This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36927B4/24A6A76ECABC11F08798D681DAE4EC9C/5xsveyVyCEbT0m5QEo3N3SoWX54.mft
File:                     5xsveyVyCEbT0m5QEo3N3SoWX54.mft (raw, json)
Hash identifier:          5qfu4sBg+Ep3bL0Ush6eaaGL5w5SBSI8Pzv33L8W4rw=
Subject key identifier:   90:52:A5:4D:45:5D:93:31:EA:AD:0A:D5:C3:57:CF:B2:A4:50:9F:04
Authority key identifier: E7:1B:2F:7B:25:72:08:46:D3:D2:6E:50:12:8D:CD:DD:2A:16:5F:9E
Certificate issuer:       /CN=F36927B4AF/serialNumber=E71B2F7B25720846D3D26E50128DCDDD2A165F9E
Certificate serial:       11
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/5xsveyVyCEbT0m5QEo3N3SoWX54.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36927B4/24A6A76ECABC11F08798D681DAE4EC9C/5xsveyVyCEbT0m5QEo3N3SoWX54.mft
Manifest number:          0F
Signing time:             Mon 08 Dec 2025 05:22:46 +0000
Manifest this update:     Mon 08 Dec 2025 05:22:45 +0000
Manifest next update:     Wed 10 Dec 2025 05:22:45 +0000
Files and hashes:         1: 5xsveyVyCEbT0m5QEo3N3SoWX54.crl (hash: C0hrFT0kNO9lJPL6FBIUkal0MQaRFjF72pLmLxiS5hc=)
                          2: ABBD988ACB6F11F0953A42E6DAE4EC9C.roa (hash: b45RZ2QFQBxIFsJ6jLClIbEaKZfOFnfn9gSsLgljeTk=)
                          3: AE7281A4CB7311F0A2BADC80DAE4EC9C.roa (hash: hY70D/eGofbELgRzLaQTYAUGWjRXYyTAqpTOnSRS100=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36927B4/24A6A76ECABC11F08798D681DAE4EC9C/5xsveyVyCEbT0m5QEo3N3SoWX54.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36927B4/24A6A76ECABC11F08798D681DAE4EC9C/5xsveyVyCEbT0m5QEo3N3SoWX54.mft
                          rsync://rpki.afrinic.net/repository/afrinic/5xsveyVyCEbT0m5QEo3N3SoWX54.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 10 Dec 2025 00:06:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17 (0x11)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36927B4AF, serialNumber=E71B2F7B25720846D3D26E50128DCDDD2A165F9E
        Validity
            Not Before: Dec  8 05:22:45 2025 GMT
            Not After : Dec 10 05:22:45 2025 GMT
        Subject: CN=693660a6-dc47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:d6:0f:c8:2d:cf:46:77:20:ca:00:f6:8d:e1:
                    40:cf:42:c5:6c:d2:16:43:9f:d1:c6:1b:45:fa:bf:
                    76:3d:99:9d:61:2a:af:79:16:94:ce:04:52:43:81:
                    9f:aa:e0:f7:2c:f1:c5:33:af:97:e3:8a:47:9a:99:
                    67:2a:2c:86:4f:e6:77:9a:98:d9:e3:d5:de:d4:62:
                    99:7e:22:fb:13:e2:00:a3:f2:56:5d:f2:0f:56:39:
                    44:c7:d4:d4:45:4c:1d:3a:c1:b3:d5:01:ae:78:18:
                    a4:2c:80:3f:8e:b1:b9:bd:57:3f:b2:ce:57:8b:d4:
                    f1:a5:67:ea:a3:67:c2:22:0f:f2:10:2a:65:dd:33:
                    6f:d9:4a:01:bf:05:03:06:d4:ab:18:85:55:06:6b:
                    01:9c:db:bf:68:05:e9:c3:54:dc:e8:ee:99:d2:ff:
                    ae:20:00:22:5f:70:35:06:4f:9f:3e:b7:8b:15:95:
                    03:e8:4a:de:88:59:f9:9a:3e:84:1a:b9:0a:b9:7c:
                    51:25:21:a0:0b:28:78:f3:05:3a:de:61:72:40:99:
                    50:62:c1:56:f5:ee:ab:14:0b:c6:09:39:da:2f:49:
                    39:7a:de:62:bd:a0:06:ea:43:57:d6:a0:72:a4:75:
                    af:fa:90:59:4a:62:16:e6:d5:87:55:ff:b2:39:a1:
                    ed:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:52:A5:4D:45:5D:93:31:EA:AD:0A:D5:C3:57:CF:B2:A4:50:9F:04
