This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36406B8/16691BB26FE511ED854B599FF1222468/gHOCNiSuwfasGrBp2XjmXZ9yBWs.mft
File:                     gHOCNiSuwfasGrBp2XjmXZ9yBWs.mft (raw, json)
Hash identifier:          EUQG1QIRnfAa/K/ZMBYs5mTgTVLPiVLzWRyksxbQhGQ=
Subject key identifier:   67:70:FF:56:CB:20:43:EC:BD:3E:9F:08:5D:B3:71:76:03:74:EA:02
Authority key identifier: 80:73:82:36:24:AE:C1:F6:AC:1A:B0:69:D9:78:E6:5D:9F:72:05:6B
Certificate issuer:       /CN=F36406B8AF/serialNumber=8073823624AEC1F6AC1AB069D978E65D9F72056B
Certificate serial:       047F
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/gHOCNiSuwfasGrBp2XjmXZ9yBWs.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36406B8/16691BB26FE511ED854B599FF1222468/gHOCNiSuwfasGrBp2XjmXZ9yBWs.mft
Manifest number:          047B
Signing time:             Mon 08 Dec 2025 03:06:49 +0000
Manifest this update:     Mon 08 Dec 2025 03:06:48 +0000
Manifest next update:     Wed 10 Dec 2025 03:06:48 +0000
Files and hashes:         1: gHOCNiSuwfasGrBp2XjmXZ9yBWs.crl (hash: 4E4P+AnCGlWBeZQHZz7yR+vVh9ORfhBucdGn317wXWE=)
                          2: 663621FC6FE611ED9793E2A2F1222468.roa (hash: pOiXMCETpHqkEhDUTKpvHVFnDi/EWrRzid1oTDEvNYI=)
                          3: BA1164B26FE611ED9E57C5A3F1222468.roa (hash: cj0paKj6uAYyRz3Vt8WdaCe+4/4R7mr0wnlwDucUaow=)
                          4: 309F4CEE6FE611ED945B4DA2F1222468.roa (hash: qv6IGwKqJEtixNqBWOezaW48ALRNnYqv01ysaSDGwCU=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36406B8/16691BB26FE511ED854B599FF1222468/gHOCNiSuwfasGrBp2XjmXZ9yBWs.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36406B8/16691BB26FE511ED854B599FF1222468/gHOCNiSuwfasGrBp2XjmXZ9yBWs.mft
                          rsync://rpki.afrinic.net/repository/afrinic/gHOCNiSuwfasGrBp2XjmXZ9yBWs.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 10 Dec 2025 00:06:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1151 (0x47f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36406B8AF, serialNumber=8073823624AEC1F6AC1AB069D978E65D9F72056B
        Validity
            Not Before: Dec  8 03:06:48 2025 GMT
            Not After : Dec 10 03:06:48 2025 GMT
        Subject: CN=693640c9-0cc0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:33:d8:5c:75:96:32:29:58:8d:c3:95:1b:9e:
                    e2:07:28:72:3d:af:a7:1d:2e:bd:53:b3:06:02:7c:
                    7e:37:84:d3:19:1c:b1:d5:6a:b0:17:3f:86:b3:d6:
                    8c:94:0f:09:f4:14:96:d9:f8:41:29:7a:3f:2e:a7:
                    d3:dc:92:b5:4a:55:01:47:a9:cd:47:e2:c6:b5:0d:
                    01:e3:89:db:45:91:13:03:62:1f:ff:6a:46:97:e0:
                    09:4c:31:32:63:0e:be:69:32:e1:6e:74:dc:91:a6:
                    87:5a:e1:d3:60:e1:ba:84:8a:ff:f6:26:57:0e:39:
                    3c:a6:63:a3:cb:b8:ed:0f:f0:9f:da:de:c6:db:e4:
                    eb:94:80:9e:21:40:00:ad:8d:16:d7:e5:b9:30:13:
                    0d:04:80:f2:1d:42:34:0a:b0:60:23:68:17:dc:56:
                    07:69:a1:f9:d5:86:8b:a7:9b:93:ba:e0:23:dc:f1:
                    36:4f:2c:51:0a:cd:94:be:3e:e9:29:b3:21:86:24:
                    2f:ec:6c:c6:22:16:71:87:bc:d8:00:47:8a:ae:2d:
                    2b:d3:b7:fa:72:15:04:21:c8:4d:b2:af:20:36:d9:
                    52:14:e7:b8:52:c4:17:c1:5f:14:88:89:cf:29:3b:
                    14:19:17:21:cf:7c:a0:14:ce:85:56:be:25:0b:de:
                    07:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:70:FF:56:CB:20:43:EC:BD:3E:9F:08:5D:B3:71:76:03:74:EA:02
            X509v3 Authority Key Identifier:
                keyid:80:73:82:36:24:AE:C1:F6:AC:1A:B0:69:D9:78:E6:5D:9F:72:05:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36406B8/16691BB26FE511ED854B599FF1222468/gHOCNiSuwfasGrBp2XjmXZ9yBWs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/gHOCNiSuwfasGrBp2XjmXZ9yBWs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36406B8/16691BB26FE511ED854B599FF1222468/gHOCNiSuwfasGrBp2XjmXZ9yBWs.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:a3:32:98:19:46:eb:0a:15:34:41:bc:b8:65:96:25:d8:f6:
         3b:64:ed:f9:cb:c2:ed:25:f1:ba:7b:1d:65:5e:80:cc:e8:f7:
         b0:79:de:e0:a2:68:70:d5:03:c4:6a:60:44:96:5e:6e:5c:5b:
         bf:6d:75:2e:4f:f1:06:d5:87:d5:16:2a:f6:d1:05:35:c7:aa:
         34:67:dd:33:6d:2e:98:45:3e:54:32:b2:d9:ba:be:6b:6d:10:
         c3:61:2d:09:42:32:d0:c5:32:ba:8b:4e:a3:c7:77:a8:49:92:
         c7:9d:b7:bb:24:58:69:36:9e:36:36:10:84:60:f1:b8:e2:bd:
         02:fb:13:87:5e:9a:ad:83:4f:b2:66:34:d3:e8:90:fa:86:ef:
         71:09:50:4d:4f:2d:2c:89:db:d5:1d:de:99:0b:cb:7c:a1:3e:
         ad:f2:77:39:5c:f7:cb:35:21:af:bd:ef:3f:6c:b6:aa:e7:09:
         70:08:94:65:49:0d:8e:00:f3:7c:fd:c4:b2:02:8d:a4:a3:8f:
         c8:fd:4e:53:74:04:30:f5:94:b1:16:98:05:56:6d:8b:c4:fa:
         be:06:ae:d4:90:ac:3d:a6:be:d2:cb:92:d3:a2:92:c3:7d:52:
         4c:d1:86:69:72:aa:68:21:f6:13:dd:86:bb:e4:36:ff:e6:5e:
         30:91:84:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 8 17:06:42 2025 by rpki-client