This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D4684/8E89028ACDA511EB92DBCF3CF8AEA228/udc5FHcPXzji8Xi1dPaVYhlOiwQ.mft
File:                     udc5FHcPXzji8Xi1dPaVYhlOiwQ.mft (raw, json)
Hash identifier:          hFFAGzInKIXpA0t3Q6Syqle6lJvbCRpAMqsjkvc8Zm0=
Subject key identifier:   80:58:BD:F8:43:9E:20:EE:DF:84:1C:45:E1:9C:53:77:01:04:15:53
Authority key identifier: B9:D7:39:14:77:0F:5F:38:E2:F1:78:B5:74:F6:95:62:19:4E:8B:04
Certificate issuer:       /CN=F36D4684AF/serialNumber=B9D73914770F5F38E2F178B574F69562194E8B04
Certificate serial:       069B
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/udc5FHcPXzji8Xi1dPaVYhlOiwQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36D4684/8E89028ACDA511EB92DBCF3CF8AEA228/udc5FHcPXzji8Xi1dPaVYhlOiwQ.mft
Manifest number:          0699
Signing time:             Tue 09 Dec 2025 02:14:07 +0000
Manifest this update:     Tue 09 Dec 2025 02:14:06 +0000
Manifest next update:     Thu 11 Dec 2025 02:14:06 +0000
Files and hashes:         1: udc5FHcPXzji8Xi1dPaVYhlOiwQ.crl (hash: Sva5LfNae9tG7wnDoleDmXJcUH1GDhHIRuzBDtd6PEs=)
                          2: FD43C8202B8311EE93547A4C4AD9E6FC.roa (hash: 8yaGaM1egL+uydoPZmB7d8Zk6w6hMgcQ49/tkbhqyrk=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36D4684/8E89028ACDA511EB92DBCF3CF8AEA228/udc5FHcPXzji8Xi1dPaVYhlOiwQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36D4684/8E89028ACDA511EB92DBCF3CF8AEA228/udc5FHcPXzji8Xi1dPaVYhlOiwQ.mft
                          rsync://rpki.afrinic.net/repository/afrinic/udc5FHcPXzji8Xi1dPaVYhlOiwQ.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 11 Dec 2025 02:14:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1691 (0x69b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36D4684AF, serialNumber=B9D73914770F5F38E2F178B574F69562194E8B04
        Validity
            Not Before: Dec  9 02:14:06 2025 GMT
            Not After : Dec 11 02:14:06 2025 GMT
        Subject: CN=693785ee-b851
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:e8:bd:a7:ba:df:a6:3e:4e:95:be:91:08:b2:
                    75:9a:c0:b6:79:98:ab:74:49:26:5b:a6:a9:56:68:
                    41:71:20:03:f6:e4:b9:01:2f:42:33:5a:98:06:1d:
                    47:08:2b:04:a8:62:a6:fb:0f:5e:14:41:40:b2:35:
                    27:e0:0e:06:b3:44:79:ff:91:97:9e:47:df:ec:92:
                    15:4b:6a:e0:44:0f:b1:3b:c9:fc:be:e8:78:c3:af:
                    02:ae:71:e9:d5:9d:54:e4:24:53:49:b3:b4:1f:21:
                    ce:4a:4d:6c:f3:d2:3a:9d:b2:78:22:57:3b:78:c6:
                    a6:c3:a6:d1:20:e0:29:1f:6b:7e:05:b6:85:de:e9:
                    2e:4a:f2:74:e8:ec:9c:a8:a7:da:cd:79:79:31:ad:
                    84:8b:cf:e8:2d:e7:bb:45:13:d4:6b:4b:33:da:57:
                    cc:66:97:10:7a:83:32:23:c0:5d:14:02:14:0d:36:
                    23:49:ca:8c:38:2d:55:de:01:b5:9d:fa:c6:88:dc:
                    b0:49:1c:b2:6a:69:e3:8f:20:37:e3:8f:dc:46:44:
                    15:54:95:72:5b:d5:c3:b0:fb:fd:f8:29:f8:f4:d5:
                    eb:37:4e:0f:7f:a2:9d:29:85:a8:46:8d:c5:d9:09:
                    0e:2d:71:df:73:f9:f8:9e:6d:53:58:ba:a2:dd:0e:
                    f5:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:58:BD:F8:43:9E:20:EE:DF:84:1C:45:E1:9C:53:77:01:04:15:53
            X509v3 Authority Key Identifier:
                keyid:B9:D7:39:14:77:0F:5F:38:E2:F1:78:B5:74:F6:95:62:19:4E:8B:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36D4684/8E89028ACDA511EB92DBCF3CF8AEA228/udc5FHcPXzji8Xi1dPaVYhlOiwQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/udc5FHcPXzji8Xi1dPaVYhlOiwQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D4684/8E89028ACDA511EB92DBCF3CF8AEA228/udc5FHcPXzji8Xi1dPaVYhlOiwQ.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:33:6e:d3:44:fa:4e:59:19:cf:c7:e1:d2:1c:68:40:98:33:
         13:1a:53:6c:05:e4:a0:f5:90:81:b0:f2:a7:29:ae:2e:ca:1f:
         69:65:c1:5e:5a:fa:26:76:4c:64:19:26:fb:fe:06:dd:d5:1d:
         6d:a0:20:f0:58:1c:42:d4:d5:b6:d2:8f:d8:6e:c2:6e:b6:3d:
         6e:69:db:4d:55:82:ec:aa:f4:4b:77:28:0f:16:aa:b1:a6:d4:
         a8:eb:a3:1d:13:7d:bb:e3:2f:7e:0a:d9:a5:d4:7c:69:e6:c3:
         dc:59:e5:6c:a9:ad:1e:89:f3:20:9c:23:a9:86:d0:18:2e:ed:
         e0:3f:4f:4d:65:c0:c5:20:bc:58:e0:57:7a:6b:7b:cb:6a:46:
         b5:fc:48:3e:29:aa:a3:99:ea:ec:68:99:da:1b:d9:f1:67:c4:
         cb:3d:38:8f:bd:51:0f:b2:7f:20:51:dd:37:9a:f0:61:9d:3b:
         11:b8:74:b5:ae:31:f4:8c:33:9a:33:66:ee:d8:7c:02:85:51:
         fd:63:fb:17:b5:79:3d:3c:d0:e7:cc:ad:c0:32:a9:62:08:90:
         38:94:63:7e:26:4a:f4:35:3c:ea:3a:8d:71:3c:c2:31:bd:1d:
         a8:66:d8:43:af:b3:1c:92:8e:67:96:92:1d:24:f5:66:89:ac:
         1b:bc:15:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 9 12:18:13 2025 by rpki-client