This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36882A1/AA75582CC7C411EBB520A668F8AEA228/cfbjXgELx4fYmgtLqTPZlvrU2tI.mft
File:                     cfbjXgELx4fYmgtLqTPZlvrU2tI.mft (raw, json)
Hash identifier:          lZQCmr6A3X4nD5MrmCJ5GvvAlTZiVyz2jmSjP/naIq0=
Subject key identifier:   28:04:4F:47:20:AF:F5:B0:87:46:96:B3:53:76:D3:46:81:0F:4A:0D
Authority key identifier: 71:F6:E3:5E:01:0B:C7:87:D8:9A:0B:4B:A9:33:D9:96:FA:D4:DA:D2
Certificate issuer:       /CN=F36882A1AF/serialNumber=71F6E35E010BC787D89A0B4BA933D996FAD4DAD2
Certificate serial:       069D
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/cfbjXgELx4fYmgtLqTPZlvrU2tI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36882A1/AA75582CC7C411EBB520A668F8AEA228/cfbjXgELx4fYmgtLqTPZlvrU2tI.mft
Manifest number:          069D
Signing time:             Mon 08 Dec 2025 02:12:39 +0000
Manifest this update:     Mon 08 Dec 2025 02:12:38 +0000
Manifest next update:     Wed 10 Dec 2025 02:12:38 +0000
Files and hashes:         1: cfbjXgELx4fYmgtLqTPZlvrU2tI.crl (hash: KRqdQ/SlaVZrVSOazsnNiJDHDLl/3ZTwuKYYewhx0no=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36882A1/AA75582CC7C411EBB520A668F8AEA228/cfbjXgELx4fYmgtLqTPZlvrU2tI.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36882A1/AA75582CC7C411EBB520A668F8AEA228/cfbjXgELx4fYmgtLqTPZlvrU2tI.mft
                          rsync://rpki.afrinic.net/repository/afrinic/cfbjXgELx4fYmgtLqTPZlvrU2tI.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 10 Dec 2025 00:06:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1693 (0x69d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36882A1AF, serialNumber=71F6E35E010BC787D89A0B4BA933D996FAD4DAD2
        Validity
            Not Before: Dec  8 02:12:38 2025 GMT
            Not After : Dec 10 02:12:38 2025 GMT
        Subject: CN=69363416-3603
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:e9:c8:28:41:18:2e:05:01:40:2b:f5:3c:f3:
                    ad:59:3f:41:f1:d9:74:e2:4d:ed:3b:28:a4:e8:05:
                    b5:24:9d:8f:a7:c1:16:18:1b:dc:f3:36:b1:7d:e9:
                    99:21:de:b1:f5:77:34:1c:e1:f0:1e:f3:84:23:95:
                    be:2b:1c:aa:c9:bb:8e:90:fa:07:dd:ee:54:90:51:
                    50:c4:0c:05:ec:a9:e8:5d:eb:4d:73:50:81:cf:86:
                    7b:7b:61:e9:0a:19:5c:e1:20:4e:26:7c:01:2c:d9:
                    50:e8:d6:6d:f9:3c:19:d1:6c:d2:6b:cb:c2:1e:eb:
                    4d:4b:2d:76:7f:95:21:1a:cf:d0:9a:9a:a8:2d:46:
                    1d:50:c4:8a:95:fc:c0:98:2e:87:43:dc:ad:13:f3:
                    69:c5:6d:12:2e:39:b5:37:02:da:3e:57:1e:ca:f0:
                    3a:71:01:4e:91:b5:cf:0c:66:a1:ea:74:a3:ad:37:
                    4c:09:fb:c3:ae:da:66:24:b5:f8:4f:ee:b7:35:5d:
                    02:41:01:50:3f:cd:fc:33:8f:4c:54:b3:8a:8c:2e:
                    dc:89:61:4a:16:b1:4f:d8:1c:63:bb:a9:17:08:d6:
                    b8:6c:62:09:52:83:0d:46:27:9e:64:d1:48:81:00:
                    18:45:36:3c:08:94:e0:2e:53:3d:35:73:39:a1:0a:
                    36:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:04:4F:47:20:AF:F5:B0:87:46:96:B3:53:76:D3:46:81:0F:4A:0D
