This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36EBDD7/59907460BE1D11EB9A348B42F8AEA228/Zxdi3y9LZeg1DvQ9_m40d2V1G2c.mft
File:                     Zxdi3y9LZeg1DvQ9_m40d2V1G2c.mft (raw, json)
Hash identifier:          HTjT42Z1hNC5iN53Z66hpJR2CuY8ho5gJ/SMYP5X0U8=
Subject key identifier:   CA:48:CA:93:8B:CA:6C:F0:51:E8:94:55:BA:0D:59:62:64:FB:28:E6
Authority key identifier: 67:17:62:DF:2F:4B:65:E8:35:0E:F4:3D:FE:6E:34:77:65:75:1B:67
Certificate issuer:       /CN=F36EBDD7AF/serialNumber=671762DF2F4B65E8350EF43DFE6E347765751B67
Certificate serial:       06B9
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/Zxdi3y9LZeg1DvQ9_m40d2V1G2c.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36EBDD7/59907460BE1D11EB9A348B42F8AEA228/Zxdi3y9LZeg1DvQ9_m40d2V1G2c.mft
Manifest number:          06B3
Signing time:             Tue 09 Dec 2025 02:09:49 +0000
Manifest this update:     Tue 09 Dec 2025 02:09:48 +0000
Manifest next update:     Thu 11 Dec 2025 02:09:48 +0000
Files and hashes:         1: Zxdi3y9LZeg1DvQ9_m40d2V1G2c.crl (hash: vf74IZJlcchQ0adkSFwh3H6ldVt8KqWuwAKokpdd8fE=)
                          2: 4862FAFCE4DE11EDA5D02D2B5D736454.roa (hash: pwXHdEGItsLMzKr+aumuiNZdB9G3BpzvlQ/9pkC+c+0=)
                          3: 251DA380E4DE11EDBAE4C72A5D736454.roa (hash: TeLYjH73toDFoU0p+li50AAg6/Hzd+3DWfAKdcW/US4=)
                          4: F62DD44ECE2E11ECAA249B87F1222468.roa (hash: 8URU9YiLdWtD6vDeoNMB8ooJHctx8YELYz1KqaK1TJI=)
                          5: 12CCB84CE4DE11EDA0C1852A5D736454.roa (hash: HaON/agiYAdyVFEHj7cPqN0oFZZmaBLOYLDvF3mwFdM=)
                          6: 2AF34020B6A511EC8DB1D5C05A40D577.roa (hash: maABM8vRpqU/MWMhf0pUMu7or+BUDrnxmSFENy3v/aw=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36EBDD7/59907460BE1D11EB9A348B42F8AEA228/Zxdi3y9LZeg1DvQ9_m40d2V1G2c.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36EBDD7/59907460BE1D11EB9A348B42F8AEA228/Zxdi3y9LZeg1DvQ9_m40d2V1G2c.mft
                          rsync://rpki.afrinic.net/repository/afrinic/Zxdi3y9LZeg1DvQ9_m40d2V1G2c.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 11 Dec 2025 02:09:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1721 (0x6b9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36EBDD7AF, serialNumber=671762DF2F4B65E8350EF43DFE6E347765751B67
        Validity
            Not Before: Dec  9 02:09:48 2025 GMT
            Not After : Dec 11 02:09:48 2025 GMT
        Subject: CN=693784ed-841b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:fd:3f:2c:00:39:22:ce:5a:91:10:23:70:93:
                    08:71:78:81:85:e9:62:20:dd:76:a9:95:85:a8:2e:
                    36:30:de:74:01:b9:10:b7:84:dc:29:13:ff:13:64:
                    d3:f5:97:ec:8b:a9:6a:32:a4:fb:27:4b:2b:1d:47:
                    87:62:19:97:91:e0:4f:67:5c:19:62:e6:04:2f:e9:
                    ef:e5:ac:5e:cf:bb:83:88:65:23:2f:76:74:a4:ff:
                    5c:27:60:81:2f:d2:99:df:90:7a:4f:06:be:1b:d4:
                    e6:8b:e4:f0:7d:f6:67:bf:bc:4b:e5:08:f3:7c:b8:
                    d3:57:d7:c0:6a:b4:ba:60:ab:0e:0f:dc:ca:2b:a4:
                    06:2b:23:ad:a9:92:1c:09:70:b5:73:dd:5b:7e:2b:
                    80:93:b5:1c:77:6e:58:4e:5d:59:f8:26:e1:3c:c4:
                    2c:f2:5d:a1:89:94:20:e0:a6:52:43:d7:6c:02:95:
                    44:60:dc:5c:58:56:6e:9c:cf:f5:e7:c6:18:99:2b:
                    7a:05:48:b9:66:ce:a9:e5:d6:9e:ac:21:a9:8a:84:
                    27:90:8a:60:be:62:4c:ba:df:75:34:ed:5c:d2:69:
                    a2:49:0a:dd:7c:ea:f6:ca:96:4b:d0:65:aa:da:f2:
                    c8:b1:35:36:c0:11:08:e6:a2:34:2d:72:39:c3:9a:
                    18:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:48:CA:93:8B:CA:6C:F0:51:E8:94:55:BA:0D:59:62:64:FB:28:E6
            X509v3 Authority Key Identifier:
                keyid:67:17:62:DF:2F:4B:65:E8:35:0E:F4:3D:FE:6E:34:77:65:75:1B:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36EBDD7/59907460BE1D11EB9A348B42F8AEA228/Zxdi3y9LZeg1DvQ9_m40d2V1G2c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Zxdi3y9LZeg1DvQ9_m40d2V1G2c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36EBDD7/59907460BE1D11EB9A348B42F8AEA228/Zxdi3y9LZeg1DvQ9_m40d2V1G2c.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:71:4f:50:c0:97:32:41:d9:0e:89:54:8a:5c:e3:a2:72:00:
         7c:11:3c:c2:55:dc:00:34:81:7b:42:7e:2c:16:cf:ac:ea:33:
         d4:db:46:54:71:d2:49:6f:27:8b:ef:7a:34:24:25:99:36:07:
         cc:5d:1c:0f:99:36:5a:01:e5:cd:15:13:3b:64:75:73:e0:c0:
         9d:72:13:7d:f4:f0:01:ab:cf:b2:21:01:ab:b2:bf:cf:53:23:
         97:33:28:8f:6a:0e:f7:7a:d1:59:d8:db:cb:08:db:55:f9:a1:
         bb:96:f1:51:9e:8b:ed:b7:44:64:d5:cc:86:ba:0a:09:49:cf:
         2a:15:eb:5f:01:fd:96:c3:f1:9b:0d:51:a6:eb:41:fb:31:0b:
         6f:2a:a4:83:7c:11:8f:54:11:28:8b:f8:05:e2:93:e4:57:5f:
         0a:fe:a5:7d:da:32:ec:8d:60:ac:9d:a1:67:7f:9f:4f:0f:71:
         5b:ed:8b:75:71:a3:98:76:25:6a:31:a5:de:e2:84:b6:74:73:
         c3:dc:0d:a2:d3:5e:98:25:cd:f4:9f:96:29:c4:5b:83:69:0b:
         c5:e3:37:33:f5:49:c1:c4:7c:38:68:08:a1:92:12:26:70:c5:
         e3:3c:a0:ed:53:3c:21:0f:be:55:11:91:1c:ce:64:96:27:db:
         92:49:eb:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 9 12:32:10 2025 by rpki-client