This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36818C8/E820A7FCF9F211EBAC18522DD8A014CE/Ic9mCQ8NCPeTru46mq74zw9BMAs.mft
File:                     Ic9mCQ8NCPeTru46mq74zw9BMAs.mft (raw, json)
Hash identifier:          VK0FLU9/eukVAJgQQlfFYC55TuU0bgtJ1/BlNwQaTxA=
Subject key identifier:   3A:0C:5B:5B:F3:B7:82:81:C1:56:E1:C6:0B:5D:1E:2D:32:F8:13:CB
Authority key identifier: 21:CF:66:09:0F:0D:08:F7:93:AE:EE:3A:9A:AE:F8:CF:0F:41:30:0B
Certificate issuer:       /CN=F36818C8AF/serialNumber=21CF66090F0D08F793AEEE3A9AAEF8CF0F41300B
Certificate serial:       065E
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/Ic9mCQ8NCPeTru46mq74zw9BMAs.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36818C8/E820A7FCF9F211EBAC18522DD8A014CE/Ic9mCQ8NCPeTru46mq74zw9BMAs.mft
Manifest number:          065B
Signing time:             Mon 08 Dec 2025 02:13:03 +0000
Manifest this update:     Mon 08 Dec 2025 02:13:02 +0000
Manifest next update:     Wed 10 Dec 2025 02:13:02 +0000
Files and hashes:         1: Ic9mCQ8NCPeTru46mq74zw9BMAs.crl (hash: F8spIFqPJ5WtxCD5T+PU5VSzMgtAmoAzwhzOPLJ7xSk=)
                          2: E0505504C53611F09BAB2BC1DAE4EC9C.roa (hash: quGCMeMgrGs/I61IGIUq5ARCX8eAFzJjwoxXSU6rXcg=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36818C8/E820A7FCF9F211EBAC18522DD8A014CE/Ic9mCQ8NCPeTru46mq74zw9BMAs.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36818C8/E820A7FCF9F211EBAC18522DD8A014CE/Ic9mCQ8NCPeTru46mq74zw9BMAs.mft
                          rsync://rpki.afrinic.net/repository/afrinic/Ic9mCQ8NCPeTru46mq74zw9BMAs.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 10 Dec 2025 00:06:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1630 (0x65e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36818C8AF, serialNumber=21CF66090F0D08F793AEEE3A9AAEF8CF0F41300B
        Validity
            Not Before: Dec  8 02:13:02 2025 GMT
            Not After : Dec 10 02:13:02 2025 GMT
        Subject: CN=6936342f-9afd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:ce:2e:5d:33:50:99:4d:09:af:d4:4d:0f:15:
                    b4:5a:97:90:ac:e4:3f:5f:6c:15:a0:89:02:6d:d4:
                    8e:51:e8:c7:8c:14:f6:e9:4d:82:98:a5:b2:58:69:
                    5c:d2:b2:02:d4:2f:16:dc:03:48:c7:57:66:e1:3b:
                    1b:89:14:97:f3:11:7f:ad:0c:ef:7d:7b:75:73:90:
                    26:e1:52:d4:5d:c8:e0:30:b2:b6:43:40:62:8c:dc:
                    9b:eb:cb:12:ca:b8:0c:d2:c3:1d:a9:db:f0:53:e1:
                    89:ae:10:30:42:56:a8:18:ec:15:29:79:22:d1:68:
                    ff:e4:e5:74:1d:c6:06:1d:d5:fd:48:c9:5f:a4:dc:
                    a0:e4:ed:fb:7e:3d:66:f0:13:85:5c:e7:d9:32:22:
                    d3:c5:f2:96:09:ab:72:24:8b:64:41:58:79:e1:37:
                    e5:ed:c1:83:d4:f2:ff:80:9b:d6:33:d1:ed:bf:f8:
                    a0:db:33:8d:4b:e4:0e:02:1b:52:b3:d4:5b:c8:36:
                    6d:b3:ea:77:19:c0:4d:84:1c:da:5e:a9:49:3e:d1:
                    ff:14:33:ae:3a:42:26:68:9e:d7:20:41:f1:46:bf:
                    ea:86:ad:bb:5e:02:7e:dd:8b:ae:a0:23:e5:1b:a8:
                    51:9b:33:14:90:f7:97:4a:2b:d1:df:06:93:72:b6:
                    f7:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:0C:5B:5B:F3:B7:82:81:C1:56:E1:C6:0B:5D:1E:2D:32:F8:13:CB
            X509v3 Authority Key Identifier:
                keyid:21:CF:66:09:0F:0D:08:F7:93:AE:EE:3A:9A:AE:F8:CF:0F:41:30:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36818C8/E820A7FCF9F211EBAC18522DD8A014CE/Ic9mCQ8NCPeTru46mq74zw9BMAs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Ic9mCQ8NCPeTru46mq74zw9BMAs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36818C8/E820A7FCF9F211EBAC18522DD8A014CE/Ic9mCQ8NCPeTru46mq74zw9BMAs.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:b9:c8:17:9e:55:87:14:11:6c:e3:fb:d4:c2:a9:ae:de:72:
         5f:8e:2c:31:5e:17:0a:b5:74:3e:3d:72:97:b4:3a:ee:9d:66:
         a1:49:61:91:a2:f0:1f:cd:c5:df:0b:f3:cc:bc:6d:76:8f:b1:
         cd:45:43:68:ef:d5:0e:74:7c:e4:32:15:20:c8:bb:13:54:98:
         04:a4:12:1b:3d:9a:60:d6:66:57:3e:00:ed:0e:50:db:07:8c:
         a9:f0:32:bd:15:d7:0f:5b:7b:88:4a:26:17:2d:2a:6a:8e:6b:
         9b:14:6e:d2:8b:b4:7d:5b:57:2c:96:39:83:95:e3:69:fd:3f:
         ff:2d:bb:df:db:70:0c:40:ed:65:01:2e:4a:9f:0b:0b:13:1e:
         99:4d:e2:68:a2:c7:21:0e:96:ba:ec:75:4d:92:0d:82:ee:53:
         7e:f8:56:a7:86:61:26:fc:dc:8a:4c:99:a1:04:df:cb:51:7f:
         14:7e:45:b7:92:b0:a9:14:47:0c:13:8a:a0:5b:2f:fb:3b:cb:
         a5:20:30:18:77:3c:80:18:d8:02:ed:03:6b:42:5d:d6:b4:a7:
         cb:c2:9c:fd:cd:cf:a4:4c:a2:4d:fc:71:8b:65:61:78:18:bf:
         99:8c:fd:f0:d9:e8:cd:75:4d:e5:88:33:ce:74:8a:68:39:b9:
         34:ab:fe:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 8 17:12:40 2025 by rpki-client