This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36DE42D/DD92018241DA11EE8310FE374AD9E6FC/WmWZcv79gTGIjsqYuPQzJmzQ4XY.mft
File:                     WmWZcv79gTGIjsqYuPQzJmzQ4XY.mft (raw, json)
Hash identifier:          /trWVYTg+33Flgyri1MZmXKZ8dNxqm2qnQMlfqrt2qg=
Subject key identifier:   67:DC:EA:25:57:E1:12:C7:8F:BC:54:D6:44:66:AE:14:C2:52:91:D9
Authority key identifier: 5A:65:99:72:FE:FD:81:31:88:8E:CA:98:B8:F4:33:26:6C:D0:E1:76
Certificate issuer:       /CN=F36DE42DAF/serialNumber=5A659972FEFD8131888ECA98B8F433266CD0E176
Certificate serial:       0384
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/WmWZcv79gTGIjsqYuPQzJmzQ4XY.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36DE42D/DD92018241DA11EE8310FE374AD9E6FC/WmWZcv79gTGIjsqYuPQzJmzQ4XY.mft
Manifest number:          037A
Signing time:             Tue 23 Dec 2025 03:43:41 +0000
Manifest this update:     Tue 23 Dec 2025 03:43:40 +0000
Manifest next update:     Thu 25 Dec 2025 03:43:40 +0000
Files and hashes:         1: WmWZcv79gTGIjsqYuPQzJmzQ4XY.crl (hash: QSERCbw5y3DvCg9WkiHKXuMSjmyEzLV1DvEAN+h2NBs=)
                          2: A2D13DF841E211EE8413814F4AD9E6FC.roa (hash: +7tV3cQty0a49mDJHI575oP8uB6zRrZwyEYtIFBv8tA=)
                          3: F62D4A1A41E111EEAB1E864D4AD9E6FC.roa (hash: cFAo+wqTSQNV3wV3FVduOPs4bmdlZBBXmrehWIFAAig=)
                          4: 4950982841E211EE8834944E4AD9E6FC.roa (hash: 3xpGJMGpfFtuBh/X+DB86zB83LJuJIk3NmjOA6Pr8VU=)
                          5: 0E5411CC41E311EE82D6E3514AD9E6FC.roa (hash: 3TJK0gE+dAU3VH/PHstp9QZrPkjTTl+asVnrwcQTUME=)
                          6: 1BBC3BC641E011EE8387A9474AD9E6FC.roa (hash: dJ93WOjftr3A/tY41rgLkc9g+edR1ROqqJR9IAwgCiY=)
                          7: A651F64441E111EEADBE8A4C4AD9E6FC.roa (hash: na3zMW65LzRLit/bOf3+sfLfwD/XqHGj5J+NXRc3tMg=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36DE42D/DD92018241DA11EE8310FE374AD9E6FC/WmWZcv79gTGIjsqYuPQzJmzQ4XY.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36DE42D/DD92018241DA11EE8310FE374AD9E6FC/WmWZcv79gTGIjsqYuPQzJmzQ4XY.mft
                          rsync://rpki.afrinic.net/repository/afrinic/WmWZcv79gTGIjsqYuPQzJmzQ4XY.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 25 Dec 2025 00:06:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 900 (0x384)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36DE42DAF, serialNumber=5A659972FEFD8131888ECA98B8F433266CD0E176
        Validity
            Not Before: Dec 23 03:43:40 2025 GMT
            Not After : Dec 25 03:43:40 2025 GMT
        Subject: CN=694a0fed-1195
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:53:24:f9:48:d7:d9:4b:1e:c1:f8:13:2a:15:
