This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36B9E66/D38F68ACCAA211F0868D43E6DAE4EC9C/pFu73dbj9Gu_MJgQiMsIMMgn7Xg.mft
File:                     pFu73dbj9Gu_MJgQiMsIMMgn7Xg.mft (raw, json)
Hash identifier:          EoMNNbcPmFPYDOgeFhkvxHuwDivucq1GyV372qbdre0=
Subject key identifier:   9D:D6:98:C9:95:56:41:23:55:7C:8E:20:34:32:3E:EA:8A:6D:90:78
Authority key identifier: A4:5B:BB:DD:D6:E3:F4:6B:BF:30:98:10:88:CB:08:30:C8:27:ED:78
Certificate issuer:       /CN=F36B9E66AF/serialNumber=A45BBBDDD6E3F46BBF30981088CB0830C827ED78
Certificate serial:       0A
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/pFu73dbj9Gu_MJgQiMsIMMgn7Xg.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36B9E66/D38F68ACCAA211F0868D43E6DAE4EC9C/pFu73dbj9Gu_MJgQiMsIMMgn7Xg.mft
Manifest number:          09
Signing time:             Wed 03 Dec 2025 05:25:54 +0000
Manifest this update:     Wed 03 Dec 2025 05:25:53 +0000
Manifest next update:     Fri 05 Dec 2025 05:25:53 +0000
Files and hashes:         1: pFu73dbj9Gu_MJgQiMsIMMgn7Xg.crl (hash: g9aZdBK6GJbLwS8X5GlQ3Cf1/CZSPRnyNxpY0c1dM9g=)
                          2: 6E0807D6CAA311F0B08D3DEADAE4EC9C.roa (hash: JIyzn2B6dN+bLWIT2MmsEgygdG5PQlZ0LVb+z/Fj5r4=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36B9E66/D38F68ACCAA211F0868D43E6DAE4EC9C/pFu73dbj9Gu_MJgQiMsIMMgn7Xg.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36B9E66/D38F68ACCAA211F0868D43E6DAE4EC9C/pFu73dbj9Gu_MJgQiMsIMMgn7Xg.mft
                          rsync://rpki.afrinic.net/repository/afrinic/pFu73dbj9Gu_MJgQiMsIMMgn7Xg.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 05 Dec 2025 00:06:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10 (0xa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36B9E66AF, serialNumber=A45BBBDDD6E3F46BBF30981088CB0830C827ED78
        Validity
            Not Before: Dec  3 05:25:53 2025 GMT
            Not After : Dec  5 05:25:53 2025 GMT
        Subject: CN=692fc9e2-c241
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:6e:f7:df:60:c3:09:47:ab:10:bf:e6:d7:73:
                    4d:3f:1b:86:96:14:d4:89:b8:57:f9:6b:5f:4f:49:
                    77:83:21:f2:0e:22:62:f2:56:2f:5b:84:35:b5:15:
                    81:e4:f4:a1:da:e4:a2:91:b7:0b:16:74:9e:e3:d2:
                    94:0b:d0:64:a2:cc:a7:ee:4e:6b:2f:f4:4d:12:31:
                    00:3e:db:aa:69:6a:84:4d:cc:59:9c:c0:9a:a7:1d:
                    d3:d8:61:0b:e3:10:e4:da:6f:49:eb:eb:74:a4:96:
                    b0:53:be:8c:05:2c:13:0a:dc:cd:96:38:af:f0:20:
                    8f:06:4b:e0:57:5d:f7:05:33:fd:e0:94:77:47:4e:
                    10:59:ca:1a:6b:0e:cd:cf:38:14:4d:1d:22:6f:65:
                    db:e2:5f:7b:b5:4e:3b:4c:59:73:ee:b6:f5:6b:fb:
                    7d:f7:24:c7:86:88:05:4f:e4:28:ac:36:85:06:9f:
                    f1:a5:aa:90:cb:8f:f9:e2:31:8e:41:8a:d3:46:b6:
                    de:f4:80:ee:65:74:65:03:69:f6:c0:72:4b:8f:e0:
                    da:eb:2d:30:c5:5b:4a:3f:06:fd:12:63:7a:99:ba:
                    7d:de:c9:ab:b5:c2:ae:b0:11:16:2e:07:f9:76:7a:
                    b9:79:9a:bb:e1:29:be:39:7b:59:94:5d:fb:cc:51:
                    8b:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:D6:98:C9:95:56:41:23:55:7C:8E:20:34:32:3E:EA:8A:6D:90:78
            X509v3 Authority Key Identifier:
