This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FB628/2535C52034C011E7BDE4355EF8AEA228/DmdFN0vlZOXm1eI_aockyL53qVI.mft
File:                     DmdFN0vlZOXm1eI_aockyL53qVI.mft (raw, json)
Hash identifier:          kKslmtoubQEenPFICzUT8IvurTT+YAGQLag92tL1k+k=
Subject key identifier:   55:F0:3D:C9:93:42:2F:A4:99:BC:14:15:83:96:CC:46:8A:C9:9A:8A
Authority key identifier: 0E:67:45:37:4B:E5:64:E5:E6:D5:E2:3F:6A:87:24:C8:BE:77:A9:52
Certificate issuer:       /CN=F36FB628AF/serialNumber=0E6745374BE564E5E6D5E23F6A8724C8BE77A952
Certificate serial:       0C84
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/DmdFN0vlZOXm1eI_aockyL53qVI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36FB628/2535C52034C011E7BDE4355EF8AEA228/DmdFN0vlZOXm1eI_aockyL53qVI.mft
Manifest number:          0C83
Signing time:             Tue 09 Dec 2025 01:08:07 +0000
Manifest this update:     Tue 09 Dec 2025 01:08:07 +0000
Manifest next update:     Thu 11 Dec 2025 01:08:07 +0000
Files and hashes:         1: DmdFN0vlZOXm1eI_aockyL53qVI.crl (hash: bjhOmdfd31MB/3GKrP4rCPLxSwQQEChWn4gwbZAwU28=)
                          2: D550D09C037F11EDA40460C2F1222468.roa (hash: 9wZBqedJVTgdGdUQ5S31jykjUra1rcqD+ULApifCF68=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36FB628/2535C52034C011E7BDE4355EF8AEA228/DmdFN0vlZOXm1eI_aockyL53qVI.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36FB628/2535C52034C011E7BDE4355EF8AEA228/DmdFN0vlZOXm1eI_aockyL53qVI.mft
                          rsync://rpki.afrinic.net/repository/afrinic/DmdFN0vlZOXm1eI_aockyL53qVI.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 11 Dec 2025 01:08:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3204 (0xc84)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36FB628AF, serialNumber=0E6745374BE564E5E6D5E23F6A8724C8BE77A952
        Validity
            Not Before: Dec  9 01:08:07 2025 GMT
            Not After : Dec 11 01:08:07 2025 GMT
        Subject: CN=69377677-7a84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:61:fa:3d:16:84:63:30:f3:60:e4:a0:c4:bf:
                    1b:08:08:17:cb:cd:a5:90:de:43:c9:05:e7:e3:e0:
                    0f:a3:b4:c7:d8:db:72:b8:d7:92:86:1a:df:79:44:
                    16:13:aa:be:54:0b:46:00:9a:33:42:4e:d7:07:36:
                    4f:1f:08:1f:74:32:33:dc:e9:0b:fc:b6:96:68:f7:
                    e7:62:76:9c:f1:21:af:bf:1a:04:0d:72:ee:f3:64:
                    85:2d:dc:29:bb:70:42:45:01:96:47:d5:f2:77:a3:
                    42:d6:31:6d:b1:43:8b:7c:cf:a8:e5:0f:e6:d2:0d:
                    74:65:d3:ab:c7:dd:68:22:5f:e4:5b:23:ba:40:9a:
                    20:22:69:8f:a2:d9:14:8e:d3:f3:2c:98:c8:e2:68:
                    01:36:de:3d:f6:a1:1a:26:66:f3:26:37:9f:d7:84:
                    d2:bc:f3:fb:48:ee:bc:f0:f3:71:2c:f0:94:89:b8:
                    ea:d9:f1:1f:a2:79:88:e7:0b:0c:9e:2b:79:94:7d:
                    30:65:0a:64:64:20:6e:42:53:eb:ad:ba:07:f5:59:
                    a9:11:08:90:ec:a8:95:96:4d:c6:a8:2b:a4:61:4d:
                    30:59:99:06:ba:d3:53:a3:ae:76:18:fa:61:1d:c2:
                    c6:c4:3a:45:2e:5e:25:60:f3:bc:a9:17:9a:68:f8:
                    38:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:F0:3D:C9:93:42:2F:A4:99:BC:14:15:83:96:CC:46:8A:C9:9A:8A
            X509v3 Authority Key Identifier:
                keyid:0E:67:45:37:4B:E5:64:E5:E6:D5:E2:3F:6A:87:24:C8:BE:77:A9:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36FB628/2535C52034C011E7BDE4355EF8AEA228/DmdFN0vlZOXm1eI_aockyL53qVI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/DmdFN0vlZOXm1eI_aockyL53qVI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FB628/2535C52034C011E7BDE4355EF8AEA228/DmdFN0vlZOXm1eI_aockyL53qVI.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:8a:2b:2a:f2:6c:4a:a3:94:6e:ce:3c:4b:45:ae:a8:93:f4:
         5e:fa:da:b8:5f:8e:a6:9c:08:2e:32:db:0d:0a:b3:47:a0:6b:
         60:c4:e6:f1:5a:4d:e4:45:60:ce:df:0f:56:de:70:b8:ef:81:
         05:a5:b3:c3:5a:f4:9f:20:32:6c:56:84:78:98:87:92:90:ca:
         2f:75:68:48:1f:a7:18:ae:bc:6b:26:dc:0d:db:b3:fc:9f:73:
         98:c3:c6:5d:79:4c:d5:84:16:be:e5:12:22:09:5b:9c:a1:84:
         08:d9:83:98:5f:b0:de:9e:67:45:20:7b:29:78:a8:88:40:a8:
         09:f8:75:14:b4:d5:3a:0a:f1:64:0a:81:39:ff:9c:0a:e8:28:
         64:b3:44:36:09:2e:da:89:8c:ea:00:33:11:22:e3:c1:9d:89:
         90:67:a8:ae:c3:35:20:53:a5:cd:8a:f3:c4:ec:be:b7:07:4c:
         91:ec:82:44:e4:f3:2f:c4:78:33:ea:44:a6:7b:f1:1b:4d:26:
         b9:57:20:d1:f7:de:a7:24:46:2c:eb:4c:4c:d5:d7:d4:0a:d8:
         dd:29:5b:c5:28:1b:90:66:29:e6:93:9b:4f:7d:77:fa:3a:1f:
         a5:fc:78:ba:f1:9f:19:f9:74:77:d2:99:5e:b3:37:4c:fa:d1:
         6b:ee:e1:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 9 12:06:15 2025 by rpki-client