This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36CC8EB/B8DAD9A6B0ED11EC8494D0815A40D577/htX2BC5GaJ_lpQPn0t-J8OP8khQ.mft
File:                     htX2BC5GaJ_lpQPn0t-J8OP8khQ.mft (raw, json)
Hash identifier:          e/Tp7i8VrG8rqMQYx9jjyclboTA8AktSoQx0n/rmVYU=
Subject key identifier:   2E:70:EA:03:DB:5E:35:81:99:46:B6:98:D9:9B:B1:4A:7F:E3:9D:FB
Authority key identifier: 86:D5:F6:04:2E:46:68:9F:E5:A5:03:E7:D2:DF:89:F0:E3:FC:92:14
Certificate issuer:       /CN=F36CC8EBAF/serialNumber=86D5F6042E46689FE5A503E7D2DF89F0E3FC9214
Certificate serial:       056B
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/htX2BC5GaJ_lpQPn0t-J8OP8khQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36CC8EB/B8DAD9A6B0ED11EC8494D0815A40D577/htX2BC5GaJ_lpQPn0t-J8OP8khQ.mft
Manifest number:          056A
Signing time:             Tue 09 Dec 2025 02:41:12 +0000
Manifest this update:     Tue 09 Dec 2025 02:41:11 +0000
Manifest next update:     Thu 11 Dec 2025 02:41:11 +0000
Files and hashes:         1: htX2BC5GaJ_lpQPn0t-J8OP8khQ.crl (hash: keOCyr4ukVbLh+YdBRyrG/rQTUVnWMKUErsO2kdgl/M=)
                          2: 79EE3F02B0EE11ECBF890E845A40D577.roa (hash: Ubonh4WupVYX7KDVzMvxh6Y6MxDnvCg7ttFECjnjgfI=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36CC8EB/B8DAD9A6B0ED11EC8494D0815A40D577/htX2BC5GaJ_lpQPn0t-J8OP8khQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36CC8EB/B8DAD9A6B0ED11EC8494D0815A40D577/htX2BC5GaJ_lpQPn0t-J8OP8khQ.mft
                          rsync://rpki.afrinic.net/repository/afrinic/htX2BC5GaJ_lpQPn0t-J8OP8khQ.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 11 Dec 2025 02:41:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1387 (0x56b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36CC8EBAF, serialNumber=86D5F6042E46689FE5A503E7D2DF89F0E3FC9214
        Validity
            Not Before: Dec  9 02:41:11 2025 GMT
            Not After : Dec 11 02:41:11 2025 GMT
        Subject: CN=69378c47-9330
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:8f:11:49:ab:aa:14:cb:5c:20:c6:1c:1b:98:
                    1a:23:ca:02:97:f7:3c:da:6c:3d:91:8a:86:78:21:
                    71:31:3d:07:a4:99:7c:b0:46:4d:79:cd:b6:6a:8a:
                    3a:29:55:59:32:60:ff:3c:81:30:12:d7:18:eb:55:
                    0d:18:da:a6:ae:34:4d:89:58:a4:b0:27:90:85:fe:
                    50:63:3e:fc:7a:f6:7a:ff:1e:9a:4d:92:0e:5b:25:
                    b1:ee:9e:47:41:55:60:71:1f:f2:c2:4f:4a:fc:62:
                    d7:8f:6a:fe:f3:96:6e:a2:57:10:f0:88:e4:1c:c1:
                    45:a7:f6:a4:44:51:a9:da:f8:5b:be:80:ea:33:b1:
                    c9:da:04:73:83:24:17:52:8c:93:62:ea:96:4a:f8:
                    e0:d4:11:c1:c8:f4:40:ad:f5:e0:61:8f:87:01:a8:
                    a6:9e:2e:92:04:52:41:d8:e6:65:ee:de:6c:72:c7:
                    33:fb:ea:5d:61:5f:75:d1:3b:c7:00:ee:a5:73:b3:
                    02:a6:25:09:bf:8c:31:7e:ff:5e:2a:30:32:d8:64:
                    0a:0c:df:cb:26:12:08:1e:25:86:1d:dd:d8:49:5b:
                    5a:c7:36:2c:43:0b:e6:4d:b2:08:b3:e5:ae:19:38:
                    00:24:7c:76:69:42:a0:61:3e:fd:ad:e9:ef:73:34:
                    dc:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:70:EA:03:DB:5E:35:81:99:46:B6:98:D9:9B:B1:4A:7F:E3:9D:FB
            X509v3 Authority Key Identifier:
                keyid:86:D5:F6:04:2E:46:68:9F:E5:A5:03:E7:D2:DF:89:F0:E3:FC:92:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36CC8EB/B8DAD9A6B0ED11EC8494D0815A40D577/htX2BC5GaJ_lpQPn0t-J8OP8khQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/htX2BC5GaJ_lpQPn0t-J8OP8khQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36CC8EB/B8DAD9A6B0ED11EC8494D0815A40D577/htX2BC5GaJ_lpQPn0t-J8OP8khQ.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:20:83:c5:7a:16:dc:3a:af:0c:82:7a:5a:fa:ea:c5:44:f1:
         44:32:92:84:db:ff:ea:41:d9:a3:cb:29:fc:e1:6e:01:86:d7:
         bb:c6:95:c5:8e:b0:f1:0d:c7:a0:21:07:71:6e:2d:d9:18:be:
         a7:e0:01:a8:c2:36:e7:5c:03:51:58:e1:43:f1:a0:90:de:6d:
         0a:10:34:40:0e:6b:fc:38:57:fa:fe:a2:27:8e:c7:1e:da:e6:
         26:72:7a:9b:75:8c:21:4a:60:d9:84:e8:af:6a:cf:1e:d4:c0:
         d0:ee:9d:b4:cc:d8:0c:eb:fa:e2:d3:e3:41:d7:b8:4c:55:9f:
         e9:22:2b:27:2a:29:78:62:a4:bb:63:4f:14:4b:0f:b3:ec:48:
         6f:9c:cb:1d:21:33:c1:1d:67:6f:8b:8a:d8:9d:41:06:1b:a1:
         70:59:f8:73:4d:00:05:1e:67:1c:04:a6:98:3e:4d:3d:92:dc:
         fc:7d:6e:d6:e4:19:ac:e7:23:84:50:7f:7f:00:6f:07:c9:24:
         d8:53:2c:47:ab:ba:31:fa:6c:ee:c8:15:33:59:b6:16:a1:82:
         e1:12:4a:48:97:2c:1d:cd:40:35:31:15:ec:68:60:72:98:04:
         68:98:0c:4f:37:fe:21:6d:b8:6d:f1:99:15:c0:36:d8:31:63:
         ec:63:eb:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 9 12:32:41 2025 by rpki-client