This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36B665C/4ED166A4AA2211ED833D5FE6F1222468/LGoJiRwP7ADgo5_HfDIoMabr-Xk.mft
File:                     LGoJiRwP7ADgo5_HfDIoMabr-Xk.mft (raw, json)
Hash identifier:          GJJGQndK+qH9qykNKaHRdfeJWPL5/LIQEAbzPigoAlY=
Subject key identifier:   F1:D4:07:6E:78:F5:54:2C:0F:1C:D2:32:B8:B8:D4:34:7C:D8:0B:8A
Authority key identifier: 2C:6A:09:89:1C:0F:EC:00:E0:A3:9F:C7:7C:32:28:31:A6:EB:F9:79
Certificate issuer:       /CN=F36B665CAF/serialNumber=2C6A09891C0FEC00E0A39FC77C322831A6EBF979
Certificate serial:       0432
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/LGoJiRwP7ADgo5_HfDIoMabr-Xk.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36B665C/4ED166A4AA2211ED833D5FE6F1222468/LGoJiRwP7ADgo5_HfDIoMabr-Xk.mft
Manifest number:          042F
Signing time:             Tue 09 Dec 2025 03:16:29 +0000
Manifest this update:     Tue 09 Dec 2025 03:16:28 +0000
Manifest next update:     Thu 11 Dec 2025 03:16:28 +0000
Files and hashes:         1: LGoJiRwP7ADgo5_HfDIoMabr-Xk.crl (hash: hFsfdfXv2n86TjGTKK8VGy8FBbI1zOOA/iTEWYCewZY=)
                          2: 2ABD80D2C13411F0AD109DEBDAE4EC9C.roa (hash: tUKltNBSVOXmWEDpCanmFgVIXoiOPsSX9STsk3muu/Y=)
                          3: D6BCB23CAA2511ED900EFAEFF1222468.roa (hash: OxJceCLxLN2HEtk5IYbEb+LCfIUbND+00xlfPzw4WkM=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36B665C/4ED166A4AA2211ED833D5FE6F1222468/LGoJiRwP7ADgo5_HfDIoMabr-Xk.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36B665C/4ED166A4AA2211ED833D5FE6F1222468/LGoJiRwP7ADgo5_HfDIoMabr-Xk.mft
                          rsync://rpki.afrinic.net/repository/afrinic/LGoJiRwP7ADgo5_HfDIoMabr-Xk.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 11 Dec 2025 03:16:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1074 (0x432)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36B665CAF, serialNumber=2C6A09891C0FEC00E0A39FC77C322831A6EBF979
        Validity
            Not Before: Dec  9 03:16:28 2025 GMT
            Not After : Dec 11 03:16:28 2025 GMT
        Subject: CN=6937948d-592a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:34:ed:9b:a9:11:5f:99:92:f7:f1:2b:3c:81:
                    21:fb:b5:3b:d3:36:69:05:47:89:db:a3:5f:6a:77:
                    bd:e2:27:81:db:ff:9f:30:f7:19:ba:20:91:16:41:
                    e9:b0:9f:0f:72:a7:10:4b:bb:b4:5b:46:d0:b3:d7:
                    b1:06:44:1d:f7:7e:b4:fb:de:55:ac:be:48:27:06:
                    3d:41:16:27:85:02:de:f3:8c:cc:76:c8:ae:56:1e:
                    be:86:22:78:45:f4:ae:81:61:d8:34:ef:08:95:c0:
                    c2:eb:f4:75:16:35:56:d7:e8:69:3c:d6:76:a7:52:
                    46:a0:7b:71:4a:ce:01:46:98:c5:30:e4:c2:b5:88:
                    8c:3a:a1:79:70:69:ba:29:c3:14:34:ef:ae:10:9d:
                    0b:86:7c:d3:77:7f:32:df:b0:0c:26:61:9d:b1:46:
                    4a:a1:40:13:c0:cf:b6:c0:a8:16:e1:ff:13:9f:e8:
                    a4:08:32:a1:31:9a:fe:f5:b5:71:5b:03:bd:63:77:
                    6c:87:63:68:f4:cc:ea:2d:e3:87:4c:1e:2e:49:32:
                    bc:17:35:34:2d:22:66:ce:11:c8:bd:2b:49:ca:78:
                    2d:d4:83:64:d3:45:ab:86:79:d3:dd:02:fc:73:92:
                    ea:ec:2f:f7:80:09:7e:af:e3:b7:f9:2b:11:1b:15:
                    89:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:D4:07:6E:78:F5:54:2C:0F:1C:D2:32:B8:B8:D4:34:7C:D8:0B:8A
            X509v3 Authority Key Identifier:
                keyid:2C:6A:09:89:1C:0F:EC:00:E0:A3:9F:C7:7C:32:28:31:A6:EB:F9:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36B665C/4ED166A4AA2211ED833D5FE6F1222468/LGoJiRwP7ADgo5_HfDIoMabr-Xk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/LGoJiRwP7ADgo5_HfDIoMabr-Xk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B665C/4ED166A4AA2211ED833D5FE6F1222468/LGoJiRwP7ADgo5_HfDIoMabr-Xk.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:ea:4c:67:7b:e0:94:76:6c:36:52:3f:c5:71:03:13:94:7d:
         33:15:8b:15:59:5e:9f:e3:b7:09:29:22:de:bc:2b:e6:4e:b9:
         7e:57:6c:64:dd:dd:cd:6b:44:c3:07:7d:c6:b9:76:e4:0d:27:
         1b:c1:88:68:fb:99:11:10:77:20:25:e9:e4:4a:5f:48:5e:e9:
         91:25:df:05:23:27:1b:65:cf:47:21:6d:c5:ad:67:82:69:f1:
         45:83:41:1f:ac:ae:6a:29:1d:af:a1:2a:0e:e9:8f:89:92:49:
         c5:3a:32:8a:0e:cc:53:66:f1:da:26:b8:e7:30:21:52:42:48:
         4b:a9:91:11:1e:fd:5b:c5:5d:4d:d9:04:a0:81:24:f4:4e:71:
         5e:31:d7:78:06:80:2d:1d:cb:76:5c:bc:f0:09:74:81:ba:80:
         92:34:2c:73:3b:9a:e1:99:b8:8f:10:31:67:82:8f:b2:a3:85:
         1a:94:80:f9:77:af:a3:9d:ee:89:26:76:2b:a8:4e:d2:e3:18:
         63:65:12:48:31:bc:24:b2:45:4d:9d:58:88:d2:6a:a0:b1:8e:
         1b:6c:e7:20:19:fb:09:8d:92:7c:54:93:9e:4b:0e:3f:aa:ca:
         fb:9a:78:8b:21:21:b7:73:f8:d3:4a:af:34:84:bf:06:e7:e5:
         d9:bb:e7:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 9 12:05:52 2025 by rpki-client