This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36285D3/47B43ADC88E311ED8F1952DAF1222468/Ev0Nq8bLGt1EIZUnagME4-lyd7E.mft
File:                     Ev0Nq8bLGt1EIZUnagME4-lyd7E.mft (raw, json)
Hash identifier:          B1eSGAH2DQy+THDyzduOrFQdovUcduosdrhlzEfGEQY=
Subject key identifier:   F4:B2:B4:E7:17:40:9D:5C:4E:4A:00:0B:62:33:B1:16:17:31:07:6B
Authority key identifier: 12:FD:0D:AB:C6:CB:1A:DD:44:21:95:27:6A:03:04:E3:E9:72:77:B1
Certificate issuer:       /CN=F36285D3AF/serialNumber=12FD0DABC6CB1ADD442195276A0304E3E97277B1
Certificate serial:       0464
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/Ev0Nq8bLGt1EIZUnagME4-lyd7E.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36285D3/47B43ADC88E311ED8F1952DAF1222468/Ev0Nq8bLGt1EIZUnagME4-lyd7E.mft
Manifest number:          0463
Signing time:             Sat 20 Dec 2025 03:09:20 +0000
Manifest this update:     Sat 20 Dec 2025 03:09:19 +0000
Manifest next update:     Mon 22 Dec 2025 03:09:19 +0000
Files and hashes:         1: Ev0Nq8bLGt1EIZUnagME4-lyd7E.crl (hash: Ah4nCM2pwctzroLzG1EiCWJ+BuuAC2WEhWxvbwqp9sc=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36285D3/47B43ADC88E311ED8F1952DAF1222468/Ev0Nq8bLGt1EIZUnagME4-lyd7E.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36285D3/47B43ADC88E311ED8F1952DAF1222468/Ev0Nq8bLGt1EIZUnagME4-lyd7E.mft
                          rsync://rpki.afrinic.net/repository/afrinic/Ev0Nq8bLGt1EIZUnagME4-lyd7E.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 22 Dec 2025 00:06:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1124 (0x464)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36285D3AF, serialNumber=12FD0DABC6CB1ADD442195276A0304E3E97277B1
        Validity
            Not Before: Dec 20 03:09:19 2025 GMT
            Not After : Dec 22 03:09:19 2025 GMT
        Subject: CN=6946135f-a24e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:0f:bd:31:9d:5f:9b:a2:ce:2a:5b:18:ff:6f:
                    3e:b5:1f:82:47:87:85:47:4e:a9:eb:01:a6:79:23:
                    ae:15:c1:ae:5d:cc:5f:fa:52:e4:6f:e0:04:cc:57:
                    99:1a:88:43:d0:d9:14:80:90:33:66:1e:26:14:a7:
                    af:3a:da:1f:d4:1a:5e:1c:8c:95:c7:21:99:7a:65:
                    fa:e0:fe:6d:88:9d:5d:b4:b3:8b:7e:74:68:b2:8c:
                    9c:37:67:6c:e8:c7:5c:2e:96:c3:dd:38:fd:86:61:
                    b5:dd:e5:b7:fd:ff:87:f2:24:f4:06:21:c5:10:fa:
                    2b:65:3d:d9:90:e3:14:ce:24:ff:43:ce:6a:69:38:
                    1c:5c:ac:f4:b6:6c:8d:2e:60:a8:53:fa:50:4b:6a:
                    31:b8:c8:b5:d2:3e:cc:3e:b7:40:71:39:2e:4e:66:
                    6b:21:c3:cd:ef:cd:c8:ff:40:5b:ce:32:fa:89:dc:
                    5e:1f:18:fc:0a:c4:ea:87:2a:f1:ee:20:5d:40:7f:
                    72:9a:c9:3e:03:28:bf:6f:53:31:9f:a2:d3:0f:6d:
                    3d:31:e8:c8:d8:7c:00:14:80:06:1d:90:5e:86:6d:
                    83:fa:25:77:22:03:7b:9a:36:6a:59:f4:d7:e7:8a:
                    38:20:7d:24:cb:b7:d8:36:bd:f4:59:dd:92:3f:b1:
                    ad:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:B2:B4:E7:17:40:9D:5C:4E:4A:00:0B:62:33:B1:16:17:31:07:6B
            X509v3 Authority Key Identifier:
                keyid:12:FD:0D:AB:C6:CB:1A:DD:44:21:95:27:6A:03:04:E3:E9:72:77:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36285D3/47B43ADC88E311ED8F1952DAF1222468/Ev0Nq8bLGt1EIZUnagME4-lyd7E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Ev0Nq8bLGt1EIZUnagME4-lyd7E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36285D3/47B43ADC88E311ED8F1952DAF1222468/Ev0Nq8bLGt1EIZUnagME4-lyd7E.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:e1:4b:ae:d3:b5:a6:23:a2:bd:47:e2:00:0d:f2:f2:63:1e:
         73:14:be:af:47:93:4e:78:b8:6c:e9:b8:9f:09:0a:bf:81:95:
         c0:04:76:69:c8:e0:06:8c:94:4f:67:e5:df:b9:ac:f5:76:69:
         b7:0a:0f:33:79:27:a9:40:11:26:13:57:1b:f4:1f:44:75:fc:
         98:29:88:fd:70:ed:e9:44:29:47:62:da:8f:84:b1:7d:26:9a:
         e1:7c:ce:93:0d:16:bf:03:3b:43:56:ae:a2:5d:04:c0:26:0f:
         f6:1a:ea:15:8e:92:20:07:fb:34:2f:c3:a8:ce:4e:55:07:a9:
         55:83:ce:e0:22:32:df:1e:56:ac:1a:39:b6:c5:a3:f8:db:2e:
         c7:85:b1:34:12:ea:75:02:c9:74:a3:6b:53:89:04:40:0c:87:
         ec:b2:3c:ca:a8:be:e2:b5:8b:93:80:81:98:66:1f:29:13:a5:
         d5:24:8a:e6:17:d7:f6:8b:b8:32:73:85:6b:3a:e3:d7:7d:69:
         4e:77:f4:ea:51:e4:33:44:1b:22:90:da:32:3d:0a:0c:08:b7:
         b1:d6:37:56:1a:b2:d1:c2:52:ef:14:71:51:e8:67:51:cf:94:
         cb:d0:fa:c1:38:ce:e9:4c:f3:c2:bb:1b:11:ff:11:89:79:f1:
         54:2c:7b:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 00:17:17 2025 by rpki-client