This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36EB6AE/381289B283DC11EA96D3CC4EF8AEA228/NzwYJ-JwTD_cFqh4mA-tyINfpII.mft
File:                     NzwYJ-JwTD_cFqh4mA-tyINfpII.mft (raw, json)
Hash identifier:          H5UU65mhid/phZw5OIuw8v4dgSbbwT1doq3z+j1YcOE=
Subject key identifier:   07:1B:C4:3C:25:06:5A:66:75:BA:AC:05:A2:FE:DC:BB:8F:89:E0:96
Authority key identifier: 37:3C:18:27:E2:70:4C:3F:DC:16:A8:78:98:0F:AD:C8:83:5F:A4:82
Certificate issuer:       /CN=F36EB6AEAF/serialNumber=373C1827E2704C3FDC16A878980FADC8835FA482
Certificate serial:       0842
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/NzwYJ-JwTD_cFqh4mA-tyINfpII.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36EB6AE/381289B283DC11EA96D3CC4EF8AEA228/NzwYJ-JwTD_cFqh4mA-tyINfpII.mft
Manifest number:          0840
Signing time:             Tue 09 Dec 2025 01:46:24 +0000
Manifest this update:     Tue 09 Dec 2025 01:46:23 +0000
Manifest next update:     Thu 11 Dec 2025 01:46:23 +0000
Files and hashes:         1: NzwYJ-JwTD_cFqh4mA-tyINfpII.crl (hash: pdSQZaC8HLOZZk+JJ/VXZNxwZ40ArTiuzHKJGW6cMBU=)
                          2: 194DF7D868FB11EFB7429B90762E951A.roa (hash: NFQt82rMb7NWbYXB4Ts4sK7O+uFyIpzTw3E2kXEqFmc=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36EB6AE/381289B283DC11EA96D3CC4EF8AEA228/NzwYJ-JwTD_cFqh4mA-tyINfpII.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36EB6AE/381289B283DC11EA96D3CC4EF8AEA228/NzwYJ-JwTD_cFqh4mA-tyINfpII.mft
                          rsync://rpki.afrinic.net/repository/afrinic/NzwYJ-JwTD_cFqh4mA-tyINfpII.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 11 Dec 2025 01:46:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2114 (0x842)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36EB6AEAF, serialNumber=373C1827E2704C3FDC16A878980FADC8835FA482
        Validity
            Not Before: Dec  9 01:46:23 2025 GMT
            Not After : Dec 11 01:46:23 2025 GMT
        Subject: CN=69377f70-cd14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:5c:6b:fb:e2:45:a2:09:16:f7:aa:b3:8a:f0:
                    7b:02:be:40:7d:b7:5b:5f:c1:1c:f9:09:5a:f8:36:
                    f2:f9:b3:66:f3:be:cb:29:69:7f:18:fc:56:7d:2c:
                    78:fc:1f:1d:d9:39:e3:69:db:b6:d0:13:99:35:11:
                    04:7e:68:ac:2f:b4:ca:fa:7d:c3:0d:4b:31:71:04:
                    f0:2d:24:48:ed:04:55:0f:77:04:51:12:27:90:4f:
                    a8:ed:cd:7c:40:f7:24:2b:c1:90:85:11:41:7c:3e:
                    5a:0d:d0:16:5f:ae:85:3d:bf:eb:b1:1d:e3:09:96:
                    d5:d6:f8:03:45:ba:7b:bf:21:52:03:41:d3:d9:a8:
                    47:36:a8:09:a0:8f:67:8a:36:dd:52:04:6e:e6:d1:
                    16:ab:83:4c:16:fa:68:3c:64:90:a7:1d:f1:e6:25:
                    d9:6c:9f:4b:49:e3:e0:fb:73:80:24:59:f0:51:ee:
                    f5:75:a3:c5:3e:8e:1d:43:d1:43:fd:4b:eb:2c:ea:
                    06:56:bf:5d:7d:d7:17:ce:88:f0:01:8c:77:ec:a0:
                    2b:30:59:12:09:9e:3d:b4:ca:42:71:8f:3d:bc:69:
                    36:50:ef:a4:12:94:67:52:43:35:70:89:e4:78:64:
                    3a:11:38:d0:6f:15:15:45:a3:15:05:e3:5e:d2:0c:
