This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36924C7/C6A8CFA6085811EA914C3E80F8AEA228/ADC3ppFCyYxGFBU3Pf8w4gfJHaU.mft
File:                     ADC3ppFCyYxGFBU3Pf8w4gfJHaU.mft (raw, json)
Hash identifier:          fR18Fe47G9t2TEHtA+dZwwUHMoC9OdMf/HtZFGzzyEo=
Subject key identifier:   85:65:2E:80:C4:15:68:C2:B5:56:39:FC:30:B1:95:FD:43:B5:D8:11
Authority key identifier: 00:30:B7:A6:91:42:C9:8C:46:14:15:37:3D:FF:30:E2:07:C9:1D:A5
Certificate issuer:       /CN=F36924C7AF/serialNumber=0030B7A69142C98C461415373DFF30E207C91DA5
Certificate serial:       08DF
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/ADC3ppFCyYxGFBU3Pf8w4gfJHaU.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36924C7/C6A8CFA6085811EA914C3E80F8AEA228/ADC3ppFCyYxGFBU3Pf8w4gfJHaU.mft
Manifest number:          08DE
Signing time:             Mon 08 Dec 2025 01:38:40 +0000
Manifest this update:     Mon 08 Dec 2025 01:38:39 +0000
Manifest next update:     Wed 10 Dec 2025 01:38:39 +0000
Files and hashes:         1: ADC3ppFCyYxGFBU3Pf8w4gfJHaU.crl (hash: 2KOn2q5wNaFe8y2nNv4kO1BSfCjuSGKeobrzNSAtwDo=)
                          2: F4C21190085811EABD856B80F8AEA228.roa (hash: npvIfsV9RsfGAs/RbDzdb5Pos4t1IINPw7/arszYpnY=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36924C7/C6A8CFA6085811EA914C3E80F8AEA228/ADC3ppFCyYxGFBU3Pf8w4gfJHaU.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36924C7/C6A8CFA6085811EA914C3E80F8AEA228/ADC3ppFCyYxGFBU3Pf8w4gfJHaU.mft
                          rsync://rpki.afrinic.net/repository/afrinic/ADC3ppFCyYxGFBU3Pf8w4gfJHaU.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 10 Dec 2025 00:06:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2271 (0x8df)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36924C7AF, serialNumber=0030B7A69142C98C461415373DFF30E207C91DA5
        Validity
            Not Before: Dec  8 01:38:39 2025 GMT
            Not After : Dec 10 01:38:39 2025 GMT
        Subject: CN=69362c20-6b48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:c3:81:1c:81:c0:48:42:48:b6:77:8b:82:b0:
                    2c:0b:eb:5e:e9:8c:50:64:73:80:f0:2a:cd:87:56:
                    a5:39:f6:9f:e5:91:7a:76:19:09:c6:cb:04:27:b5:
                    5a:a4:0b:f8:12:6f:03:f6:a7:c6:13:2b:52:12:9e:
                    9a:8f:86:03:80:12:53:6b:30:15:80:cd:0f:32:d6:
                    53:67:07:05:90:ed:3f:a5:c5:66:3d:a1:fe:ee:c8:
                    75:57:35:6d:09:48:5f:44:b7:f7:81:25:15:64:5c:
                    42:88:75:2f:2f:07:3d:7d:55:5e:62:f4:6e:41:fc:
                    2a:a4:39:5c:97:f8:ba:2d:0c:88:c6:49:f1:32:5a:
                    72:a1:64:60:41:44:8b:92:27:64:c4:96:0f:78:5c:
                    e2:c2:d5:a4:46:7f:17:47:97:35:e8:64:d4:da:22:
                    f0:40:63:5d:0c:b4:17:cc:e0:30:70:ad:b4:b6:69:
                    bb:a1:3c:ca:94:33:da:cd:91:33:da:4c:c1:37:ff:
                    c1:78:37:a0:b2:79:61:3e:68:bf:75:56:31:b8:a3:
                    a6:be:a5:eb:e7:7d:43:d4:fc:e4:45:a7:d5:63:40:
                    0d:9d:3c:0e:54:19:59:43:88:cb:b4:2b:23:b2:bd:
                    7c:3a:b8:b9:f7:83:ea:24:ea:a4:89:35:b6:d1:05:
                    c0:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:65:2E:80:C4:15:68:C2:B5:56:39:FC:30:B1:95:FD:43:B5:D8:11
            X509v3 Authority Key Identifier:
                keyid:00:30:B7:A6:91:42:C9:8C:46:14:15:37:3D:FF:30:E2:07:C9:1D:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36924C7/C6A8CFA6085811EA914C3E80F8AEA228/ADC3ppFCyYxGFBU3Pf8w4gfJHaU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/ADC3ppFCyYxGFBU3Pf8w4gfJHaU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36924C7/C6A8CFA6085811EA914C3E80F8AEA228/ADC3ppFCyYxGFBU3Pf8w4gfJHaU.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:38:35:fc:a6:75:48:8d:83:cd:3c:1d:c5:34:3a:d5:3e:19:
         5b:1c:56:a6:27:f2:8a:1f:61:20:3b:06:d8:19:14:ab:e5:ca:
         ea:16:40:a1:57:bd:49:a0:e3:27:b1:71:94:f1:8d:25:31:40:
         f2:10:e9:73:29:5f:38:5c:6a:54:16:80:cc:f5:c8:03:14:e1:
         ec:ca:d3:29:99:49:0c:6a:fe:2e:f0:83:3a:58:8f:e1:ef:45:
         24:f5:d8:54:3e:2d:8e:8d:0d:fd:7a:37:11:dd:3a:20:f1:74:
         1e:8f:16:e2:26:8c:77:69:b1:51:59:57:55:5b:f6:0b:e6:9b:
         b2:23:12:7c:f2:1c:ea:07:65:0e:11:3e:bb:e9:b1:f2:cc:72:
         aa:79:77:c8:17:3b:0a:94:77:7e:eb:59:c3:1d:0a:a6:d3:88:
         33:36:d5:51:aa:fe:11:60:dd:b5:34:f9:2a:c3:b2:e4:2b:e8:
         75:f4:83:0e:96:a2:39:59:47:a8:83:ba:4d:08:55:97:39:06:
         ca:72:99:f7:75:4a:2e:be:18:1a:51:a9:fb:f9:3a:58:44:0b:
         1d:b6:41:fc:02:47:04:18:16:05:58:8e:99:4d:80:17:f4:aa:
         2b:0d:3c:34:e7:59:c0:68:ca:42:93:1e:5e:5c:88:26:00:2e:
         60:d5:56:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 8 17:08:23 2025 by rpki-client