This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369942E/D5A8905CFF0011E8B496012AF8AEA228/TiZQ4qujZbOc_hWOyk20jWQs22U.mft
File:                     TiZQ4qujZbOc_hWOyk20jWQs22U.mft (raw, json)
Hash identifier:          xEiIOs0co10CJF18mmnEZIk9qJT+wlsqbo4Ab6F9BFo=
Subject key identifier:   69:8D:19:5A:64:1B:1B:03:DE:72:80:D0:A0:02:83:50:D2:BB:55:B3
Authority key identifier: 4E:26:50:E2:AB:A3:65:B3:9C:FE:15:8E:CA:4D:B4:8D:64:2C:DB:65
Certificate issuer:       /CN=F369942EAF/serialNumber=4E2650E2ABA365B39CFE158ECA4DB48D642CDB65
Certificate serial:       0A37
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/TiZQ4qujZbOc_hWOyk20jWQs22U.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F369942E/D5A8905CFF0011E8B496012AF8AEA228/TiZQ4qujZbOc_hWOyk20jWQs22U.mft
Manifest number:          0A36
Signing time:             Sun 07 Dec 2025 01:16:16 +0000
Manifest this update:     Sun 07 Dec 2025 01:16:15 +0000
Manifest next update:     Tue 09 Dec 2025 01:16:15 +0000
Files and hashes:         1: TiZQ4qujZbOc_hWOyk20jWQs22U.crl (hash: iVRv9RSHFZ1HJQvN/ut4hgml8avn2m/tT+/dYFEjSHk=)
                          2: 234EC302FF0211E8A910092BF8AEA228.roa (hash: NOa5khrVmkhCUl9lhv8WYW52PgfD6O4eOvTJHt2DcIk=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F369942E/D5A8905CFF0011E8B496012AF8AEA228/TiZQ4qujZbOc_hWOyk20jWQs22U.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F369942E/D5A8905CFF0011E8B496012AF8AEA228/TiZQ4qujZbOc_hWOyk20jWQs22U.mft
                          rsync://rpki.afrinic.net/repository/afrinic/TiZQ4qujZbOc_hWOyk20jWQs22U.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 09 Dec 2025 00:06:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2615 (0xa37)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F369942EAF, serialNumber=4E2650E2ABA365B39CFE158ECA4DB48D642CDB65
        Validity
            Not Before: Dec  7 01:16:15 2025 GMT
            Not After : Dec  9 01:16:15 2025 GMT
        Subject: CN=6934d560-1f95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:7b:a8:bf:54:30:23:a5:db:f5:37:8b:d5:dc:
                    2c:02:66:37:dd:48:98:46:ce:6c:f9:05:83:48:12:
                    b5:ea:a9:79:12:ca:a6:6d:7b:85:e1:cd:8c:07:66:
                    8d:ec:2d:82:17:ce:1d:d5:e1:72:d3:49:7e:4d:2c:
                    d3:55:19:c7:d5:e0:c4:c6:86:14:c9:70:41:ba:92:
                    b4:dd:57:30:cf:f9:02:07:4e:7d:15:ac:c0:16:f6:
                    e6:2d:35:4b:d3:fc:85:92:37:eb:b8:a6:ca:9c:9a:
                    d9:e2:52:c4:08:3b:c0:cd:a4:a4:7a:98:c6:35:a3:
                    d1:3c:11:29:50:b9:20:69:2c:64:40:89:93:45:db:
                    52:02:81:39:80:24:28:71:38:2c:4a:59:18:69:31:
                    f2:07:69:13:29:59:85:71:7e:af:85:b1:72:ca:73:
                    23:70:ba:10:d6:a3:9b:e4:15:83:1d:69:49:83:8c:
                    4d:12:6a:76:86:f9:54:4b:81:27:33:ef:b6:6c:30:
                    4a:d1:0c:40:1a:59:e3:f3:56:6f:04:9a:00:e0:e4:
                    e3:a1:80:32:7e:e5:47:d7:24:be:0c:03:e6:e5:33:
                    17:d7:9b:70:00:f4:81:3e:b3:de:18:b2:23:16:54:
                    6a:62:c1:7a:3a:47:9c:9d:c5:fe:2d:82:3d:72:0f:
