This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36B2802/871341FC0F8B11EA8FF19662F8AEA228/mHRv-zBcIzNDMIo4lctwgmYY_Eg.mft
File:                     mHRv-zBcIzNDMIo4lctwgmYY_Eg.mft (raw, json)
Hash identifier:          IihKezcC5Kxq4UvHKQJ/Ag2t4/3QMZI9eQMpMxOFc/U=
Subject key identifier:   2F:35:89:DA:A0:83:78:99:EB:AD:2B:8C:1D:63:81:0C:84:54:EE:CA
Authority key identifier: 98:74:6F:FB:30:5C:23:33:43:30:8A:38:95:CB:70:82:66:18:FC:48
Certificate issuer:       /CN=F36B2802AF/serialNumber=98746FFB305C233343308A3895CB70826618FC48
Certificate serial:       08D5
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/mHRv-zBcIzNDMIo4lctwgmYY_Eg.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36B2802/871341FC0F8B11EA8FF19662F8AEA228/mHRv-zBcIzNDMIo4lctwgmYY_Eg.mft
Manifest number:          08D5
Signing time:             Tue 09 Dec 2025 01:39:40 +0000
Manifest this update:     Tue 09 Dec 2025 01:39:40 +0000
Manifest next update:     Thu 11 Dec 2025 01:39:40 +0000
Files and hashes:         1: mHRv-zBcIzNDMIo4lctwgmYY_Eg.crl (hash: jhjnJmxHLoSYf6gh9auQJnA1dkTG+w9FZLjUbTvTRd8=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36B2802/871341FC0F8B11EA8FF19662F8AEA228/mHRv-zBcIzNDMIo4lctwgmYY_Eg.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36B2802/871341FC0F8B11EA8FF19662F8AEA228/mHRv-zBcIzNDMIo4lctwgmYY_Eg.mft
                          rsync://rpki.afrinic.net/repository/afrinic/mHRv-zBcIzNDMIo4lctwgmYY_Eg.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 11 Dec 2025 01:39:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2261 (0x8d5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36B2802AF, serialNumber=98746FFB305C233343308A3895CB70826618FC48
        Validity
            Not Before: Dec  9 01:39:40 2025 GMT
            Not After : Dec 11 01:39:40 2025 GMT
        Subject: CN=69377ddc-c406
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:3b:54:b1:c3:ea:d3:95:24:43:ae:62:4b:2c:
                    8b:36:b0:db:89:72:86:bf:cc:c9:32:e6:22:99:26:
                    d7:3d:f9:9c:34:38:ab:fb:b8:28:60:ae:b9:3c:e1:
                    df:a5:1e:22:d5:30:f5:80:2e:f7:f7:9f:f3:89:57:
                    8c:6a:3a:8c:f7:b3:da:f1:c8:73:72:e5:7b:d3:49:
                    0e:3a:cb:75:f3:ea:17:3a:37:1c:37:d4:2a:77:8c:
                    a4:00:f2:dd:d3:86:d2:55:47:b1:cd:fc:4c:02:51:
                    a3:ae:df:66:d7:b8:dc:2f:ce:8a:7a:11:dd:24:d4:
                    cf:45:81:67:2a:f7:49:1d:2f:3a:da:16:78:0c:fa:
                    4e:7b:21:d7:02:56:62:27:87:2d:b8:9b:6c:76:7e:
                    ef:6e:c4:4d:4b:44:be:c0:c4:68:24:04:66:60:49:
                    63:d3:32:10:5a:c2:e8:11:eb:cb:34:63:e4:a6:e1:
                    82:88:11:ba:7a:56:db:cf:86:8b:62:f4:f8:45:64:
                    13:4f:62:c7:d1:f4:78:8e:22:ac:7a:a0:51:97:51:
                    b5:76:a1:89:9f:5b:4d:16:0d:ed:0e:09:12:4a:fe:
                    8d:03:33:39:2a:44:2d:5a:5f:2b:81:1c:4e:f6:eb:
                    11:30:43:d7:64:b3:b3:b2:4e:3c:77:ca:a1:f0:d7:
                    7e:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:35:89:DA:A0:83:78:99:EB:AD:2B:8C:1D:63:81:0C:84:54:EE:CA
