This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36ED13A/413409E486F111F09AE80097DAE4EC9C/iB1VxL_O6xP8_Apy6dChQ2kVVrU.mft
File:                     iB1VxL_O6xP8_Apy6dChQ2kVVrU.mft (raw, json)
Hash identifier:          vEK3Tv8l5aV9IWojR/TOj4ORmwX/zcgwp5oluqdSVRg=
Subject key identifier:   D6:FA:58:91:38:E4:96:C1:86:89:7F:A1:46:62:97:32:BE:6A:95:D4
Authority key identifier: 88:1D:55:C4:BF:CE:EB:13:FC:FC:0A:72:E9:D0:A1:43:69:15:56:B5
Certificate issuer:       /CN=F36ED13AAF/serialNumber=881D55C4BFCEEB13FCFC0A72E9D0A143691556B5
Certificate serial:       66
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/iB1VxL_O6xP8_Apy6dChQ2kVVrU.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36ED13A/413409E486F111F09AE80097DAE4EC9C/iB1VxL_O6xP8_Apy6dChQ2kVVrU.mft
Manifest number:          66
Signing time:             Tue 09 Dec 2025 05:13:29 +0000
Manifest this update:     Tue 09 Dec 2025 05:13:29 +0000
Manifest next update:     Thu 11 Dec 2025 05:13:29 +0000
Files and hashes:         1: iB1VxL_O6xP8_Apy6dChQ2kVVrU.crl (hash: 9PQ6h1rQ39xR099WYCRorSeZmPmsOCwOKGmhoIUKW74=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36ED13A/413409E486F111F09AE80097DAE4EC9C/iB1VxL_O6xP8_Apy6dChQ2kVVrU.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36ED13A/413409E486F111F09AE80097DAE4EC9C/iB1VxL_O6xP8_Apy6dChQ2kVVrU.mft
                          rsync://rpki.afrinic.net/repository/afrinic/iB1VxL_O6xP8_Apy6dChQ2kVVrU.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 11 Dec 2025 05:13:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 102 (0x66)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36ED13AAF, serialNumber=881D55C4BFCEEB13FCFC0A72E9D0A143691556B5
        Validity
            Not Before: Dec  9 05:13:29 2025 GMT
            Not After : Dec 11 05:13:29 2025 GMT
        Subject: CN=6937aff9-8e17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:93:69:3c:6c:0f:ea:69:6b:4b:98:a7:a1:a3:
                    5b:83:8a:6c:31:2c:a9:24:a7:fd:a4:41:3f:da:47:
                    57:15:7c:42:b9:88:2e:d0:ed:32:34:01:55:97:46:
                    9c:01:1b:fa:2d:73:4e:da:d3:fd:17:5f:55:be:b0:
                    a7:cd:09:cd:7b:f8:7b:e0:6c:09:34:93:6a:3b:17:
                    d7:14:58:a4:40:a7:9a:5a:e9:af:cd:05:67:39:15:
                    e7:c5:65:71:a3:81:32:48:e5:f6:56:f0:3c:05:6b:
                    d6:34:ad:e6:d3:7c:8a:52:7a:98:15:fe:2a:6d:06:
                    42:ac:bd:ba:da:35:e4:3d:45:b1:ad:81:d4:2b:f2:
                    95:71:e1:59:b2:da:e5:fe:40:92:36:37:51:38:54:
                    4e:c2:d3:c4:0f:c4:c1:fc:96:21:6c:5a:f9:a6:53:
                    99:ba:92:d8:f4:a7:1c:b9:38:15:fb:41:56:69:15:
                    43:68:35:55:1c:a0:f1:b3:61:b1:55:25:58:1b:36:
                    f8:8a:4e:b8:22:ad:1c:02:79:78:14:46:20:b9:9d:
                    38:58:0f:23:f4:6d:ec:4f:a9:aa:61:f7:33:cf:8f:
                    41:8c:0c:d9:82:f1:60:97:58:2a:52:c0:18:4d:9b:
                    ca:03:af:4c:98:e0:93:3e:a7:2a:7e:7f:e0:36:d6:
                    06:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:FA:58:91:38:E4:96:C1:86:89:7F:A1:46:62:97:32:BE:6A:95:D4
            X509v3 Authority Key Identifier:
