This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A2F84/87001708EEAF11EB9A7E3E2AD8A014CE/ZsmzRf1S4DCcordufO0LUGyNAZs.mft
File:                     ZsmzRf1S4DCcordufO0LUGyNAZs.mft (raw, json)
Hash identifier:          By6yYA0v6/G6y/RQnrHfo2jMlsUe6Xn+T+Bo8rGnvjw=
Subject key identifier:   A2:0C:C5:F5:AD:CC:FD:BA:15:55:31:A5:49:71:AA:5C:AE:08:2A:8C
Authority key identifier: 66:C9:B3:45:FD:52:E0:30:9C:A2:B7:6E:7C:ED:0B:50:6C:8D:01:9B
Certificate issuer:       /CN=F36A2F84AF/serialNumber=66C9B345FD52E0309CA2B76E7CED0B506C8D019B
Certificate serial:       0665
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/ZsmzRf1S4DCcordufO0LUGyNAZs.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A2F84/87001708EEAF11EB9A7E3E2AD8A014CE/ZsmzRf1S4DCcordufO0LUGyNAZs.mft
Manifest number:          0665
Signing time:             Mon 08 Dec 2025 02:17:20 +0000
Manifest this update:     Mon 08 Dec 2025 02:17:20 +0000
Manifest next update:     Wed 10 Dec 2025 02:17:20 +0000
Files and hashes:         1: ZsmzRf1S4DCcordufO0LUGyNAZs.crl (hash: zyzLfzcOnj52/pr437Ps0dgMoJIGREdinYY9I9bdvh8=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A2F84/87001708EEAF11EB9A7E3E2AD8A014CE/ZsmzRf1S4DCcordufO0LUGyNAZs.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A2F84/87001708EEAF11EB9A7E3E2AD8A014CE/ZsmzRf1S4DCcordufO0LUGyNAZs.mft
                          rsync://rpki.afrinic.net/repository/afrinic/ZsmzRf1S4DCcordufO0LUGyNAZs.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 10 Dec 2025 00:06:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1637 (0x665)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A2F84AF, serialNumber=66C9B345FD52E0309CA2B76E7CED0B506C8D019B
        Validity
            Not Before: Dec  8 02:17:20 2025 GMT
            Not After : Dec 10 02:17:20 2025 GMT
        Subject: CN=69363530-c5ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:3e:88:e0:b3:89:e1:c4:d9:cd:a6:8d:b4:1c:
                    d7:1b:96:cb:57:05:53:e2:c2:e4:10:db:63:d3:a2:
                    ab:4e:b7:f7:08:1f:de:52:95:dc:aa:c0:8a:38:7a:
                    ae:25:de:fc:64:a1:c2:18:44:63:d4:ce:d5:94:21:
                    5a:d2:9e:7f:10:0f:4f:d0:1f:10:64:10:db:37:9f:
                    14:29:c0:c4:8f:bb:dc:cc:3c:6d:89:33:24:25:fc:
                    0d:fa:13:68:0c:6b:fd:53:03:75:46:a7:78:1b:a3:
                    1a:18:2c:3d:32:a0:74:46:7c:40:fa:c8:9c:5a:c3:
                    30:ec:00:02:10:0f:01:18:66:e9:d6:40:ba:12:bb:
                    e4:6c:e2:c8:1f:e1:2c:42:9a:29:aa:53:81:ff:68:
                    fb:96:d7:e0:ea:c7:d8:14:9b:7b:1b:19:d3:eb:4a:
                    b0:38:29:1b:2a:81:10:33:df:5d:82:92:ff:d1:4c:
                    11:cd:7f:98:9a:2d:9f:60:3e:0d:e4:56:16:a6:0a:
                    77:96:64:89:a1:cd:b4:4e:c5:90:e9:11:6b:d5:73:
                    03:4c:17:d0:66:24:fc:2e:71:f7:1b:14:31:f3:ee:
                    9d:21:b7:d1:d3:4c:8f:2e:7f:60:cf:44:0b:65:3c:
                    8b:36:3a:ef:73:8c:7a:fc:bc:59:ba:81:af:c8:0b:
                    fd:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:0C:C5:F5:AD:CC:FD:BA:15:55:31:A5:49:71:AA:5C:AE:08:2A:8C
            X509v3 Authority Key Identifier:
                keyid:66:C9:B3:45:FD:52:E0:30:9C:A2:B7:6E:7C:ED:0B:50:6C:8D:01:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A2F84/87001708EEAF11EB9A7E3E2AD8A014CE/ZsmzRf1S4DCcordufO0LUGyNAZs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/ZsmzRf1S4DCcordufO0LUGyNAZs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A2F84/87001708EEAF11EB9A7E3E2AD8A014CE/ZsmzRf1S4DCcordufO0LUGyNAZs.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:d0:fa:67:37:9e:7f:37:38:e5:ac:9e:8f:da:38:a3:02:18:
         18:45:f5:f4:31:a5:7f:52:4f:b3:9f:2e:aa:f7:a7:08:e8:ac:
         5f:e7:20:32:b3:59:f0:97:dc:8d:bc:bf:a2:62:25:89:21:e2:
         94:4f:ab:20:12:77:dc:62:51:fd:b3:89:d9:91:5a:13:71:83:
         e5:bc:51:31:06:06:c4:e4:6f:43:b2:cb:69:06:0f:09:3e:d7:
         96:69:1b:94:0d:da:aa:dc:a2:e8:b9:09:af:21:55:5c:96:86:
         00:14:87:d7:b4:bc:c8:ec:88:0f:39:cd:bd:a3:de:ab:45:bd:
         ec:cd:25:3e:26:a5:35:4d:2f:b8:0c:65:75:41:1f:a9:0f:6c:
         ee:9b:b4:a0:7e:70:41:b5:90:e2:0d:9c:6f:db:86:fc:53:8d:
         c7:9b:97:8e:f3:29:44:07:8c:27:85:6c:cb:d8:9a:f7:f3:f6:
         9b:d5:8c:1b:40:c0:48:62:92:45:4a:ae:dc:f2:42:a6:fb:5e:
         d2:b1:db:18:28:c8:ef:fe:07:c4:89:e6:03:06:f7:5b:e1:34:
         2d:e8:18:a2:6f:2d:d3:f5:52:95:29:23:99:9d:9e:c0:f5:0e:
         b6:45:41:84:c1:3e:94:24:22:f5:27:96:54:11:6e:46:a2:ae:
         38:b8:25:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 8 17:20:49 2025 by rpki-client