This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36E4A6E/539E08E64B2B11ED8921BD9CF1222468/Jj7R5WFAIUsbLr-1VmemfOVZRkQ.mft
File:                     Jj7R5WFAIUsbLr-1VmemfOVZRkQ.mft (raw, json)
Hash identifier:          JzQwM+21kFAPSlIyxCiXKwK2dekSORFm0zLH34lgV4Q=
Subject key identifier:   47:0D:30:B1:A8:48:73:D4:6F:51:F3:00:6A:F3:E8:93:3E:73:97:24
Authority key identifier: 26:3E:D1:E5:61:40:21:4B:1B:2E:BF:B5:56:67:A6:7C:E5:59:46:44
Certificate issuer:       /CN=F36E4A6EAF/serialNumber=263ED1E56140214B1B2EBFB55667A67CE5594644
Certificate serial:       04A7
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/Jj7R5WFAIUsbLr-1VmemfOVZRkQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36E4A6E/539E08E64B2B11ED8921BD9CF1222468/Jj7R5WFAIUsbLr-1VmemfOVZRkQ.mft
Manifest number:          04A6
Signing time:             Tue 09 Dec 2025 03:04:29 +0000
Manifest this update:     Tue 09 Dec 2025 03:04:28 +0000
Manifest next update:     Thu 11 Dec 2025 03:04:28 +0000
Files and hashes:         1: Jj7R5WFAIUsbLr-1VmemfOVZRkQ.crl (hash: 3aHv8dxA56qXPwpiugHCW9wRTrxtzvRQgILxvN8yf7M=)
                          2: B6E3EFEC4B2B11ED8B51B99DF1222468.roa (hash: SeEZMep8qUp7m/jfkKAlult6v7B0lE6Bk41ZD/YO3Aw=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36E4A6E/539E08E64B2B11ED8921BD9CF1222468/Jj7R5WFAIUsbLr-1VmemfOVZRkQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36E4A6E/539E08E64B2B11ED8921BD9CF1222468/Jj7R5WFAIUsbLr-1VmemfOVZRkQ.mft
                          rsync://rpki.afrinic.net/repository/afrinic/Jj7R5WFAIUsbLr-1VmemfOVZRkQ.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 11 Dec 2025 03:04:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1191 (0x4a7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36E4A6EAF, serialNumber=263ED1E56140214B1B2EBFB55667A67CE5594644
        Validity
            Not Before: Dec  9 03:04:28 2025 GMT
            Not After : Dec 11 03:04:28 2025 GMT
        Subject: CN=693791bd-0280
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:c3:f2:16:00:d8:06:38:42:b9:4a:6c:29:0d:
                    95:89:eb:e2:27:fb:bf:db:cf:48:a0:6f:7f:81:d2:
                    00:58:c9:b2:f3:55:87:d2:00:ce:ff:27:d7:27:f2:
                    3d:33:8e:c6:c8:f1:03:62:8e:4a:02:63:10:b8:17:
                    92:58:f8:f9:94:2f:d7:97:c5:8f:af:86:64:0e:ec:
                    49:68:3a:e9:18:9c:2f:96:b1:1e:63:7b:81:4b:63:
                    24:5d:a2:a4:86:63:93:45:a9:00:5a:c7:ce:eb:be:
                    10:f5:84:11:26:dc:f7:8f:5f:62:0c:5b:72:1f:28:
                    c0:e4:53:8c:69:11:5f:70:4a:c6:f5:0a:ee:62:6c:
                    27:31:c1:ee:a6:43:d4:07:e3:b6:fe:ab:31:68:b1:
                    fe:b9:ae:b8:ec:41:e5:5f:59:71:c2:81:ce:db:bf:
                    4c:4b:ad:a8:6a:3d:74:80:df:ce:09:48:56:a1:cf:
                    98:26:5f:48:55:38:89:7b:67:7c:31:1a:ee:d5:55:
                    55:f3:b0:80:aa:7f:c0:4c:84:54:56:b2:bc:b4:ea:
                    79:2c:5c:bc:81:22:7b:0f:9f:c8:5c:2b:9a:87:dd:
                    a7:c8:9b:6d:ba:7f:76:58:9b:08:0e:c0:b3:2a:04:
                    05:27:4e:ac:46:ba:ec:c1:e7:be:2f:61:5f:89:66:
                    34:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:0D:30:B1:A8:48:73:D4:6F:51:F3:00:6A:F3:E8:93:3E:73:97:24
            X509v3 Authority Key Identifier:
                keyid:26:3E:D1:E5:61:40:21:4B:1B:2E:BF:B5:56:67:A6:7C:E5:59:46:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36E4A6E/539E08E64B2B11ED8921BD9CF1222468/Jj7R5WFAIUsbLr-1VmemfOVZRkQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Jj7R5WFAIUsbLr-1VmemfOVZRkQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E4A6E/539E08E64B2B11ED8921BD9CF1222468/Jj7R5WFAIUsbLr-1VmemfOVZRkQ.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:51:64:83:ef:2e:11:1b:f1:f5:b2:26:a4:8b:3f:3a:95:12:
         f9:db:60:b3:c1:36:1d:75:31:31:e6:5a:ee:81:74:17:f0:c8:
         8a:0d:2d:6d:ef:b1:8d:fb:f4:ac:00:6a:ea:55:ac:29:65:4c:
         2d:5c:a0:47:26:cf:7d:7e:10:dd:a5:3e:c2:88:6f:1e:86:c8:
         83:b0:38:ee:ce:ff:c0:f2:27:aa:d2:fb:76:9b:5c:f3:19:a2:
         52:eb:57:18:07:c5:39:24:19:df:32:ce:21:64:fb:cb:21:70:
         13:49:c8:98:de:35:12:26:46:75:db:5d:bd:5d:4a:1a:01:51:
         c6:09:11:73:0a:ca:b0:32:86:b5:6a:00:0b:92:db:b0:a6:6d:
         b4:1d:a5:5d:8b:e5:7e:f5:de:0a:59:8b:d5:ff:16:78:fb:79:
         d4:4b:a8:bf:03:e3:df:26:b9:5f:52:bd:29:df:60:98:b4:a7:
         a0:69:d7:50:6d:61:a2:62:a9:99:f8:a0:ec:4f:d7:00:a0:44:
         57:0c:d6:ce:f3:f2:fb:f4:e9:98:63:9e:ef:ba:7a:a0:ee:2a:
         12:27:58:ab:e8:14:65:95:b6:8b:cd:f6:75:f3:2a:1a:bc:fe:
         5d:1a:c3:1b:b8:1d:d8:81:a4:f6:10:c8:43:c1:59:e5:3e:a5:
         e6:21:b8:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 9 12:05:55 2025 by rpki-client