                    12:6f:eb:bc:18:a4:6d:15:21:e9:f2:c7:2e:fd:d8:
                    aa:44:00:65:45:9d:f5:5f:7c:d5:0c:fa:ae:45:41:
                    42:5c:0a:9d:88:74:8e:71:f6:b1:1c:37:46:9e:7e:
                    69:a1:99:60:ed:b7:af:9e:41:2a:b7:d4:58:e7:e0:
                    20:b4:2f:35:3f:af:98:d6:2f:71:9d:dd:64:8f:7d:
                    3a:8d:cb:b5:3d:23:cc:40:5d:19:38:69:5c:83:8c:
                    4a:b1:42:86:a0:48:51:6a:38:15:d3:ea:6f:9a:41:
                    0a:df:81:9a:d9:55:f3:bf:a4:7a:8c:24:48:e1:e3:
                    25:f7:fd:97:41:97:a7:ad:27:3d:44:ce:3b:a2:a8:
                    d7:42:6c:a4:d5:18:e9:f9:be:89:c8:da:81:bb:08:
                    5d:45:51:16:84:e7:9f:cc:de:13:ca:ee:60:b8:29:
                    26:1f:59:b1:e7:34:f9:24:2e:97:c4:21:53:08:6f:
                    9b:2f:f9:ad:42:3b:fa:b7:86:01:d1:6b:d1:e7:ab:
                    37:31:17:06:99:9e:d3:b1:9a:93:09:f4:1d:7a:9f:
                    19:a2:c0:66:2f:20:57:ba:39:6e:98:ad:d1:53:61:
                    82:a0:54:3b:15:cd:da:9e:1b:3e:c0:4a:48:f2:6a:
                    3f:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:DC:EA:25:57:E1:12:C7:8F:BC:54:D6:44:66:AE:14:C2:52:91:D9
            X509v3 Authority Key Identifier:
                keyid:5A:65:99:72:FE:FD:81:31:88:8E:CA:98:B8:F4:33:26:6C:D0:E1:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36DE42D/DD92018241DA11EE8310FE374AD9E6FC/WmWZcv79gTGIjsqYuPQzJmzQ4XY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/WmWZcv79gTGIjsqYuPQzJmzQ4XY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36DE42D/DD92018241DA11EE8310FE374AD9E6FC/WmWZcv79gTGIjsqYuPQzJmzQ4XY.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:f1:79:a8:55:85:dd:a0:55:57:73:b7:d3:ed:15:b8:b1:5d:
         c5:42:4a:c7:0b:e3:fb:fc:9d:cf:ee:aa:aa:3a:0e:c0:ef:98:
         fb:aa:37:8d:41:ae:14:7d:f2:23:0d:d4:a2:17:84:2a:86:2d:
         f4:97:45:05:05:11:c4:b9:bb:d5:8c:f2:c9:e1:d7:31:ee:11:
         f5:07:19:80:f9:e2:0f:09:b7:a6:5d:5d:5b:34:e7:33:11:67:
         ea:9b:72:f0:af:2e:5a:d0:04:8f:df:e4:d0:ac:a5:e8:4f:6b:
         1d:3e:b0:ad:0d:1f:be:54:3c:6e:d3:a1:3b:83:e9:57:57:ee:
         8c:6a:85:b2:46:6d:74:62:f4:af:55:16:47:de:9f:ad:65:af:
         60:5d:c1:d8:57:a5:84:90:95:ff:a0:6e:cb:29:4e:93:46:3d:
         18:8a:e4:b6:6f:bd:0b:c8:d7:41:f6:fd:71:cf:83:ed:46:e8:
         c9:65:ec:65:c1:e6:ef:b9:ab:f8:77:13:aa:56:76:b8:e4:84:
         06:bd:52:07:a4:5e:a3:04:23:e0:93:a1:f9:7c:94:0f:5f:e7:
         2e:0b:4b:39:67:04:b8:aa:92:ec:4d:79:2c:90:59:be:b1:85:
         54:72:2c:9f:ac:ec:90:02:15:50:b3:93:74:ff:50:a1:3b:19:
         25:d3:31:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 08:39:32 2025 by rpki-client