This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36DD92B/F4F4F3EA0BBD11EF8655910D017001B1/mSzTGdelFaVjcylM4EkVP4w-AEs.mft
File:                     mSzTGdelFaVjcylM4EkVP4w-AEs.mft (raw, json)
Hash identifier:          BqqpYxNZuh5g04sx+gy954YZr2BoeWFUJK32W5cPAEc=
Subject key identifier:   B3:29:82:E8:71:3A:D5:57:A9:A4:23:8D:F8:39:4F:7B:D6:46:36:05
Authority key identifier: 99:2C:D3:19:D7:A5:15:A5:63:73:29:4C:E0:49:15:3F:8C:3E:00:4B
Certificate issuer:       /CN=F36DD92BAF/serialNumber=992CD319D7A515A56373294CE049153F8C3E004B
Certificate serial:       025A
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/mSzTGdelFaVjcylM4EkVP4w-AEs.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36DD92B/F4F4F3EA0BBD11EF8655910D017001B1/mSzTGdelFaVjcylM4EkVP4w-AEs.mft
Manifest number:          0258
Signing time:             Tue 09 Dec 2025 04:14:44 +0000
Manifest this update:     Tue 09 Dec 2025 04:14:43 +0000
Manifest next update:     Thu 11 Dec 2025 04:14:43 +0000
Files and hashes:         1: mSzTGdelFaVjcylM4EkVP4w-AEs.crl (hash: PwfUMjiHJH6Z59aUbXf06wJl/f3xmbfbErRoKgJCfeY=)
                          2: 9A80206C9E9F11F08B5173C7DAE4EC9C.roa (hash: zMpoEJiydkEB9R9gGzSBD+NZusOfsnt8eXXZDmo8PjE=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36DD92B/F4F4F3EA0BBD11EF8655910D017001B1/mSzTGdelFaVjcylM4EkVP4w-AEs.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36DD92B/F4F4F3EA0BBD11EF8655910D017001B1/mSzTGdelFaVjcylM4EkVP4w-AEs.mft
                          rsync://rpki.afrinic.net/repository/afrinic/mSzTGdelFaVjcylM4EkVP4w-AEs.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 11 Dec 2025 04:14:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 602 (0x25a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36DD92BAF, serialNumber=992CD319D7A515A56373294CE049153F8C3E004B
        Validity
            Not Before: Dec  9 04:14:43 2025 GMT
            Not After : Dec 11 04:14:43 2025 GMT
        Subject: CN=6937a234-cf82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:e8:f9:bf:41:dc:82:31:51:83:62:fa:be:65:
                    76:d1:b1:f4:43:69:1c:c5:25:8f:7a:9f:f5:4c:7f:
                    05:94:fd:73:7c:9f:75:cb:03:cd:fa:f3:79:b3:7e:
                    23:47:c8:ba:d8:46:b0:35:93:93:07:fa:da:e1:28:
                    de:5f:fa:00:e2:b0:0d:a7:76:07:30:d5:c0:62:d0:
                    07:ee:26:36:7c:b3:30:88:9a:7e:4b:18:6a:37:8a:
                    79:cb:bd:6c:c2:fa:59:dc:c6:e4:f1:67:4f:aa:57:
                    3a:85:e5:d0:82:28:4f:54:43:a9:e9:25:1c:16:d5:
                    63:59:1d:9e:d3:bb:6c:3a:5a:19:e6:13:84:fc:a7:
                    7b:14:65:a2:bd:86:2f:c5:ec:ee:cf:26:cc:80:cb:
                    97:80:21:cd:43:99:93:4c:3a:dd:8a:9c:34:01:78:
                    aa:25:7f:e0:ca:ff:9b:73:a0:39:86:7e:7f:ac:54:
                    82:a9:88:20:fa:11:18:2e:33:14:70:e4:3e:fa:4f:
                    94:7c:cc:e8:d1:8d:57:7c:7a:41:34:20:09:c2:26:
                    2b:dc:6f:75:34:6e:41:d1:73:37:60:bd:35:90:f3:
                    d3:20:c6:e9:b0:30:5b:ed:df:9c:2f:33:58:11:4c:
                    03:be:2a:0c:8b:df:f7:00:9e:3b:0c:6c:f5:02:1e:
