This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36ADFB8/17B4B1A8E95D11EB87F37562D8A014CE/9oCEVKFPM27F0FtEVliFDrv9ZWU.mft
File:                     9oCEVKFPM27F0FtEVliFDrv9ZWU.mft (raw, json)
Hash identifier:          YV/6sK5N1X4ShqVB2WSRKqbvzHCgvQv9NP3AleCcxGM=
Subject key identifier:   0C:CC:82:31:72:D9:75:00:DB:71:7D:FE:42:C5:D0:72:DD:AF:46:84
Authority key identifier: F6:80:84:54:A1:4F:33:6E:C5:D0:5B:44:56:58:85:0E:BB:FD:65:65
Certificate issuer:       /CN=F36ADFB8AF/serialNumber=F6808454A14F336EC5D05B445658850EBBFD6565
Certificate serial:       0675
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/9oCEVKFPM27F0FtEVliFDrv9ZWU.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36ADFB8/17B4B1A8E95D11EB87F37562D8A014CE/9oCEVKFPM27F0FtEVliFDrv9ZWU.mft
Manifest number:          0673
Signing time:             Tue 09 Dec 2025 02:16:35 +0000
Manifest this update:     Tue 09 Dec 2025 02:16:34 +0000
Manifest next update:     Thu 11 Dec 2025 02:16:34 +0000
Files and hashes:         1: 9oCEVKFPM27F0FtEVliFDrv9ZWU.crl (hash: BEa8/5qWfFL103b0CHWmxMXyGiRqgC7w0ZToLsxf54Q=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36ADFB8/17B4B1A8E95D11EB87F37562D8A014CE/9oCEVKFPM27F0FtEVliFDrv9ZWU.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36ADFB8/17B4B1A8E95D11EB87F37562D8A014CE/9oCEVKFPM27F0FtEVliFDrv9ZWU.mft
                          rsync://rpki.afrinic.net/repository/afrinic/9oCEVKFPM27F0FtEVliFDrv9ZWU.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 11 Dec 2025 02:16:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1653 (0x675)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36ADFB8AF, serialNumber=F6808454A14F336EC5D05B445658850EBBFD6565
        Validity
            Not Before: Dec  9 02:16:34 2025 GMT
            Not After : Dec 11 02:16:34 2025 GMT
        Subject: CN=69378683-f1a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:e2:f6:b7:6a:19:81:70:a5:cd:17:22:7d:2d:
                    fb:b4:10:d0:5e:6d:37:57:af:00:56:6f:a2:1c:87:
                    74:c6:68:fe:56:70:93:98:ea:43:44:51:1e:7c:b0:
                    30:cb:35:88:bd:59:8a:b0:1c:b3:13:b9:df:30:4a:
                    be:11:3e:34:4e:e6:7e:19:72:c6:05:b0:88:91:47:
                    7f:46:82:2e:6a:99:f4:e8:e2:cd:eb:8b:b0:de:1a:
                    bf:29:17:bf:41:e8:79:52:f3:8c:7c:f4:6e:4d:04:
                    88:2b:cd:45:73:19:b2:12:17:b7:ae:9e:9a:f6:1b:
                    bd:c3:20:49:3a:e3:d1:9c:23:67:e8:18:15:b0:48:
                    87:65:96:aa:47:c1:51:3b:e1:44:41:c4:b3:22:a9:
                    82:92:52:2b:04:6c:30:28:c4:1e:48:f3:32:74:18:
                    89:f4:d3:a6:c0:11:67:6e:29:71:c3:13:b8:6a:22:
                    e7:6c:06:1b:0f:fa:c9:77:b4:50:43:60:6f:08:5f:
                    7b:2d:79:bf:b2:ac:ba:84:be:af:09:9a:1c:34:2e:
                    96:ec:d4:9a:f4:1e:21:c8:92:d9:c0:ff:30:fd:6d:
                    da:34:30:19:c1:81:eb:bd:ad:e2:6e:5c:39:e0:84:
                    0f:f8:f2:c1:25:3a:b3:6e:b0:ed:b1:04:a1:a1:cd:
                    19:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:CC:82:31:72:D9:75:00:DB:71:7D:FE:42:C5:D0:72:DD:AF:46:84
            X509v3 Authority Key Identifier:
                keyid:F6:80:84:54:A1:4F:33:6E:C5:D0:5B:44:56:58:85:0E:BB:FD:65:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36ADFB8/17B4B1A8E95D11EB87F37562D8A014CE/9oCEVKFPM27F0FtEVliFDrv9ZWU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/9oCEVKFPM27F0FtEVliFDrv9ZWU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36ADFB8/17B4B1A8E95D11EB87F37562D8A014CE/9oCEVKFPM27F0FtEVliFDrv9ZWU.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:09:0e:14:99:98:b7:5b:d4:51:21:6e:e9:c7:ee:78:78:92:
         bf:b7:2d:db:f4:07:11:67:1c:fd:a6:19:41:b7:a7:09:54:f5:
         4c:cf:2e:7f:7f:ed:bd:1c:31:47:95:32:8f:51:1e:a4:ab:cc:
         8e:9e:86:9c:38:be:0e:d8:32:fa:8f:aa:85:9f:dd:73:80:61:
         3c:a1:ef:b4:41:fd:32:61:6d:e1:91:aa:17:a8:71:0b:3a:f7:
         e7:bb:db:bd:0e:7b:52:63:43:e7:da:db:4c:3f:84:b6:fe:b1:
         ce:14:cb:c4:6e:88:97:df:3c:da:1d:95:22:c1:96:c3:68:14:
         ac:f6:26:66:68:8e:f7:26:03:ef:e9:aa:44:04:4e:c1:7b:82:
         3b:0f:31:58:dd:33:46:f0:9c:ff:80:de:3a:cf:f9:d1:06:77:
         b3:86:28:47:7d:bb:3d:0f:a0:33:55:3b:77:8e:af:c4:5b:58:
         31:fc:68:ac:81:3e:b8:40:90:73:7d:4f:71:df:7e:93:a3:9a:
         22:d1:2b:4d:05:bb:1d:c3:23:32:0b:1e:e3:c8:b5:11:07:50:
         5a:5d:3d:0e:38:4c:94:ce:dc:d8:53:54:09:75:c9:2b:98:61:
         c4:e5:cd:b2:ba:04:59:9c:d6:e2:36:9a:99:e9:55:05:1b:eb:
         e4:e7:0f:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 9 12:18:26 2025 by rpki-client