This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36B4580/E19B7B22E21711EEA18E8ABF775412E6/LO0lCJLZepCqEzI6yk5F0lF2klg.mft
File:                     LO0lCJLZepCqEzI6yk5F0lF2klg.mft (raw, json)
Hash identifier:          4/XIcu2DSUUbrwjDQr2feSwAcooQTNymckdT4J/OH/A=
Subject key identifier:   9C:1F:62:AE:CD:31:69:F2:2A:07:2C:1D:D1:0B:66:B1:37:0F:67:A1
Authority key identifier: 2C:ED:25:08:92:D9:7A:90:AA:13:32:3A:CA:4E:45:D2:51:76:92:58
Certificate issuer:       /CN=F36B4580AF/serialNumber=2CED250892D97A90AA13323ACA4E45D251769258
Certificate serial:       028C
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/LO0lCJLZepCqEzI6yk5F0lF2klg.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36B4580/E19B7B22E21711EEA18E8ABF775412E6/LO0lCJLZepCqEzI6yk5F0lF2klg.mft
Manifest number:          028B
Signing time:             Tue 09 Dec 2025 04:08:42 +0000
Manifest this update:     Tue 09 Dec 2025 04:08:41 +0000
Manifest next update:     Thu 11 Dec 2025 04:08:41 +0000
Files and hashes:         1: LO0lCJLZepCqEzI6yk5F0lF2klg.crl (hash: RdiEDXcXX5j8DlKUQo5DlMiNW0x5Ls2murC7r3APkVc=)
                          2: 33CDD534E21811EEADAEADC1775412E6.roa (hash: zBCcaHSSJiFVaqIDbPbS61APz7NmOnVb/26SMlWLcvQ=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36B4580/E19B7B22E21711EEA18E8ABF775412E6/LO0lCJLZepCqEzI6yk5F0lF2klg.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36B4580/E19B7B22E21711EEA18E8ABF775412E6/LO0lCJLZepCqEzI6yk5F0lF2klg.mft
                          rsync://rpki.afrinic.net/repository/afrinic/LO0lCJLZepCqEzI6yk5F0lF2klg.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 11 Dec 2025 04:08:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 652 (0x28c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36B4580AF, serialNumber=2CED250892D97A90AA13323ACA4E45D251769258
        Validity
            Not Before: Dec  9 04:08:41 2025 GMT
            Not After : Dec 11 04:08:41 2025 GMT
        Subject: CN=6937a0ca-4e38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:0e:fd:0c:fb:a6:d3:0e:e7:2d:9a:2d:4d:9f:
                    83:6a:33:30:19:14:63:1d:09:80:8c:b7:dd:98:72:
                    41:1d:0b:50:02:5b:87:b4:4f:9c:68:3e:12:a4:5e:
                    6d:63:ba:f9:ec:2a:a4:ec:67:9c:3f:f5:db:07:52:
                    b1:62:71:6f:c6:bd:68:fb:0e:94:9e:12:4a:da:40:
                    87:3f:d2:d8:40:43:02:cf:7c:3f:77:f8:2a:85:ba:
                    79:fb:9a:7b:f0:f7:cc:45:35:44:a7:aa:0c:79:06:
                    90:fc:b0:31:10:b6:85:7c:92:b2:d2:08:85:38:ca:
                    23:f7:dc:bf:84:d8:1a:fd:a7:b6:ad:1b:37:66:b0:
                    75:31:a4:67:5f:da:66:92:b1:f7:b8:b6:97:aa:5f:
                    31:78:84:ed:b0:0e:bc:af:e5:de:da:aa:05:a6:2e:
                    3f:2a:a3:fa:22:48:3c:29:c6:c7:fa:a7:94:43:32:
                    71:8e:4d:3a:d4:b4:0d:d9:53:fa:60:d0:ac:ba:50:
                    c1:86:59:44:61:5c:7a:48:58:f3:05:df:f4:38:d2:
                    6d:cd:36:16:64:29:eb:a6:dc:15:fa:0b:b2:2c:86:
                    bf:d2:4a:41:15:c5:ea:e4:e6:eb:79:72:82:1a:e8:
                    1b:61:af:c0:80:7d:e2:09:b9:9e:22:89:b8:bd:f4:
                    79:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:1F:62:AE:CD:31:69:F2:2A:07:2C:1D:D1:0B:66:B1:37:0F:67:A1
            X509v3 Authority Key Identifier:
                keyid:2C:ED:25:08:92:D9:7A:90:AA:13:32:3A:CA:4E:45:D2:51:76:92:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36B4580/E19B7B22E21711EEA18E8ABF775412E6/LO0lCJLZepCqEzI6yk5F0lF2klg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/LO0lCJLZepCqEzI6yk5F0lF2klg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B4580/E19B7B22E21711EEA18E8ABF775412E6/LO0lCJLZepCqEzI6yk5F0lF2klg.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:5f:c9:fe:05:2c:63:9a:5c:56:fd:3b:79:ae:2b:16:54:01:
         93:f1:ac:10:dc:13:0f:5a:76:42:8e:c2:0f:4a:01:41:d2:ec:
         3e:ef:a3:25:de:ba:39:f0:f8:e5:13:07:4e:34:23:26:38:9b:
         f6:3d:42:35:c0:3f:b8:58:5b:47:54:60:6c:1b:8e:c2:d9:bb:
         54:c0:45:b8:9b:ae:0b:99:3e:a1:14:88:ed:0f:aa:e4:00:5d:
         27:ae:88:1b:22:d7:ec:07:18:da:58:82:ac:8d:96:49:88:fd:
         71:18:e9:d3:d4:f0:3f:45:78:40:6f:24:48:e9:50:46:94:d3:
         b9:ae:67:dd:f3:48:27:ba:f7:40:8e:07:8f:50:5c:64:95:7f:
         90:7d:93:12:f1:98:79:bb:8b:33:38:c0:63:11:59:ef:e0:99:
         63:21:b2:50:56:d4:a9:02:d9:84:1e:20:8d:ae:cf:24:4c:a3:
         78:a6:e6:f2:8a:8d:37:6b:b4:f3:d4:6c:99:a4:31:de:8f:64:
         65:3e:67:ca:5a:c4:97:d8:e9:e2:4d:f6:ed:f5:ff:a4:6a:2c:
         e0:38:9b:a8:e1:d5:4b:1b:06:53:0a:7c:7a:87:f0:d4:8f:e9:
         fe:1f:8e:dd:7b:cc:89:93:89:97:e8:50:5a:5c:dd:72:1f:48:
         de:b2:0b:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 9 12:19:57 2025 by rpki-client