This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36B8F68/A101D01CB8AC11F0BC7A6097DAE4EC9C/0J3KDrqbho_trknCtmkq7gVFeco.mft
File:                     0J3KDrqbho_trknCtmkq7gVFeco.mft (raw, json)
Hash identifier:          dazLsQJmZB69iD9fLULywNYEYOXgli0UmyaBmhaw8Yg=
Subject key identifier:   10:85:19:D1:40:5E:FD:1D:E1:0F:25:22:86:CA:84:61:F7:AE:85:B5
Authority key identifier: D0:9D:CA:0E:BA:9B:86:8F:ED:AE:49:C2:B6:69:2A:EE:05:45:79:CA
Certificate issuer:       /CN=F36B8F68AF/serialNumber=D09DCA0EBA9B868FEDAE49C2B6692AEE054579CA
Certificate serial:       28
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/0J3KDrqbho_trknCtmkq7gVFeco.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36B8F68/A101D01CB8AC11F0BC7A6097DAE4EC9C/0J3KDrqbho_trknCtmkq7gVFeco.mft
Manifest number:          27
Signing time:             Tue 09 Dec 2025 05:18:24 +0000
Manifest this update:     Tue 09 Dec 2025 05:18:23 +0000
Manifest next update:     Thu 11 Dec 2025 05:18:23 +0000
Files and hashes:         1: 0J3KDrqbho_trknCtmkq7gVFeco.crl (hash: JHMrvS7ikiWL+XDLQab33Q0y973wXZPE/oZPdfK/tdw=)
                          2: 84BB7BCAB8B011F0B7D56BB0DAE4EC9C.roa (hash: FfRea3nDQ6ntt0Y4r1T1mGH8t64xpRYDvG3sd/6vT5E=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36B8F68/A101D01CB8AC11F0BC7A6097DAE4EC9C/0J3KDrqbho_trknCtmkq7gVFeco.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36B8F68/A101D01CB8AC11F0BC7A6097DAE4EC9C/0J3KDrqbho_trknCtmkq7gVFeco.mft
                          rsync://rpki.afrinic.net/repository/afrinic/0J3KDrqbho_trknCtmkq7gVFeco.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 11 Dec 2025 05:18:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 40 (0x28)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36B8F68AF, serialNumber=D09DCA0EBA9B868FEDAE49C2B6692AEE054579CA
        Validity
            Not Before: Dec  9 05:18:23 2025 GMT
            Not After : Dec 11 05:18:23 2025 GMT
        Subject: CN=6937b120-52ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:9a:c9:07:31:19:c7:ca:29:38:51:f0:6f:82:
                    b0:d2:ab:a9:8f:59:24:05:30:62:9b:7b:3c:72:7a:
                    bc:da:9e:d5:e4:67:0c:49:c7:3f:73:58:96:ba:5f:
                    0c:55:94:9b:78:20:14:83:c5:4b:65:e5:ea:71:01:
                    d0:9f:22:be:c7:b9:3a:f0:27:e1:31:9d:79:01:dc:
                    da:32:d2:e1:58:8e:31:16:bf:c9:43:fd:70:ec:f7:
                    bd:f7:0b:a0:66:cf:ea:6d:ea:f4:9f:0b:82:46:64:
                    ab:b9:1d:a3:a2:32:25:68:83:59:ae:d6:8e:86:35:
                    74:87:f4:9d:ec:16:bb:f1:6d:9e:e1:88:91:b9:07:
                    e3:7e:ba:99:62:fb:ce:50:8e:07:65:5d:21:e2:38:
                    b3:07:09:39:7c:cb:b2:6e:be:ab:75:b8:f2:81:0a:
                    f4:12:f8:64:84:ed:83:b9:5b:d7:cf:4e:ad:40:39:
                    67:d3:68:90:b8:29:b3:27:02:35:7a:1c:1d:7f:d0:
                    8c:88:94:57:ff:b5:88:e1:35:b8:d5:57:5f:7c:87:
                    f0:11:94:c1:ae:d4:fc:e2:4f:5a:03:de:b4:85:de:
                    dd:62:3c:75:53:fc:95:b9:1c:92:55:89:ef:0e:d5:
                    b8:85:40:a3:6c:3e:c0:22:9f:7d:14:5a:a1:10:ee:
                    f2:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:85:19:D1:40:5E:FD:1D:E1:0F:25:22:86:CA:84:61:F7:AE:85:B5
            X509v3 Authority Key Identifier:
                keyid:D0:9D:CA:0E:BA:9B:86:8F:ED:AE:49:C2:B6:69:2A:EE:05:45:79:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36B8F68/A101D01CB8AC11F0BC7A6097DAE4EC9C/0J3KDrqbho_trknCtmkq7gVFeco.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/0J3KDrqbho_trknCtmkq7gVFeco.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B8F68/A101D01CB8AC11F0BC7A6097DAE4EC9C/0J3KDrqbho_trknCtmkq7gVFeco.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:e0:24:f5:0b:bd:23:90:b0:79:71:22:7d:14:67:08:48:79:
         bf:13:e5:35:f1:62:d0:64:c4:71:d8:53:1a:11:b7:02:f1:5f:
         9e:1f:3a:4f:1c:a3:df:c8:ee:bc:d9:5f:f1:32:f5:eb:04:a6:
         8f:c7:69:8f:8d:f8:75:8d:79:b4:a8:0b:37:02:30:33:de:68:
         b3:7c:e6:0e:40:5e:54:13:a9:8d:b9:48:05:de:ff:bf:cb:f3:
         1c:7e:43:0a:c2:f7:45:db:cc:ae:60:75:25:48:24:b3:8d:ba:
         22:7a:9f:91:ab:8f:28:51:51:f3:1f:6e:99:dc:b8:9f:f3:a8:
         23:c5:d2:46:8e:80:79:ff:88:03:c7:04:0e:97:f9:3b:01:d3:
         60:b3:ab:d0:c6:ea:89:1b:16:f8:c2:86:5c:21:a5:c1:d0:52:
         0c:c5:04:97:2b:14:71:0d:24:39:4e:22:26:6d:14:7a:11:9c:
         3b:7b:15:e7:d4:2d:c2:75:d3:28:53:1a:c9:19:87:67:a3:b2:
         e0:29:58:af:77:cb:cb:36:f4:48:5c:68:3a:e7:ec:12:51:da:
         e3:7c:53:44:a4:76:26:30:7d:85:2f:a7:49:f5:15:ed:b4:10:
         04:00:07:84:a0:0f:d6:de:49:0a:54:d7:9c:93:41:0f:7c:fe:
         b7:79:da:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 9 12:03:18 2025 by rpki-client