This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36E8D5A/07E44428B57511EE9501EB77775412E6/TCzDWgCjh0ueijRhfMDZa1EJgg4.mft
File:                     TCzDWgCjh0ueijRhfMDZa1EJgg4.mft (raw, json)
Hash identifier:          iZKcO6GLLsgyQrKd31IF1672ElKl5I0ILuLuzPYUYRM=
Subject key identifier:   31:AB:E8:A9:61:E6:CF:36:5F:F8:6A:A7:47:C0:27:C3:D6:9E:58:BE
Authority key identifier: 4C:2C:C3:5A:00:A3:87:4B:9E:8A:34:61:7C:C0:D9:6B:51:09:82:0E
Certificate issuer:       /CN=F36E8D5AAF/serialNumber=4C2CC35A00A3874B9E8A34617CC0D96B5109820E
Certificate serial:       02DB
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/TCzDWgCjh0ueijRhfMDZa1EJgg4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36E8D5A/07E44428B57511EE9501EB77775412E6/TCzDWgCjh0ueijRhfMDZa1EJgg4.mft
Manifest number:          02D9
Signing time:             Tue 23 Dec 2025 03:59:29 +0000
Manifest this update:     Tue 23 Dec 2025 03:59:29 +0000
Manifest next update:     Thu 25 Dec 2025 03:59:29 +0000
Files and hashes:         1: TCzDWgCjh0ueijRhfMDZa1EJgg4.crl (hash: nhAewLXkI23NShlOjWLhyJ9Oc8/0vFFhyfpEKIhEpK8=)
                          2: A3699AF8B57811EEA299007E775412E6.roa (hash: ZRCLd3++fODMxgRHWAnJ8OnkFBoCiVyoDwHYHsayGfk=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36E8D5A/07E44428B57511EE9501EB77775412E6/TCzDWgCjh0ueijRhfMDZa1EJgg4.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36E8D5A/07E44428B57511EE9501EB77775412E6/TCzDWgCjh0ueijRhfMDZa1EJgg4.mft
                          rsync://rpki.afrinic.net/repository/afrinic/TCzDWgCjh0ueijRhfMDZa1EJgg4.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 25 Dec 2025 00:06:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 731 (0x2db)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36E8D5AAF, serialNumber=4C2CC35A00A3874B9E8A34617CC0D96B5109820E
        Validity
            Not Before: Dec 23 03:59:29 2025 GMT
            Not After : Dec 25 03:59:29 2025 GMT
        Subject: CN=694a13a1-0097
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:18:aa:f8:5d:5d:4b:f6:66:1c:22:fd:93:32:
                    f4:f8:53:44:37:c2:ce:83:5b:d6:7b:86:be:e3:97:
                    e1:8a:d8:5e:55:c3:a0:49:14:81:1f:f9:bf:cd:10:
                    15:24:cd:1e:c1:a0:2f:11:f6:1c:bb:87:35:b8:55:
                    7f:a4:02:35:d4:07:93:27:e8:2a:bb:bc:9e:60:fd:
                    0c:2e:f5:9a:b0:f3:3c:8b:96:fc:00:86:2a:59:15:
                    e3:2e:a7:5b:bc:a1:81:a1:35:fd:69:26:6a:dc:44:
                    db:8e:0e:bd:9a:ec:94:75:77:a5:6d:9a:d2:ba:5e:
                    1d:d1:8e:4b:cc:07:6d:27:d8:37:45:54:b3:d3:fa:
                    93:38:97:83:37:98:d3:d8:08:ed:05:f6:f5:3e:52:
                    d7:8e:a6:23:10:18:19:19:88:f6:81:62:96:ab:37:
                    b1:d5:5c:ac:d9:d9:f9:c8:2d:07:a8:f0:c4:95:1e:
                    33:05:6c:44:e9:ee:c2:81:10:fd:9a:71:ce:77:09:
                    57:58:37:58:b2:77:88:f0:b3:08:74:1d:85:c3:7c:
                    62:39:43:e2:79:14:94:25:17:8f:23:e2:ff:a3:e7:
                    44:5b:8c:99:fa:3a:02:44:a1:eb:f5:b3:5e:6d:fb:
                    7d:54:32:c0:c8:00:d3:34:32:6e:f2:bc:2b:e0:4b:
