This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36EF7D0/36E40A16F2FB11ED821B9D804AD9E6FC/OlU7bvgL-SIxL5a43cHyGajEEhs.mft
File:                     OlU7bvgL-SIxL5a43cHyGajEEhs.mft (raw, json)
Hash identifier:          5nMqr3wyjnUNKbr22jBXRauQMCllddkMm2AIyTW+74Y=
Subject key identifier:   B9:E2:B3:98:96:3F:F2:8F:71:AD:AC:EA:8F:4B:9F:73:04:2B:43:48
Authority key identifier: 3A:55:3B:6E:F8:0B:F9:22:31:2F:96:B8:DD:C1:F2:19:A8:C4:12:1B
Certificate issuer:       /CN=F36EF7D0AF/serialNumber=3A553B6EF80BF922312F96B8DDC1F219A8C4121B
Certificate serial:       0452
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/OlU7bvgL-SIxL5a43cHyGajEEhs.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36EF7D0/36E40A16F2FB11ED821B9D804AD9E6FC/OlU7bvgL-SIxL5a43cHyGajEEhs.mft
Manifest number:          0423
Signing time:             Thu 18 Dec 2025 05:40:49 +0000
Manifest this update:     Thu 18 Dec 2025 05:40:48 +0000
Manifest next update:     Sat 20 Dec 2025 05:40:48 +0000
Files and hashes:         1: OlU7bvgL-SIxL5a43cHyGajEEhs.crl (hash: AyUndFVY+ofLCxzWAq35Y4q03+ads6OH7cYfV0XTPPA=)
                          2: 401DB4F42F1E11F09B881AB3DAE4EC9C.roa (hash: xj4UFgtRmUF6hPhDY8QCTAupvw1psvGB0HcdO8EfGgk=)
                          3: 00C569A2002D11F08D8D918C762E951A.roa (hash: J2zGLkOSE56js9RNvJ4OT497mQJdthstAM3GPqfXq4g=)
                          4: A9777DB400A111F0BFE5D984762E951A.roa (hash: /NRI84ju86WCQqU5dc2FqAKEMK10FL0ooHDMUCIRqrU=)
                          5: 8A0596E448DE11EF82EDFA4F762E951A.roa (hash: pTkaYfOMalP4Ac9YVOrNd/HL6aUPMLSzJ9NLjfsNk8k=)
                          6: 1C19002A58A711EF91CC474E762E951A.roa (hash: 28b+AJrYiZxyaN6PahnQJz38qCvJBTTx3Q3ULsHDeuc=)
                          7: 7050CF3A2EAB11F0B4B053A7DAE4EC9C.roa (hash: aOFRM5Th4Ppr9x/V2gxhKzhGJiZ2YiGkDB5kt+uThQY=)
                          8: A46FECBA0D4611EF94FE720E017001B1.roa (hash: 1+eZFsoTVxew2nM8QAmKo9cbdoGw9gIVLATJ2Cve9BY=)
                          9: 487DF37800FE11F09431944D762E951A.roa (hash: vFH43GxrKZ9rqeJkPBqFNCpNF2wmx+m29HBGPHLRYRU=)
                          10: 95E22156D41211F09B244587DAE4EC9C.roa (hash: KYrtm6svHq9jl59FU2IK5vBTxvktgzNEwMV7uGhf3I4=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36EF7D0/36E40A16F2FB11ED821B9D804AD9E6FC/OlU7bvgL-SIxL5a43cHyGajEEhs.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36EF7D0/36E40A16F2FB11ED821B9D804AD9E6FC/OlU7bvgL-SIxL5a43cHyGajEEhs.mft
                          rsync://rpki.afrinic.net/repository/afrinic/OlU7bvgL-SIxL5a43cHyGajEEhs.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 20 Dec 2025 00:07:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1106 (0x452)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36EF7D0AF, serialNumber=3A553B6EF80BF922312F96B8DDC1F219A8C4121B
        Validity
            Not Before: Dec 18 05:40:48 2025 GMT
