This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36B1EE5/21831C1C4F1511EFB7A68685762E951A/l8yJP0_VIPZzaAb5eWJZm3eOG2M.mft
File:                     l8yJP0_VIPZzaAb5eWJZm3eOG2M.mft (raw, json)
Hash identifier:          gZtOBcEur0PQJYqCMeZI3PCcuwhGiW9itJ1HVjD08xo=
Subject key identifier:   82:EF:B7:04:22:05:26:3D:C1:F8:4D:C0:50:B6:54:D8:8F:82:73:E6
Authority key identifier: 97:CC:89:3F:4F:D5:20:F6:73:68:06:F9:79:62:59:9B:77:8E:1B:63
Certificate issuer:       /CN=F36B1EE5AF/serialNumber=97CC893F4FD520F6736806F97962599B778E1B63
Certificate serial:       0205
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/l8yJP0_VIPZzaAb5eWJZm3eOG2M.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36B1EE5/21831C1C4F1511EFB7A68685762E951A/l8yJP0_VIPZzaAb5eWJZm3eOG2M.mft
Manifest number:          0202
Signing time:             Tue 09 Dec 2025 04:25:43 +0000
Manifest this update:     Tue 09 Dec 2025 04:25:42 +0000
Manifest next update:     Thu 11 Dec 2025 04:25:42 +0000
Files and hashes:         1: l8yJP0_VIPZzaAb5eWJZm3eOG2M.crl (hash: FzhWLTLXmHal4uoTch7+6PGpNlWh/hYeTMwgb9MIWsw=)
                          2: 15FF8A604F2E11EFBF7DAA5D762E951A.roa (hash: Ji+PkrLYVd8mg+kmjzLysu+cTidIjguKCtckW26wTJg=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36B1EE5/21831C1C4F1511EFB7A68685762E951A/l8yJP0_VIPZzaAb5eWJZm3eOG2M.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36B1EE5/21831C1C4F1511EFB7A68685762E951A/l8yJP0_VIPZzaAb5eWJZm3eOG2M.mft
                          rsync://rpki.afrinic.net/repository/afrinic/l8yJP0_VIPZzaAb5eWJZm3eOG2M.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 11 Dec 2025 04:25:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 517 (0x205)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36B1EE5AF, serialNumber=97CC893F4FD520F6736806F97962599B778E1B63
        Validity
            Not Before: Dec  9 04:25:42 2025 GMT
            Not After : Dec 11 04:25:42 2025 GMT
        Subject: CN=6937a4c7-7b50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:af:22:7d:84:07:37:24:e7:63:a5:d2:0a:26:
                    e5:78:ce:e3:ac:07:13:d2:90:41:80:d8:16:61:11:
                    68:ae:26:c6:a5:55:ea:92:9d:27:fe:a6:a5:90:a6:
                    bc:47:59:78:d1:34:c7:07:b0:8f:be:ce:71:f9:b7:
                    0b:39:fd:3a:9a:8c:0e:6a:95:ac:57:04:30:c9:56:
                    e7:e3:0f:7d:67:df:b2:31:3e:7d:d3:06:6e:88:7b:
                    33:79:ae:16:c9:5c:0b:85:9f:b5:af:e6:48:f1:5c:
                    a9:d3:fa:ee:6f:e1:98:80:88:86:96:f7:3a:74:86:
                    a7:fe:ee:9c:77:25:50:57:ab:e6:1c:ad:f2:29:8c:
                    dd:21:dd:20:fb:8c:b2:4b:f3:95:26:58:2d:14:c1:
                    ba:a3:68:15:f3:85:d8:ec:99:e5:84:12:dc:4b:04:
                    97:08:72:74:66:35:75:fc:42:87:f0:8d:a4:b8:e9:
                    de:16:a3:84:66:ec:fc:70:5c:93:7e:c4:20:9e:5f:
                    f1:be:80:08:67:38:b6:5e:c9:fc:fe:ee:f0:36:74:
                    8d:ed:0b:8d:35:8b:d4:ec:1c:49:8f:b1:26:e2:39:
                    8f:9f:4e:09:4a:0d:bd:e7:b1:41:27:9b:56:f7:c5:
                    4d:bc:61:b1:cf:25:59:7e:63:43:81:5b:69:d5:ca:
                    32:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:EF:B7:04:22:05:26:3D:C1:F8:4D:C0:50:B6:54:D8:8F:82:73:E6
            X509v3 Authority Key Identifier:
                keyid:97:CC:89:3F:4F:D5:20:F6:73:68:06:F9:79:62:59:9B:77:8E:1B:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36B1EE5/21831C1C4F1511EFB7A68685762E951A/l8yJP0_VIPZzaAb5eWJZm3eOG2M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/l8yJP0_VIPZzaAb5eWJZm3eOG2M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B1EE5/21831C1C4F1511EFB7A68685762E951A/l8yJP0_VIPZzaAb5eWJZm3eOG2M.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:fb:e9:65:07:38:6a:a8:9a:6b:8f:bf:61:58:6a:f1:6a:13:
         41:63:02:5f:9c:a7:4f:d6:28:da:d9:4b:a3:9a:5f:cc:47:f8:
         76:38:f5:ee:14:aa:df:d6:61:e6:b6:4f:da:04:a4:f6:53:b9:
         15:1d:2b:27:98:e7:50:6f:5e:f4:6a:0e:4b:b3:bd:5a:57:42:
         a9:03:df:6c:25:c2:73:25:f8:29:e7:5e:a7:42:3c:4a:75:5d:
         87:ce:85:22:3f:27:53:57:bf:e1:a5:26:98:67:42:1a:28:ca:
         e6:b7:4e:80:c5:c2:bf:fa:f6:a9:77:b6:ed:c9:a5:4a:4f:dd:
         d3:d2:42:67:e9:32:43:8a:58:2e:ff:c3:3a:6e:fc:4d:62:ce:
         7f:21:13:08:cd:c3:af:5f:71:78:dd:13:0c:30:cc:8c:d1:73:
         b2:9f:5b:6e:da:d8:a3:8f:b0:78:c2:4d:6e:eb:59:26:d1:38:
         6e:85:96:b3:99:e0:3d:b2:76:20:a2:35:a7:e5:2d:d8:85:d1:
         88:e0:94:b7:c8:51:f4:34:b3:89:b5:fe:c0:d6:68:38:4a:8e:
         fb:58:8a:2d:54:35:24:15:11:88:60:f5:ca:21:e8:a6:42:51:
         8c:d5:1c:ad:88:43:5d:13:72:f8:ed:3e:b3:70:70:c5:78:b4:
         17:fe:80:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 9 12:19:12 2025 by rpki-client