                    e4:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:29:82:E8:71:3A:D5:57:A9:A4:23:8D:F8:39:4F:7B:D6:46:36:05
            X509v3 Authority Key Identifier:
                keyid:99:2C:D3:19:D7:A5:15:A5:63:73:29:4C:E0:49:15:3F:8C:3E:00:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36DD92B/F4F4F3EA0BBD11EF8655910D017001B1/mSzTGdelFaVjcylM4EkVP4w-AEs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/mSzTGdelFaVjcylM4EkVP4w-AEs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36DD92B/F4F4F3EA0BBD11EF8655910D017001B1/mSzTGdelFaVjcylM4EkVP4w-AEs.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:5f:66:58:a8:b9:b1:d4:12:8e:d3:dd:8c:5d:f6:5f:f9:0e:
         47:64:e1:69:72:4b:0d:6b:b1:13:92:29:e2:83:cd:03:32:8b:
         5b:71:b3:6e:11:a2:44:8c:2b:03:bf:f1:17:d1:d8:12:71:fd:
         ff:ef:7e:90:3a:89:b3:34:cb:3b:de:ed:29:12:29:3a:e3:42:
         b3:ca:21:fc:bd:ec:e2:9b:53:af:01:59:a3:0e:8b:7e:bf:5d:
         45:5d:44:3c:fa:65:18:a3:e3:18:5a:e2:7f:3a:d3:d1:45:46:
         3a:e0:ea:58:a1:a6:d3:35:58:4c:82:36:e0:d2:2b:44:70:cd:
         ec:df:cb:80:aa:6c:dd:e4:44:bb:ae:e5:a7:3b:a3:1f:27:08:
         a0:68:10:24:87:72:b0:48:4e:8f:84:de:76:68:b4:a3:df:73:
         20:bc:16:ef:45:8f:8a:56:e7:1a:d0:6f:1d:29:f6:55:6a:10:
         2e:98:63:d4:ef:4b:e9:07:df:c4:f7:39:9e:f4:d8:b3:7e:80:
         57:90:5a:8a:f8:ca:e0:de:2e:1c:6a:88:ce:8b:28:f6:a8:96:
         01:58:1e:fc:b7:95:f5:aa:93:48:65:91:fd:14:87:fe:03:98:
         5d:56:ac:3e:be:43:d8:9d:1c:1f:7b:92:48:19:35:9c:18:47:
         41:7f:09:9b
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICAlowDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
REQ5MkJBRjExMC8GA1UEBRMoOTkyQ0QzMTlEN0E1MTVBNTYzNzMyOTRDRTA0OTE1
M0Y4QzNFMDA0QjAeFw0yNTEyMDkwNDE0NDNaFw0yNTEyMTEwNDE0NDNaMBgxFjAU
BgNVBAMTDTY5MzdhMjM0LWNmODIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDK6Pm/QdyCMVGDYvq+ZXbRsfRDaRzFJY96n/VMfwWU/XN8n3XLA83683mz
fiNHyLrYRrA1k5MH+trhKN5f+gDisA2ndgcw1cBi0AfuJjZ8szCImn5LGGo3innL
vWzC+lncxuTxZ0+qVzqF5dCCKE9UQ6npJRwW1WNZHZ7Tu2w6WhnmE4T8p3sUZaK9
hi/F7O7PJsyAy5eAIc1DmZNMOt2KnDQBeKolf+DK/5tzoDmGfn+sVIKpiCD6ERgu
MxRw5D76T5R8zOjRjVd8ekE0IAnCJivcb3U0bkHRczdgvTWQ89MgxumwMFvt35wv
M1gRTAO+KgyL3/cAnjsMbPUCHuSpAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUsymC
6HE61VeppCON+DlPe9ZGNgUwHwYDVR0jBBgwFoAUmSzTGdelFaVjcylM4EkVP4w+
AEswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkREOTJCL0Y0RjRGM0VBMEJCRDExRUY4NjU1OTEwRDAxNzAwMUIxL21TelRH
ZGVsRmFWamN5bE00RWtWUDR3LUFFcy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL21TelRHZGVsRmFWamN5bE00RWtWUDR3LUFFcy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2REQ5MkIvRjRGNEYzRUEwQkJEMTFFRjg2NTU5MTBEMDE3
MDAxQjEvbVN6VEdkZWxGYVZqY3lsTTRFa1ZQNHctQUVzLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBZX2ZYqLmx1BKO092MXfZf+Q5HZOFp
cksNa7ETkinig80DMotbcbNuEaJEjCsDv/EX0dgScf3/736QOomzNMs73u0pEik6
40KzyiH8vezim1OvAVmjDot+v11FXUQ8+mUYo+MYWuJ/OtPRRUY64OpYoabTNVhM
gjbg0itEcM3s38uAqmzd5ES7ruWnO6MfJwigaBAkh3KwSE6PhN52aLSj33MgvBbv
RY+KVuca0G8dKfZVahAumGPU70vpB9/E9zme9NizfoBXkFqK+Mrg3i4caojOiyj2
qJYBWB78t5X1qpNIZZH9FIf+A5hdVqw+vkPYnRwfe5JIGTWcGEdBfwmb
-----END CERTIFICATE-----
Generated at Tue Dec 9 12:19:55 2025 by rpki-client