This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36185D8/1C1348B45BD711EFAF2C3D5E762E951A/ZNS8Pq2RmuikZzKVELUgQYUzXFI.mft
File:                     ZNS8Pq2RmuikZzKVELUgQYUzXFI.mft (raw, json)
Hash identifier:          VlN18dfEMIr71V5AOBZrKHRbmJNDfuyxfHO3tGCj/dM=
Subject key identifier:   54:F8:22:E5:D6:96:23:87:26:AC:58:E6:3B:E8:9A:6B:E5:66:2D:6B
Authority key identifier: 64:D4:BC:3E:AD:91:9A:E8:A4:67:32:95:10:B5:20:41:85:33:5C:52
Certificate issuer:       /CN=F36185D8AF/serialNumber=64D4BC3EAD919AE8A467329510B5204185335C52
Certificate serial:       01ED
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/ZNS8Pq2RmuikZzKVELUgQYUzXFI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36185D8/1C1348B45BD711EFAF2C3D5E762E951A/ZNS8Pq2RmuikZzKVELUgQYUzXFI.mft
Manifest number:          01EC
Signing time:             Mon 08 Dec 2025 04:27:22 +0000
Manifest this update:     Mon 08 Dec 2025 04:27:21 +0000
Manifest next update:     Wed 10 Dec 2025 04:27:21 +0000
Files and hashes:         1: ZNS8Pq2RmuikZzKVELUgQYUzXFI.crl (hash: fPo4guRNtpeFtzUCL/hGByD5RVJOTDsZecH3WxIEmpo=)
                          2: 17AC05D05BD811EF91C62F65762E951A.roa (hash: pGO0PAidVvZBgK+RWqWHGbvgRG1IKwi6oTcbF8OQHYY=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36185D8/1C1348B45BD711EFAF2C3D5E762E951A/ZNS8Pq2RmuikZzKVELUgQYUzXFI.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36185D8/1C1348B45BD711EFAF2C3D5E762E951A/ZNS8Pq2RmuikZzKVELUgQYUzXFI.mft
                          rsync://rpki.afrinic.net/repository/afrinic/ZNS8Pq2RmuikZzKVELUgQYUzXFI.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 10 Dec 2025 00:06:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 493 (0x1ed)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36185D8AF, serialNumber=64D4BC3EAD919AE8A467329510B5204185335C52
        Validity
            Not Before: Dec  8 04:27:21 2025 GMT
            Not After : Dec 10 04:27:21 2025 GMT
        Subject: CN=693653aa-02d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:22:1b:77:e1:13:39:68:f5:ed:32:ca:ca:19:
                    10:50:a0:43:bc:90:0f:57:bb:6d:22:27:a7:55:28:
                    a1:ff:8c:88:91:fc:d4:42:10:86:0a:66:7b:45:33:
                    da:a5:60:e1:0d:e8:bd:a2:14:dc:87:2d:cc:42:07:
                    8f:fa:5b:b2:65:46:66:cf:17:66:a7:ec:bf:ed:07:
                    f3:aa:65:36:d6:dd:88:17:69:98:92:ac:95:63:de:
                    08:b1:74:e4:fe:93:3d:61:b2:83:97:63:35:9c:da:
                    eb:c5:62:c4:24:e9:a4:9c:07:65:78:1b:c8:b8:28:
                    be:ca:7b:72:ad:e2:84:76:56:1e:1d:e5:b2:c2:da:
                    c9:59:70:c4:14:d1:8f:73:95:50:e8:9c:4a:f0:d9:
                    c6:67:7d:e5:3a:0c:ba:2d:48:b8:06:9b:54:fa:1f:
                    f1:ed:92:51:95:9f:5f:27:91:c9:4b:e5:25:b1:9f:
                    9e:73:5c:8d:d9:4a:33:7f:0e:3f:8a:65:f7:94:a2:
                    2b:92:e5:65:2b:f2:a6:dc:31:c6:90:25:de:82:e7:
                    0e:02:0d:16:95:a6:d3:20:16:8a:2e:b1:d0:6d:0d:
                    dd:78:1c:42:26:28:94:bf:63:52:f2:ba:99:ab:51:
                    15:2f:33:95:b0:52:bc:71:58:4b:84:55:50:fa:2c:
