This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FC75C/9E14B5BE983611EFB97BD164762E951A/snY9UExa-ft12a62ByQi-Hoaa_Y.mft
File:                     snY9UExa-ft12a62ByQi-Hoaa_Y.mft (raw, json)
Hash identifier:          b4dq1owByAzfQkd9lYLYmVbP7ER8iqWl8UE/X+oLnuw=
Subject key identifier:   48:29:5B:F4:A2:EC:0A:1E:67:D1:B5:E3:87:F6:5B:31:07:1F:A9:D2
Authority key identifier: B2:76:3D:50:4C:5A:F9:FB:75:D9:AE:B6:07:24:22:F8:7A:1A:6B:F6
Certificate issuer:       /CN=F36FC75CAF/serialNumber=B2763D504C5AF9FB75D9AEB6072422F87A1A6BF6
Certificate serial:       01AA
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/snY9UExa-ft12a62ByQi-Hoaa_Y.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36FC75C/9E14B5BE983611EFB97BD164762E951A/snY9UExa-ft12a62ByQi-Hoaa_Y.mft
Manifest number:          01A9
Signing time:             Fri 19 Dec 2025 04:41:11 +0000
Manifest this update:     Fri 19 Dec 2025 04:41:10 +0000
Manifest next update:     Sun 21 Dec 2025 04:41:10 +0000
Files and hashes:         1: snY9UExa-ft12a62ByQi-Hoaa_Y.crl (hash: v1KvLhWM5gFigCL0quTZ/k5p4TdFey+MNL9x1Ncd8Nc=)
                          2: 2836E3E2983811EFB48AAD6F762E951A.roa (hash: ilc1+7HG6/OhpNZjczTeMOkT7vcZALpZGaGEFuomW1E=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36FC75C/9E14B5BE983611EFB97BD164762E951A/snY9UExa-ft12a62ByQi-Hoaa_Y.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36FC75C/9E14B5BE983611EFB97BD164762E951A/snY9UExa-ft12a62ByQi-Hoaa_Y.mft
                          rsync://rpki.afrinic.net/repository/afrinic/snY9UExa-ft12a62ByQi-Hoaa_Y.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 21 Dec 2025 00:06:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 426 (0x1aa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36FC75CAF, serialNumber=B2763D504C5AF9FB75D9AEB6072422F87A1A6BF6
        Validity
            Not Before: Dec 19 04:41:10 2025 GMT
            Not After : Dec 21 04:41:10 2025 GMT
        Subject: CN=6944d767-82a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:c8:1f:10:6c:2c:23:3d:61:00:fe:ab:43:bf:
                    a8:8f:43:39:41:c2:83:e1:6d:d1:b8:23:92:71:f6:
                    27:d2:ea:7d:95:a5:64:35:ef:14:df:bf:a2:11:94:
                    10:94:d1:9f:da:0e:7b:c1:dc:4f:15:7d:49:d2:0b:
                    bc:15:7d:c4:df:e8:e8:2a:06:ff:0d:06:5b:fc:ce:
                    b7:ba:d2:49:d5:81:51:6e:dc:b5:1d:51:f3:a3:11:
                    66:38:c2:93:88:6b:6c:ec:63:6a:f6:31:7b:d8:41:
                    e9:0a:e1:09:2c:f9:67:b7:57:c5:4a:17:8a:10:a7:
                    38:df:f1:d0:0f:48:d9:28:7d:a9:1d:5b:a7:db:73:
                    b7:5a:a6:eb:b9:31:4f:fc:ee:d4:70:a4:42:84:3c:
                    9b:30:0d:d8:88:54:78:27:64:23:6f:66:55:04:c6:
                    6f:5f:3b:d4:88:e8:c9:ce:72:60:fe:57:6e:91:e3:
                    4f:81:86:9a:c3:1b:b0:fb:7e:76:ff:f5:0e:b0:cb:
                    15:c9:f2:51:52:da:cc:b9:fa:1b:6c:4c:95:3c:ab:
                    3a:27:d0:51:82:26:5b:8d:fb:49:e0:86:97:c8:c3:
                    90:2f:56:69:d8:72:83:66:3b:3e:d5:f4:e8:54:23:
                    33:dc:d1:8f:47:55:2d:56:4c:0f:58:35:7f:21:7a:
                    b6:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:29:5B:F4:A2:EC:0A:1E:67:D1:B5:E3:87:F6:5B:31:07:1F:A9:D2
            X509v3 Authority Key Identifier:
                keyid:B2:76:3D:50:4C:5A:F9:FB:75:D9:AE:B6:07:24:22:F8:7A:1A:6B:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36FC75C/9E14B5BE983611EFB97BD164762E951A/snY9UExa-ft12a62ByQi-Hoaa_Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/snY9UExa-ft12a62ByQi-Hoaa_Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FC75C/9E14B5BE983611EFB97BD164762E951A/snY9UExa-ft12a62ByQi-Hoaa_Y.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:0e:27:d7:2d:a0:59:25:e0:bc:3f:ce:ee:0f:c7:95:18:38:
         28:75:d0:19:9b:fe:fe:83:af:94:0b:cd:77:04:61:6a:73:13:
         18:c9:de:4b:71:6c:41:6e:65:5c:96:48:12:fb:f4:19:0e:3a:
         a9:59:df:20:ce:c0:bc:29:7a:f8:3e:1f:16:ad:01:f2:7c:b0:
         76:aa:03:ad:22:b3:ef:42:6d:dc:81:bf:d0:df:c2:ce:96:82:
         d0:c5:91:c4:a1:17:3a:eb:ae:c4:43:bf:69:0f:12:f6:c2:73:
         da:aa:3c:60:fb:41:91:c8:0d:a9:ae:86:88:af:d0:68:7f:10:
         03:e2:4b:da:f3:78:7c:ea:c9:7d:df:12:ac:4a:41:b4:d3:e3:
         3d:01:53:7f:f3:94:99:e1:ee:74:ee:45:4e:49:2c:19:c8:a3:
         85:71:72:f4:aa:61:ff:2d:fe:90:9c:b5:d6:db:9d:9e:58:6b:
         2e:21:9e:40:68:7d:9f:a6:ec:58:aa:d8:e4:27:66:72:d2:ba:
         b0:ad:3d:a8:a1:b4:6a:16:39:45:29:d1:bb:3f:38:ce:8c:c2:
         ca:df:db:8e:54:27:c8:5a:3c:b2:0e:37:1b:ca:a0:0b:c6:96:
         bc:b1:9b:62:4a:5b:ed:ef:df:7f:cc:f1:ba:b2:52:06:f2:85:
         52:7c:88:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 13:14:12 2025 by rpki-client