            Not After : Dec 20 05:40:48 2025 GMT
        Subject: CN=694393e1-367e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:87:47:87:4d:1c:12:56:55:21:57:cd:9d:f0:
                    09:99:e9:cd:e8:e7:b2:a5:ce:26:47:28:61:1b:4f:
                    45:8a:c9:56:5c:0c:7d:02:85:da:b9:24:e3:b2:84:
                    db:ce:01:e5:70:43:8e:84:3a:91:cd:21:29:77:bf:
                    32:8e:96:eb:6c:9a:a4:32:66:cc:3d:2a:22:f4:9b:
                    91:f0:4a:7e:38:23:13:39:1d:35:0f:1d:8a:73:5e:
                    b5:63:86:3c:7c:34:39:43:08:f4:6f:ff:02:5a:8e:
                    83:dc:e1:cf:e4:67:42:04:f8:9c:2a:24:54:d6:28:
                    ac:d9:27:2f:2c:f2:2e:76:89:cf:78:a6:d3:50:cb:
                    14:c5:de:0e:02:4f:41:10:9a:3f:8b:b1:27:59:6e:
                    9d:d2:bb:70:dd:cd:c0:ba:a7:8f:2c:48:dd:18:4b:
                    8e:02:c1:c8:1a:6a:a0:8c:10:2f:08:02:69:7d:91:
                    02:45:ec:56:61:f2:17:cc:aa:f2:a5:fc:74:72:f6:
                    d1:e5:18:a4:a8:5d:51:e2:27:e9:07:94:af:ff:6f:
                    f4:69:4f:82:fa:dd:7b:f1:84:7e:79:66:91:24:35:
                    f6:ee:66:ab:e1:49:d2:7a:65:8d:2b:f4:57:36:1c:
                    a0:b3:75:db:cd:28:87:c1:e7:86:1d:68:ce:32:59:
                    32:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:E2:B3:98:96:3F:F2:8F:71:AD:AC:EA:8F:4B:9F:73:04:2B:43:48
            X509v3 Authority Key Identifier:
                keyid:3A:55:3B:6E:F8:0B:F9:22:31:2F:96:B8:DD:C1:F2:19:A8:C4:12:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36EF7D0/36E40A16F2FB11ED821B9D804AD9E6FC/OlU7bvgL-SIxL5a43cHyGajEEhs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/OlU7bvgL-SIxL5a43cHyGajEEhs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36EF7D0/36E40A16F2FB11ED821B9D804AD9E6FC/OlU7bvgL-SIxL5a43cHyGajEEhs.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:6f:a1:63:ea:bd:c8:f7:96:0f:7f:80:71:6e:32:6b:28:5a:
         ef:6f:71:fc:f2:26:14:ae:da:a9:14:6e:68:1a:2f:c9:54:ef:
         c1:67:c2:7e:b6:34:99:b1:be:19:e3:60:5f:c2:37:91:cf:ca:
         99:de:b6:7e:2c:26:61:f6:3e:3d:56:a1:5a:6a:24:20:69:92:
         44:cb:ef:58:04:fa:c8:e9:ee:c0:62:e2:3c:3f:db:69:f2:2f:
         98:10:a8:69:0f:d9:4f:e2:25:0d:3d:90:d4:50:3e:f7:17:f2:
         3f:42:40:92:82:8a:12:1f:05:35:ac:ea:25:b5:89:03:3e:f9:
         ee:8c:99:cc:5c:15:79:26:47:15:ed:5c:45:47:a6:44:56:b4:
         3f:6a:83:45:b5:a5:21:4a:c7:01:8e:1c:aa:f7:21:b4:33:16:
         a5:bd:c8:d8:03:95:b3:b7:08:6d:df:84:39:d6:90:65:08:1a:
         8f:8c:75:fe:72:03:20:b5:22:81:62:9c:40:25:d8:a0:8d:49:
         7a:4d:51:59:fb:2c:8b:8f:40:51:7c:17:4f:39:50:26:99:62:
         ca:39:f2:85:cb:d4:9c:7f:ef:77:85:1f:83:1c:69:48:21:49:
         ec:30:37:90:d4:97:8f:b0:5a:5a:ef:f7:e7:52:e2:f5:04:53:
         69:6e:d1:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 18 22:37:51 2025 by rpki-client