This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36EF7D0/36E40A16F2FB11ED821B9D804AD9E6FC/OlU7bvgL-SIxL5a43cHyGajEEhs.mft
File:                     OlU7bvgL-SIxL5a43cHyGajEEhs.mft (raw, json)
Hash identifier:          UwvgrYA6DZkvRM4wJ+K2mbRnsQPd+68512QBroOWAU8=
Subject key identifier:   6A:B6:7A:91:6D:9E:B5:E3:ED:8C:66:9C:CE:93:86:D8:A8:18:CD:11
Authority key identifier: 3A:55:3B:6E:F8:0B:F9:22:31:2F:96:B8:DD:C1:F2:19:A8:C4:12:1B
Certificate issuer:       /CN=F36EF7D0AF/serialNumber=3A553B6EF80BF922312F96B8DDC1F219A8C4121B
Certificate serial:       0443
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/OlU7bvgL-SIxL5a43cHyGajEEhs.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36EF7D0/36E40A16F2FB11ED821B9D804AD9E6FC/OlU7bvgL-SIxL5a43cHyGajEEhs.mft
Manifest number:          0415
Signing time:             Sun 07 Dec 2025 03:26:24 +0000
Manifest this update:     Sun 07 Dec 2025 03:26:23 +0000
Manifest next update:     Tue 09 Dec 2025 03:26:23 +0000
Files and hashes:         1: OlU7bvgL-SIxL5a43cHyGajEEhs.crl (hash: nePbA4qoN+Flt3/fD9N0s/wK3Gff0gJjitFFCphw8GU=)
                          2: 401DB4F42F1E11F09B881AB3DAE4EC9C.roa (hash: xj4UFgtRmUF6hPhDY8QCTAupvw1psvGB0HcdO8EfGgk=)
                          3: 00C569A2002D11F08D8D918C762E951A.roa (hash: J2zGLkOSE56js9RNvJ4OT497mQJdthstAM3GPqfXq4g=)
                          4: A9777DB400A111F0BFE5D984762E951A.roa (hash: /NRI84ju86WCQqU5dc2FqAKEMK10FL0ooHDMUCIRqrU=)
                          5: 8A0596E448DE11EF82EDFA4F762E951A.roa (hash: pTkaYfOMalP4Ac9YVOrNd/HL6aUPMLSzJ9NLjfsNk8k=)
                          6: 1C19002A58A711EF91CC474E762E951A.roa (hash: 28b+AJrYiZxyaN6PahnQJz38qCvJBTTx3Q3ULsHDeuc=)
                          7: 07CC62ACBE4E11F08108188EDAE4EC9C.roa (hash: naHGQBrNBqHT0GcFLBRcbz3r8yMkHO75jTU47lYKaVI=)
                          8: 7050CF3A2EAB11F0B4B053A7DAE4EC9C.roa (hash: aOFRM5Th4Ppr9x/V2gxhKzhGJiZ2YiGkDB5kt+uThQY=)
                          9: DF1A6ECECFC011F0843980E5DAE4EC9C.roa (hash: fJ2Assom6xEyn6/GNf5ic5qBOI+igUkackrjUbv3A/c=)
                          10: A46FECBA0D4611EF94FE720E017001B1.roa (hash: 1+eZFsoTVxew2nM8QAmKo9cbdoGw9gIVLATJ2Cve9BY=)
                          11: 487DF37800FE11F09431944D762E951A.roa (hash: vFH43GxrKZ9rqeJkPBqFNCpNF2wmx+m29HBGPHLRYRU=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36EF7D0/36E40A16F2FB11ED821B9D804AD9E6FC/OlU7bvgL-SIxL5a43cHyGajEEhs.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36EF7D0/36E40A16F2FB11ED821B9D804AD9E6FC/OlU7bvgL-SIxL5a43cHyGajEEhs.mft
                          rsync://rpki.afrinic.net/repository/afrinic/OlU7bvgL-SIxL5a43cHyGajEEhs.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 09 Dec 2025 03:26:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1091 (0x443)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36EF7D0AF, serialNumber=3A553B6EF80BF922312F96B8DDC1F219A8C4121B
        Validity
