This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A3983/09B8183E9B9C11EFA012F94F762E951A/ih_PKB86N6VQ5kE32QhVCuiQIzo.mft
File:                     ih_PKB86N6VQ5kE32QhVCuiQIzo.mft (raw, json)
Hash identifier:          14GHe7MuFUDxs/Ifmlk7fPT5U1Ser4Q5nmf2qbjAj6Y=
Subject key identifier:   AD:EC:69:B5:FA:3F:F9:E8:F8:8F:C7:10:36:21:E2:97:48:05:AA:B3
Authority key identifier: 8A:1F:CF:28:1F:3A:37:A5:50:E6:41:37:D9:08:55:0A:E8:90:23:3A
Certificate issuer:       /CN=F36A3983AF/serialNumber=8A1FCF281F3A37A550E64137D908550AE890233A
Certificate serial:       019B
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/ih_PKB86N6VQ5kE32QhVCuiQIzo.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A3983/09B8183E9B9C11EFA012F94F762E951A/ih_PKB86N6VQ5kE32QhVCuiQIzo.mft
Manifest number:          019A
Signing time:             Mon 08 Dec 2025 04:40:20 +0000
Manifest this update:     Mon 08 Dec 2025 04:40:19 +0000
Manifest next update:     Wed 10 Dec 2025 04:40:19 +0000
Files and hashes:         1: ih_PKB86N6VQ5kE32QhVCuiQIzo.crl (hash: DlLPc04uP1mq/r13hX3U7aKZm3zZooyBM20Vpks5Qk4=)
                          2: 06EE82A89B9E11EFA256DA5A762E951A.roa (hash: 2jh2P8eMrHu4GkQNFQFJgeOA87Bp3duiKWGcRIfCjWE=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A3983/09B8183E9B9C11EFA012F94F762E951A/ih_PKB86N6VQ5kE32QhVCuiQIzo.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A3983/09B8183E9B9C11EFA012F94F762E951A/ih_PKB86N6VQ5kE32QhVCuiQIzo.mft
                          rsync://rpki.afrinic.net/repository/afrinic/ih_PKB86N6VQ5kE32QhVCuiQIzo.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 10 Dec 2025 00:06:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 411 (0x19b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A3983AF, serialNumber=8A1FCF281F3A37A550E64137D908550AE890233A
        Validity
            Not Before: Dec  8 04:40:19 2025 GMT
            Not After : Dec 10 04:40:19 2025 GMT
        Subject: CN=693656b4-0af1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:53:63:3e:d6:b8:bb:99:26:d7:74:c6:77:a7:
                    88:15:08:f1:0a:a8:3f:71:55:95:83:70:1f:fe:ba:
                    83:93:36:1d:d4:06:2e:19:76:f8:fd:19:f9:90:44:
                    1c:2b:3a:7e:d9:6a:a6:81:5f:81:d9:23:e8:8e:fd:
                    f5:7a:21:ca:45:27:0e:31:dd:af:f2:4e:28:3e:3b:
                    b9:f6:ac:84:0e:ab:6d:5d:b0:5f:25:36:b8:b9:1f:
                    96:ed:ea:6b:a9:df:24:57:7b:73:ca:7a:05:1e:6f:
                    90:45:ec:57:80:1b:12:65:a6:9f:fa:54:ed:cb:c7:
                    e4:b0:ea:29:c5:d3:fa:4e:4d:68:34:f2:cb:96:10:
                    8e:5a:7e:42:6a:9f:06:7b:78:72:19:c9:ac:a7:f2:
                    f0:70:c3:c5:6a:17:01:ea:b6:07:30:ec:00:d3:d1:
                    9d:ce:25:b0:72:b6:71:99:2d:43:18:ff:5d:5e:aa:
                    28:90:e4:06:f3:51:a1:64:92:ce:08:ac:2b:39:bf:
                    b7:88:64:79:c1:c4:78:ac:46:4a:d5:82:bd:c1:ca:
                    1c:a9:15:3f:2f:28:ce:bd:30:90:bb:e3:59:af:a7:
                    4e:66:f7:2f:d8:64:4b:16:fa:f9:07:c5:8a:1f:9f:
                    28:2e:df:bf:20:4b:4e:55:cf:c8:82:5b:c5:24:ec:
                    e1:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:EC:69:B5:FA:3F:F9:E8:F8:8F:C7:10:36:21:E2:97:48:05:AA:B3
            X509v3 Authority Key Identifier:
                keyid:8A:1F:CF:28:1F:3A:37:A5:50:E6:41:37:D9:08:55:0A:E8:90:23:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A3983/09B8183E9B9C11EFA012F94F762E951A/ih_PKB86N6VQ5kE32QhVCuiQIzo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/ih_PKB86N6VQ5kE32QhVCuiQIzo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A3983/09B8183E9B9C11EFA012F94F762E951A/ih_PKB86N6VQ5kE32QhVCuiQIzo.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:3c:52:5a:85:e0:6a:e8:7e:9b:5c:5e:cb:1b:3c:d2:cf:10:
         70:ed:3e:52:06:d9:02:56:2d:87:55:02:2e:89:c1:6d:05:1f:
         ee:85:60:3f:2e:f8:15:93:ea:69:5a:7b:c4:12:85:f1:6b:4a:
         6f:47:6c:f3:e4:d6:4f:12:cd:71:40:9b:9c:a5:93:40:49:0e:
         48:90:55:aa:6f:95:6d:2e:82:53:49:2a:3a:ce:8c:a3:0c:2d:
         35:3d:de:a9:e9:02:75:8d:52:4b:fb:c8:3c:d0:38:af:90:3e:
         ec:78:19:96:2b:e7:88:7f:fa:3a:03:85:b1:bc:44:2c:18:bb:
         dc:54:65:09:ee:01:b1:f2:00:a5:09:b8:de:31:c8:90:6d:f7:
         5e:35:23:89:8b:7b:fc:d9:2e:35:a6:c2:f9:fe:99:f5:a9:1f:
         78:79:88:0e:1d:28:ba:b0:da:49:c1:3a:52:91:72:87:c0:21:
         94:22:c7:18:24:46:b0:be:5c:60:6a:e5:46:f9:d6:49:26:49:
         b7:f3:8d:91:9d:ad:c3:af:bf:72:a0:14:5d:c3:5d:ca:e0:a0:
         57:d7:16:ef:a5:3a:13:8c:12:ae:08:a9:6f:9a:97:32:f1:9d:
         41:15:bd:25:c9:30:99:41:b6:39:db:6b:2f:39:82:24:a5:da:
         67:b6:33:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 8 17:18:31 2025 by rpki-client