                    e3:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:1B:C4:3C:25:06:5A:66:75:BA:AC:05:A2:FE:DC:BB:8F:89:E0:96
            X509v3 Authority Key Identifier:
                keyid:37:3C:18:27:E2:70:4C:3F:DC:16:A8:78:98:0F:AD:C8:83:5F:A4:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36EB6AE/381289B283DC11EA96D3CC4EF8AEA228/NzwYJ-JwTD_cFqh4mA-tyINfpII.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/NzwYJ-JwTD_cFqh4mA-tyINfpII.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36EB6AE/381289B283DC11EA96D3CC4EF8AEA228/NzwYJ-JwTD_cFqh4mA-tyINfpII.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:e2:cc:ee:d5:b5:c5:29:8c:04:d7:02:2d:c6:5d:3f:e0:d7:
         95:f0:ee:77:ae:6b:80:0c:27:24:fd:38:f7:95:bf:e6:18:a0:
         de:eb:41:68:2c:6e:be:b9:53:3b:e2:c3:1d:54:8f:71:09:01:
         df:cf:ca:c3:9d:69:ad:9b:23:93:de:59:8f:d7:5f:f7:0f:5a:
         44:1e:0c:dc:00:48:0e:8a:c4:56:29:e6:55:e8:43:3d:86:67:
         4a:7f:26:84:b7:2a:23:79:3c:bf:36:ca:4e:5e:d0:2f:b0:a8:
         05:9a:98:b9:8e:a5:cb:e5:52:c0:f8:62:78:f6:20:35:b5:af:
         d9:03:a7:a0:6e:e0:6a:04:d3:7f:db:e3:6f:5e:1f:0d:de:b3:
         ca:25:3f:7f:b1:74:35:1b:8d:aa:d3:39:33:3b:39:f0:51:3b:
         e3:4a:7d:c8:2c:1d:c6:79:1a:48:ef:f1:d8:fa:89:c1:3e:82:
         e1:f9:de:81:35:52:0e:7e:9b:38:c2:90:cb:3b:a2:c9:77:ab:
         2b:34:0f:f7:24:c3:f4:5b:82:ab:a1:d2:9f:d1:f8:b1:75:e7:
         31:4f:2b:97:bc:d9:e0:e4:59:61:af:a2:f3:c6:81:a4:66:2c:
         a0:8b:4d:c3:56:7f:a0:28:b4:99:a9:bd:fe:97:0d:c2:25:48:
         0b:35:ce:21
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICCEIwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
RUI2QUVBRjExMC8GA1UEBRMoMzczQzE4MjdFMjcwNEMzRkRDMTZBODc4OTgwRkFE
Qzg4MzVGQTQ4MjAeFw0yNTEyMDkwMTQ2MjNaFw0yNTEyMTEwMTQ2MjNaMBgxFjAU
BgNVBAMTDTY5Mzc3ZjcwLWNkMTQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDCXGv74kWiCRb3qrOK8HsCvkB9t1tfwRz5CVr4NvL5s2bzvsspaX8Y/FZ9
LHj8Hx3ZOeNp27bQE5k1EQR+aKwvtMr6fcMNSzFxBPAtJEjtBFUPdwRREieQT6jt
zXxA9yQrwZCFEUF8PloN0BZfroU9v+uxHeMJltXW+ANFunu/IVIDQdPZqEc2qAmg
j2eKNt1SBG7m0Rarg0wW+mg8ZJCnHfHmJdlsn0tJ4+D7c4AkWfBR7vV1o8U+jh1D
0UP9S+ss6gZWv1191xfOiPABjHfsoCswWRIJnj20ykJxjz28aTZQ76QSlGdSQzVw
ieR4ZDoRONBvFRVFoxUF417SDOPVAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUBxvE
PCUGWmZ1uqwFov7cu4+J4JYwHwYDVR0jBBgwFoAUNzwYJ+JwTD/cFqh4mA+tyINf
pIIwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkVCNkFFLzM4MTI4OUIyODNEQzExRUE5NkQzQ0M0RUY4QUVBMjI4L056d1lK
LUp3VERfY0ZxaDRtQS10eUlOZnBJSS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL056d1lKLUp3VERfY0ZxaDRtQS10eUlOZnBJSS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2RUI2QUUvMzgxMjg5QjI4M0RDMTFFQTk2RDNDQzRFRjhB
RUEyMjgvTnp3WUotSndURF9jRnFoNG1BLXR5SU5mcElJLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCF4szu1bXFKYwE1wItxl0/4NeV8O53
rmuADCck/Tj3lb/mGKDe60FoLG6+uVM74sMdVI9xCQHfz8rDnWmtmyOT3lmP11/3
D1pEHgzcAEgOisRWKeZV6EM9hmdKfyaEtyojeTy/NspOXtAvsKgFmpi5jqXL5VLA
+GJ49iA1ta/ZA6egbuBqBNN/2+NvXh8N3rPKJT9/sXQ1G42q0zkzOznwUTvjSn3I
LB3GeRpI7/HY+onBPoLh+d6BNVIOfps4wpDLO6LJd6srNA/3JMP0W4KrodKf0fix
decxTyuXvNng5Flhr6LzxoGkZiygi03DVn+gKLSZqb3+lw3CJUgLNc4h
-----END CERTIFICATE-----
Generated at Tue Dec 9 12:05:26 2025 by rpki-client