This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36E084C/6A9DAE420F5C11EA915D5341F8AEA228/u5rxuG8xrPJ3qzoG0Y5571yLrXk.mft
File:                     u5rxuG8xrPJ3qzoG0Y5571yLrXk.mft (raw, json)
Hash identifier:          XLD9wg/U10gC8QIALuxcfcX6YkbpmkWgbciSahXBliI=
Subject key identifier:   EF:DE:9D:EE:7A:3A:F7:75:62:AE:C6:E0:2B:96:9C:5E:CA:0F:52:71
Authority key identifier: BB:9A:F1:B8:6F:31:AC:F2:77:AB:3A:06:D1:8E:79:EF:5C:8B:AD:79
Certificate issuer:       /CN=F36E084CAF/serialNumber=BB9AF1B86F31ACF277AB3A06D18E79EF5C8BAD79
Certificate serial:       08E6
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/u5rxuG8xrPJ3qzoG0Y5571yLrXk.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36E084C/6A9DAE420F5C11EA915D5341F8AEA228/u5rxuG8xrPJ3qzoG0Y5571yLrXk.mft
Manifest number:          08E0
Signing time:             Tue 09 Dec 2025 01:39:28 +0000
Manifest this update:     Tue 09 Dec 2025 01:39:27 +0000
Manifest next update:     Thu 11 Dec 2025 01:39:27 +0000
Files and hashes:         1: u5rxuG8xrPJ3qzoG0Y5571yLrXk.crl (hash: FO7c0pgkjcvk/AaPHI5dH8iEoQMyuk5W1Hb07Ex4YVY=)
                          2: 86921EA0A38311EBBE2DD613F8AEA228.roa (hash: Qdm1jwSuwMkCRXEjG6ft+SApHF6cYD5AROgyucfXjCM=)
                          3: C2A79C94A38311EB9FD81C14F8AEA228.roa (hash: wCi/saeIICAwOHNLZFRK/7Rxl1hUxRkLtU6ihyqYm9U=)
                          4: 09404144A38211EB9403A411F8AEA228.roa (hash: XszKqqcugifGQ7P7cFMGaXWJ1rKb7154oh90pRoXSnM=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36E084C/6A9DAE420F5C11EA915D5341F8AEA228/u5rxuG8xrPJ3qzoG0Y5571yLrXk.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36E084C/6A9DAE420F5C11EA915D5341F8AEA228/u5rxuG8xrPJ3qzoG0Y5571yLrXk.mft
                          rsync://rpki.afrinic.net/repository/afrinic/u5rxuG8xrPJ3qzoG0Y5571yLrXk.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 11 Dec 2025 01:39:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2278 (0x8e6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36E084CAF, serialNumber=BB9AF1B86F31ACF277AB3A06D18E79EF5C8BAD79
        Validity
            Not Before: Dec  9 01:39:27 2025 GMT
            Not After : Dec 11 01:39:27 2025 GMT
        Subject: CN=69377dd0-547a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:c4:09:0d:c4:ab:13:09:0c:3a:cc:40:75:ee:
                    96:ef:a7:ff:29:48:a8:18:f7:7f:d8:14:a9:f0:ba:
                    d2:b0:eb:31:05:43:62:fb:a7:8d:20:73:89:2a:ac:
                    15:dc:6f:d5:ae:06:07:76:ec:3e:dd:6c:ca:02:48:
                    02:d3:4c:c1:74:ee:a1:8e:4a:25:f4:f8:89:5d:21:
                    d0:8e:d6:eb:2a:43:26:42:ee:7e:25:85:32:39:13:
                    f5:c8:22:03:52:a3:a7:1f:bf:c8:d6:23:92:dd:87:
                    24:27:c6:9e:0f:be:94:99:f4:4f:b9:a0:04:be:41:
                    32:ac:89:de:91:52:42:fe:ca:7d:f6:bd:60:3b:2b:
                    14:1b:80:1d:3a:ae:d0:b5:9d:fa:4c:ed:d4:39:34:
                    64:92:ad:fc:12:dc:23:b9:52:c7:c6:51:aa:e1:8a:
                    92:5c:30:af:57:7f:ad:37:91:c5:bf:7c:a8:e5:b7:
                    47:86:d6:c6:dd:e3:6d:19:66:21:97:4b:ae:d7:85:
                    cd:9a:5a:05:43:47:8b:dd:48:7d:ea:7e:77:c1:21:
                    7f:7c:ba:b8:33:ad:90:10:fc:68:71:21:bb:a8:c8:
                    65:db:4b:ea:d8:2e:d9:5d:a4:99:8e:7e:62:f0:bc:
                    a5:49:a0:79:67:2b:33:9d:a7:f5:9f:e1:06:63:e6:
                    c2:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:DE:9D:EE:7A:3A:F7:75:62:AE:C6:E0:2B:96:9C:5E:CA:0F:52:71
            X509v3 Authority Key Identifier:
                keyid:BB:9A:F1:B8:6F:31:AC:F2:77:AB:3A:06:D1:8E:79:EF:5C:8B:AD:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36E084C/6A9DAE420F5C11EA915D5341F8AEA228/u5rxuG8xrPJ3qzoG0Y5571yLrXk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/u5rxuG8xrPJ3qzoG0Y5571yLrXk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E084C/6A9DAE420F5C11EA915D5341F8AEA228/u5rxuG8xrPJ3qzoG0Y5571yLrXk.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:65:38:25:6a:9f:2e:04:c0:55:16:7b:ab:7e:5b:2f:4d:10:
         18:84:d6:75:a1:64:28:0b:72:bb:66:fe:f9:78:96:93:be:0a:
         8e:c8:d7:6f:a7:1d:68:86:fe:40:a2:02:8c:7e:a8:fd:b6:5b:
         13:44:81:65:86:4a:96:00:4a:ff:de:4b:8e:2e:41:e9:27:20:
         d0:93:21:5e:32:a0:87:c2:50:69:a6:17:49:90:4d:d6:bf:ad:
         49:c3:1a:f8:68:06:c5:00:50:3a:1e:55:23:31:69:00:e5:02:
         5e:62:94:00:bd:7e:6c:83:bb:2d:23:b9:f1:80:45:cc:03:77:
         c0:28:79:31:5f:51:51:85:73:ed:04:79:44:ae:3a:0c:df:e6:
         3d:64:b9:82:13:8e:04:e8:22:c1:fe:b5:85:bc:78:07:a9:15:
         9b:6d:a9:92:92:cc:90:b2:50:d8:16:6d:95:5e:9f:58:cd:71:
         e3:67:5b:6e:90:fb:08:70:f2:6d:01:f1:fd:13:59:4f:07:08:
         eb:d0:8f:62:5d:88:53:89:18:04:ee:4b:84:b9:54:30:17:da:
         7a:5c:5b:23:cd:b8:97:ee:53:4f:01:1a:6f:4e:ef:a7:50:05:
         39:eb:0f:07:82:88:c1:ed:4f:b0:cf:8b:07:b5:69:73:77:89:
         26:65:1d:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 9 12:16:20 2025 by rpki-client