            X509v3 Authority Key Identifier:
                keyid:98:74:6F:FB:30:5C:23:33:43:30:8A:38:95:CB:70:82:66:18:FC:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36B2802/871341FC0F8B11EA8FF19662F8AEA228/mHRv-zBcIzNDMIo4lctwgmYY_Eg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/mHRv-zBcIzNDMIo4lctwgmYY_Eg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B2802/871341FC0F8B11EA8FF19662F8AEA228/mHRv-zBcIzNDMIo4lctwgmYY_Eg.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:00:b0:76:26:8b:6d:52:66:71:4e:6a:1f:9d:f1:fd:8c:67:
         a2:22:32:d6:61:8c:f7:f5:92:bf:9b:72:79:1e:3c:4f:b1:bc:
         c9:a0:70:e3:64:16:a2:b5:3f:e7:1f:a9:50:21:83:28:74:d4:
         81:6e:d1:17:63:ee:83:fc:b8:14:cf:86:c1:fe:ef:d4:64:93:
         19:93:e3:e9:12:7c:73:11:2c:4a:bf:33:aa:9b:ea:9f:4d:9b:
         2c:8b:57:db:9c:20:74:46:8d:fd:f5:78:65:b7:57:43:9c:89:
         a1:ae:01:50:fe:13:68:88:75:e1:0c:79:5a:a0:62:f4:8a:17:
         aa:b0:a8:4a:fd:55:c1:b7:62:e9:4b:37:f2:f4:66:b4:ff:6a:
         e6:8f:88:92:cb:54:60:b9:6d:6a:2c:1f:d6:00:69:de:6a:9f:
         10:16:9a:44:c4:c1:c0:65:00:2e:d9:c3:09:07:ea:d4:02:fb:
         60:81:62:86:54:8a:4c:99:c8:08:dc:6e:e7:fd:1e:04:5b:6a:
         60:37:d0:0c:6d:ca:b9:c0:b4:13:ed:40:48:51:ae:85:96:17:
         a6:d7:da:17:81:be:99:ac:46:87:ed:d0:1a:27:b5:cf:db:b2:
         65:78:ed:32:8d:ee:1f:1f:35:9d:fe:e7:a3:4b:94:fd:82:3c:
         22:43:d8:7c
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICCNUwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QjI4MDJBRjExMC8GA1UEBRMoOTg3NDZGRkIzMDVDMjMzMzQzMzA4QTM4OTVDQjcw
ODI2NjE4RkM0ODAeFw0yNTEyMDkwMTM5NDBaFw0yNTEyMTEwMTM5NDBaMBgxFjAU
BgNVBAMTDTY5Mzc3ZGRjLWM0MDYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQD2O1Sxw+rTlSRDrmJLLIs2sNuJcoa/zMky5iKZJtc9+Zw0OKv7uChgrrk8
4d+lHiLVMPWALvf3n/OJV4xqOoz3s9rxyHNy5XvTSQ46y3Xz6hc6Nxw31Cp3jKQA
8t3ThtJVR7HN/EwCUaOu32bXuNwvzop6Ed0k1M9FgWcq90kdLzraFngM+k57IdcC
VmInhy24m2x2fu9uxE1LRL7AxGgkBGZgSWPTMhBawugR68s0Y+Sm4YKIEbp6VtvP
hoti9PhFZBNPYsfR9HiOIqx6oFGXUbV2oYmfW00WDe0OCRJK/o0DMzkqRC1aXyuB
HE726xEwQ9dks7OyTjx3yqHw1371AgMBAAGjggK4MIICtDAdBgNVHQ4EFgQULzWJ
2qCDeJnrrSuMHWOBDIRU7sowHwYDVR0jBBgwFoAUmHRv+zBcIzNDMIo4lctwgmYY
/EgwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkIyODAyLzg3MTM0MUZDMEY4QjExRUE4RkYxOTY2MkY4QUVBMjI4L21IUnYt
ekJjSXpORE1JbzRsY3R3Z21ZWV9FZy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL21IUnYtekJjSXpORE1JbzRsY3R3Z21ZWV9FZy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2QjI4MDIvODcxMzQxRkMwRjhCMTFFQThGRjE5NjYyRjhB
RUEyMjgvbUhSdi16QmNJek5ETUlvNGxjdHdnbVlZX0VnLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQARALB2JottUmZxTmofnfH9jGeiIjLW
YYz39ZK/m3J5HjxPsbzJoHDjZBaitT/nH6lQIYModNSBbtEXY+6D/LgUz4bB/u/U
ZJMZk+PpEnxzESxKvzOqm+qfTZssi1fbnCB0Ro399Xhlt1dDnImhrgFQ/hNoiHXh
DHlaoGL0iheqsKhK/VXBt2LpSzfy9Ga0/2rmj4iSy1RguW1qLB/WAGneap8QFppE
xMHAZQAu2cMJB+rUAvtggWKGVIpMmcgI3G7n/R4EW2pgN9AMbcq5wLQT7UBIUa6F
lhem19oXgb6ZrEaH7dAaJ7XP27JleO0yje4fHzWd/uejS5T9gjwiQ9h8
-----END CERTIFICATE-----
Generated at Tue Dec 9 12:16:20 2025 by rpki-client