This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36B49FA/A255919C1C1C11E6BA1E5C0CF8AEA228/_VmsIHc1mw1yPSCqmZqOFqhLQZM.mft
File:                     _VmsIHc1mw1yPSCqmZqOFqhLQZM.mft (raw, json)
Hash identifier:          Yd5WM1UMbbAu4+2sukzxoIZKkC3gEWDQ+I0gB756QAU=
Subject key identifier:   A6:0A:AC:D8:5F:82:E9:20:2E:BE:C7:96:63:87:73:C1:BA:04:CD:96
Authority key identifier: FD:59:AC:20:77:35:9B:0D:72:3D:20:AA:99:9A:8E:16:A8:4B:41:93
Certificate issuer:       /CN=F36B49FAAF/serialNumber=FD59AC2077359B0D723D20AA999A8E16A84B4193
Certificate serial:       0DF2
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/_VmsIHc1mw1yPSCqmZqOFqhLQZM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36B49FA/A255919C1C1C11E6BA1E5C0CF8AEA228/_VmsIHc1mw1yPSCqmZqOFqhLQZM.mft
Manifest number:          0DF1
Signing time:             Tue 09 Dec 2025 01:01:25 +0000
Manifest this update:     Tue 09 Dec 2025 01:01:24 +0000
Manifest next update:     Thu 11 Dec 2025 01:01:24 +0000
Files and hashes:         1: _VmsIHc1mw1yPSCqmZqOFqhLQZM.crl (hash: 2kJIBwoBUw9j30EZDapTX5vLUEEEKUwSMIy9ngJZsMM=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36B49FA/A255919C1C1C11E6BA1E5C0CF8AEA228/_VmsIHc1mw1yPSCqmZqOFqhLQZM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36B49FA/A255919C1C1C11E6BA1E5C0CF8AEA228/_VmsIHc1mw1yPSCqmZqOFqhLQZM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/_VmsIHc1mw1yPSCqmZqOFqhLQZM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 11 Dec 2025 01:01:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3570 (0xdf2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36B49FAAF, serialNumber=FD59AC2077359B0D723D20AA999A8E16A84B4193
        Validity
            Not Before: Dec  9 01:01:24 2025 GMT
            Not After : Dec 11 01:01:24 2025 GMT
        Subject: CN=693774e5-74d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:a8:f6:94:97:da:91:96:04:69:b1:17:8b:1e:
                    7f:95:b9:55:11:08:ac:68:6d:2d:92:ee:11:37:94:
                    4b:a7:27:5d:5a:a3:54:9c:73:2e:18:d4:4f:02:f2:
                    dc:bf:37:4a:93:89:1b:3b:40:1a:1c:9b:25:5b:fd:
                    57:2f:d6:92:d6:38:b3:b3:f5:f5:7d:a6:63:44:99:
                    83:e5:6f:77:95:00:75:9b:1d:5f:88:cd:37:1a:44:
                    08:62:42:e3:29:ec:a2:c8:3e:54:04:47:ae:6c:39:
                    21:90:8c:23:f5:32:3a:03:45:cf:88:5f:86:6f:30:
                    27:86:72:96:3e:af:f4:26:44:00:b6:aa:72:27:02:
                    b4:17:c6:a2:7e:50:06:6e:9a:df:8d:66:d3:84:f2:
                    03:b3:e5:09:0c:7b:50:4a:bd:e3:3e:1f:03:fb:1a:
                    59:f0:97:a7:6e:f4:53:c9:3f:08:2e:f7:bf:b9:8d:
                    a9:ef:b2:d5:39:50:e1:7c:1d:4f:22:15:bd:4a:29:
                    11:03:cd:4b:1b:58:af:82:17:92:4f:13:78:8d:1e:
                    83:24:f6:e4:e1:36:2f:9b:ba:9b:10:05:b1:4b:56:
                    62:c8:3b:48:d5:b8:34:f0:5c:1c:bf:f7:0d:b3:1e:
                    30:71:a6:00:f5:89:74:14:1b:61:3b:e8:b5:3f:09:
                    d0:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:0A:AC:D8:5F:82:E9:20:2E:BE:C7:96:63:87:73:C1:BA:04:CD:96
            X509v3 Authority Key Identifier:
                keyid:FD:59:AC:20:77:35:9B:0D:72:3D:20:AA:99:9A:8E:16:A8:4B:41:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36B49FA/A255919C1C1C11E6BA1E5C0CF8AEA228/_VmsIHc1mw1yPSCqmZqOFqhLQZM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/_VmsIHc1mw1yPSCqmZqOFqhLQZM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B49FA/A255919C1C1C11E6BA1E5C0CF8AEA228/_VmsIHc1mw1yPSCqmZqOFqhLQZM.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:58:5b:cf:5c:14:a3:57:68:af:88:4e:71:b6:96:44:75:d9:
         a8:8e:e9:6d:a5:1e:ca:7c:75:00:11:21:3c:d4:43:c6:5a:d8:
         d1:2f:02:9f:38:7b:3a:c7:ad:7e:6f:f9:c3:31:a0:81:4c:91:
         6c:0e:98:14:45:24:fe:2c:02:d3:53:d1:09:20:b5:c8:0f:55:
         14:0e:a4:21:d1:37:2f:3f:26:07:98:ec:cb:64:ae:4b:dc:5b:
         78:d9:b1:cf:c1:67:99:2b:d8:2e:1c:55:55:aa:73:63:e5:58:
         0d:1a:07:10:3e:e1:9b:39:fe:02:6a:70:88:0d:36:3d:93:a4:
         b3:ea:6f:95:4b:b2:c2:b7:a1:dd:98:5c:7d:c1:ba:e5:0e:67:
         a8:63:7a:5f:bf:a2:07:a7:d9:2e:70:9e:94:b8:37:30:2b:fd:
         30:5e:63:d1:5b:1c:4e:a2:3d:10:e2:89:e5:c8:58:22:22:7a:
         b5:39:5e:62:0a:bd:5c:4c:0b:8c:f5:48:88:1f:3b:a5:19:35:
         3a:ca:35:15:38:ea:e0:ae:cf:15:1b:9d:2b:f5:ff:6e:8b:c5:
         d3:a9:5f:b3:a2:d1:a2:3e:9c:9a:38:1d:00:da:bb:4b:c5:77:
         c4:bf:fe:40:79:b9:ec:63:24:b7:35:db:68:8d:ae:75:53:1d:
         76:98:f4:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 9 12:31:58 2025 by rpki-client