This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36B4580/E19B7B22E21711EEA18E8ABF775412E6/LO0lCJLZepCqEzI6yk5F0lF2klg.mft
File:                     LO0lCJLZepCqEzI6yk5F0lF2klg.mft (raw, json)
Hash identifier:          qIC8biUTDQ54W8Ja0/FwE6lZYdfYXS3XqsJQpTjGfe4=
Subject key identifier:   6D:6B:F2:FA:43:2A:F3:DB:93:41:08:2D:72:99:CA:6E:FC:DF:9C:4B
Authority key identifier: 2C:ED:25:08:92:D9:7A:90:AA:13:32:3A:CA:4E:45:D2:51:76:92:58
Certificate issuer:       /CN=F36B4580AF/serialNumber=2CED250892D97A90AA13323ACA4E45D251769258
Certificate serial:       0299
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/LO0lCJLZepCqEzI6yk5F0lF2klg.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36B4580/E19B7B22E21711EEA18E8ABF775412E6/LO0lCJLZepCqEzI6yk5F0lF2klg.mft
Manifest number:          0298
Signing time:             Mon 22 Dec 2025 04:10:05 +0000
Manifest this update:     Mon 22 Dec 2025 04:10:04 +0000
Manifest next update:     Wed 24 Dec 2025 04:10:04 +0000
Files and hashes:         1: LO0lCJLZepCqEzI6yk5F0lF2klg.crl (hash: Wpa7Y9KYDmEFcWI/+21S1GBrCtVZpTQDueTQRHx+Apk=)
                          2: 33CDD534E21811EEADAEADC1775412E6.roa (hash: zBCcaHSSJiFVaqIDbPbS61APz7NmOnVb/26SMlWLcvQ=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36B4580/E19B7B22E21711EEA18E8ABF775412E6/LO0lCJLZepCqEzI6yk5F0lF2klg.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36B4580/E19B7B22E21711EEA18E8ABF775412E6/LO0lCJLZepCqEzI6yk5F0lF2klg.mft
                          rsync://rpki.afrinic.net/repository/afrinic/LO0lCJLZepCqEzI6yk5F0lF2klg.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 24 Dec 2025 04:10:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 665 (0x299)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36B4580AF, serialNumber=2CED250892D97A90AA13323ACA4E45D251769258
        Validity
            Not Before: Dec 22 04:10:04 2025 GMT
            Not After : Dec 24 04:10:04 2025 GMT
        Subject: CN=6948c49d-020b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:22:28:d3:75:12:f6:8a:ee:d7:6d:ca:4d:6f:
                    fb:c8:55:f2:fe:b0:ac:58:e6:89:da:fa:6b:92:b6:
                    42:f3:d0:4a:77:49:55:47:c5:0e:d4:ac:b2:c0:7b:
                    08:c5:5b:0f:85:88:33:69:a0:3d:dc:ad:c3:1f:9a:
                    cd:21:93:77:37:f0:42:65:8d:62:2b:b9:c5:ab:c4:
                    b9:91:9b:79:67:23:09:83:9a:c1:1b:f1:5b:a5:24:
                    8a:70:b0:3b:63:5c:42:d2:5d:79:68:14:15:06:01:
                    3f:21:4b:bf:08:70:a3:cb:a3:95:96:60:fe:6f:ef:
                    66:9e:7c:93:84:f6:9a:42:98:1f:88:c1:80:1d:82:
                    c3:a8:cf:88:00:7c:09:8b:8d:d1:b6:12:ac:5b:62:
                    ee:c2:ec:7d:02:eb:a0:78:6c:95:e2:0f:35:f6:a5:
                    29:21:6f:25:50:d6:a4:33:d3:7f:3e:55:2c:51:2e:
                    e4:76:60:bc:22:13:62:dd:77:be:3f:48:9f:7b:b4:
                    0c:cf:7b:f3:a8:65:4f:03:7e:ae:56:ee:aa:71:77:
                    12:f0:ea:24:c0:f8:a2:3f:c1:36:c0:f4:78:af:f2:
                    48:5d:e0:8e:4e:71:52:82:30:df:17:40:92:c3:2e:
                    c4:cd:fd:1b:a7:46:0c:59:91:06:f0:e7:cd:42:90:
                    80:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:6B:F2:FA:43:2A:F3:DB:93:41:08:2D:72:99:CA:6E:FC:DF:9C:4B
            X509v3 Authority Key Identifier:
                keyid:2C:ED:25:08:92:D9:7A:90:AA:13:32:3A:CA:4E:45:D2:51:76:92:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36B4580/E19B7B22E21711EEA18E8ABF775412E6/LO0lCJLZepCqEzI6yk5F0lF2klg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/LO0lCJLZepCqEzI6yk5F0lF2klg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B4580/E19B7B22E21711EEA18E8ABF775412E6/LO0lCJLZepCqEzI6yk5F0lF2klg.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ba:61:e9:5f:28:fb:31:b1:cd:47:eb:4a:b8:f2:14:dd:f9:3b:
         6e:0d:f9:26:02:01:c1:99:8c:2b:96:9a:2f:09:42:22:18:7f:
         46:9d:ab:55:74:33:08:1e:51:35:01:c7:d8:f7:a2:aa:fa:77:
         43:72:6e:4f:d7:f8:8f:1e:f6:04:b6:ca:fd:3d:4b:d1:f8:2f:
         5a:93:94:41:9d:31:67:e5:70:db:32:40:ae:ed:c9:04:49:c4:
         65:7d:c9:07:35:bb:24:ce:60:16:3a:dd:31:1b:e5:cd:7e:cf:
         a3:fb:8e:94:58:6b:98:1a:af:02:ba:46:0e:fb:5f:d3:bb:09:
         60:f8:40:fd:3a:bc:8a:12:c3:37:aa:9a:de:2e:a9:08:6e:3b:
         a4:3b:c2:43:a6:c4:c4:92:b3:da:d9:20:54:aa:93:9f:13:53:
         93:e6:7f:7c:4a:94:da:e9:c9:a9:4c:ad:5a:a2:cd:39:74:89:
         3a:b4:a5:ce:42:60:fc:74:7f:3e:02:36:90:1e:90:d0:31:2a:
         30:8a:9b:fc:0f:c3:0a:58:de:59:ef:0a:28:25:79:b3:8a:c7:
         ce:d6:30:4b:e8:19:68:ba:d1:30:cf:38:a2:ee:5e:d3:c0:44:
         7f:9f:43:24:a2:e3:08:4e:6d:77:b4:a6:73:02:84:20:34:2c:
         97:2b:6b:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 01:56:33 2025 by rpki-client