This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A2CD2/553F50F064E511E8968FEF2EF8AEA228/M1pTwRMuVAw6td9C8UiHszJN60Q.mft
File:                     M1pTwRMuVAw6td9C8UiHszJN60Q.mft (raw, json)
Hash identifier:          ncjQ9sGdx1nKGK2vUsqcbFEvOIO7mwC7NKbKzmpF+8Y=
Subject key identifier:   78:2D:C9:57:B6:08:31:6A:9F:8B:AF:6C:91:93:EB:AD:6F:28:39:C5
Authority key identifier: 33:5A:53:C1:13:2E:54:0C:3A:B5:DF:42:F1:48:87:B3:32:4D:EB:44
Certificate issuer:       /CN=F36A2CD2AF/serialNumber=335A53C1132E540C3AB5DF42F14887B3324DEB44
Certificate serial:       0B04
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/M1pTwRMuVAw6td9C8UiHszJN60Q.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A2CD2/553F50F064E511E8968FEF2EF8AEA228/M1pTwRMuVAw6td9C8UiHszJN60Q.mft
Manifest number:          0B01
Signing time:             Mon 08 Dec 2025 01:11:23 +0000
Manifest this update:     Mon 08 Dec 2025 01:11:23 +0000
Manifest next update:     Wed 10 Dec 2025 01:11:23 +0000
Files and hashes:         1: M1pTwRMuVAw6td9C8UiHszJN60Q.crl (hash: fb50HFngV3VIZrx26Hc4JaACVZ0pZRcpoFGS90y0HYA=)
                          2: BE11892264E511E88A76232FF8AEA228.roa (hash: dOR90EcGn41sg/4MsNNizB3oHEFvm4Z1e3qb8Nhf7Q0=)
                          3: D8C2BDE0D02211EA8498CC41F8AEA228.roa (hash: I2gZAkM/7aE0lRi9sq+Qnq3RN4IGql/esMqczFTNr+A=)
                          4: FF05885C64E511E899B3422FF8AEA228.roa (hash: SEgUfNXNKuWS5w5moDpD2nIXtoeuFn9n8YpzM5ve1qs=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A2CD2/553F50F064E511E8968FEF2EF8AEA228/M1pTwRMuVAw6td9C8UiHszJN60Q.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A2CD2/553F50F064E511E8968FEF2EF8AEA228/M1pTwRMuVAw6td9C8UiHszJN60Q.mft
                          rsync://rpki.afrinic.net/repository/afrinic/M1pTwRMuVAw6td9C8UiHszJN60Q.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 10 Dec 2025 00:06:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2820 (0xb04)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A2CD2AF, serialNumber=335A53C1132E540C3AB5DF42F14887B3324DEB44
        Validity
            Not Before: Dec  8 01:11:23 2025 GMT
            Not After : Dec 10 01:11:23 2025 GMT
        Subject: CN=693625bb-0b65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:04:cd:ba:ff:c8:bf:ac:6f:9e:cc:f3:28:72:
                    8d:a5:6a:25:83:09:5f:e2:76:84:16:9d:2a:82:0b:
                    3b:c8:45:6f:5d:1a:6b:f1:01:45:f7:38:a4:90:51:
                    27:5b:72:c0:6c:ce:40:f8:de:fb:a1:10:bb:e8:0b:
                    47:d3:8c:8f:94:c8:4f:ed:5b:5f:94:fc:33:67:68:
                    a2:e9:b8:00:c8:6c:30:74:b8:77:37:e1:56:b9:58:
                    16:dd:b3:71:d2:a0:ec:99:b4:5e:75:df:6c:49:45:
                    80:f6:5f:dc:86:a9:2b:f8:8c:fd:cc:a2:97:71:64:
                    d7:3d:0f:f1:e4:fd:94:8b:c1:75:50:aa:1d:d0:ae:
                    b8:94:a8:9c:85:35:f2:41:bb:19:5b:21:4a:8a:0b:
                    d3:6f:93:4a:60:16:4e:dd:b6:72:e2:e6:79:d7:6f:
                    5f:2b:2b:09:95:b2:7a:9a:87:d2:ed:a9:4c:f2:0b:
                    b1:92:59:d3:e7:30:24:49:5c:f7:ad:c3:f4:dd:c8:
                    58:87:38:2d:f9:15:25:45:86:36:84:6c:b6:1a:71:
                    b4:25:0c:95:24:7e:f6:6d:93:6e:9d:83:ce:be:67:
                    bf:3b:e4:2d:00:09:a1:4d:7e:5e:3a:e5:0d:fe:74:
                    0b:e5:5c:a3:c9:1a:8c:9a:c2:84:1c:a4:08:35:84:
                    41:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:2D:C9:57:B6:08:31:6A:9F:8B:AF:6C:91:93:EB:AD:6F:28:39:C5
            X509v3 Authority Key Identifier:
                keyid:33:5A:53:C1:13:2E:54:0C:3A:B5:DF:42:F1:48:87:B3:32:4D:EB:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A2CD2/553F50F064E511E8968FEF2EF8AEA228/M1pTwRMuVAw6td9C8UiHszJN60Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/M1pTwRMuVAw6td9C8UiHszJN60Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A2CD2/553F50F064E511E8968FEF2EF8AEA228/M1pTwRMuVAw6td9C8UiHszJN60Q.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:9f:4a:22:02:e9:2b:e8:e4:8a:51:c8:1a:e0:a7:b5:24:88:
         f9:b2:a5:0b:85:24:66:8e:e1:8e:28:34:b5:07:0e:ff:63:2d:
         59:e7:46:ae:17:b7:e5:74:6f:69:e0:7b:03:4b:7f:b1:32:09:
         dc:11:1e:10:d2:34:30:1a:81:be:e0:f1:6f:58:3d:e6:bb:e3:
         96:33:fe:a9:b4:35:33:8e:d5:16:e4:fc:95:ac:ae:63:13:e0:
         a5:c0:a7:93:d7:42:2f:0a:5a:b8:bc:13:2b:7c:1a:20:f3:ea:
         76:08:af:0b:6c:9d:b8:72:4a:b5:38:a3:72:37:92:d0:5d:e5:
         3c:9d:be:2d:5c:0e:92:15:0d:07:dc:f9:0a:61:2d:ae:09:c5:
         ee:e9:d7:50:4c:64:0f:7b:42:42:59:d5:28:87:2e:0a:ca:bf:
         ec:73:4e:72:34:f3:9c:28:49:99:20:c1:56:4b:bc:09:ee:67:
         ce:80:63:f6:24:ae:0b:b9:b1:c2:cc:bf:79:7b:79:e0:94:6f:
         ac:8c:22:fb:02:62:45:48:67:ee:d8:f8:88:e2:de:32:d4:2f:
         a3:85:ed:90:e2:c4:dc:78:76:20:a4:bd:83:32:12:44:2c:c0:
         ce:23:dd:6c:73:90:53:8f:93:2a:a9:ce:91:88:e3:78:4e:46:
         27:98:09:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 8 17:21:04 2025 by rpki-client