNX3ajFFCg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/pZcz3KUuEYvmm3dYljNX3ajFFCg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36AC63A/1C75D54040C311EE91B571434AD9E6FC/pZcz3KUuEYvmm3dYljNX3ajFFCg.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         e1:45:e9:3b:98:1f:e8:1b:fb:bb:18:b3:e0:26:c0:3e:30:27:
         89:59:7c:1f:18:0c:81:1a:56:9c:24:0b:ea:18:38:7e:8f:37:
         cd:61:e5:0d:31:ef:b7:41:f8:7d:e4:ac:68:87:a4:3f:f5:ec:
         0c:e9:d6:5b:08:e4:95:a0:4c:ce:2e:d7:68:9c:92:6d:f1:23:
         b8:7a:e1:a4:19:d3:8b:de:b1:d2:7b:c8:dc:3d:08:00:93:aa:
         5c:99:dc:c2:5b:07:9a:09:0f:d8:22:17:c9:3d:fa:89:4d:73:
         ad:1e:e1:4b:1b:24:7b:75:1e:17:07:18:a2:ba:51:6f:14:c6:
         d1:94:0c:f9:e5:39:c3:8c:fa:1e:6c:8c:4d:c4:b8:15:d9:8c:
         40:4a:93:f6:a3:a6:cd:18:ec:91:fe:72:dc:e0:84:45:1a:34:
         73:90:fd:c8:24:7e:e0:d8:17:c8:98:9f:46:14:2d:1a:c8:97:
         fb:4d:1b:6e:a8:5c:29:74:ca:5d:1d:51:63:37:73:80:1c:ad:
         f4:b7:c3:9c:80:35:a6:02:e3:d4:31:3b:19:76:20:82:5f:78:
         09:c8:5e:c1:fa:29:2b:04:41:a4:8f:b3:b4:fe:c9:99:7b:17:
         79:7e:3f:96:e8:ba:59:4e:12:ff:63:87:f8:a3:6a:0c:e1:26:
         f0:74:1d:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 9 12:30:44 2025 by rpki-client