This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36E1028/10D59DBCC8A411ECB5E23199F1222468/fs54roG_QHKx3E9vt-bLkWYlKzQ.mft
File:                     fs54roG_QHKx3E9vt-bLkWYlKzQ.mft (raw, json)
Hash identifier:          an0/kfAlseq2Tnf/tXDuYoNw1aq4dOe5DKHmcBe1pzA=
Subject key identifier:   96:C0:62:48:01:47:29:BB:B1:24:FA:73:B4:7C:9E:39:C5:9D:28:59
Authority key identifier: 7E:CE:78:AE:81:BF:40:72:B1:DC:4F:6F:B7:E6:CB:91:66:25:2B:34
Certificate issuer:       /CN=F36E1028AF/serialNumber=7ECE78AE81BF4072B1DC4F6FB7E6CB9166252B34
Certificate serial:       056D
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/fs54roG_QHKx3E9vt-bLkWYlKzQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36E1028/10D59DBCC8A411ECB5E23199F1222468/fs54roG_QHKx3E9vt-bLkWYlKzQ.mft
Manifest number:          0564
Signing time:             Wed 10 Dec 2025 02:44:27 +0000
Manifest this update:     Wed 10 Dec 2025 02:44:26 +0000
Manifest next update:     Fri 12 Dec 2025 02:44:26 +0000
Files and hashes:         1: fs54roG_QHKx3E9vt-bLkWYlKzQ.crl (hash: m1X7ENklZ6Qvwd2+bDFLtfMJ6yw7CmhZrcVeN913N/A=)
                          2: 6B519B0E055411EEA4B69F454AD9E6FC.roa (hash: MlR1pu7WkCuYeKJKYfug+65Us0NZKNlqF1+hRCPzABM=)
                          3: 177E9DAA0A0511EEA103A75C4AD9E6FC.roa (hash: VAjsLrJtmU9JF7920IbvEqYSSlIX9yoqgjT2siekcPY=)
                          4: D58DE410055311EE8CC21E444AD9E6FC.roa (hash: Ltv4GVOqSb5DoDvHMIZTzcleetbydhuw7+e80JkuI1k=)
                          5: 05DD987EE12A11EEBF968C9D775412E6.roa (hash: GrTtmavb95kKmRvm7iTDLhvIm3hoIjSrT87MDqcdXU8=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36E1028/10D59DBCC8A411ECB5E23199F1222468/fs54roG_QHKx3E9vt-bLkWYlKzQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36E1028/10D59DBCC8A411ECB5E23199F1222468/fs54roG_QHKx3E9vt-bLkWYlKzQ.mft
                          rsync://rpki.afrinic.net/repository/afrinic/fs54roG_QHKx3E9vt-bLkWYlKzQ.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 12 Dec 2025 02:44:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1389 (0x56d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36E1028AF, serialNumber=7ECE78AE81BF4072B1DC4F6FB7E6CB9166252B34
        Validity
            Not Before: Dec 10 02:44:26 2025 GMT
            Not After : Dec 12 02:44:26 2025 GMT
        Subject: CN=6938de8b-c95e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:df:b3:56:c4:5c:d5:de:0a:38:da:0d:94:10:
                    2d:e9:8a:9e:fd:70:f7:26:64:e0:03:fe:2a:cd:08:
                    4a:5e:18:99:c2:01:ca:7e:c0:b9:ac:d5:67:90:0e:
                    47:52:b8:25:7b:33:c6:3e:8c:c7:d5:7c:89:4a:d1:
                    3c:c9:d0:af:8e:02:2a:4f:36:be:19:0b:e0:aa:60:
                    1e:56:5b:d4:6c:fa:14:5c:f2:80:92:d9:d3:ea:5e:
                    a6:3b:d3:a1:d6:79:18:e3:4c:20:c8:c5:14:2c:f8:
                    70:fa:8e:44:98:43:f2:8f:2f:85:4b:2c:46:f3:62:
                    31:af:8a:b9:2f:30:03:94:bb:d8:c6:a2:3a:3d:5e:
                    81:86:32:63:2f:ef:a5:47:67:72:46:1c:9b:00:67:
                    7e:0c:66:cb:80:f0:16:29:9d:82:a0:9b:fb:68:56:
                    be:85:2e:1f:1c:3f:aa:9e:4a:fa:d1:3b:06:0c:69:
                    78:ca:97:3c:6e:ff:17:d6:f6:be:b9:3e:a4:ea:94:
                    f9:ff:d5:c7:50:94:e9:16:c9:93:fc:35:e5:9b:2e:
                    d1:a7:bb:dd:e0:8e:9f:88:57:e7:ad:38:38:6d:82:
                    4e:4b:6f:ef:a4:c6:3c:ee:96:c2:64:55:79:8b:5a:
                    6d:09:cd:62:2c:5d:17:1e:43:47:16:67:f6:90:25:
                    1d:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:C0:62:48:01:47:29:BB:B1:24:FA:73:B4:7C:9E:39:C5:9D:28:59
            X509v3 Authority Key Identifier:
                keyid:7E:CE:78:AE:81:BF:40:72:B1:DC:4F:6F:B7:E6:CB:91:66:25:2B:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36E1028/10D59DBCC8A411ECB5E23199F1222468/fs54roG_QHKx3E9vt-bLkWYlKzQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/fs54roG_QHKx3E9vt-bLkWYlKzQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E1028/10D59DBCC8A411ECB5E23199F1222468/fs54roG_QHKx3E9vt-bLkWYlKzQ.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:59:67:ee:95:45:ad:ce:0b:75:21:6b:cf:ae:5d:06:bd:99:
         fb:db:ac:1a:26:ad:c4:48:81:db:3a:d6:e8:87:1b:df:f8:91:
         a9:38:63:ce:33:be:77:a0:de:ad:68:84:11:50:45:23:93:20:
         da:2d:3e:18:b2:00:d6:00:0f:43:50:1c:2e:25:d1:df:d3:8e:
         1d:19:34:8f:f1:42:b5:cb:41:ee:60:80:5f:e0:ce:fd:cc:bc:
         76:98:4d:c4:81:5a:65:ba:27:4f:07:6c:d8:16:68:a5:c1:e3:
         02:b3:02:24:e5:b5:0f:ca:4b:d3:7e:c2:03:b1:2f:85:7e:9b:
         01:dc:5b:93:78:05:b4:3e:90:ce:1d:3a:94:7a:44:fe:6f:91:
         92:dd:72:fd:f6:68:e3:f8:2d:ac:39:8a:d0:1b:24:90:99:6b:
         d9:b8:71:3f:1c:16:c3:55:b5:ef:f4:73:56:93:0a:ed:bb:ef:
         47:f7:a5:dc:53:de:00:47:52:37:f9:43:47:37:09:ce:4b:ee:
         1f:f0:02:b8:0b:ad:31:8d:f9:91:5c:cb:4b:43:1a:85:24:52:
         70:82:70:bf:1a:18:f1:b6:73:b5:80:c7:84:16:e2:59:1a:d2:
         20:b9:eb:63:fd:b0:ab:fb:a9:fa:97:71:67:f5:68:fe:4a:49:
         e1:dd:af:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 10 21:45:10 2025 by rpki-client