This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36DBA67/B20091CEE26711ECBC813FA5F1222468/5GfUsiPAgVQKkfIRfW5UihuCiew.mft
File:                     5GfUsiPAgVQKkfIRfW5UihuCiew.mft (raw, json)
Hash identifier:          EkOiBIUgDEG4Al1JVwVmQTBKcyYCeGuRv+eUXmqBSHE=
Subject key identifier:   6B:2D:8B:48:70:9A:82:D9:C5:05:24:7F:32:C7:B0:ED:C4:91:9D:8D
Authority key identifier: E4:67:D4:B2:23:C0:81:54:0A:91:F2:11:7D:6E:54:8A:1B:82:89:EC
Certificate issuer:       /CN=F36DBA67AF/serialNumber=E467D4B223C081540A91F2117D6E548A1B8289EC
Certificate serial:       0538
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/5GfUsiPAgVQKkfIRfW5UihuCiew.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36DBA67/B20091CEE26711ECBC813FA5F1222468/5GfUsiPAgVQKkfIRfW5UihuCiew.mft
Manifest number:          0534
Signing time:             Tue 09 Dec 2025 02:46:20 +0000
Manifest this update:     Tue 09 Dec 2025 02:46:19 +0000
Manifest next update:     Thu 11 Dec 2025 02:46:19 +0000
Files and hashes:         1: 5GfUsiPAgVQKkfIRfW5UihuCiew.crl (hash: iQToBlSdj1EU5+vsRFzVNbagPbjVj6n/617AV2noACA=)
                          2: 04EDE310BFC711F0A31BB5E6DAE4EC9C.roa (hash: 0QychqzlMIzWQM6dar4QBq1yYOt0ya+7aLt7+P0MnUM=)
                          3: 52526144E26C11EC955D66B3F1222468.roa (hash: wsdzu4KpztjrJvczumWwqzotF/Rua7W27u+H+9K+kyE=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36DBA67/B20091CEE26711ECBC813FA5F1222468/5GfUsiPAgVQKkfIRfW5UihuCiew.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36DBA67/B20091CEE26711ECBC813FA5F1222468/5GfUsiPAgVQKkfIRfW5UihuCiew.mft
                          rsync://rpki.afrinic.net/repository/afrinic/5GfUsiPAgVQKkfIRfW5UihuCiew.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 11 Dec 2025 02:46:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1336 (0x538)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36DBA67AF, serialNumber=E467D4B223C081540A91F2117D6E548A1B8289EC
        Validity
            Not Before: Dec  9 02:46:19 2025 GMT
            Not After : Dec 11 02:46:19 2025 GMT
        Subject: CN=69378d7c-7f10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:10:b8:19:86:03:65:26:ac:66:80:c0:2e:3f:
                    08:11:e5:81:15:20:a6:1a:0f:57:88:0c:10:d0:60:
                    2a:0a:7a:68:1b:dc:42:af:49:90:82:4b:c4:c1:20:
                    93:4b:3a:a1:d7:5a:af:d2:71:ef:f3:14:3d:9e:42:
                    79:cc:20:34:61:0f:68:d5:0b:f1:58:18:03:27:8c:
                    1e:98:7c:22:df:19:40:bf:a9:3b:22:08:43:e9:e1:
                    be:99:b1:03:68:37:9b:05:b6:d0:d5:de:2b:b0:5f:
                    d0:ce:ba:6f:b9:90:a1:33:5c:c5:ab:1c:02:90:e8:
                    4b:ac:ef:91:33:a6:a4:5e:54:bf:8b:a0:42:02:d7:
                    a7:dd:b9:c1:ce:56:b3:09:94:86:a1:ab:a8:88:c7:
                    8b:88:03:63:2a:a8:7f:8a:f7:66:d1:30:79:12:84:
                    ed:b1:e3:50:02:13:d5:d8:2b:99:ab:d9:3f:2a:a1:
                    b6:34:a9:51:94:28:c6:b0:1a:e4:39:70:be:82:5d:
                    88:f1:17:a2:61:52:33:d7:e9:de:e3:e0:70:bf:64:
                    82:c2:6c:88:1d:48:b1:dd:95:49:a3:0c:f9:15:bc:
                    d4:1b:d9:cd:4a:4f:45:fc:25:94:45:7f:95:fd:8c:
                    ba:30:fc:27:d1:57:f3:98:30:a4:e3:74:3d:c4:2c:
                    20:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:2D:8B:48:70:9A:82:D9:C5:05:24:7F:32:C7:B0:ED:C4:91:9D:8D
            X509v3 Authority Key Identifier:
                keyid:E4:67:D4:B2:23:C0:81:54:0A:91:F2:11:7D:6E:54:8A:1B:82:89:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36DBA67/B20091CEE26711ECBC813FA5F1222468/5GfUsiPAgVQKkfIRfW5UihuCiew.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/5GfUsiPAgVQKkfIRfW5UihuCiew.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36DBA67/B20091CEE26711ECBC813FA5F1222468/5GfUsiPAgVQKkfIRfW5UihuCiew.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:ef:5b:47:2d:ae:ab:e6:fb:c0:8d:ba:fb:e7:f4:90:e6:48:
         8a:11:ce:da:e9:b3:87:74:79:b1:b1:56:67:34:64:82:fe:f6:
         17:e7:f6:d9:2b:f4:e3:9c:cb:74:cb:e8:7b:57:f0:64:a6:10:
         02:67:9d:7c:32:41:ee:af:4c:78:8e:cc:a0:c6:b4:1f:28:68:
         62:31:6d:f5:d5:43:b5:bc:1a:96:80:61:a4:91:4a:d9:d3:f5:
         d4:42:98:bf:3d:61:72:9a:c7:70:78:4f:e6:aa:d4:1c:9b:0c:
         d9:c8:8c:88:61:c1:ba:72:a2:3f:be:4e:0e:7f:18:f6:21:0d:
         09:31:f1:55:14:85:2a:6d:2d:9c:d9:2f:5d:fb:0d:18:bb:1b:
         8b:b6:60:a3:86:6e:e6:9a:a5:15:84:85:1d:f8:6f:97:1b:4c:
         04:d6:fe:19:1e:74:b8:d0:29:0d:de:08:71:f4:33:f6:0f:dd:
         63:e0:60:67:c1:f8:f8:93:10:a9:8a:d2:c6:c9:ac:79:cb:55:
         6c:39:92:53:0a:88:af:b0:d7:45:f7:c4:f9:43:03:a1:a2:d5:
         2f:cc:1b:13:d8:c4:60:e6:31:da:d8:b1:c2:83:e9:13:70:b3:
         97:be:3f:91:7c:8c:ef:1a:be:84:6a:ac:e9:39:ea:89:3b:7b:
         fd:c1:ed:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 9 12:06:16 2025 by rpki-client