            Not Before: Dec  7 03:26:23 2025 GMT
            Not After : Dec  9 03:26:23 2025 GMT
        Subject: CN=6934f3e0-611c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:3b:6e:61:dd:34:5d:a4:7d:ca:4f:df:f8:aa:
                    e4:b2:89:aa:49:cc:a9:3a:50:c4:d5:d9:1b:42:ee:
                    86:4e:35:f6:ac:fe:a9:58:e4:76:2a:77:4b:49:27:
                    d1:1e:05:88:81:b1:1e:2e:35:43:cb:02:4c:4c:04:
                    a3:93:a8:b3:45:3a:99:ff:c9:5f:97:c3:af:79:d7:
                    89:85:15:a1:e9:20:ae:98:db:02:60:e4:c3:00:1a:
                    74:7f:b3:18:2a:60:36:d2:c1:7e:4d:ad:f0:e9:37:
                    85:e5:c8:9b:34:c8:f5:15:28:77:e7:40:ce:f9:f5:
                    ad:a9:b6:35:83:95:1a:d9:07:63:30:b5:66:ba:45:
                    d1:51:64:78:53:44:76:e0:99:44:e7:1b:7a:ca:74:
                    32:8f:60:de:25:37:2c:85:1a:5d:b8:cd:d3:4c:9a:
                    53:8c:88:1d:a9:a0:7e:e7:cc:5e:ce:4d:85:37:dd:
                    16:40:0c:c1:74:12:e1:0f:c4:a3:b3:49:6f:c6:c0:
                    49:0e:e3:f0:c7:57:83:79:6a:47:fa:0e:cf:dc:f2:
                    9d:6b:f5:16:56:e6:64:2f:a2:a6:48:ba:db:c2:a8:
                    1e:2c:e6:82:0d:fa:ed:15:d4:8f:6e:fd:9a:3c:52:
                    5e:4f:a9:84:21:94:6b:ad:a7:57:ca:6d:41:b2:75:
                    69:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:B6:7A:91:6D:9E:B5:E3:ED:8C:66:9C:CE:93:86:D8:A8:18:CD:11
            X509v3 Authority Key Identifier:
                keyid:3A:55:3B:6E:F8:0B:F9:22:31:2F:96:B8:DD:C1:F2:19:A8:C4:12:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36EF7D0/36E40A16F2FB11ED821B9D804AD9E6FC/OlU7bvgL-SIxL5a43cHyGajEEhs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/OlU7bvgL-SIxL5a43cHyGajEEhs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36EF7D0/36E40A16F2FB11ED821B9D804AD9E6FC/OlU7bvgL-SIxL5a43cHyGajEEhs.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:1d:bb:c3:8a:30:f4:f3:86:47:dd:d3:6f:de:cf:bd:54:32:
         9e:ee:66:2f:ca:f7:24:a2:4b:07:ae:3b:75:57:5d:8b:30:58:
         6e:89:87:6a:ac:1b:d4:a6:4d:a8:63:76:25:95:2a:b3:17:d0:
         1a:27:81:6e:5a:c1:34:54:c7:7c:83:1e:7e:e5:e1:d5:2c:f1:
         a8:3f:57:4d:93:52:e2:5e:a3:1a:bc:32:ba:a3:81:1a:04:17:
         36:42:e9:15:61:b2:78:3b:4d:7e:d8:31:48:f0:7f:fd:fc:00:
         c8:cf:56:ea:95:4b:81:0f:11:ee:7b:6e:8d:a9:49:5c:91:c0:
         9e:c7:a0:28:57:d9:09:63:a9:ed:95:dd:b9:ef:01:70:46:e7:
         99:21:96:1f:fc:af:c3:69:08:ed:7a:e1:54:b6:a2:b8:7a:6a:
         09:0e:a5:4f:95:f9:47:ed:3b:3c:cc:54:77:31:8d:4c:5a:91:
         dc:54:3b:04:9e:e8:a9:7e:46:60:51:0e:8e:c6:92:7b:c6:43:
         96:dd:b2:f9:dd:c8:02:71:92:4e:39:8d:6f:9c:98:c4:92:71:
         03:51:d7:cb:8b:6c:d1:75:f9:2a:1d:ed:b9:d3:a4:9e:65:cc:
         72:ad:7b:6f:e5:33:27:5e:34:c6:69:e2:fb:9f:c6:66:35:33:
         a4:19:ef:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 8 03:59:55 2025 by rpki-client