This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36750E0/F1A0BF34EBD511EDA4BAA72A4AD9E6FC/GsJxHeVgUeDNZwEEHR2CBHEL3fU.mft
File:                     GsJxHeVgUeDNZwEEHR2CBHEL3fU.mft (raw, json)
Hash identifier:          EvcMg0eZYxbxpZW3YtOjpglfVwmj7EAVTZ/aWGUj/Ks=
Subject key identifier:   8E:AD:34:19:5D:FD:50:26:21:42:95:6E:2B:71:05:EB:4A:C8:73:68
Authority key identifier: 1A:C2:71:1D:E5:60:51:E0:CD:67:01:04:1D:1D:82:04:71:0B:DD:F5
Certificate issuer:       /CN=F36750E0AF/serialNumber=1AC2711DE56051E0CD6701041D1D8204710BDDF5
Certificate serial:       03DE
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/GsJxHeVgUeDNZwEEHR2CBHEL3fU.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36750E0/F1A0BF34EBD511EDA4BAA72A4AD9E6FC/GsJxHeVgUeDNZwEEHR2CBHEL3fU.mft
Manifest number:          03D9
Signing time:             Mon 08 Dec 2025 03:25:31 +0000
Manifest this update:     Mon 08 Dec 2025 03:25:30 +0000
Manifest next update:     Wed 10 Dec 2025 03:25:30 +0000
Files and hashes:         1: GsJxHeVgUeDNZwEEHR2CBHEL3fU.crl (hash: vBjhpOOObPficpsnpAW0MauEpjim0a1nD8VEmr1R6yo=)
                          2: 9F80812EDB0911EFB46D89BD762E951A.roa (hash: FoaOMoMM4KGYFeAi/UEScoLQ2zP+N4lDb6DDMV/MjGk=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36750E0/F1A0BF34EBD511EDA4BAA72A4AD9E6FC/GsJxHeVgUeDNZwEEHR2CBHEL3fU.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36750E0/F1A0BF34EBD511EDA4BAA72A4AD9E6FC/GsJxHeVgUeDNZwEEHR2CBHEL3fU.mft
                          rsync://rpki.afrinic.net/repository/afrinic/GsJxHeVgUeDNZwEEHR2CBHEL3fU.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 10 Dec 2025 00:06:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 990 (0x3de)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36750E0AF, serialNumber=1AC2711DE56051E0CD6701041D1D8204710BDDF5
        Validity
            Not Before: Dec  8 03:25:30 2025 GMT
            Not After : Dec 10 03:25:30 2025 GMT
        Subject: CN=6936452b-9fb9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:24:80:17:76:48:d6:b5:c8:9a:35:2d:15:42:
                    73:32:98:8e:f0:ea:6a:d8:e8:9a:1e:22:de:f8:63:
                    9e:38:bd:43:3a:1d:77:9a:51:be:c2:1a:8f:e7:6c:
                    9f:d6:6c:40:c8:5f:42:ce:8f:16:37:e7:b9:c5:72:
                    1c:51:56:f0:64:2e:19:ba:01:68:35:2c:b2:cb:03:
                    44:f5:84:73:f8:e4:c4:c2:86:67:35:39:86:86:43:
                    cb:25:84:95:1a:78:21:d7:56:58:43:3f:f2:26:25:
                    94:d5:2d:bd:58:27:c0:cc:0a:7c:0e:64:7a:b8:00:
                    1b:34:f1:12:1c:ad:20:e4:5a:16:6f:f3:35:4d:2c:
                    33:25:0b:ff:2d:03:f3:78:2b:dc:cc:0f:b8:cb:e5:
                    f7:8d:f9:7a:1f:9d:85:e8:a1:ea:3a:1c:8b:a0:4c:
                    bf:c1:f2:79:b9:3c:fd:64:1f:b9:94:04:fe:6d:88:
                    ca:7f:de:11:f3:f1:d6:e8:eb:6a:36:83:42:41:f1:
                    bd:c2:df:50:a1:4d:c6:71:1e:75:0a:9e:e9:ff:20:
                    ba:36:78:40:c3:6a:cf:77:5f:02:1d:ee:05:4b:3b:
                    f0:0f:fb:ae:97:82:46:90:1c:9c:34:17:20:97:e7:
                    61:68:2d:86:93:ed:f9:84:ac:f2:08:93:5f:85:06:
                    bb:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:AD:34:19:5D:FD:50:26:21:42:95:6E:2B:71:05:EB:4A:C8:73:68
            X509v3 Authority Key Identifier:
                keyid:1A:C2:71:1D:E5:60:51:E0:CD:67:01:04:1D:1D:82:04:71:0B:DD:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36750E0/F1A0BF34EBD511EDA4BAA72A4AD9E6FC/GsJxHeVgUeDNZwEEHR2CBHEL3fU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/GsJxHeVgUeDNZwEEHR2CBHEL3fU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36750E0/F1A0BF34EBD511EDA4BAA72A4AD9E6FC/GsJxHeVgUeDNZwEEHR2CBHEL3fU.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:b1:34:08:6f:a4:2e:57:a3:7e:be:75:c6:b4:12:7a:c7:db:
         07:9d:42:6e:ed:36:0d:f7:35:17:27:dd:7b:d2:c6:16:67:31:
         d3:f7:43:2f:f9:30:18:21:57:4e:79:1d:46:a7:8d:ab:bd:be:
         8c:85:4b:d4:b8:33:eb:77:48:43:4b:6c:22:0d:2f:a0:c7:2c:
         b3:98:f2:24:33:e2:49:a3:66:1b:07:8a:e4:ac:89:5e:d6:37:
         f0:77:32:40:82:29:a7:eb:76:98:02:79:56:d6:43:64:50:8a:
         fe:09:10:63:13:17:c4:e2:2d:3e:d8:91:7f:ce:d6:1d:a8:b1:
         ad:9a:77:ee:7a:87:3a:18:70:03:0d:fd:12:bb:58:18:7e:b2:
         2c:7e:e7:ba:40:e3:72:25:0d:96:26:cd:81:c7:fb:50:5f:43:
         55:83:3a:6c:72:96:47:c8:ce:c0:89:0a:d0:37:f6:17:f2:31:
         b1:a2:95:ec:92:c9:3c:ec:0f:70:39:cc:1c:e9:33:a9:a5:7f:
         86:6a:85:7d:e7:2b:1f:83:b6:cc:ef:0b:27:54:74:a7:5f:79:
         7e:38:7b:7a:59:cb:49:94:20:19:0e:ef:93:d8:ca:96:0b:fa:
         b8:68:4b:8e:f4:fc:b7:81:ce:40:c1:b7:78:3d:b8:70:dc:a5:
         d5:bf:d0:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 8 17:06:42 2025 by rpki-client