This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36B905A/C5E925C2324E11F0B4BF2D8CDAE4EC9C/yvMlvH5I2XyjoXQJNRqK8nR2UR8.mft
File:                     yvMlvH5I2XyjoXQJNRqK8nR2UR8.mft (raw, json)
Hash identifier:          cM9UcTKLVXq0k0hKFXP+2k7x61M1/9LyT/cQzfG6Uf8=
Subject key identifier:   B1:4C:8C:BC:45:66:79:50:82:02:D8:9F:2C:59:71:5F:D8:26:96:84
Authority key identifier: CA:F3:25:BC:7E:48:D9:7C:A3:A1:74:09:35:1A:8A:F2:74:76:51:1F
Certificate issuer:       /CN=F36B905AAF/serialNumber=CAF325BC7E48D97CA3A17409351A8AF27476511F
Certificate serial:       D1
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/yvMlvH5I2XyjoXQJNRqK8nR2UR8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36B905A/C5E925C2324E11F0B4BF2D8CDAE4EC9C/yvMlvH5I2XyjoXQJNRqK8nR2UR8.mft
Manifest number:          D1
Signing time:             Sun 07 Dec 2025 04:54:37 +0000
Manifest this update:     Sun 07 Dec 2025 04:54:37 +0000
Manifest next update:     Tue 09 Dec 2025 04:54:36 +0000
Files and hashes:         1: yvMlvH5I2XyjoXQJNRqK8nR2UR8.crl (hash: YAX4C0Vb9YScDWcdk12M68MacIq+33oLljmG21QkU74=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36B905A/C5E925C2324E11F0B4BF2D8CDAE4EC9C/yvMlvH5I2XyjoXQJNRqK8nR2UR8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36B905A/C5E925C2324E11F0B4BF2D8CDAE4EC9C/yvMlvH5I2XyjoXQJNRqK8nR2UR8.mft
                          rsync://rpki.afrinic.net/repository/afrinic/yvMlvH5I2XyjoXQJNRqK8nR2UR8.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 09 Dec 2025 04:54:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 209 (0xd1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36B905AAF, serialNumber=CAF325BC7E48D97CA3A17409351A8AF27476511F
        Validity
            Not Before: Dec  7 04:54:37 2025 GMT
            Not After : Dec  9 04:54:36 2025 GMT
        Subject: CN=6935088d-3e85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:25:a2:4e:58:a3:f3:4e:41:12:e6:7a:78:1b:
                    f7:41:a5:75:6a:9c:3b:93:b4:ea:b5:d9:33:a6:e3:
                    0a:d5:f5:98:3b:d8:eb:a9:a2:2c:81:5c:02:82:dd:
                    8c:96:98:ae:48:99:1c:15:bf:aa:9f:c5:57:f4:bf:
                    82:0f:b2:ef:2f:b1:1a:78:08:80:24:90:26:8a:47:
                    c4:ee:65:3c:57:1f:ba:f8:a4:8c:d0:2d:23:1a:25:
                    84:1a:f3:08:71:b9:75:45:40:4b:8f:22:52:91:80:
                    4f:e0:40:41:24:ea:80:fa:b6:4e:a2:89:07:f5:a0:
                    64:f4:68:d7:84:ae:76:f2:5f:5f:ed:27:b1:26:56:
                    7c:08:be:41:96:91:ef:38:43:27:48:9b:c9:f5:9d:
                    94:00:2f:67:76:15:a4:be:fd:d8:3a:12:cf:1e:d2:
                    a0:fb:c1:83:e8:f6:19:57:a5:df:c4:fb:e1:a6:d4:
                    ed:a7:b8:c4:61:1c:34:1f:1d:72:f0:14:85:ea:4e:
                    11:90:f5:58:d6:f8:c4:d7:91:6d:df:fc:b5:3d:78:
                    28:a4:4a:3a:48:ef:1b:bf:47:a6:d8:98:42:08:18:
                    f5:e6:da:1d:5d:fd:bf:fe:91:da:57:9b:2d:02:d5:
                    cf:ad:cd:59:15:f1:9e:3a:aa:bb:22:5a:62:9f:cc:
                    ac:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:4C:8C:BC:45:66:79:50:82:02:D8:9F:2C:59:71:5F:D8:26:96:84
            X509v3 Authority Key Identifier:
                keyid:CA:F3:25:BC:7E:48:D9:7C:A3:A1:74:09:35:1A:8A:F2:74:76:51:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36B905A/C5E925C2324E11F0B4BF2D8CDAE4EC9C/yvMlvH5I2XyjoXQJNRqK8nR2UR8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/yvMlvH5I2XyjoXQJNRqK8nR2UR8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B905A/C5E925C2324E11F0B4BF2D8CDAE4EC9C/yvMlvH5I2XyjoXQJNRqK8nR2UR8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:51:14:4b:ff:57:79:a4:76:30:d8:bf:ec:cb:cd:80:4a:48:
         5e:29:04:9b:a0:cf:2f:e9:74:77:13:72:a6:52:2e:97:d6:56:
         50:ea:74:9d:52:af:4e:5b:dd:4b:fa:bd:b6:31:f2:3b:c3:58:
         dd:09:1c:8f:ea:ae:ec:f8:65:f0:e5:e4:61:17:dc:33:85:3f:
         aa:27:48:2a:5c:0c:cc:7f:7c:50:62:a9:73:f1:f0:50:06:89:
         7d:59:b1:3f:70:9c:0a:6f:f1:52:8f:ed:78:14:ed:2d:0f:f3:
         5f:49:83:17:00:9e:51:c5:73:c2:35:3e:31:9e:64:5b:89:d1:
         3e:e0:69:43:b2:d6:8b:f7:fd:0e:73:ba:74:41:6c:32:9e:86:
         00:e5:d6:55:83:0f:f0:ec:dd:87:54:cb:3e:ec:c0:c2:8e:a4:
         14:e7:68:a2:02:f7:2a:6d:12:8e:54:6f:51:28:33:62:03:5f:
         f9:ef:11:c4:fa:f1:fe:a5:3d:03:03:f5:a8:35:49:fe:10:d2:
         c3:5d:0f:0c:52:d7:b1:41:10:23:4e:8a:4c:df:20:7b:fc:4c:
         ae:b4:5e:da:b1:5e:68:82:3d:2a:ab:cb:00:19:09:d4:5c:e2:
         99:ab:1f:09:48:9d:b5:dc:6a:99:bb:e2:0c:c2:42:ad:5c:8b:
         ef:1e:82:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 8 03:56:39 2025 by rpki-client