This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A6DD7/5CB7C22E587F11E5BF942749F8AEA228/PiJrIMLhdpiA_Gjh3TNa0XoKzqM.mft
File:                     PiJrIMLhdpiA_Gjh3TNa0XoKzqM.mft (raw, json)
Hash identifier:          /e+QPzfGLjIFplp/kKISSjTWtJJutOzYI2TPIxFLhzU=
Subject key identifier:   F3:3F:06:92:F4:A2:39:70:B6:0B:9E:28:CC:DB:29:D0:98:C8:71:5B
Authority key identifier: 3E:22:6B:20:C2:E1:76:98:80:FC:68:E1:DD:33:5A:D1:7A:0A:CE:A3
Certificate issuer:       /CN=F36A6DD7AF/serialNumber=3E226B20C2E1769880FC68E1DD335AD17A0ACEA3
Certificate serial:       0F03
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/PiJrIMLhdpiA_Gjh3TNa0XoKzqM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A6DD7/5CB7C22E587F11E5BF942749F8AEA228/PiJrIMLhdpiA_Gjh3TNa0XoKzqM.mft
Manifest number:          0EF7
Signing time:             Sun 07 Dec 2025 00:57:33 +0000
Manifest this update:     Sun 07 Dec 2025 00:57:33 +0000
Manifest next update:     Tue 09 Dec 2025 00:57:33 +0000
Files and hashes:         1: PiJrIMLhdpiA_Gjh3TNa0XoKzqM.crl (hash: 1es3wWNrsLP5r5jrddQEfdPmMECc9V21Lygn26yooOk=)
                          2: 27245A66C4C411F09B86D9E0DAE4EC9C.roa (hash: RhP+q0hcR9r0TqI0DJg5TlVHEkwdaQaUB4Vwe66w/4w=)
                          3: A19476D4C4C211F098DC65D8DAE4EC9C.roa (hash: ChEp6ZWIlk0DrDsY4PbxeB0oWgH6YxSvcg1AG3DA7vw=)
                          4: 699D3DA6C4C211F0BAEE54D8DAE4EC9C.roa (hash: MbciLgOo/FZXT6pICHx7XJwIWDJbakWY3mBA3T6dzSM=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A6DD7/5CB7C22E587F11E5BF942749F8AEA228/PiJrIMLhdpiA_Gjh3TNa0XoKzqM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A6DD7/5CB7C22E587F11E5BF942749F8AEA228/PiJrIMLhdpiA_Gjh3TNa0XoKzqM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/PiJrIMLhdpiA_Gjh3TNa0XoKzqM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 09 Dec 2025 00:06:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3843 (0xf03)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A6DD7AF, serialNumber=3E226B20C2E1769880FC68E1DD335AD17A0ACEA3
        Validity
            Not Before: Dec  7 00:57:33 2025 GMT
            Not After : Dec  9 00:57:33 2025 GMT
        Subject: CN=6934d0fd-0f81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:60:16:de:81:92:5d:06:f8:f1:88:5f:a2:c8:
                    ac:56:5d:03:c8:37:0a:a7:e7:63:32:8f:1f:e3:70:
                    0e:d3:c6:52:ae:52:37:4c:64:3f:c8:bc:bc:5d:ab:
                    8e:f9:c0:e4:7b:3d:eb:5a:77:97:52:d0:3a:75:7a:
                    3c:c5:e1:d6:41:c0:fb:de:31:07:ad:51:04:69:b5:
                    90:9b:a6:6b:83:e6:29:a4:dd:7a:f3:e5:ba:85:c1:
                    d7:89:c0:c1:bd:fb:f8:c8:5b:21:b4:a3:58:eb:56:
                    9c:b9:6d:b9:b5:57:f5:19:26:31:b1:43:ce:5c:cc:
                    4d:d9:b1:2e:5e:e7:e4:18:ca:60:32:25:8f:f1:15:
                    82:da:b5:cb:c3:65:01:5c:3a:88:b9:26:82:0b:87:
                    a0:83:2b:ee:14:f5:4a:9b:fe:ce:d9:18:3b:0d:cd:
                    65:c0:a5:f7:67:a7:6a:2e:7b:ed:bb:9d:65:89:9e:
                    97:37:56:2d:a5:39:57:54:02:0f:9c:dc:d8:32:10:
                    d4:1c:3c:95:92:e8:fd:e7:af:9f:da:46:7e:49:4f:
                    55:95:ce:8c:a1:94:b1:a8:83:91:f2:9c:f1:a1:ae:
                    dc:a6:15:5b:02:1d:db:5b:a6:c3:3f:76:d5:c4:49:
                    1f:a5:ea:06:74:d3:24:39:c4:ae:04:48:4e:e2:98:
                    9c:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:3F:06:92:F4:A2:39:70:B6:0B:9E:28:CC:DB:29:D0:98:C8:71:5B
            X509v3 Authority Key Identifier:
                keyid:3E:22:6B:20:C2:E1:76:98:80:FC:68:E1:DD:33:5A:D1:7A:0A:CE:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A6DD7/5CB7C22E587F11E5BF942749F8AEA228/PiJrIMLhdpiA_Gjh3TNa0XoKzqM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/PiJrIMLhdpiA_Gjh3TNa0XoKzqM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A6DD7/5CB7C22E587F11E5BF942749F8AEA228/PiJrIMLhdpiA_Gjh3TNa0XoKzqM.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:b0:57:88:4e:d5:8f:59:90:93:8c:34:67:11:b2:6d:7c:b6:
         60:df:b9:8d:0c:9b:8f:b8:d7:1a:95:8f:ea:bf:a2:75:54:79:
         58:0c:e3:86:c3:52:73:3c:c3:d0:35:58:f2:e8:09:7a:2b:ca:
         90:4f:87:cf:6e:b4:b9:16:5c:f3:92:11:5f:2d:56:5d:da:32:
         5c:97:d6:62:3a:fe:b1:9e:a0:fc:6b:c2:b9:04:6e:e0:da:42:
         52:d8:10:9b:e3:4c:c5:fc:d7:5a:14:78:da:8b:86:32:93:c1:
         b5:d4:b8:3b:4b:61:bd:71:52:a2:3f:9b:47:28:9b:ac:ad:65:
         b3:39:ec:89:e3:1b:9b:b9:24:81:e6:dc:14:9e:76:0f:d1:67:
         88:1f:53:7c:8f:c8:f1:a7:04:96:81:17:c1:05:47:de:d1:fd:
         67:2d:91:45:42:b1:c6:95:f7:4d:9a:11:69:ad:d6:2d:ff:5c:
         01:aa:32:b6:88:82:9e:60:31:0a:1f:82:93:04:94:03:da:3f:
         c7:1f:c1:fd:09:62:23:21:e3:e1:82:32:0b:5c:83:58:75:63:
         3f:bf:25:83:fe:bf:3f:8d:45:2b:13:41:bf:5b:85:9f:42:b9:
         fd:7b:8e:cc:a5:9d:c9:93:80:d4:54:71:c5:cb:4f:db:7a:29:
         2d:f8:74:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 06:24:07 2025 by rpki-client