This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F8434/B0F319E6DF8111EE8B5FEA6D775412E6/Ch0dTjsXD5T4rnCuQqlL4b6bod4.mft
File:                     Ch0dTjsXD5T4rnCuQqlL4b6bod4.mft (raw, json)
Hash identifier:          06eXo8JI1QS2yctHzsXvAY6hLYqjSudXU0sDC6gs/I0=
Subject key identifier:   D9:EE:71:5B:BD:8E:19:39:11:5F:47:60:16:47:87:F8:40:51:19:23
Authority key identifier: 0A:1D:1D:4E:3B:17:0F:94:F8:AE:70:AE:42:A9:4B:E1:BE:9B:A1:DE
Certificate issuer:       /CN=F36F8434AF/serialNumber=0A1D1D4E3B170F94F8AE70AE42A94BE1BE9BA1DE
Certificate serial:       0290
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/Ch0dTjsXD5T4rnCuQqlL4b6bod4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36F8434/B0F319E6DF8111EE8B5FEA6D775412E6/Ch0dTjsXD5T4rnCuQqlL4b6bod4.mft
Manifest number:          028F
Signing time:             Tue 09 Dec 2025 04:08:29 +0000
Manifest this update:     Tue 09 Dec 2025 04:08:29 +0000
Manifest next update:     Thu 11 Dec 2025 04:08:29 +0000
Files and hashes:         1: Ch0dTjsXD5T4rnCuQqlL4b6bod4.crl (hash: 2to7pT1qeJzJvDYnMWFHPBv86D5IfuhCDeyR/uSQl1w=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36F8434/B0F319E6DF8111EE8B5FEA6D775412E6/Ch0dTjsXD5T4rnCuQqlL4b6bod4.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36F8434/B0F319E6DF8111EE8B5FEA6D775412E6/Ch0dTjsXD5T4rnCuQqlL4b6bod4.mft
                          rsync://rpki.afrinic.net/repository/afrinic/Ch0dTjsXD5T4rnCuQqlL4b6bod4.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 11 Dec 2025 04:08:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 656 (0x290)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36F8434AF, serialNumber=0A1D1D4E3B170F94F8AE70AE42A94BE1BE9BA1DE
        Validity
            Not Before: Dec  9 04:08:29 2025 GMT
            Not After : Dec 11 04:08:29 2025 GMT
        Subject: CN=6937a0bd-f53b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:c2:d0:8f:7b:e3:80:4e:40:11:32:82:67:f6:
                    33:94:b1:be:22:1f:20:e5:5f:4d:4b:c7:b3:fd:52:
                    a7:39:b0:ff:94:5e:c6:52:8b:9a:bf:0b:f9:7d:21:
                    f9:4d:83:84:78:84:cb:98:b5:36:ae:db:7a:1a:7e:
                    fd:14:f7:d7:d6:91:69:ab:41:41:86:8a:07:3c:b8:
                    fe:94:a0:62:fe:2f:59:b8:37:8b:b7:ae:3e:06:66:
                    d9:e5:ad:78:e9:3e:14:86:89:2e:c0:e2:56:ef:81:
                    94:19:f0:b3:77:cd:02:1b:37:45:25:66:17:03:a8:
                    0c:d5:9b:40:0a:9b:76:a4:ba:44:32:f6:e9:c8:31:
                    cd:49:6b:a1:1a:ca:cb:5b:d4:1b:d5:ac:38:6c:7e:
                    77:91:1e:73:5e:03:dd:c9:52:70:3b:bb:94:9e:5d:
                    9c:54:5a:01:6f:b5:e6:cf:71:56:70:44:95:07:e0:
                    52:b8:0d:f9:ea:df:6b:55:ed:77:c4:c6:9f:ad:c3:
                    d7:c3:dd:99:d1:12:b1:c8:23:2c:90:a9:79:c7:90:
                    b8:72:39:5c:32:26:ff:04:c8:b4:c1:0b:39:8c:ce:
                    00:e1:c6:b9:f7:88:2d:20:2c:bf:70:83:46:4f:42:
                    91:e7:1a:06:59:7f:49:dc:8a:15:27:a1:b7:1b:58:
                    28:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:EE:71:5B:BD:8E:19:39:11:5F:47:60:16:47:87:F8:40:51:19:23
            X509v3 Authority Key Identifier:
                keyid:0A:1D:1D:4E:3B:17:0F:94:F8:AE:70:AE:42:A9:4B:E1:BE:9B:A1:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36F8434/B0F319E6DF8111EE8B5FEA6D775412E6/Ch0dTjsXD5T4rnCuQqlL4b6bod4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Ch0dTjsXD5T4rnCuQqlL4b6bod4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F8434/B0F319E6DF8111EE8B5FEA6D775412E6/Ch0dTjsXD5T4rnCuQqlL4b6bod4.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:2e:70:26:bb:52:96:45:8f:c2:88:57:6f:31:d6:18:ac:1f:
         c5:5c:4a:4a:8d:06:42:db:ea:a4:48:fa:17:e4:2d:4d:d8:e7:
         75:5b:fa:7f:ac:12:1b:a1:27:27:63:21:c2:ff:84:7a:9d:29:
         89:ff:3d:97:88:90:1d:a9:03:34:3b:7b:66:70:bf:48:69:ff:
         13:76:fe:47:f5:bc:0f:8b:fb:08:d6:3a:34:23:f4:9c:a0:3d:
         a6:97:53:8a:6a:3d:a5:58:3c:a2:6a:bb:9e:fe:a7:40:83:10:
         b2:20:2a:39:5e:95:ef:8b:bd:6c:1b:ed:92:e7:9c:f2:d9:71:
         72:ec:21:ed:2b:2a:46:5f:09:ac:2d:d5:81:33:bb:a6:ba:5b:
         fd:4d:07:f9:4f:ea:5c:55:08:de:ed:5b:c2:6c:f8:9f:0f:8a:
         b3:82:84:c5:02:e0:e9:a0:4e:b6:b0:b0:29:a2:ec:32:bb:b2:
         d6:04:5c:66:cd:62:ff:0b:c1:30:6c:4d:83:2c:ba:03:d8:6e:
         6d:e7:5e:8e:dd:5a:62:6c:42:0d:1e:7a:b9:61:2e:05:d0:43:
         85:0d:7e:b9:ef:d1:c3:b6:d6:aa:79:da:b8:b5:fe:e5:cf:02:
         77:a0:b2:a0:40:95:26:19:d1:ee:24:21:9f:ea:a6:be:cd:4b:
         8b:92:ee:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 9 12:05:27 2025 by rpki-client