            X509v3 Authority Key Identifier:
                keyid:71:F6:E3:5E:01:0B:C7:87:D8:9A:0B:4B:A9:33:D9:96:FA:D4:DA:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36882A1/AA75582CC7C411EBB520A668F8AEA228/cfbjXgELx4fYmgtLqTPZlvrU2tI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/cfbjXgELx4fYmgtLqTPZlvrU2tI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36882A1/AA75582CC7C411EBB520A668F8AEA228/cfbjXgELx4fYmgtLqTPZlvrU2tI.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:2d:fd:c6:66:ca:c0:29:79:52:3a:7c:4f:bc:4a:43:f1:b0:
         85:b1:ac:09:7c:a6:94:73:05:fe:8f:07:d2:1e:84:67:72:d7:
         65:70:85:d8:06:db:1e:75:6b:9e:a6:a7:6c:e4:52:b2:0e:bd:
         a3:e7:a1:b9:a9:4f:90:ac:45:97:78:da:1e:8c:5c:ec:ef:22:
         82:db:e3:49:c0:be:4e:eb:5b:e2:82:5d:0f:bb:a6:44:58:8b:
         16:66:ff:ec:12:5b:50:5b:1b:9c:52:16:a2:5b:20:e6:12:00:
         3a:db:18:14:17:ff:f0:d7:75:a7:ad:50:01:d0:2b:43:9d:4e:
         2a:ad:cf:cf:15:27:aa:c7:5f:49:ad:8d:85:48:cd:be:e5:14:
         3e:e4:9f:11:b6:3b:93:96:d3:b9:59:ae:92:98:5f:8d:bc:b1:
         59:5e:8e:e5:db:87:15:22:f8:53:8f:9a:74:28:72:3a:a6:2c:
         ce:1c:d8:43:5f:3e:76:c2:b1:80:a1:fd:a8:2d:bb:93:6e:e4:
         1b:c0:12:d1:cd:4b:42:0e:e1:f7:d6:62:b7:ca:32:7e:85:09:
         b3:c1:a2:2a:52:bd:f6:1d:fd:6f:6b:fb:d6:32:f3:15:d2:94:
         e5:18:70:fb:e3:3e:32:82:35:7d:04:2d:09:2e:30:c9:f1:00:
         dc:9a:c7:bf
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICBp0wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
ODgyQTFBRjExMC8GA1UEBRMoNzFGNkUzNUUwMTBCQzc4N0Q4OUEwQjRCQTkzM0Q5
OTZGQUQ0REFEMjAeFw0yNTEyMDgwMjEyMzhaFw0yNTEyMTAwMjEyMzhaMBgxFjAU
BgNVBAMTDTY5MzYzNDE2LTM2MDMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDh6cgoQRguBQFAK/U8861ZP0Hx2XTiTe07KKToBbUknY+nwRYYG9zzNrF9
6Zkh3rH1dzQc4fAe84Qjlb4rHKrJu46Q+gfd7lSQUVDEDAXsqehd601zUIHPhnt7
YekKGVzhIE4mfAEs2VDo1m35PBnRbNJry8Ie601LLXZ/lSEaz9CamqgtRh1QxIqV
/MCYLodD3K0T82nFbRIuObU3Ato+Vx7K8DpxAU6Rtc8MZqHqdKOtN0wJ+8Ou2mYk
tfhP7rc1XQJBAVA/zfwzj0xUs4qMLtyJYUoWsU/YHGO7qRcI1rhsYglSgw1GJ55k
0UiBABhFNjwIlOAuUz01czmhCjaJAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUKARP
RyCv9bCHRpazU3bTRoEPSg0wHwYDVR0jBBgwFoAUcfbjXgELx4fYmgtLqTPZlvrU
2tIwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjg4MkExL0FBNzU1ODJDQzdDNDExRUJCNTIwQTY2OEY4QUVBMjI4L2NmYmpY
Z0VMeDRmWW1ndExxVFBabHZyVTJ0SS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2NmYmpYZ0VMeDRmWW1ndExxVFBabHZyVTJ0SS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2ODgyQTEvQUE3NTU4MkNDN0M0MTFFQkI1MjBBNjY4RjhB
RUEyMjgvY2ZialhnRUx4NGZZbWd0THFUUFpsdnJVMnRJLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBlLf3GZsrAKXlSOnxPvEpD8bCFsawJ
fKaUcwX+jwfSHoRnctdlcIXYBtsedWuepqds5FKyDr2j56G5qU+QrEWXeNoejFzs
7yKC2+NJwL5O61vigl0Pu6ZEWIsWZv/sEltQWxucUhaiWyDmEgA62xgUF//w13Wn
rVAB0CtDnU4qrc/PFSeqx19JrY2FSM2+5RQ+5J8RtjuTltO5Wa6SmF+NvLFZXo7l
24cVIvhTj5p0KHI6pizOHNhDXz52wrGAof2oLbuTbuQbwBLRzUtCDuH31mK3yjJ+
hQmzwaIqUr32Hf1va/vWMvMV0pTlGHD74z4ygjV9BC0JLjDJ8QDcmse/
-----END CERTIFICATE-----
Generated at Mon Dec 8 17:07:05 2025 by rpki-client