                    0b:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:F8:22:E5:D6:96:23:87:26:AC:58:E6:3B:E8:9A:6B:E5:66:2D:6B
            X509v3 Authority Key Identifier:
                keyid:64:D4:BC:3E:AD:91:9A:E8:A4:67:32:95:10:B5:20:41:85:33:5C:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36185D8/1C1348B45BD711EFAF2C3D5E762E951A/ZNS8Pq2RmuikZzKVELUgQYUzXFI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/ZNS8Pq2RmuikZzKVELUgQYUzXFI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36185D8/1C1348B45BD711EFAF2C3D5E762E951A/ZNS8Pq2RmuikZzKVELUgQYUzXFI.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:0e:a5:9d:38:9f:e4:f9:d1:33:27:b0:ba:3f:28:dc:b5:a4:
         9f:16:d2:40:99:95:78:38:a3:76:ae:fa:16:d5:ec:f7:77:1d:
         b8:3d:2f:3a:a1:85:0f:2e:b3:8e:e8:ad:31:62:97:07:a0:55:
         3f:ea:9c:76:3e:15:e3:e6:ab:d4:54:b0:78:a8:16:95:34:d6:
         95:9c:85:0d:ca:cd:08:d4:53:e9:82:c9:78:60:8e:bb:c7:5d:
         ef:8d:22:d2:d1:95:8a:7c:fb:9a:85:bc:33:d8:1b:94:03:02:
         00:c3:a3:18:8f:11:a7:42:cd:c8:66:8e:a1:28:01:24:1f:48:
         65:df:2c:d3:7c:52:49:07:93:56:c5:6b:6e:36:80:59:00:f9:
         5a:a9:c5:e5:b5:c6:a1:1a:79:93:f7:d3:f9:c3:96:81:c3:7c:
         d3:ad:ed:21:5c:7d:3f:b2:d2:60:e5:bc:13:e0:f2:1a:1f:2b:
         dc:1d:9d:73:0f:dd:53:2c:5d:37:70:d8:c9:e8:dc:f1:6e:93:
         e2:98:4e:c9:c5:e2:bd:ce:49:06:cf:9c:a5:c5:8b:f6:2c:de:
         bc:35:a5:64:e0:64:81:07:75:55:c8:de:6e:5f:25:ef:2d:5c:
         cb:25:51:27:26:c9:91:df:0b:22:6a:de:d2:79:67:92:41:d5:
         3d:f4:c2:1b
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICAe0wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
MTg1RDhBRjExMC8GA1UEBRMoNjRENEJDM0VBRDkxOUFFOEE0NjczMjk1MTBCNTIw
NDE4NTMzNUM1MjAeFw0yNTEyMDgwNDI3MjFaFw0yNTEyMTAwNDI3MjFaMBgxFjAU
BgNVBAMTDTY5MzY1M2FhLTAyZDAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC5Iht34RM5aPXtMsrKGRBQoEO8kA9Xu20iJ6dVKKH/jIiR/NRCEIYKZntF
M9qlYOEN6L2iFNyHLcxCB4/6W7JlRmbPF2an7L/tB/OqZTbW3YgXaZiSrJVj3gix
dOT+kz1hsoOXYzWc2uvFYsQk6aScB2V4G8i4KL7Ke3Kt4oR2Vh4d5bLC2slZcMQU
0Y9zlVDonErw2cZnfeU6DLotSLgGm1T6H/HtklGVn18nkclL5SWxn55zXI3ZSjN/
Dj+KZfeUoiuS5WUr8qbcMcaQJd6C5w4CDRaVptMgFoousdBtDd14HEImKJS/Y1Ly
upmrURUvM5WwUrxxWEuEVVD6LAvxAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUVPgi
5daWI4cmrFjmO+iaa+VmLWswHwYDVR0jBBgwFoAUZNS8Pq2RmuikZzKVELUgQYUz
XFIwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjE4NUQ4LzFDMTM0OEI0NUJENzExRUZBRjJDM0Q1RTc2MkU5NTFBL1pOUzhQ
cTJSbXVpa1p6S1ZFTFVnUVlVelhGSS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1pOUzhQcTJSbXVpa1p6S1ZFTFVnUVlVelhGSS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2MTg1RDgvMUMxMzQ4QjQ1QkQ3MTFFRkFGMkMzRDVFNzYy
RTk1MUEvWk5TOFBxMlJtdWlrWnpLVkVMVWdRWVV6WEZJLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCrDqWdOJ/k+dEzJ7C6PyjctaSfFtJA
mZV4OKN2rvoW1ez3dx24PS86oYUPLrOO6K0xYpcHoFU/6px2PhXj5qvUVLB4qBaV
NNaVnIUNys0I1FPpgsl4YI67x13vjSLS0ZWKfPuahbwz2BuUAwIAw6MYjxGnQs3I
Zo6hKAEkH0hl3yzTfFJJB5NWxWtuNoBZAPlaqcXltcahGnmT99P5w5aBw3zTre0h
XH0/stJg5bwT4PIaHyvcHZ1zD91TLF03cNjJ6NzxbpPimE7JxeK9zkkGz5ylxYv2
LN68NaVk4GSBB3VVyN5uXyXvLVzLJVEnJsmR3wsiat7SeWeSQdU99MIb
-----END CERTIFICATE-----
Generated at Mon Dec 8 17:11:00 2025 by rpki-client