This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36180A1/4EB508143F5A11EFB5925070762E951A/0JparVoXc9hrHSbdXRxET8ys9uQ.mft
File:                     0JparVoXc9hrHSbdXRxET8ys9uQ.mft (raw, json)
Hash identifier:          dlEQjcNy4VHzCofQ0DwRCaGN+25A4a3mGVsN4cQ/i78=
Subject key identifier:   5D:98:90:91:36:62:AB:F3:B0:57:DB:40:B5:2E:96:4A:DE:A7:7C:A2
Authority key identifier: D0:9A:5A:AD:5A:17:73:D8:6B:1D:26:DD:5D:1C:44:4F:CC:AC:F6:E4
Certificate issuer:       /CN=F36180A1AF/serialNumber=D09A5AAD5A1773D86B1D26DD5D1C444FCCACF6E4
Certificate serial:       020F
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/0JparVoXc9hrHSbdXRxET8ys9uQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36180A1/4EB508143F5A11EFB5925070762E951A/0JparVoXc9hrHSbdXRxET8ys9uQ.mft
Manifest number:          020F
Signing time:             Mon 08 Dec 2025 04:21:04 +0000
Manifest this update:     Mon 08 Dec 2025 04:21:03 +0000
Manifest next update:     Wed 10 Dec 2025 04:21:03 +0000
Files and hashes:         1: 0JparVoXc9hrHSbdXRxET8ys9uQ.crl (hash: VD6iQzmj/CC4AdsMviUSJstYjuUfF/Yonf+sU6hu8KU=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36180A1/4EB508143F5A11EFB5925070762E951A/0JparVoXc9hrHSbdXRxET8ys9uQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36180A1/4EB508143F5A11EFB5925070762E951A/0JparVoXc9hrHSbdXRxET8ys9uQ.mft
                          rsync://rpki.afrinic.net/repository/afrinic/0JparVoXc9hrHSbdXRxET8ys9uQ.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 10 Dec 2025 00:06:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 527 (0x20f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36180A1AF, serialNumber=D09A5AAD5A1773D86B1D26DD5D1C444FCCACF6E4
        Validity
            Not Before: Dec  8 04:21:03 2025 GMT
            Not After : Dec 10 04:21:03 2025 GMT
        Subject: CN=6936522f-46d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:8c:6e:88:8e:e1:e6:64:85:a4:3b:6a:d5:0f:
                    78:bc:71:f7:79:84:00:00:8a:ae:5f:7e:45:a1:ed:
                    e9:bc:d9:5d:1c:a2:d8:3e:28:47:80:87:1f:55:d6:
                    bf:eb:c7:83:ee:07:b0:8d:d2:72:7c:f2:03:46:8a:
                    80:f6:a2:96:13:93:3b:e0:53:eb:7a:23:4d:24:4b:
                    0c:22:4d:d3:f1:bd:17:1b:d9:8a:f6:b5:6b:05:f7:
                    7b:4c:ec:af:7c:88:27:49:de:b7:3e:49:b2:41:d2:
                    67:1d:89:e5:65:22:16:b1:bb:cd:04:53:40:a9:6b:
                    f5:4e:59:95:7e:f5:f4:75:e3:21:2d:9a:8e:e7:fb:
                    1b:c4:e5:ac:25:1b:ca:84:ce:c0:4e:a9:3d:d1:33:
                    5f:8c:ca:22:d2:c4:bc:38:7e:d5:d2:f9:32:4e:d0:
                    ec:4e:21:a8:47:36:db:81:9d:ca:a7:18:d0:f2:78:
                    b3:9a:b1:85:0d:fc:ce:2e:04:fe:3b:55:e5:f8:3d:
                    35:9d:c2:08:de:e9:44:24:43:63:b0:72:70:13:0b:
                    97:a9:3f:a2:83:26:fe:60:e9:68:de:7f:10:67:cd:
                    d3:bf:dd:ca:29:0f:e3:78:ba:fb:4f:5d:94:d1:c0:
                    0e:56:73:6b:7e:29:f9:a9:af:cf:0f:f7:4e:a6:9b:
                    2e:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:98:90:91:36:62:AB:F3:B0:57:DB:40:B5:2E:96:4A:DE:A7:7C:A2
            X509v3 Authority Key Identifier:
                keyid:D0:9A:5A:AD:5A:17:73:D8:6B:1D:26:DD:5D:1C:44:4F:CC:AC:F6:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36180A1/4EB508143F5A11EFB5925070762E951A/0JparVoXc9hrHSbdXRxET8ys9uQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/0JparVoXc9hrHSbdXRxET8ys9uQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36180A1/4EB508143F5A11EFB5925070762E951A/0JparVoXc9hrHSbdXRxET8ys9uQ.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:f9:22:c7:55:91:d9:67:b8:77:e5:a1:92:7b:94:85:53:2b:
         dc:d4:46:f9:10:27:dd:86:b7:55:8f:d4:0c:4a:7c:a5:3d:31:
         bb:86:50:8a:34:d2:07:a2:2e:7a:4d:be:04:b1:fd:e4:b3:b0:
         a4:c8:dd:83:86:8a:9c:e6:aa:21:60:b3:4d:f2:f4:4b:16:2b:
         c0:90:aa:cd:34:0d:81:6d:0a:10:5b:85:8b:68:67:03:7e:cc:
         6c:77:d4:e8:e5:d9:04:46:d5:8c:50:9e:19:75:33:7f:9b:6e:
         ee:7f:22:c7:85:d2:88:70:3f:64:aa:5e:f2:d4:c3:ed:fa:b9:
         23:3b:d1:8c:a6:8b:13:b5:d7:cd:9c:53:73:bc:e3:8f:d8:1e:
         57:5a:74:c3:42:9b:ab:e9:e1:e7:3c:7a:dc:54:6c:6e:5d:22:
         3c:84:5f:a8:6c:84:4b:37:92:d9:32:c3:8a:93:a1:4d:d8:d8:
         85:0b:f8:a4:3b:dc:73:1a:b0:a5:ac:85:7a:af:5e:32:14:73:
         59:6d:9d:11:47:12:a1:8a:82:a3:e7:27:7d:5d:4e:0a:78:b8:
         05:8a:ab:31:c4:4a:39:f6:54:ef:37:10:4e:b0:b0:9b:05:b0:
         55:2d:08:87:aa:04:1a:94:1d:05:18:1d:f6:c4:17:0d:d2:a3:
         08:3c:c7:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 8 17:25:10 2025 by rpki-client