This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36B5362/B104353AA03911F0B898B5A8DAE4EC9C/mCXqoxQ6KQj6iJfVIqVAmZGGMts.mft
File:                     mCXqoxQ6KQj6iJfVIqVAmZGGMts.mft (raw, json)
Hash identifier:          dvQxujtyGObbeoQ2uhu9dmMaUdI0QKXNtmRb8VQ+AVY=
Subject key identifier:   EC:FA:D2:75:9B:51:69:CA:22:D8:23:10:E0:F9:33:B9:CF:99:AA:D6
Authority key identifier: 98:25:EA:A3:14:3A:29:08:FA:88:97:D5:22:A5:40:99:91:86:32:DB
Certificate issuer:       /CN=F36B5362AF/serialNumber=9825EAA3143A2908FA8897D522A54099918632DB
Certificate serial:       48
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/mCXqoxQ6KQj6iJfVIqVAmZGGMts.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36B5362/B104353AA03911F0B898B5A8DAE4EC9C/mCXqoxQ6KQj6iJfVIqVAmZGGMts.mft
Manifest number:          47
Signing time:             Tue 09 Dec 2025 05:16:12 +0000
Manifest this update:     Tue 09 Dec 2025 05:16:11 +0000
Manifest next update:     Thu 11 Dec 2025 05:16:11 +0000
Files and hashes:         1: mCXqoxQ6KQj6iJfVIqVAmZGGMts.crl (hash: +P8RVkOok6CVL9NXRFZ5XKpVo4McrDhGPtvNm+PSC8w=)
                          2: C9A68EA4A28611F086BAC69BDAE4EC9C.roa (hash: 7VlIZ2iujVms/bcZzJtHMjuTIN2+7NdE9XhtEe0/jW8=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36B5362/B104353AA03911F0B898B5A8DAE4EC9C/mCXqoxQ6KQj6iJfVIqVAmZGGMts.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36B5362/B104353AA03911F0B898B5A8DAE4EC9C/mCXqoxQ6KQj6iJfVIqVAmZGGMts.mft
                          rsync://rpki.afrinic.net/repository/afrinic/mCXqoxQ6KQj6iJfVIqVAmZGGMts.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 11 Dec 2025 05:16:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 72 (0x48)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36B5362AF, serialNumber=9825EAA3143A2908FA8897D522A54099918632DB
        Validity
            Not Before: Dec  9 05:16:11 2025 GMT
            Not After : Dec 11 05:16:11 2025 GMT
        Subject: CN=6937b09c-eb3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:47:ff:4a:8d:21:78:a9:33:7b:c5:2d:4f:0d:
                    1a:3b:88:54:89:d3:4e:65:a4:2a:bb:83:10:81:50:
                    bc:5e:4e:77:09:42:f7:5b:fa:ab:7f:c4:49:f9:e5:
                    f0:4c:8d:96:24:a6:6b:21:3a:e7:6c:3f:f7:02:77:
                    1e:f0:af:5a:2b:29:ca:88:c9:c8:96:89:f6:50:3d:
                    84:d7:4e:06:93:85:91:99:9e:6b:89:6a:f3:04:c0:
                    00:00:44:d0:dd:2f:5f:b0:4b:f0:29:67:02:19:c3:
                    bc:f5:0b:dc:fc:5d:73:54:ee:39:0f:ec:bb:45:8f:
                    48:c4:9c:3d:56:0e:fb:77:df:c2:83:8d:48:e3:a6:
                    fe:3c:85:bd:89:5b:39:8e:b9:88:87:7c:c4:5b:74:
                    4b:e6:6f:a2:94:5c:be:a4:b3:cc:8f:cd:0d:8b:0b:
                    f7:af:bd:0b:ae:3b:3a:ec:b5:f0:57:4a:5f:31:bb:
                    36:d8:be:0e:de:2d:09:cf:27:f2:35:19:7e:17:7b:
                    6a:83:0b:53:38:9c:79:84:d9:bb:56:c5:e9:06:00:
                    e1:bb:a6:d6:09:af:9d:c0:ac:ce:05:22:83:5a:15:
                    76:5b:c2:5c:9b:4e:f9:8e:c2:da:98:c6:bf:a7:c3:
                    96:42:fa:80:bb:9f:5d:e2:80:45:44:8c:e4:c2:bd:
                    11:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:FA:D2:75:9B:51:69:CA:22:D8:23:10:E0:F9:33:B9:CF:99:AA:D6
            X509v3 Authority Key Identifier:
                keyid:98:25:EA:A3:14:3A:29:08:FA:88:97:D5:22:A5:40:99:91:86:32:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36B5362/B104353AA03911F0B898B5A8DAE4EC9C/mCXqoxQ6KQj6iJfVIqVAmZGGMts.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/mCXqoxQ6KQj6iJfVIqVAmZGGMts.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B5362/B104353AA03911F0B898B5A8DAE4EC9C/mCXqoxQ6KQj6iJfVIqVAmZGGMts.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         cb:23:32:6c:a9:0d:3d:44:55:c0:c8:84:48:07:0b:2d:52:bf:
         6c:0a:ca:62:25:5f:25:74:f3:26:a2:81:67:b2:1f:3b:b4:b8:
         88:63:2a:ca:e3:c5:14:87:7c:73:67:57:75:da:f9:68:12:89:
         81:0b:5e:7b:90:8b:d6:81:45:34:f7:e2:7d:13:78:99:16:7c:
         cc:c7:83:f5:28:26:09:a9:ca:30:9d:94:b1:e7:e3:86:f3:89:
         7c:b9:78:4b:62:91:c9:b6:f6:1e:5e:e0:73:ee:e8:a9:ee:c6:
         1d:3c:d3:eb:df:b0:8f:c7:12:0e:fa:37:e9:54:4c:14:95:90:
         36:23:e4:d5:0d:93:39:85:10:cb:1d:09:90:39:fc:26:8f:13:
         9d:f5:aa:e0:8f:61:d8:d1:78:3b:8d:aa:f1:b3:00:8d:3e:71:
         bb:2c:8c:74:ae:18:7f:4b:57:8d:04:c6:80:15:08:77:6f:d2:
         2d:d6:f3:e0:c1:88:d1:04:bd:12:88:d9:16:70:85:1e:3a:d3:
         20:bb:55:f2:e4:9f:80:cf:57:61:b7:e3:a5:fe:89:a8:bd:33:
         93:e7:c7:e9:d0:d4:55:53:1d:02:ff:85:b0:5b:36:ba:b6:6b:
         a9:b6:79:57:70:cf:75:a7:43:25:80:b8:d3:3b:4a:bb:c6:33:
         b0:df:54:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 9 12:21:14 2025 by rpki-client