                keyid:88:1D:55:C4:BF:CE:EB:13:FC:FC:0A:72:E9:D0:A1:43:69:15:56:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36ED13A/413409E486F111F09AE80097DAE4EC9C/iB1VxL_O6xP8_Apy6dChQ2kVVrU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/iB1VxL_O6xP8_Apy6dChQ2kVVrU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36ED13A/413409E486F111F09AE80097DAE4EC9C/iB1VxL_O6xP8_Apy6dChQ2kVVrU.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:fc:9c:9d:b5:dd:81:d6:79:5f:95:c2:68:3e:ce:e4:5a:27:
         02:20:c2:ae:38:be:22:56:6e:fd:20:e4:12:c1:7d:57:50:eb:
         40:e7:58:3a:cb:88:af:7f:e4:6c:37:f6:ba:d9:45:e2:0c:a0:
         bc:3f:01:db:a1:c2:bb:aa:d1:f5:78:34:eb:ac:01:d3:35:db:
         7f:80:f2:52:49:d5:18:fd:38:08:8a:1d:c0:1c:9a:3f:39:24:
         05:35:b0:36:d3:5a:e1:d5:f8:a4:bd:ec:72:e8:7c:b2:c8:8c:
         d9:a6:66:10:ab:34:bc:e2:76:4a:c1:01:b1:f3:03:b3:4c:7e:
         c7:48:37:a7:c8:e8:8d:f1:48:61:16:7a:0d:21:a2:0e:28:b5:
         63:6a:c2:7e:be:b3:64:24:99:27:18:c1:ac:76:52:84:ec:fa:
         a1:85:6f:d6:e7:f4:bb:7d:25:6e:70:cb:30:1a:f9:ee:f1:2a:
         e1:d8:fd:c4:50:a7:67:1d:38:3b:c4:a5:42:47:5f:0d:59:bf:
         98:80:ea:6b:ab:fe:57:92:e0:8a:82:9f:53:de:75:3e:8e:37:
         02:ca:27:79:07:a4:36:21:ae:e8:9e:d3:e3:11:e3:ec:82:7b:
         79:5b:2b:16:6e:b9:04:d9:ac:d4:c9:43:7e:73:4f:2b:e5:d8:
         b2:46:a5:a3
-----BEGIN CERTIFICATE-----
MIIFlTCCBH2gAwIBAgIBZjANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDEwpGMzZF
RDEzQUFGMTEwLwYDVQQFEyg4ODFENTVDNEJGQ0VFQjEzRkNGQzBBNzJFOUQwQTE0
MzY5MTU1NkI1MB4XDTI1MTIwOTA1MTMyOVoXDTI1MTIxMTA1MTMyOVowGDEWMBQG
A1UEAxMNNjkzN2FmZjktOGUxNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMeTaTxsD+ppa0uYp6GjW4OKbDEsqSSn/aRBP9pHVxV8QrmILtDtMjQBVZdG
nAEb+i1zTtrT/RdfVb6wp80JzXv4e+BsCTSTajsX1xRYpECnmlrpr80FZzkV58Vl
caOBMkjl9lbwPAVr1jSt5tN8ilJ6mBX+Km0GQqy9uto15D1Fsa2B1CvylXHhWbLa
5f5AkjY3UThUTsLTxA/EwfyWIWxa+aZTmbqS2PSnHLk4FftBVmkVQ2g1VRyg8bNh
sVUlWBs2+IpOuCKtHAJ5eBRGILmdOFgPI/Rt7E+pqmH3M8+PQYwM2YLxYJdYKlLA
GE2bygOvTJjgkz6nKn5/4DbWBg0CAwEAAaOCArgwggK0MB0GA1UdDgQWBBTW+liR
OOSWwYaJf6FGYpcyvmqV1DAfBgNVHSMEGDAWgBSIHVXEv87rE/z8CnLp0KFDaRVW
tTAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2RUQxM0EvNDEzNDA5RTQ4NkYxMTFGMDlBRTgwMDk3REFFNEVDOUMvaUIxVnhM
X082eFA4X0FweTZkQ2hRMmtWVnJVLmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMvaUIxVnhMX082eFA4X0FweTZkQ2hRMmtWVnJVLmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCB1QYIKwYBBQUHAQsEgcgwgcUwgYsGCCsGAQUF
BzALhn9yc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzZFRDEzQS80MTM0MDlFNDg2RjExMUYwOUFFODAwOTdEQUU0
RUM5Qy9pQjFWeExfTzZ4UDhfQXB5NmRDaFEya1ZWclUubWZ0MDUGCCsGAQUFBzAN
hilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggr
BgEFBQcBCAEB/wQGMASgAgUAMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE
AgACBQAwDQYJKoZIhvcNAQELBQADggEBAE78nJ213YHWeV+Vwmg+zuRaJwIgwq44
viJWbv0g5BLBfVdQ60DnWDrLiK9/5Gw39rrZReIMoLw/Aduhwruq0fV4NOusAdM1
23+A8lJJ1Rj9OAiKHcAcmj85JAU1sDbTWuHV+KS97HLofLLIjNmmZhCrNLzidkrB
AbHzA7NMfsdIN6fI6I3xSGEWeg0hog4otWNqwn6+s2QkmScYwax2UoTs+qGFb9bn
9Lt9JW5wyzAa+e7xKuHY/cRQp2cdODvEpUJHXw1Zv5iA6mur/leS4IqCn1PedT6O
NwLKJ3kHpDYhruie0+MR4+yCe3lbKxZuuQTZrNTJQ35zTyvl2LJGpaM=
-----END CERTIFICATE-----
Generated at Tue Dec 9 12:03:41 2025 by rpki-client