This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C33BB/B6F210F2C59D11EE9B8CCFB6775412E6/DOoR1fD2WesQDyt_sejINrwlz5g.mft
File:                     DOoR1fD2WesQDyt_sejINrwlz5g.mft (raw, json)
Hash identifier:          pq2Gwt6iKIw53/XRmjxRnYxEPCc76eQbh+9HuU4dNr0=
Subject key identifier:   8B:15:30:2A:DA:38:80:61:C7:32:C7:BC:3F:A1:D2:40:DC:09:B8:75
Authority key identifier: 0C:EA:11:D5:F0:F6:59:EB:10:0F:2B:7F:B1:E8:C8:36:BC:25:CF:98
Certificate issuer:       /CN=F36C33BBAF/serialNumber=0CEA11D5F0F659EB100F2B7FB1E8C836BC25CF98
Certificate serial:       02B4
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/DOoR1fD2WesQDyt_sejINrwlz5g.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C33BB/B6F210F2C59D11EE9B8CCFB6775412E6/DOoR1fD2WesQDyt_sejINrwlz5g.mft
Manifest number:          02B2
Signing time:             Tue 09 Dec 2025 04:03:51 +0000
Manifest this update:     Tue 09 Dec 2025 04:03:50 +0000
Manifest next update:     Thu 11 Dec 2025 04:03:50 +0000
Files and hashes:         1: DOoR1fD2WesQDyt_sejINrwlz5g.crl (hash: WDqX1CRT9q1Ye0g18ufDRYgJqxgH03aJE1E+jNmgTzM=)
                          2: 48BD0A7A14D811F09D2DBA0A6EB8BCC6.roa (hash: K8z2vSGpFFut3n7D7lisZcx7JDx1aJSflHUP/bhx0pg=)
                          3: 059E0E4AC59E11EEA53C71B7775412E6.roa (hash: ZFKITH+OchlrxbiwzeW9jzaBB9KK8U2j/qLB4RDTGvs=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36C33BB/B6F210F2C59D11EE9B8CCFB6775412E6/DOoR1fD2WesQDyt_sejINrwlz5g.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36C33BB/B6F210F2C59D11EE9B8CCFB6775412E6/DOoR1fD2WesQDyt_sejINrwlz5g.mft
                          rsync://rpki.afrinic.net/repository/afrinic/DOoR1fD2WesQDyt_sejINrwlz5g.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 11 Dec 2025 04:03:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 692 (0x2b4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C33BBAF, serialNumber=0CEA11D5F0F659EB100F2B7FB1E8C836BC25CF98
        Validity
            Not Before: Dec  9 04:03:50 2025 GMT
            Not After : Dec 11 04:03:50 2025 GMT
        Subject: CN=69379fa6-8fd5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:82:42:e7:c6:ea:ff:5c:6a:27:c8:c1:b2:5e:
                    53:68:0b:c0:c6:89:93:d5:5e:01:9f:00:60:2c:0f:
                    43:d2:74:f5:ad:bb:a2:0e:83:52:9e:89:7a:c7:b2:
                    39:f1:ab:cc:98:ce:04:ff:04:be:4a:30:1d:e0:99:
                    25:5b:cd:3a:3d:05:81:86:45:5a:74:4d:bb:42:90:
                    e4:e0:af:4a:8f:7b:2c:12:4c:03:40:24:8a:e4:cb:
                    4f:8f:eb:37:c9:dd:3e:60:f2:e4:06:f7:3e:99:26:
                    e8:3e:cb:55:cf:78:a2:ed:be:9b:6c:b5:1f:3d:99:
                    9a:fa:39:f5:9c:7d:b8:88:68:fa:57:96:8d:da:74:
                    a6:62:19:78:ba:7a:ba:71:fc:a3:3c:98:46:04:e7:
                    6a:01:b7:95:50:55:73:80:c6:a4:35:c2:90:79:9d:
                    4f:f3:22:29:87:4c:a9:79:44:b3:5b:cc:d6:07:61:
                    4a:fd:2a:ba:69:50:ba:86:4b:6e:ba:0b:70:26:3f:
                    a6:94:91:c3:86:5c:1b:96:af:66:20:56:76:9d:ac:
                    f2:8f:7c:6f:e9:33:d0:18:dc:03:7e:24:6f:8f:36:
                    da:9c:e8:c8:b1:45:fb:3c:ee:fb:b4:8b:0e:93:b2:
                    9d:0f:4d:c3:80:53:99:c4:e3:e4:ce:5b:d4:87:97:
                    ac:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:15:30:2A:DA:38:80:61:C7:32:C7:BC:3F:A1:D2:40:DC:09:B8:75
            X509v3 Authority Key Identifier:
                keyid:0C:EA:11:D5:F0:F6:59:EB:10:0F:2B:7F:B1:E8:C8:36:BC:25:CF:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C33BB/B6F210F2C59D11EE9B8CCFB6775412E6/DOoR1fD2WesQDyt_sejINrwlz5g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/DOoR1fD2WesQDyt_sejINrwlz5g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C33BB/B6F210F2C59D11EE9B8CCFB6775412E6/DOoR1fD2WesQDyt_sejINrwlz5g.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:4a:9a:5f:02:1c:79:10:52:25:68:5a:c6:b5:65:6d:70:6b:
         3b:0d:db:b8:be:52:ef:9c:35:5c:9f:e5:7f:04:ae:38:f2:e8:
         f0:96:c6:9f:d8:0b:b4:f2:2a:c1:ee:df:a1:3b:d3:5a:01:4d:
         87:ec:e7:82:b5:3b:1a:6f:38:9e:b8:5b:61:9e:09:92:e3:f5:
         fb:64:b2:f3:1a:57:af:fc:eb:07:f1:03:bc:23:94:6c:13:1b:
         5b:3a:c1:51:ac:c3:89:d5:eb:5d:6e:54:18:13:58:ae:50:f0:
         2d:77:5c:08:b8:61:99:40:4d:ce:82:ed:91:62:27:3d:cb:6a:
         d3:06:d3:41:5d:03:08:f9:6c:c6:d8:cf:7e:e0:05:5a:be:90:
         3f:3e:35:42:2d:10:0e:de:9e:34:c2:0e:81:2e:ce:1c:ab:41:
         ae:36:15:11:95:1f:d9:b7:25:37:5e:1c:db:98:c0:6f:d2:0c:
         f8:54:a0:14:9b:88:77:3d:bd:ea:84:a4:18:ce:68:02:40:cf:
         27:81:f0:b9:01:85:f1:9b:a2:d4:6f:17:30:7e:50:99:a1:46:
         c6:1e:5b:4b:5a:64:a5:e9:96:84:de:56:eb:57:05:e5:52:a2:
         68:6b:6e:19:8b:bb:39:da:fa:9d:17:0a:18:47:0c:bd:00:4c:
         49:14:90:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 9 12:19:54 2025 by rpki-client