                    bb:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:8D:19:5A:64:1B:1B:03:DE:72:80:D0:A0:02:83:50:D2:BB:55:B3
            X509v3 Authority Key Identifier:
                keyid:4E:26:50:E2:AB:A3:65:B3:9C:FE:15:8E:CA:4D:B4:8D:64:2C:DB:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F369942E/D5A8905CFF0011E8B496012AF8AEA228/TiZQ4qujZbOc_hWOyk20jWQs22U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/TiZQ4qujZbOc_hWOyk20jWQs22U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369942E/D5A8905CFF0011E8B496012AF8AEA228/TiZQ4qujZbOc_hWOyk20jWQs22U.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:6e:9f:6b:77:36:f5:2b:95:a8:16:a7:23:bf:d5:61:01:9a:
         59:d1:e0:c1:e9:54:44:33:03:85:6c:6e:78:39:df:02:ea:47:
         35:bf:eb:ec:73:77:7a:c1:98:8f:ee:0b:59:93:04:46:0c:c9:
         97:29:8b:fa:ca:ed:10:5c:ae:6b:80:f7:5c:47:b1:f0:24:fe:
         7d:53:27:7a:06:57:8e:03:a1:b2:ac:4c:76:70:f5:db:c7:73:
         fe:ad:a4:1f:81:d1:c4:01:0c:43:9e:b3:d0:95:43:1d:66:1a:
         99:c4:ae:8f:54:a0:e3:33:e8:bc:30:01:84:e0:42:ad:75:38:
         f2:08:2d:66:1b:8d:b3:89:ca:ad:51:d1:a5:25:7d:67:51:2f:
         71:ca:9b:b3:2f:a1:00:94:29:22:bc:3c:3b:77:9d:18:ed:d6:
         15:6d:fc:56:a3:91:ed:27:a6:c5:b4:ac:4d:36:f8:d3:f5:d4:
         96:55:f1:33:3d:aa:f5:85:de:ca:c1:6a:7e:05:d1:a9:b8:03:
         af:53:7e:ae:99:b0:1d:05:29:21:49:ad:36:5d:cb:85:ed:24:
         f2:a3:76:c5:03:3c:50:3d:b0:40:8c:55:54:95:92:27:cd:53:
         77:8e:71:31:ae:05:a6:8c:ca:31:14:e0:d5:f7:6e:fb:14:55:
         e3:dc:46:46
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICCjcwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
OTk0MkVBRjExMC8GA1UEBRMoNEUyNjUwRTJBQkEzNjVCMzlDRkUxNThFQ0E0REI0
OEQ2NDJDREI2NTAeFw0yNTEyMDcwMTE2MTVaFw0yNTEyMDkwMTE2MTVaMBgxFjAU
BgNVBAMTDTY5MzRkNTYwLTFmOTUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCpe6i/VDAjpdv1N4vV3CwCZjfdSJhGzmz5BYNIErXqqXkSyqZte4XhzYwH
Zo3sLYIXzh3V4XLTSX5NLNNVGcfV4MTGhhTJcEG6krTdVzDP+QIHTn0VrMAW9uYt
NUvT/IWSN+u4psqcmtniUsQIO8DNpKR6mMY1o9E8ESlQuSBpLGRAiZNF21ICgTmA
JChxOCxKWRhpMfIHaRMpWYVxfq+FsXLKcyNwuhDWo5vkFYMdaUmDjE0SanaG+VRL
gScz77ZsMErRDEAaWePzVm8EmgDg5OOhgDJ+5UfXJL4MA+blMxfXm3AA9IE+s94Y
siMWVGpiwXo6R5ydxf4tgj1yD7t5AgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUaY0Z
WmQbGwPecoDQoAKDUNK7VbMwHwYDVR0jBBgwFoAUTiZQ4qujZbOc/hWOyk20jWQs
22UwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjk5NDJFL0Q1QTg5MDVDRkYwMDExRThCNDk2MDEyQUY4QUVBMjI4L1RpWlE0
cXVqWmJPY19oV095azIwaldRczIyVS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1RpWlE0cXVqWmJPY19oV095azIwaldRczIyVS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2OTk0MkUvRDVBODkwNUNGRjAwMTFFOEI0OTYwMTJBRjhB
RUEyMjgvVGlaUTRxdWpaYk9jX2hXT3lrMjBqV1FzMjJVLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBObp9rdzb1K5WoFqcjv9VhAZpZ0eDB
6VREMwOFbG54Od8C6kc1v+vsc3d6wZiP7gtZkwRGDMmXKYv6yu0QXK5rgPdcR7Hw
JP59Uyd6BleOA6GyrEx2cPXbx3P+raQfgdHEAQxDnrPQlUMdZhqZxK6PVKDjM+i8
MAGE4EKtdTjyCC1mG42zicqtUdGlJX1nUS9xypuzL6EAlCkivDw7d50Y7dYVbfxW
o5HtJ6bFtKxNNvjT9dSWVfEzPar1hd7KwWp+BdGpuAOvU36umbAdBSkhSa02XcuF
7STyo3bFAzxQPbBAjFVUlZInzVN3jnExrgWmjMoxFODV9277FFXj3EZG
-----END CERTIFICATE-----
Generated at Sun Dec 7 03:42:43 2025 by rpki-client