This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F0628/F0CCBE7CFBA011EBAB786C49D8A014CE/hgXXWZoEAvcOwvJY1sFr0uTo0f4.mft
File:                     hgXXWZoEAvcOwvJY1sFr0uTo0f4.mft (raw, json)
Hash identifier:          M3F7fmFAiiiNu028b4Z9LEn8z4EzKPc5o7xIV6yKBJU=
Subject key identifier:   B1:EF:09:EA:61:6C:46:D3:BC:16:09:7E:A9:AD:EF:F8:91:0E:2A:55
Authority key identifier: 86:05:D7:59:9A:04:02:F7:0E:C2:F2:58:D6:C1:6B:D2:E4:E8:D1:FE
Certificate issuer:       /CN=F36F0628AF/serialNumber=8605D7599A0402F70EC2F258D6C16BD2E4E8D1FE
Certificate serial:       06E8
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/hgXXWZoEAvcOwvJY1sFr0uTo0f4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36F0628/F0CCBE7CFBA011EBAB786C49D8A014CE/hgXXWZoEAvcOwvJY1sFr0uTo0f4.mft
Manifest number:          06AB
Signing time:             Sun 23 Nov 2025 02:23:29 +0000
Manifest this update:     Sun 23 Nov 2025 02:23:28 +0000
Manifest next update:     Tue 25 Nov 2025 02:23:28 +0000
Files and hashes:         1: hgXXWZoEAvcOwvJY1sFr0uTo0f4.crl (hash: CHvja+44o/xDBED9GvH8kJ5WHqhoBUVPdxEA7LXNHL4=)
                          2: 6DA8BDECBEF711F0BC88C8C8DAE4EC9C.roa (hash: mr6RFujr9br3UnulbLDbQG/tKZZBLEAMX2oMaBzTflg=)
                          3: DF36CBCABEF711F08A36B0CADAE4EC9C.roa (hash: AOAhdb8NfSG9X3GlC/Vi6d309IftduVQ5MLyZDqd8CA=)
                          4: 15C50C50FC6B11EB9A564508D8A014CE.roa (hash: edvjHiFr4+tEmm64tF6z1Z3h19PfKmEG5a35CcgMLjw=)
                          5: 004B1DF2B36811F0A98458F0DAE4EC9C.roa (hash: zkIpkIt6ml3z7EI6+y3S5IJ7YdnJfqyc+dJmlhiixtc=)
                          6: 3B0BC528A8E011F08381ECAFDAE4EC9C.roa (hash: p8rygDaqMlfKM5+mFXH3h51l6FuqzUHfYdCJkipQXZk=)
                          7: A0124150B36611F092119CE7DAE4EC9C.roa (hash: KPAVGIR+9gV2f09zVyhq7pMlJ/S3+kwqXxT6U4gqUlY=)
                          8: 2DF66802A48011F0BE03EEDADAE4EC9C.roa (hash: 0mGTNTPDmMnNbcUKybxv+SjjJhFpDKD/VU09yMxkTpA=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36F0628/F0CCBE7CFBA011EBAB786C49D8A014CE/hgXXWZoEAvcOwvJY1sFr0uTo0f4.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36F0628/F0CCBE7CFBA011EBAB786C49D8A014CE/hgXXWZoEAvcOwvJY1sFr0uTo0f4.mft
                          rsync://rpki.afrinic.net/repository/afrinic/hgXXWZoEAvcOwvJY1sFr0uTo0f4.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 25 Nov 2025 00:06:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1768 (0x6e8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36F0628AF, serialNumber=8605D7599A0402F70EC2F258D6C16BD2E4E8D1FE
        Validity
            Not Before: Nov 23 02:23:28 2025 GMT
            Not After : Nov 25 02:23:28 2025 GMT
        Subject: CN=69227021-058a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:02:ae:45:fd:ec:9b:83:f7:22:f3:91:99:d4:
                    16:cf:52:4c:0d:e3:d5:b4:9f:19:04:17:c3:c2:0d:
                    7b:f8:a7:70:8d:f4:5d:20:81:77:2f:91:75:78:33:
                    5c:61:51:5a:e4:66:0d:d9:44:77:01:6a:5c:47:b3:
                    9d:52:90:60:5f:20:18:0b:62:cd:4c:d7:ae:3c:c8:
                    16:1b:58:2e:e1:23:41:28:d1:29:c6:0c:c2:d2:93:
                    1d:6b:d0:0b:52:c8:09:ec:b5:31:bc:5d:5e:ab:ae:
                    98:94:e6:2c:44:7b:8c:8b:91:fa:11:9a:64:2a:a9:
                    e8:4f:85:dc:28:61:17:ee:34:22:6c:2f:c8:de:a6:
                    3d:5e:6c:46:11:8c:c7:58:4b:ab:50:17:82:36:2e:
                    5e:aa:c3:ec:62:59:23:65:b0:14:f3:e9:4c:e3:1e:
                    5f:07:59:c3:90:9c:4a:9f:d3:ea:67:f0:9d:a3:af:
                    e8:92:42:0e:5d:b7:e5:56:db:f6:e6:f3:da:d3:24:
                    7d:ed:32:19:78:07:21:0b:78:78:11:7b:8d:01:ba:
                    d4:16:48:85:55:a0:f2:38:04:a0:88:e3:2f:99:73:
                    b4:5a:74:72:d1:d9:c4:9a:56:8a:2f:97:ed:15:50:
                    a8:8d:f0:bd:59:61:e3:74:24:65:ab:14:72:e2:f7:
                    b4:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:EF:09:EA:61:6C:46:D3:BC:16:09:7E:A9:AD:EF:F8:91:0E:2A:55
            X509v3 Authority Key Identifier:
                keyid:86:05:D7:59:9A:04:02:F7:0E:C2:F2:58:D6:C1:6B:D2:E4:E8:D1:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36F0628/F0CCBE7CFBA011EBAB786C49D8A014CE/hgXXWZoEAvcOwvJY1sFr0uTo0f4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/hgXXWZoEAvcOwvJY1sFr0uTo0f4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F0628/F0CCBE7CFBA011EBAB786C49D8A014CE/hgXXWZoEAvcOwvJY1sFr0uTo0f4.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:f3:14:63:09:04:2c:06:21:66:18:68:af:50:41:66:83:30:
         a1:32:de:7f:c0:45:2e:92:56:0d:c6:b8:61:9d:cc:de:4e:83:
         4e:27:26:54:b5:5f:cf:4a:d2:6a:d2:c8:2d:49:45:54:45:b5:
         9d:19:c2:b1:2d:cc:72:ad:29:8b:90:48:a2:8f:16:79:25:3b:
         6e:a1:97:f8:ee:2d:4e:10:46:c9:bb:f8:96:03:25:e2:cf:b2:
         97:b4:99:45:4c:94:1e:79:81:ca:82:f5:16:02:cd:04:ab:fe:
         2f:4a:70:b4:b9:d0:ed:a9:07:e9:3a:0a:89:c1:79:3f:5a:15:
         c0:1c:a1:cf:89:84:1a:ad:ad:d8:10:4f:32:42:b1:d9:52:6c:
         22:21:e7:3d:77:e4:a6:26:27:ed:1c:3e:ed:fa:4d:78:58:06:
         ac:92:d9:4e:12:c6:f4:c9:d3:ef:83:0c:ea:b9:a3:a3:52:37:
         6b:c3:4e:af:5a:45:c5:f0:4f:8e:54:ec:ee:4c:0d:a7:f3:05:
         ed:da:4c:af:78:d0:0f:2f:84:0a:b6:74:7b:8a:20:da:a4:cd:
         6d:31:af:50:21:b4:71:09:8b:a0:80:44:a0:70:ed:9a:fc:e2:
         d6:c3:ab:76:33:6e:32:f9:82:38:4e:c2:63:e0:e6:0a:e2:f8:
         20:fc:88:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 23 05:38:50 2025 by rpki-client