            X509v3 Authority Key Identifier:
                keyid:E7:1B:2F:7B:25:72:08:46:D3:D2:6E:50:12:8D:CD:DD:2A:16:5F:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36927B4/24A6A76ECABC11F08798D681DAE4EC9C/5xsveyVyCEbT0m5QEo3N3SoWX54.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/5xsveyVyCEbT0m5QEo3N3SoWX54.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36927B4/24A6A76ECABC11F08798D681DAE4EC9C/5xsveyVyCEbT0m5QEo3N3SoWX54.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:1f:a2:ec:50:12:87:e4:68:7b:ae:da:a4:ed:71:2a:7e:16:
         fe:e3:ec:1d:e7:ed:8e:94:86:d3:09:d4:c9:c2:cd:3a:92:14:
         3a:f8:51:76:94:af:a3:04:66:c5:56:12:b2:c4:fe:d2:34:fd:
         56:6e:00:ac:99:69:d5:0b:62:a6:f5:7d:52:3d:40:63:aa:44:
         0e:9c:8a:a6:53:91:98:a0:a8:28:f0:c2:8a:52:3e:5c:31:f0:
         82:3d:88:fd:2d:af:e2:cb:c1:94:41:78:4a:a2:70:c9:4f:40:
         1a:dd:dc:48:87:48:9a:c6:c1:de:0d:9c:f0:7a:48:35:22:2f:
         00:b2:68:6b:f8:b0:26:f9:d7:eb:bf:9f:cc:52:7c:d5:ce:87:
         5b:e5:42:eb:25:33:8d:06:e7:10:57:46:ab:11:56:87:2b:d4:
         78:16:7f:23:93:fd:89:90:b7:e5:3a:30:48:ac:7f:f1:38:7a:
         cf:86:54:5c:22:4e:1e:70:ce:50:20:36:f5:5a:b1:63:e6:4e:
         18:35:b6:6d:da:d3:49:1a:e9:1e:d0:6f:fc:55:e4:17:03:58:
         cf:14:43:cb:8c:06:e2:fe:aa:3a:7f:76:f9:0b:b3:63:32:c6:
         2b:bd:54:b5:52:45:e5:d9:11:e8:57:aa:7d:79:77:6e:3c:a9:
         f0:15:b1:1c
-----BEGIN CERTIFICATE-----
MIIFlTCCBH2gAwIBAgIBETANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDEwpGMzY5
MjdCNEFGMTEwLwYDVQQFEyhFNzFCMkY3QjI1NzIwODQ2RDNEMjZFNTAxMjhEQ0RE
RDJBMTY1RjlFMB4XDTI1MTIwODA1MjI0NVoXDTI1MTIxMDA1MjI0NVowGDEWMBQG
A1UEAxMNNjkzNjYwYTYtZGM0NzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALDWD8gtz0Z3IMoA9o3hQM9CxWzSFkOf0cYbRfq/dj2ZnWEqr3kWlM4EUkOB
n6rg9yzxxTOvl+OKR5qZZyoshk/md5qY2ePV3tRimX4i+xPiAKPyVl3yD1Y5RMfU
1EVMHTrBs9UBrngYpCyAP46xub1XP7LOV4vU8aVn6qNnwiIP8hAqZd0zb9lKAb8F
AwbUqxiFVQZrAZzbv2gF6cNU3OjumdL/riAAIl9wNQZPnz63ixWVA+hK3ohZ+Zo+
hBq5Crl8USUhoAsoePMFOt5hckCZUGLBVvXuqxQLxgk52i9JOXreYr2gBupDV9ag
cqR1r/qQWUpiFubVh1X/sjmh7VUCAwEAAaOCArgwggK0MB0GA1UdDgQWBBSQUqVN
RV2TMeqtCtXDV8+ypFCfBDAfBgNVHSMEGDAWgBTnGy97JXIIRtPSblASjc3dKhZf
njAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2OTI3QjQvMjRBNkE3NkVDQUJDMTFGMDg3OThENjgxREFFNEVDOUMvNXhzdmV5
VnlDRWJUMG01UUVvM04zU29XWDU0LmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMvNXhzdmV5VnlDRWJUMG01UUVvM04zU29XWDU0LmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCB1QYIKwYBBQUHAQsEgcgwgcUwgYsGCCsGAQUF
BzALhn9yc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY5MjdCNC8yNEE2QTc2RUNBQkMxMUYwODc5OEQ2ODFEQUU0
RUM5Qy81eHN2ZXlWeUNFYlQwbTVRRW8zTjNTb1dYNTQubWZ0MDUGCCsGAQUFBzAN
hilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggr
BgEFBQcBCAEB/wQGMASgAgUAMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE
AgACBQAwDQYJKoZIhvcNAQELBQADggEBADgfouxQEofkaHuu2qTtcSp+Fv7j7B3n
7Y6UhtMJ1MnCzTqSFDr4UXaUr6MEZsVWErLE/tI0/VZuAKyZadULYqb1fVI9QGOq
RA6ciqZTkZigqCjwwopSPlwx8II9iP0tr+LLwZRBeEqicMlPQBrd3EiHSJrGwd4N
nPB6SDUiLwCyaGv4sCb51+u/n8xSfNXOh1vlQuslM40G5xBXRqsRVocr1HgWfyOT
/YmQt+U6MEisf/E4es+GVFwiTh5wzlAgNvVasWPmThg1tm3a00ka6R7Qb/xV5BcD
WM8UQ8uMBuL+qjp/dvkLs2Myxiu9VLVSReXZEehXqn15d248qfAVsRw=
-----END CERTIFICATE-----
Generated at Mon Dec 8 17:16:35 2025 by rpki-client