This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36BD41E/3040E1D6D9B511F0A143A8D7DAE4EC9C/GPDP5J-oAtYH_7cwFFeG05UL0jA.mft
File:                     GPDP5J-oAtYH_7cwFFeG05UL0jA.mft (raw, json)
Hash identifier:          1geIaBwgnS0CtUT6usH1i8nqAnSjrylxhVckhBODy5I=
Subject key identifier:   6E:B0:2B:1A:5A:BB:92:0D:4C:5B:CA:1B:B2:E5:FE:D3:E5:9C:4A:8D
Authority key identifier: 18:F0:CF:E4:9F:A8:02:D6:07:FF:B7:30:14:57:86:D3:95:0B:D2:30
Certificate issuer:       /CN=F36BD41EAF/serialNumber=18F0CFE49FA802D607FFB730145786D3950BD230
Certificate serial:       0D
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/GPDP5J-oAtYH_7cwFFeG05UL0jA.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36BD41E/3040E1D6D9B511F0A143A8D7DAE4EC9C/GPDP5J-oAtYH_7cwFFeG05UL0jA.mft
Manifest number:          0B
Signing time:             Tue 23 Dec 2025 05:23:12 +0000
Manifest this update:     Tue 23 Dec 2025 05:23:11 +0000
Manifest next update:     Thu 25 Dec 2025 05:23:11 +0000
Files and hashes:         1: GPDP5J-oAtYH_7cwFFeG05UL0jA.crl (hash: RJvbtvyCFjATXfLfYJgnxiHIAedOKsHodfavyIKfpHQ=)
                          2: 0B035958DA7311F0BD9C4B87DAE4EC9C.roa (hash: 1YCwQ08Er0/oJv0rugAKvka/AUZZE4KlC5UipfKoXzE=)
                          3: AF914E0ED9B911F0BC8E84F1DAE4EC9C.roa (hash: dpaLUZ7X2+eBahFfaBRBpZGcldL+iPoSovpQWiyqWHw=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36BD41E/3040E1D6D9B511F0A143A8D7DAE4EC9C/GPDP5J-oAtYH_7cwFFeG05UL0jA.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36BD41E/3040E1D6D9B511F0A143A8D7DAE4EC9C/GPDP5J-oAtYH_7cwFFeG05UL0jA.mft
                          rsync://rpki.afrinic.net/repository/afrinic/GPDP5J-oAtYH_7cwFFeG05UL0jA.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 25 Dec 2025 00:06:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13 (0xd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36BD41EAF, serialNumber=18F0CFE49FA802D607FFB730145786D3950BD230
        Validity
            Not Before: Dec 23 05:23:11 2025 GMT
            Not After : Dec 25 05:23:11 2025 GMT
        Subject: CN=694a2740-4607
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:29:7d:8a:62:9f:03:52:7b:99:51:df:54:b8:
                    d2:a5:07:7f:dd:94:5d:65:76:d9:aa:f3:06:70:3a:
                    4d:3e:f0:0b:85:d5:6b:4e:12:fb:2f:6c:f5:8e:82:
                    e0:93:7c:38:aa:63:d6:43:d5:b8:d0:ed:d2:68:ca:
                    ce:95:58:12:5c:24:ab:a8:eb:1e:b6:56:91:bd:69:
                    93:8c:30:a6:7b:d9:f1:73:88:18:4d:1b:b1:66:86:
                    bb:3f:cc:ac:84:e0:21:4b:d0:8e:55:93:a8:bd:73:
                    d0:4d:b4:05:4f:ea:96:5a:55:94:28:80:f2:f3:db:
                    7e:aa:02:32:ab:e9:9a:a5:25:a6:cb:a9:0e:cc:b6:
                    88:9a:49:cd:ee:c9:ef:c3:5f:ac:f8:86:99:89:05:
                    db:97:72:b9:7b:8c:5d:61:d3:a7:3e:b1:33:93:5d:
                    99:61:12:c8:d6:f8:43:ba:07:44:2b:d8:ed:54:a4:
                    79:d4:95:d4:49:9b:be:fe:9e:7a:fc:4c:74:a9:7f:
                    0c:31:de:0a:09:18:c4:a3:45:1b:48:3d:c5:ee:15:
                    46:fc:2a:f9:7b:9d:7c:ac:2c:88:63:31:23:07:f8:
                    a9:ed:8a:6a:7d:92:a6:4c:4e:f7:b5:1a:77:a3:06:
                    05:cf:89:42:af:53:98:74:db:b1:24:f1:6d:76:71:
                    40:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:B0:2B:1A:5A:BB:92:0D:4C:5B:CA:1B:B2:E5:FE:D3:E5:9C:4A:8D
            X509v3 Authority Key Identifier:
                keyid:18:F0:CF:E4:9F:A8:02:D6:07:FF:B7:30:14:57:86:D3:95:0B:D2:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36BD41E/3040E1D6D9B511F0A143A8D7DAE4EC9C/GPDP5J-oAtYH_7cwFFeG05UL0jA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/GPDP5J-oAtYH_7cwFFeG05UL0jA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36BD41E/3040E1D6D9B511F0A143A8D7DAE4EC9C/GPDP5J-oAtYH_7cwFFeG05UL0jA.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:31:87:23:d6:0b:33:6c:80:e7:ee:d7:96:b1:da:c1:44:ee:
         10:75:54:dc:46:d7:92:f2:1f:8a:4f:1f:4f:7c:51:39:07:a4:
         44:2f:3d:99:9d:35:54:6c:96:82:58:f2:56:ca:0b:3d:17:b7:
         6d:f4:1d:b4:6a:f0:88:84:72:6d:15:a2:3c:78:50:ab:18:95:
         9f:92:e7:56:b8:4c:b4:7f:7b:fe:44:ee:ce:46:02:0a:40:f8:
         56:58:f7:49:c0:fb:ae:af:88:53:d0:c8:eb:e7:09:49:e4:09:
         49:91:11:29:ef:1c:99:46:f8:3d:f6:01:f4:00:90:d2:32:c0:
         57:50:cd:d2:8b:9f:f1:29:2f:86:56:a8:69:e0:6e:f8:97:ff:
         7c:c9:7e:44:65:73:a9:eb:e2:d9:3f:46:2f:bf:a5:c6:3d:47:
         6f:b0:67:cb:0c:61:9b:d1:a4:12:93:ee:20:e9:12:3b:16:ef:
         12:5f:f1:4f:44:f9:8f:a5:aa:e4:13:b1:1b:3c:20:c7:33:e3:
         d8:2b:58:af:2e:5c:97:06:d4:6a:de:90:20:da:88:bc:38:d0:
         72:a3:44:43:b4:44:65:1c:c2:ed:0b:d8:a7:48:72:b1:d1:32:
         1a:eb:0d:77:61:2b:d1:4f:de:83:f5:b3:13:88:69:54:9f:39:
         ce:4b:67:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 08:35:37 2025 by rpki-client