This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36CB8DF/54C57C588A4611EE8FFA9F0E4AD9E6FC/HIATGRbyhVyxdDXLrvJmjeFVlsE.mft
File:                     HIATGRbyhVyxdDXLrvJmjeFVlsE.mft (raw, json)
Hash identifier:          w0eoEzJl1scRq2QRKn31+hNizjgMYyBA2FqBKqIfRhg=
Subject key identifier:   B9:75:9B:96:F8:56:A0:F8:69:A4:87:B8:EB:18:02:D4:B2:D0:C6:AC
Authority key identifier: 1C:80:13:19:16:F2:85:5C:B1:74:35:CB:AE:F2:66:8D:E1:55:96:C1
Certificate issuer:       /CN=F36CB8DFAF/serialNumber=1C80131916F2855CB17435CBAEF2668DE15596C1
Certificate serial:       0301
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/HIATGRbyhVyxdDXLrvJmjeFVlsE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36CB8DF/54C57C588A4611EE8FFA9F0E4AD9E6FC/HIATGRbyhVyxdDXLrvJmjeFVlsE.mft
Manifest number:          0300
Signing time:             Tue 09 Dec 2025 03:54:53 +0000
Manifest this update:     Tue 09 Dec 2025 03:54:52 +0000
Manifest next update:     Thu 11 Dec 2025 03:54:52 +0000
Files and hashes:         1: HIATGRbyhVyxdDXLrvJmjeFVlsE.crl (hash: SijFugX6Rau7ErtLMh5pHbUCDCa3MumHUfqTczp5Ym0=)
                          2: 27E171828AA611EEAADC55514AD9E6FC.roa (hash: 09dXVAcpXBeumVd3ejmIXPVt6jsUIfxATFT48+wvgGE=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36CB8DF/54C57C588A4611EE8FFA9F0E4AD9E6FC/HIATGRbyhVyxdDXLrvJmjeFVlsE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36CB8DF/54C57C588A4611EE8FFA9F0E4AD9E6FC/HIATGRbyhVyxdDXLrvJmjeFVlsE.mft
                          rsync://rpki.afrinic.net/repository/afrinic/HIATGRbyhVyxdDXLrvJmjeFVlsE.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 11 Dec 2025 03:54:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 769 (0x301)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36CB8DFAF, serialNumber=1C80131916F2855CB17435CBAEF2668DE15596C1
        Validity
            Not Before: Dec  9 03:54:52 2025 GMT
            Not After : Dec 11 03:54:52 2025 GMT
        Subject: CN=69379d8d-5938
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:5e:a1:85:a3:3d:ed:ef:02:d8:a7:b6:9c:d9:
                    a5:18:5e:cf:96:f7:d8:5a:55:9b:19:a7:5c:fe:1c:
                    33:f0:67:e2:2d:dc:cd:3a:ef:37:9a:ae:8f:74:12:
                    cd:7e:57:0e:46:0e:42:76:3a:43:e7:89:d4:f5:19:
                    bf:d4:ac:75:be:fb:57:3d:80:c4:7b:af:f9:ab:aa:
                    33:c5:1d:b9:88:a7:d5:2e:84:9e:76:bd:0e:ad:b3:
                    4f:6d:e3:fe:a9:22:fe:0c:02:80:d1:f5:ad:bf:2c:
                    78:c2:03:ea:4e:0e:24:62:e5:f9:34:56:b0:ac:2e:
                    ba:14:26:f0:b2:ab:81:77:74:3a:6d:02:58:5a:b5:
                    16:f7:f0:e1:72:36:12:5b:85:ee:c3:e1:c5:d8:a2:
                    02:cb:40:32:47:fa:28:5f:b0:59:4a:d6:6c:b9:c0:
                    e8:9e:f0:26:bd:9f:f2:61:fe:b4:2c:79:e6:77:8e:
                    e0:1d:a1:b4:5d:5d:d9:3b:3b:36:f2:23:51:82:6a:
                    50:75:eb:4b:a3:7c:d2:54:dc:5e:bb:2a:e1:c3:6f:
                    d0:ce:a9:bb:cb:f3:7b:10:89:d9:22:26:b3:94:85:
                    00:bd:a1:88:8f:f3:e9:58:99:1e:ea:91:f9:35:c0:
                    49:36:e7:37:f4:d6:e9:31:59:b4:41:8b:21:14:b1:
                    9c:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:75:9B:96:F8:56:A0:F8:69:A4:87:B8:EB:18:02:D4:B2:D0:C6:AC
            X509v3 Authority Key Identifier:
                keyid:1C:80:13:19:16:F2:85:5C:B1:74:35:CB:AE:F2:66:8D:E1:55:96:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36CB8DF/54C57C588A4611EE8FFA9F0E4AD9E6FC/HIATGRbyhVyxdDXLrvJmjeFVlsE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/HIATGRbyhVyxdDXLrvJmjeFVlsE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36CB8DF/54C57C588A4611EE8FFA9F0E4AD9E6FC/HIATGRbyhVyxdDXLrvJmjeFVlsE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d3:5e:a2:bc:09:d7:7d:01:fa:92:3d:aa:30:81:f2:8b:bd:3a:
         4c:55:db:fb:df:10:4c:27:04:0c:f1:4a:04:77:2a:ea:3f:e4:
         46:33:5c:58:b9:2c:aa:46:01:7e:2e:9f:1c:f0:67:16:eb:0c:
         4f:ae:7f:31:19:93:23:3d:3a:48:f7:f6:9a:2c:ea:af:92:90:
         a7:17:2b:74:f4:a5:83:fe:37:9e:ad:06:4c:ca:9f:65:74:11:
         4e:7d:ba:9f:0f:0e:4a:10:f0:86:05:c2:ef:e5:43:b9:85:8e:
         54:3a:76:a6:48:55:de:b9:1c:91:ad:b4:90:72:ae:84:0d:80:
         58:90:e0:dd:96:d7:57:59:3d:bd:18:cf:3d:51:92:1d:d2:ab:
         3d:c2:ec:2e:98:11:c6:92:bc:08:b0:e5:a2:a5:ac:23:33:e3:
         76:ca:99:7d:d6:a4:a7:37:21:6f:6a:dd:3d:44:45:fb:16:bf:
         2c:0c:36:7d:87:fe:ea:84:6d:38:a3:9b:72:c2:db:16:51:43:
         41:fe:ad:ae:77:2d:f0:bb:47:73:67:ab:5d:02:99:55:84:7d:
         59:f8:cb:21:aa:30:e0:36:b6:60:6b:d9:bd:07:20:7c:04:c7:
         15:85:63:ef:ad:48:84:1e:31:6a:a4:29:3c:0f:63:d8:f3:b0:
         45:4f:45:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 9 12:27:46 2025 by rpki-client