This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36E3530/64051F66FDAA11EEB8D47855017001B1/ZOSLdeIWdPhtTmtfQjaaenO-JUE.mft
File:                     ZOSLdeIWdPhtTmtfQjaaenO-JUE.mft (raw, json)
Hash identifier:          oAy1OcyCxfI+mMhxRV7KwtP/76avRdn06ksdTVPmd/Y=
Subject key identifier:   B4:70:1D:C8:2F:64:E7:6F:A3:96:E8:18:69:0E:2E:32:18:46:75:DD
Authority key identifier: 64:E4:8B:75:E2:16:74:F8:6D:4E:6B:5F:42:36:9A:7A:73:BE:25:41
Certificate issuer:       /CN=F36E3530AF/serialNumber=64E48B75E21674F86D4E6B5F42369A7A73BE2541
Certificate serial:       0271
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/ZOSLdeIWdPhtTmtfQjaaenO-JUE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36E3530/64051F66FDAA11EEB8D47855017001B1/ZOSLdeIWdPhtTmtfQjaaenO-JUE.mft
Manifest number:          026E
Signing time:             Tue 09 Dec 2025 04:11:38 +0000
Manifest this update:     Tue 09 Dec 2025 04:11:37 +0000
Manifest next update:     Thu 11 Dec 2025 04:11:37 +0000
Files and hashes:         1: ZOSLdeIWdPhtTmtfQjaaenO-JUE.crl (hash: Fhv9bY0Q8EbXdRgnLf+YDpzn3eX5C+LQ8P6uf56z6wY=)
                          2: 5861C26CBC5511EF90F9D982762E951A.roa (hash: eB1InoySBqZLX3x4VP2uOavu6C8qTlq0DiXebO5lSp0=)
                          3: DF636C20BC5511EF9A9E2F85762E951A.roa (hash: tSQEd/CsVNkSQe/vkWSz1QvPEAJap3A5Pjx3E2Z7rJs=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36E3530/64051F66FDAA11EEB8D47855017001B1/ZOSLdeIWdPhtTmtfQjaaenO-JUE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36E3530/64051F66FDAA11EEB8D47855017001B1/ZOSLdeIWdPhtTmtfQjaaenO-JUE.mft
                          rsync://rpki.afrinic.net/repository/afrinic/ZOSLdeIWdPhtTmtfQjaaenO-JUE.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 11 Dec 2025 04:11:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 625 (0x271)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36E3530AF, serialNumber=64E48B75E21674F86D4E6B5F42369A7A73BE2541
        Validity
            Not Before: Dec  9 04:11:37 2025 GMT
            Not After : Dec 11 04:11:37 2025 GMT
        Subject: CN=6937a17a-1e55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:3f:c2:78:4f:c1:7c:98:d5:ab:50:3d:d5:85:
                    6a:fc:b0:ca:15:f8:38:b8:99:62:4e:87:b1:88:5d:
                    fa:82:c5:af:0a:92:d9:06:a0:8f:22:74:34:89:d6:
                    f7:21:54:1e:c0:ea:de:59:09:50:a0:81:7e:b1:f4:
                    ff:9d:cb:d3:66:0f:ef:8b:73:c5:9b:19:6f:a8:46:
                    79:98:3e:66:44:3b:26:e9:e8:27:bc:bd:79:25:cb:
                    b3:2b:33:2a:03:99:0a:1f:91:0e:0d:3a:55:5d:b7:
                    5d:20:63:7e:92:87:57:d6:d4:0d:65:d4:e7:ae:e8:
                    0a:22:ac:97:12:ae:12:4b:3f:c3:58:88:af:39:42:
                    e1:bb:62:86:9d:08:30:36:66:52:cb:08:1e:cd:d6:
                    64:00:48:d5:48:95:a7:5f:15:5d:d9:ba:3c:13:fc:
                    80:61:01:43:c2:3e:96:73:a8:16:21:cd:95:da:13:
                    8b:81:0c:0a:1d:84:9b:9f:ba:08:3d:53:1d:b1:bd:
                    a2:1b:db:c4:ae:11:6a:42:35:3d:7b:2d:e1:af:39:
                    38:6c:cb:7f:56:56:23:a7:71:64:ac:c3:1e:32:b7:
                    7a:da:79:a2:83:db:f3:c2:26:04:ad:2f:5d:cf:16:
                    10:f2:3f:1f:17:87:76:aa:98:99:50:d4:46:0d:8d:
                    3f:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:70:1D:C8:2F:64:E7:6F:A3:96:E8:18:69:0E:2E:32:18:46:75:DD
            X509v3 Authority Key Identifier:
                keyid:64:E4:8B:75:E2:16:74:F8:6D:4E:6B:5F:42:36:9A:7A:73:BE:25:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36E3530/64051F66FDAA11EEB8D47855017001B1/ZOSLdeIWdPhtTmtfQjaaenO-JUE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/ZOSLdeIWdPhtTmtfQjaaenO-JUE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E3530/64051F66FDAA11EEB8D47855017001B1/ZOSLdeIWdPhtTmtfQjaaenO-JUE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bb:91:a6:1a:fe:68:84:55:86:1e:8b:b8:48:20:83:b2:9c:68:
         14:0c:cc:57:f3:1f:d0:b5:92:5e:48:94:64:1e:fc:5e:c1:a3:
         34:45:d5:b1:88:2b:5b:96:de:03:91:13:3b:ce:aa:69:9d:bd:
         e6:2a:88:43:23:bc:4a:6c:7a:5f:a1:44:7c:a6:b5:55:34:3a:
         72:91:32:92:ed:7a:d0:f2:1f:8d:7b:14:16:21:af:75:cf:f3:
         64:ec:cd:54:7c:a1:e3:7b:ab:6b:96:e3:78:b0:2e:aa:90:ce:
         c1:3b:5d:e6:8f:f7:3c:f5:1d:6e:fd:c2:ca:ae:8b:cd:30:c8:
         c8:36:38:9c:d5:c3:a9:5e:84:50:2c:3b:e4:5c:cd:40:69:f8:
         40:cc:28:6b:3f:ed:a9:da:f2:e6:3c:70:5a:77:b5:ca:b9:2d:
         f8:93:65:79:3f:8a:5c:16:28:2b:94:6a:bb:bd:10:d5:b1:24:
         f5:1f:8b:00:9e:6b:64:9e:99:1e:4b:dc:f2:1f:72:66:a8:16:
         07:d9:de:a7:e8:9c:a7:46:a1:c6:6c:1d:16:ce:9a:ad:d8:47:
         0c:6f:88:4d:a5:8c:ea:c4:be:c8:1f:3b:bc:7e:1f:34:ed:4b:
         82:fc:bf:1c:0c:04:b5:6b:35:95:d8:ba:9a:2b:f1:47:17:b8:
         18:1f:e5:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 9 12:05:55 2025 by rpki-client