This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A6924/EFD9E414DE6311EFB38DFE54762E951A/VPGf2krwV1qRqtTk5vY1pk56j-w.mft
File:                     VPGf2krwV1qRqtTk5vY1pk56j-w.mft (raw, json)
Hash identifier:          n8XbEgTm18uCyO+Xl2sKFyXRd9z5FGlgOtTbDU7ZCTQ=
Subject key identifier:   FE:07:5F:B9:0F:31:BF:D6:15:AE:65:E1:A2:8D:0E:1A:C4:06:A1:F2
Authority key identifier: 54:F1:9F:DA:4A:F0:57:5A:91:AA:D4:E4:E6:F6:35:A6:4E:7A:8F:EC
Certificate issuer:       /CN=F36A6924AF/serialNumber=54F19FDA4AF0575A91AAD4E4E6F635A64E7A8FEC
Certificate serial:       0142
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/VPGf2krwV1qRqtTk5vY1pk56j-w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A6924/EFD9E414DE6311EFB38DFE54762E951A/VPGf2krwV1qRqtTk5vY1pk56j-w.mft
Manifest number:          0141
Signing time:             Mon 08 Dec 2025 04:49:28 +0000
Manifest this update:     Mon 08 Dec 2025 04:49:28 +0000
Manifest next update:     Wed 10 Dec 2025 04:49:28 +0000
Files and hashes:         1: VPGf2krwV1qRqtTk5vY1pk56j-w.crl (hash: kaJLLJgUVTfDrb52GjYZ9pT1TpKIZcponxayLbNBWmM=)
                          2: 9343B656DE6511EFAF948D61762E951A.roa (hash: zDYsubxhkHYMHfjJPFrGHDpArkGFwI5Ms1TbXtuvEN8=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A6924/EFD9E414DE6311EFB38DFE54762E951A/VPGf2krwV1qRqtTk5vY1pk56j-w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A6924/EFD9E414DE6311EFB38DFE54762E951A/VPGf2krwV1qRqtTk5vY1pk56j-w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/VPGf2krwV1qRqtTk5vY1pk56j-w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 10 Dec 2025 00:06:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 322 (0x142)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A6924AF, serialNumber=54F19FDA4AF0575A91AAD4E4E6F635A64E7A8FEC
        Validity
            Not Before: Dec  8 04:49:28 2025 GMT
            Not After : Dec 10 04:49:28 2025 GMT
        Subject: CN=693658d8-c4f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:ea:b4:f2:9f:ec:8f:e2:c9:6d:85:f4:6a:24:
                    47:db:f8:61:0e:bb:da:99:33:c9:45:c4:1e:9d:ac:
                    5d:1b:b0:99:e1:40:b3:c2:70:83:b4:fc:61:c8:e7:
                    74:e7:78:44:24:26:b1:20:ff:10:8d:97:40:65:71:
                    81:fd:a1:d5:58:24:ef:56:b2:19:2d:c9:fa:ea:04:
                    45:c4:db:4d:97:96:72:cf:49:e9:45:36:bc:e2:03:
                    7c:ba:9b:5c:17:98:00:77:33:e3:7a:ee:4c:14:ae:
                    6b:f1:21:1f:76:f6:2d:42:65:14:0f:75:c8:90:1b:
                    83:6d:b0:92:4f:83:95:25:04:e9:0b:4a:0d:15:6d:
                    d7:91:2b:d5:c2:79:18:45:1d:d1:b3:f2:7f:ab:96:
                    62:07:4f:1f:fb:3d:9a:d7:84:24:9a:9b:b0:e1:a1:
                    f0:75:d3:fb:0b:2a:7f:ea:2c:c7:1f:36:b9:a5:66:
                    22:10:c2:4c:80:82:82:ae:b8:29:4a:2a:99:6e:b0:
                    13:c7:3c:d6:c0:db:71:0b:cd:27:fa:c0:48:2d:ad:
                    18:f9:6b:f8:69:86:ec:61:d1:1d:85:62:7b:2f:c8:
                    1b:88:ad:ae:80:77:1e:21:f8:e1:83:99:01:3b:7d:
                    e4:d7:18:ce:df:41:73:7c:21:48:ec:2e:c7:e9:32:
                    76:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:07:5F:B9:0F:31:BF:D6:15:AE:65:E1:A2:8D:0E:1A:C4:06:A1:F2
            X509v3 Authority Key Identifier:
                keyid:54:F1:9F:DA:4A:F0:57:5A:91:AA:D4:E4:E6:F6:35:A6:4E:7A:8F:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A6924/EFD9E414DE6311EFB38DFE54762E951A/VPGf2krwV1qRqtTk5vY1pk56j-w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/VPGf2krwV1qRqtTk5vY1pk56j-w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A6924/EFD9E414DE6311EFB38DFE54762E951A/VPGf2krwV1qRqtTk5vY1pk56j-w.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:9c:94:38:ee:67:e8:8b:d7:8d:e2:84:3b:54:ac:c6:de:18:
         a0:1c:9a:7b:99:73:d2:21:5a:9c:00:1d:3c:83:7a:76:a2:64:
         b3:e3:73:22:1c:9a:31:45:c2:78:62:81:29:69:a4:78:52:e5:
         db:ce:6c:14:d1:0d:a0:e5:6b:4f:a0:83:18:df:e3:c6:e6:ca:
         d2:9b:4e:1f:83:65:c9:ff:53:c0:78:2e:63:55:6d:0d:5b:f4:
         80:22:e4:46:bf:f7:9c:66:9d:22:9a:aa:03:f4:25:ee:85:82:
         36:ff:cd:c0:c3:7b:7d:e8:5d:82:3b:8c:93:19:81:6c:94:08:
         81:9f:f4:74:b2:16:77:38:e5:5e:60:1a:39:e6:bd:6d:e4:ea:
         dc:c0:12:73:64:74:20:10:61:d7:88:2e:86:3c:e0:fa:2d:d0:
         d0:50:6b:82:4f:3a:f4:74:47:ce:81:fc:ff:ed:25:f7:df:76:
         3d:24:1b:c1:73:ad:91:b7:7e:ce:f6:36:19:af:53:90:64:de:
         a6:fc:c7:5d:e6:74:42:3e:1d:b2:30:11:82:39:b6:8b:db:b1:
         85:aa:b9:29:83:40:b5:2c:ee:85:f3:54:76:50:a6:f6:e3:97:
         29:d6:27:c2:ba:4d:29:5b:6c:1c:17:db:0b:4b:d4:82:d5:4f:
         75:78:b9:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 8 17:21:43 2025 by rpki-client