                    ea:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:AB:E8:A9:61:E6:CF:36:5F:F8:6A:A7:47:C0:27:C3:D6:9E:58:BE
            X509v3 Authority Key Identifier:
                keyid:4C:2C:C3:5A:00:A3:87:4B:9E:8A:34:61:7C:C0:D9:6B:51:09:82:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36E8D5A/07E44428B57511EE9501EB77775412E6/TCzDWgCjh0ueijRhfMDZa1EJgg4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/TCzDWgCjh0ueijRhfMDZa1EJgg4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E8D5A/07E44428B57511EE9501EB77775412E6/TCzDWgCjh0ueijRhfMDZa1EJgg4.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:3e:b0:99:1e:3b:0e:a0:97:0a:cd:dc:d6:ae:ab:6d:26:f1:
         ed:e5:88:0b:d6:a7:46:0e:a7:83:c3:bf:94:d3:d1:5c:e2:ee:
         90:24:3e:6b:2a:45:37:20:b4:3b:53:f3:9f:dd:be:3d:34:f3:
         a6:85:c4:5a:85:4c:9a:72:14:c1:14:e6:51:00:a5:b2:6b:17:
         1b:74:ef:9a:9d:8e:6f:a7:34:56:b2:df:58:09:da:62:96:7e:
         ec:02:dd:0b:78:af:52:10:35:c7:d1:0b:63:d1:64:67:00:4d:
         42:26:3f:b0:38:87:23:b8:13:03:f3:77:7b:89:27:a5:3f:8f:
         7d:86:bb:80:ca:d7:48:4a:1f:3b:1d:4e:18:1a:71:57:9c:94:
         fd:79:53:fb:14:d4:ab:05:65:90:b9:0d:b4:1d:28:32:c0:f6:
         83:60:e2:5f:ce:a7:e6:c8:ea:ea:89:ad:aa:ba:34:1e:e8:3a:
         56:df:66:9e:db:f4:49:96:08:e4:32:05:5b:e8:bc:f2:d2:b3:
         41:6c:44:ab:e5:e2:1e:a6:2c:0b:2f:91:0b:67:74:6a:19:96:
         e6:c9:6d:41:91:6c:4a:c6:ba:a1:20:54:d9:17:41:7f:19:bb:
         e3:23:6d:00:93:2b:6a:2d:1a:91:b6:0a:57:ef:28:02:ef:a6:
         5b:fd:e7:32
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICAtswDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
RThENUFBRjExMC8GA1UEBRMoNEMyQ0MzNUEwMEEzODc0QjlFOEEzNDYxN0NDMEQ5
NkI1MTA5ODIwRTAeFw0yNTEyMjMwMzU5MjlaFw0yNTEyMjUwMzU5MjlaMBgxFjAU
BgNVBAMTDTY5NGExM2ExLTAwOTcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC0GKr4XV1L9mYcIv2TMvT4U0Q3ws6DW9Z7hr7jl+GK2F5Vw6BJFIEf+b/N
EBUkzR7BoC8R9hy7hzW4VX+kAjXUB5Mn6Cq7vJ5g/Qwu9Zqw8zyLlvwAhipZFeMu
p1u8oYGhNf1pJmrcRNuODr2a7JR1d6VtmtK6Xh3RjkvMB20n2DdFVLPT+pM4l4M3
mNPYCO0F9vU+UteOpiMQGBkZiPaBYparN7HVXKzZ2fnILQeo8MSVHjMFbETp7sKB
EP2acc53CVdYN1iyd4jwswh0HYXDfGI5Q+J5FJQlF48j4v+j50RbjJn6OgJEoev1
s15t+31UMsDIANM0Mm7yvCvgS+qzAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUMavo
qWHmzzZf+GqnR8Anw9aeWL4wHwYDVR0jBBgwFoAUTCzDWgCjh0ueijRhfMDZa1EJ
gg4wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkU4RDVBLzA3RTQ0NDI4QjU3NTExRUU5NTAxRUI3Nzc3NTQxMkU2L1RDekRX
Z0NqaDB1ZWlqUmhmTURaYTFFSmdnNC5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1RDekRXZ0NqaDB1ZWlqUmhmTURaYTFFSmdnNC5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2RThENUEvMDdFNDQ0MjhCNTc1MTFFRTk1MDFFQjc3Nzc1
NDEyRTYvVEN6RFdnQ2poMHVlaWpSaGZNRFphMUVKZ2c0Lm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCyPrCZHjsOoJcKzdzWrqttJvHt5YgL
1qdGDqeDw7+U09Fc4u6QJD5rKkU3ILQ7U/Of3b49NPOmhcRahUyachTBFOZRAKWy
axcbdO+anY5vpzRWst9YCdpiln7sAt0LeK9SEDXH0Qtj0WRnAE1CJj+wOIcjuBMD
83d7iSelP499hruAytdISh87HU4YGnFXnJT9eVP7FNSrBWWQuQ20HSgywPaDYOJf
zqfmyOrqia2qujQe6DpW32ae2/RJlgjkMgVb6Lzy0rNBbESr5eIepiwLL5ELZ3Rq
GZbmyW1BkWxKxrqhIFTZF0F/GbvjI20AkytqLRqRtgpX7ygC76Zb/ecy
-----END CERTIFICATE-----
Generated at Tue Dec 23 08:40:29 2025 by rpki-client