This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36CACCC/DC647B426C3011EF91DB8BBE762E951A/5U9enM9-t26XkK6VM_5KhMiy_Lw.mft
File:                     5U9enM9-t26XkK6VM_5KhMiy_Lw.mft (raw, json)
Hash identifier:          qf80teeymHGvUMr2ONreVWrtG/gnvTO+Z8Nr4X2xd1M=
Subject key identifier:   8F:05:4E:50:9E:DD:27:30:6A:B2:5E:D3:CF:E9:28:87:AF:FA:2F:C5
Authority key identifier: E5:4F:5E:9C:CF:7E:B7:6E:97:90:AE:95:33:FE:4A:84:C8:B2:FC:BC
Certificate issuer:       /CN=F36CACCCAF/serialNumber=E54F5E9CCF7EB76E9790AE9533FE4A84C8B2FCBC
Certificate serial:       01E3
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/5U9enM9-t26XkK6VM_5KhMiy_Lw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36CACCC/DC647B426C3011EF91DB8BBE762E951A/5U9enM9-t26XkK6VM_5KhMiy_Lw.mft
Manifest number:          01E2
Signing time:             Thu 18 Dec 2025 07:01:51 +0000
Manifest this update:     Thu 18 Dec 2025 07:01:50 +0000
Manifest next update:     Sat 20 Dec 2025 07:01:50 +0000
Files and hashes:         1: 5U9enM9-t26XkK6VM_5KhMiy_Lw.crl (hash: E721gqmUB9WcbAcIznjyEglMWl7b2DbxxeN0n0xBxhw=)
                          2: 690AD7B26C3111EF81B16842762E951A.roa (hash: rHzjxo/eO2fqIELNKfmN3/VjzzeCb8hHN9sTo2VjXI0=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36CACCC/DC647B426C3011EF91DB8BBE762E951A/5U9enM9-t26XkK6VM_5KhMiy_Lw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36CACCC/DC647B426C3011EF91DB8BBE762E951A/5U9enM9-t26XkK6VM_5KhMiy_Lw.mft
                          rsync://rpki.afrinic.net/repository/afrinic/5U9enM9-t26XkK6VM_5KhMiy_Lw.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 20 Dec 2025 07:01:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 483 (0x1e3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36CACCCAF, serialNumber=E54F5E9CCF7EB76E9790AE9533FE4A84C8B2FCBC
        Validity
            Not Before: Dec 18 07:01:50 2025 GMT
            Not After : Dec 20 07:01:50 2025 GMT
        Subject: CN=6943a6df-7385
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:87:10:d2:68:05:88:26:0f:80:6d:d0:04:e2:
                    98:94:ad:8c:5f:fd:89:25:f3:43:be:1d:67:b4:bd:
                    f5:f9:7e:74:c6:b0:cc:ec:8c:7f:fd:fe:12:86:30:
                    c3:5a:20:2c:83:96:b6:48:c0:2f:27:50:17:fa:32:
                    41:11:71:cc:78:45:18:16:93:60:90:35:6e:a2:17:
                    ff:64:b8:25:de:3d:83:2c:25:f7:db:3d:43:83:fc:
                    aa:44:79:e8:44:16:9f:3f:13:42:06:62:93:42:44:
                    aa:52:77:d7:53:93:59:9c:17:fc:cc:a2:b8:1a:fe:
                    45:a4:4d:74:b0:58:e7:13:77:67:69:dc:23:f7:14:
                    57:1a:24:36:7f:ba:94:f4:37:36:1a:28:68:a1:62:
                    5f:98:14:3d:83:ed:d2:f8:4a:68:88:cb:72:ff:c3:
                    a7:9f:67:2d:bb:97:d9:db:c1:7b:57:8f:b9:92:8a:
                    66:b8:e1:48:b0:4c:6d:97:7c:29:91:15:c8:5d:3c:
                    c0:a2:28:f0:fa:3c:c9:45:c7:86:6a:a6:c4:e4:2b:
                    9c:a3:80:fd:04:c9:39:71:d8:34:bd:43:e3:99:de:
                    e2:60:9d:14:d0:38:04:25:48:19:16:18:3a:86:6c:
                    bb:63:78:7a:a8:45:c2:2b:83:ea:4c:c9:ab:12:89:
                    ed:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:05:4E:50:9E:DD:27:30:6A:B2:5E:D3:CF:E9:28:87:AF:FA:2F:C5
            X509v3 Authority Key Identifier:
                keyid:E5:4F:5E:9C:CF:7E:B7:6E:97:90:AE:95:33:FE:4A:84:C8:B2:FC:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36CACCC/DC647B426C3011EF91DB8BBE762E951A/5U9enM9-t26XkK6VM_5KhMiy_Lw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/5U9enM9-t26XkK6VM_5KhMiy_Lw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36CACCC/DC647B426C3011EF91DB8BBE762E951A/5U9enM9-t26XkK6VM_5KhMiy_Lw.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:08:1b:76:a8:33:e9:f3:29:cf:2f:f6:52:2f:96:e3:3e:7d:
         22:27:51:62:50:81:ea:8c:c4:9a:b6:05:d6:14:1b:3b:8e:82:
         77:8a:fb:21:b9:53:8c:e0:95:15:3a:dc:29:12:79:dd:46:9b:
         bb:39:95:95:3c:8f:c6:69:87:16:5f:92:00:27:3e:a2:b6:27:
         d4:1a:27:52:ec:9b:8d:cd:92:f3:31:cc:53:5d:a4:d5:fc:af:
         7c:f7:b7:97:f2:4e:80:f6:ff:40:06:4c:32:11:c2:ba:53:79:
         f2:c0:e9:a8:04:fa:77:6a:7f:86:e2:a3:db:30:9a:95:c9:37:
         21:af:3b:be:f2:74:e5:88:06:43:9c:dd:7a:16:1b:92:d7:01:
         a0:47:85:86:63:02:7a:d0:91:9c:e0:dc:fb:30:01:34:11:4c:
         f1:9e:d7:7c:b1:46:b3:74:ac:e0:d2:08:0a:80:4b:94:2e:f6:
         6d:b3:34:11:ac:c6:79:b7:42:30:e7:8e:59:e0:02:2f:19:e6:
         19:1d:1c:b5:ab:f7:e0:62:5f:de:52:d2:73:69:a8:49:d4:78:
         d8:eb:1d:58:b1:88:dc:cd:f2:79:a5:b1:8d:44:af:46:df:5a:
         7f:68:b1:15:4d:33:7a:6b:69:59:d4:91:cc:d1:12:01:50:10:
         74:77:03:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 03:48:15 2025 by rpki-client