This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C1E88/213AEA8278E711EEB495563C4AD9E6FC/2dbgTePDYTvOHbKdd8ahOIrEIj0.mft
File:                     2dbgTePDYTvOHbKdd8ahOIrEIj0.mft (raw, json)
Hash identifier:          /aFDSoASgmQiAHfvRAHcnPvlS1HSLSpr7Jre7WOzND4=
Subject key identifier:   7F:92:25:3A:BB:5B:7B:3B:72:BA:C0:74:7A:E3:11:73:57:8D:D9:CE
Authority key identifier: D9:D6:E0:4D:E3:C3:61:3B:CE:1D:B2:9D:77:C6:A1:38:8A:C4:22:3D
Certificate issuer:       /CN=F36C1E88AF/serialNumber=D9D6E04DE3C3613BCE1DB29D77C6A1388AC4223D
Certificate serial:       031C
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/2dbgTePDYTvOHbKdd8ahOIrEIj0.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C1E88/213AEA8278E711EEB495563C4AD9E6FC/2dbgTePDYTvOHbKdd8ahOIrEIj0.mft
Manifest number:          0319
Signing time:             Thu 04 Dec 2025 03:52:00 +0000
Manifest this update:     Thu 04 Dec 2025 03:51:59 +0000
Manifest next update:     Sat 06 Dec 2025 03:51:59 +0000
Files and hashes:         1: 2dbgTePDYTvOHbKdd8ahOIrEIj0.crl (hash: DEpNnifZwDots8hzzuKQtiEUlTSM35laiOJYAEG3L+s=)
                          2: B56502AE36B211EFAA421B5E762E951A.roa (hash: pW3bMqz4FHfQnjso9ES+xBDe7OZbTMlRNhZcJvVAqsk=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36C1E88/213AEA8278E711EEB495563C4AD9E6FC/2dbgTePDYTvOHbKdd8ahOIrEIj0.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36C1E88/213AEA8278E711EEB495563C4AD9E6FC/2dbgTePDYTvOHbKdd8ahOIrEIj0.mft
                          rsync://rpki.afrinic.net/repository/afrinic/2dbgTePDYTvOHbKdd8ahOIrEIj0.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 06 Dec 2025 03:51:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 796 (0x31c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C1E88AF, serialNumber=D9D6E04DE3C3613BCE1DB29D77C6A1388AC4223D
        Validity
            Not Before: Dec  4 03:51:59 2025 GMT
            Not After : Dec  6 03:51:59 2025 GMT
        Subject: CN=69310560-8ec9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:4a:4d:40:ff:2b:99:ba:59:24:12:35:e2:98:
                    e4:4f:ca:d2:03:54:bd:48:c3:59:14:d0:14:18:6c:
                    14:19:57:5d:fa:48:67:e5:d4:b6:8f:67:49:d7:a4:
                    61:29:b8:77:db:f8:fb:cf:71:fc:4c:f9:70:ae:b0:
                    07:5e:ae:08:47:6e:dd:7d:b8:e9:b3:fc:e5:42:77:
                    c7:cd:5a:f0:99:ed:6a:de:79:a6:f0:33:50:a2:a3:
                    d9:5b:80:d9:69:e8:a2:dc:63:10:c3:90:7f:1c:bc:
                    ed:ae:7f:a2:d3:53:e9:d7:ac:34:9c:a8:0c:60:0e:
                    a0:f8:23:55:d1:8a:6f:17:03:8a:34:56:70:51:07:
                    14:75:87:de:c7:11:a2:b5:79:f5:17:c6:1a:ef:82:
                    17:da:d9:4e:9e:66:c2:1d:28:1b:f9:ea:03:bf:18:
                    4a:3f:ae:ce:70:03:69:5c:3c:62:eb:19:95:da:19:
                    3b:7b:42:8e:62:b3:5c:69:45:71:32:dd:3d:83:1c:
                    ed:04:f6:99:ef:c6:d9:d3:bd:08:ae:97:fd:b4:aa:
                    c4:33:6d:2c:b7:07:1a:f6:c6:80:5b:71:db:75:04:
                    10:e0:d7:64:3b:46:91:bb:3c:41:68:56:36:7b:43:
                    96:c1:db:f7:8d:59:71:42:45:6f:a0:d8:2a:7e:97:
                    53:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:92:25:3A:BB:5B:7B:3B:72:BA:C0:74:7A:E3:11:73:57:8D:D9:CE
            X509v3 Authority Key Identifier:
                keyid:D9:D6:E0:4D:E3:C3:61:3B:CE:1D:B2:9D:77:C6:A1:38:8A:C4:22:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C1E88/213AEA8278E711EEB495563C4AD9E6FC/2dbgTePDYTvOHbKdd8ahOIrEIj0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/2dbgTePDYTvOHbKdd8ahOIrEIj0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C1E88/213AEA8278E711EEB495563C4AD9E6FC/2dbgTePDYTvOHbKdd8ahOIrEIj0.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:40:06:f3:16:6a:bf:ba:64:d8:62:b5:6e:4d:a4:d0:f8:c8:
         d7:fd:85:0a:e3:8b:e7:f3:9e:e9:d7:7f:63:38:31:ca:5b:9d:
         35:ba:14:08:f7:78:a3:47:7a:e7:16:c6:f8:27:8f:a5:7b:68:
         f7:f9:2f:fc:4b:84:f5:8d:6f:5f:6a:e6:f8:62:7d:94:1e:33:
         2c:2e:c7:c5:2f:4a:59:d4:40:1c:c5:84:79:48:d1:32:ba:c2:
         1d:ae:9b:b5:51:6c:8f:04:87:bc:cc:d4:ff:b5:6c:dc:3f:bf:
         8f:39:59:70:9f:31:f5:69:bb:ca:38:59:14:96:04:16:2f:dd:
         2c:54:c0:58:6c:76:bd:6c:22:7f:80:a7:5f:9c:57:1e:ee:6e:
         63:95:51:4f:6a:98:34:e1:07:df:6b:86:cd:c3:b2:42:da:03:
         5e:bb:2e:dc:42:b8:c9:16:ee:c9:22:60:15:24:a4:2d:00:65:
         9f:c1:fd:b7:ab:e8:b5:6b:50:de:cf:60:4e:86:29:38:bb:7f:
         c2:62:25:c7:90:7a:ba:81:08:1f:e3:6a:de:4a:a6:0f:c1:37:
         19:b8:93:40:02:d4:9e:f8:68:76:58:77:40:11:0e:5a:46:4b:
         ca:00:70:67:f3:ee:f1:6f:4e:e7:a3:96:fe:60:66:9e:c3:51:
         8f:87:4d:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 5 02:29:17 2025 by rpki-client