                keyid:A4:5B:BB:DD:D6:E3:F4:6B:BF:30:98:10:88:CB:08:30:C8:27:ED:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36B9E66/D38F68ACCAA211F0868D43E6DAE4EC9C/pFu73dbj9Gu_MJgQiMsIMMgn7Xg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/pFu73dbj9Gu_MJgQiMsIMMgn7Xg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B9E66/D38F68ACCAA211F0868D43E6DAE4EC9C/pFu73dbj9Gu_MJgQiMsIMMgn7Xg.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:a3:52:4a:57:44:bc:f8:1e:0e:6c:f0:f0:28:da:63:6d:0d:
         48:36:61:a9:18:38:7e:90:b0:7b:ed:88:de:ec:93:3a:12:66:
         d9:fe:64:78:d9:ae:20:fd:7d:89:db:bd:ad:78:74:92:22:88:
         26:cd:57:ea:de:9f:36:16:5e:c4:64:15:3f:23:50:10:92:50:
         d2:c0:73:b7:78:49:a2:74:a1:2f:df:6d:a2:25:aa:2e:6e:94:
         04:ac:51:f0:84:7e:b1:de:4b:82:3d:c4:70:e4:83:75:cc:60:
         05:d1:16:11:26:71:a1:93:a7:bb:7e:18:ba:7d:df:31:69:9f:
         2f:09:b1:8c:23:1f:b3:0b:4f:7e:e2:3c:d4:09:db:8e:ba:57:
         00:be:46:92:cd:ed:54:a7:8b:2a:9a:59:a2:05:0a:a7:a0:91:
         2f:01:b5:52:49:6a:58:34:70:4c:cd:40:94:4c:af:57:91:32:
         cd:e3:89:73:62:57:b5:82:58:c2:45:8e:d3:b8:9f:a4:18:80:
         39:7f:86:96:a3:4a:92:f9:76:1c:85:4d:7d:12:4e:26:40:87:
         ac:00:9a:e4:82:8c:8a:c7:0e:8c:74:07:a7:ae:8c:11:cd:13:
         34:d3:a3:32:51:a6:40:cf:33:67:5d:90:11:57:bd:4b:68:14:
         cb:01:d1:3d
-----BEGIN CERTIFICATE-----
MIIFlTCCBH2gAwIBAgIBCjANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDEwpGMzZC
OUU2NkFGMTEwLwYDVQQFEyhBNDVCQkJEREQ2RTNGNDZCQkYzMDk4MTA4OENCMDgz
MEM4MjdFRDc4MB4XDTI1MTIwMzA1MjU1M1oXDTI1MTIwNTA1MjU1M1owGDEWMBQG
A1UEAxMNNjkyZmM5ZTItYzI0MTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMpu999gwwlHqxC/5tdzTT8bhpYU1Im4V/lrX09Jd4Mh8g4iYvJWL1uENbUV
geT0odrkopG3CxZ0nuPSlAvQZKLMp+5Oay/0TRIxAD7bqmlqhE3MWZzAmqcd09hh
C+MQ5NpvSevrdKSWsFO+jAUsEwrczZY4r/AgjwZL4Fdd9wUz/eCUd0dOEFnKGmsO
zc84FE0dIm9l2+Jfe7VOO0xZc+629Wv7ffckx4aIBU/kKKw2hQaf8aWqkMuP+eIx
jkGK00a23vSA7mV0ZQNp9sByS4/g2ustMMVbSj8G/RJjepm6fd7Jq7XCrrARFi4H
+XZ6uXmau+Epvjl7WZRd+8xRi2cCAwEAAaOCArgwggK0MB0GA1UdDgQWBBSd1pjJ
lVZBI1V8jiA0Mj7qim2QeDAfBgNVHSMEGDAWgBSkW7vd1uP0a78wmBCIywgwyCft
eDAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2QjlFNjYvRDM4RjY4QUNDQUEyMTFGMDg2OEQ0M0U2REFFNEVDOUMvcEZ1NzNk
Ymo5R3VfTUpnUWlNc0lNTWduN1hnLmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMvcEZ1NzNkYmo5R3VfTUpnUWlNc0lNTWduN1hnLmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCB1QYIKwYBBQUHAQsEgcgwgcUwgYsGCCsGAQUF
BzALhn9yc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzZCOUU2Ni9EMzhGNjhBQ0NBQTIxMUYwODY4RDQzRTZEQUU0
RUM5Qy9wRnU3M2RiajlHdV9NSmdRaU1zSU1NZ243WGcubWZ0MDUGCCsGAQUFBzAN
hilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggr
BgEFBQcBCAEB/wQGMASgAgUAMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE
AgACBQAwDQYJKoZIhvcNAQELBQADggEBAIqjUkpXRLz4Hg5s8PAo2mNtDUg2YakY
OH6QsHvtiN7skzoSZtn+ZHjZriD9fYnbva14dJIiiCbNV+renzYWXsRkFT8jUBCS
UNLAc7d4SaJ0oS/fbaIlqi5ulASsUfCEfrHeS4I9xHDkg3XMYAXRFhEmcaGTp7t+
GLp93zFpny8JsYwjH7MLT37iPNQJ2466VwC+RpLN7VSniyqaWaIFCqegkS8BtVJJ
alg0cEzNQJRMr1eRMs3jiXNiV7WCWMJFjtO4n6QYgDl/hpajSpL5dhyFTX0STiZA
h6wAmuSCjIrHDox0B6eujBHNEzTTozJRpkDPM2ddkBFXvUtoFMsB0T0=
-----END CERTIFICATE-----
Generated at Wed Dec 3 12:55:33 2025 by rpki-client