This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36B2D09/0841ED9827E511EFA5CFA4137DDC24C2/EoXp9a6JDQnrah2cFSaY2CVpQXM.mft
File:                     EoXp9a6JDQnrah2cFSaY2CVpQXM.mft (raw, json)
Hash identifier:          XUsy0VphkBS7IhMVzuo7sQ0yPlCYsNWJb38ZhyNh/N4=
Subject key identifier:   77:CB:F0:6B:41:72:94:9F:C0:D7:5D:8A:59:9D:BA:DC:28:B5:0E:7E
Authority key identifier: 12:85:E9:F5:AE:89:0D:09:EB:6A:1D:9C:15:26:98:D8:25:69:41:73
Certificate issuer:       /CN=F36B2D09AF/serialNumber=1285E9F5AE890D09EB6A1D9C152698D825694173
Certificate serial:       0232
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/EoXp9a6JDQnrah2cFSaY2CVpQXM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36B2D09/0841ED9827E511EFA5CFA4137DDC24C2/EoXp9a6JDQnrah2cFSaY2CVpQXM.mft
Manifest number:          0230
Signing time:             Sun 07 Dec 2025 04:14:58 +0000
Manifest this update:     Sun 07 Dec 2025 04:14:57 +0000
Manifest next update:     Tue 09 Dec 2025 04:14:57 +0000
Files and hashes:         1: EoXp9a6JDQnrah2cFSaY2CVpQXM.crl (hash: YVleLpiwN8KpI/d8f2UH0w9NAEU+NMmhTX1ItG3HZos=)
                          2: 81A877024B1B11EF97889885762E951A.roa (hash: Jb7FsCfPieRiHewZHkBoyTfyXOoZ5GSQBgW72tN/jmY=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36B2D09/0841ED9827E511EFA5CFA4137DDC24C2/EoXp9a6JDQnrah2cFSaY2CVpQXM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36B2D09/0841ED9827E511EFA5CFA4137DDC24C2/EoXp9a6JDQnrah2cFSaY2CVpQXM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/EoXp9a6JDQnrah2cFSaY2CVpQXM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 09 Dec 2025 04:14:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 562 (0x232)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36B2D09AF, serialNumber=1285E9F5AE890D09EB6A1D9C152698D825694173
        Validity
            Not Before: Dec  7 04:14:57 2025 GMT
            Not After : Dec  9 04:14:57 2025 GMT
        Subject: CN=6934ff41-de12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:52:c1:59:1c:77:65:ec:52:e2:76:45:e8:82:
                    af:38:88:30:30:ac:c3:11:eb:41:36:01:c3:6d:58:
                    73:44:3c:d2:55:b8:a8:36:f0:f4:b2:a2:13:b7:58:
                    47:2f:6e:14:2b:5b:2b:15:b5:89:e9:cf:dc:56:51:
                    17:e0:b6:ae:c4:54:22:25:5d:4f:9d:80:26:8f:94:
                    5c:ec:6f:b6:d0:da:83:70:20:e5:68:a9:29:6e:61:
                    cd:46:ea:7c:bd:db:51:52:b7:36:b9:83:d5:cf:15:
                    5e:03:a2:dd:5e:29:38:6b:fb:e3:3d:1b:c7:86:44:
                    42:69:56:e1:05:3e:31:76:f3:41:e8:3f:a5:92:80:
                    86:c2:19:b7:2d:35:5c:8c:26:ed:55:9f:a2:a9:b6:
                    ae:63:bd:7b:f6:d2:b3:d6:b6:0f:82:eb:cc:a3:15:
                    5b:34:d6:fe:3c:27:f9:02:fd:c6:6f:36:6c:8e:c9:
                    44:bf:d4:6e:38:c1:65:8f:41:be:c3:1e:cb:c7:5e:
                    3d:11:dc:1a:71:9e:d6:e8:be:c3:2a:c3:f6:04:d0:
                    3c:c2:93:bc:70:ef:eb:1f:cd:e1:03:f7:64:a2:ad:
                    93:5f:dd:ff:64:43:23:0c:53:eb:ae:7a:ce:d6:7d:
                    85:ce:61:0e:59:b1:74:b0:e3:58:fe:87:27:e6:92:
                    8c:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:CB:F0:6B:41:72:94:9F:C0:D7:5D:8A:59:9D:BA:DC:28:B5:0E:7E
            X509v3 Authority Key Identifier:
                keyid:12:85:E9:F5:AE:89:0D:09:EB:6A:1D:9C:15:26:98:D8:25:69:41:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36B2D09/0841ED9827E511EFA5CFA4137DDC24C2/EoXp9a6JDQnrah2cFSaY2CVpQXM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/EoXp9a6JDQnrah2cFSaY2CVpQXM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B2D09/0841ED9827E511EFA5CFA4137DDC24C2/EoXp9a6JDQnrah2cFSaY2CVpQXM.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:0c:a2:f0:ad:6e:54:98:69:5b:f9:0e:54:83:63:ce:9f:1e:
         30:1e:c0:de:23:12:f0:28:19:6e:a9:08:30:89:98:b1:2b:f2:
         a9:db:30:b6:c6:4c:a0:a1:d0:44:5b:33:ab:47:c8:59:0c:a1:
         c8:9b:be:aa:6e:b2:bf:23:a3:be:34:d2:3d:ec:16:d3:eb:d2:
         66:8b:f3:a6:d2:05:47:ce:d0:33:9a:6c:57:79:d9:35:ab:f0:
         d9:6c:ff:5d:34:62:33:83:5d:c6:71:33:cf:67:04:16:f8:bc:
         78:fc:ab:ee:c2:9c:ff:18:23:1a:33:33:91:f6:ef:13:a6:64:
         bc:83:75:d1:f6:f3:8d:47:9b:d0:61:bc:de:dc:cd:db:7a:09:
         c9:09:f8:b8:44:90:ad:82:12:61:39:74:46:8e:e2:ca:e7:19:
         b9:ae:36:0d:d5:bf:cf:98:93:a1:ac:43:17:13:f0:90:78:a8:
         b4:7e:ef:f9:d1:e4:d4:ba:a3:d3:b4:6f:b2:78:88:84:71:ad:
         9f:b1:2e:be:fb:b0:68:94:0a:5d:b5:db:df:b5:2f:7e:d7:62:
         3a:f3:52:27:e0:5d:d7:79:0b:9f:0d:56:d7:1e:70:a9:26:36:
         a0:56:46:a6:0c:9e:d1:95:f5:a4:b4:9d:b5:79:5e:85:39:1c:
         15:59:91:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 8 05:03:31 2025 by rpki-client