This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A6EA0/59C558DED0F511F0AE204785DAE4EC9C/5OfkzwUGmYE4HGusKKJrtmmU0rc.mft
File:                     5OfkzwUGmYE4HGusKKJrtmmU0rc.mft (raw, json)
Hash identifier:          ToZMjEJmg6MzyA++BmTFFol5RLM2Mqr7OK2O/l1W44A=
Subject key identifier:   DD:87:1B:CB:41:FA:64:E5:21:0D:18:DB:DB:16:DE:A1:12:3A:24:B3
Authority key identifier: E4:E7:E4:CF:05:06:99:81:38:1C:6B:AC:28:A2:6B:B6:69:94:D2:B7
Certificate issuer:       /CN=F36A6EA0AF/serialNumber=E4E7E4CF05069981381C6BAC28A26BB66994D2B7
Certificate serial:       10
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/5OfkzwUGmYE4HGusKKJrtmmU0rc.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A6EA0/59C558DED0F511F0AE204785DAE4EC9C/5OfkzwUGmYE4HGusKKJrtmmU0rc.mft
Manifest number:          0A
Signing time:             Sun 07 Dec 2025 09:22:08 +0000
Manifest this update:     Sun 07 Dec 2025 09:22:07 +0000
Manifest next update:     Tue 09 Dec 2025 09:22:07 +0000
Files and hashes:         1: 5OfkzwUGmYE4HGusKKJrtmmU0rc.crl (hash: 5QsIDSy9aWjYZPoUaqvd1KLVe4YkGGv3JrSp2V20TBs=)
                          2: F36F0F1AD0F611F0AB30B88FDAE4EC9C.roa (hash: dNGgCtw24nbAR58DF8sv0Wym3VwzJDfok0oC2N1xwvc=)
                          3: 2FFDE81CD34E11F0B7F1C9BADAE4EC9C.roa (hash: lmKBgc8wIXpN7ohFi3bEsVy0HhEMQZg8umYWi7PtY/0=)
                          4: 1811E4B2D34C11F0A34F27AEDAE4EC9C.roa (hash: 5J5kKxxmT3AitlgzrzKNAptdmk4cbkC8tOUOxsnY+GM=)
                          5: AFCDD206D34D11F0ADCD4EB7DAE4EC9C.roa (hash: Wushw/sA+miTMHcjq5BUALTuvax/UDlZ5uswbKq6gbc=)
                          6: B82C1EEAD34C11F0A0F487B0DAE4EC9C.roa (hash: EGArG9brFI7oxboTdJn16N3Dn9tsiL6qA8X8WNsrRI0=)
                          7: 216C2206D34D11F081CE2AB4DAE4EC9C.roa (hash: wmcnwC3N1n68tZ025Jzu1Yi8vDKdizTOQUqWDI3JT4g=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A6EA0/59C558DED0F511F0AE204785DAE4EC9C/5OfkzwUGmYE4HGusKKJrtmmU0rc.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A6EA0/59C558DED0F511F0AE204785DAE4EC9C/5OfkzwUGmYE4HGusKKJrtmmU0rc.mft
                          rsync://rpki.afrinic.net/repository/afrinic/5OfkzwUGmYE4HGusKKJrtmmU0rc.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 09 Dec 2025 09:22:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16 (0x10)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A6EA0AF, serialNumber=E4E7E4CF05069981381C6BAC28A26BB66994D2B7
        Validity
            Not Before: Dec  7 09:22:07 2025 GMT
            Not After : Dec  9 09:22:07 2025 GMT
        Subject: CN=69354740-1d20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:8d:1f:0f:44:bb:33:88:9f:57:d0:fe:2a:d3:
                    22:53:8b:27:82:bc:82:24:2d:f3:b7:e8:ab:84:ff:
                    38:91:72:0c:ae:2e:b8:52:3c:9d:af:4f:05:f7:71:
                    22:c9:d5:85:2f:b2:cd:30:1a:c5:06:d7:6f:5a:08:
                    ec:59:52:ac:36:76:41:e6:3e:4b:5e:64:a4:67:bb:
                    71:30:6c:ac:88:1f:80:3a:7c:24:5d:64:2d:8c:b3:
                    7f:37:21:6b:17:b2:fd:07:ed:ac:90:00:13:5d:85:
                    7a:e1:b3:9a:af:51:9b:65:66:27:58:cd:10:93:10:
                    fb:e4:61:29:92:c7:74:62:a1:87:fe:a7:5f:1d:fe:
                    31:ce:59:bf:4b:60:5d:c6:e1:a0:7b:e7:9f:07:40:
                    d7:ea:84:03:7d:0f:a3:82:1d:81:6f:15:24:6d:8c:
                    98:38:cd:a3:9a:ed:c1:29:ca:c4:ca:b9:6f:4e:ed:
                    fd:b3:f5:cd:8c:75:84:98:f0:ce:eb:fa:08:43:e1:
                    a5:3c:80:e1:72:5d:bf:85:40:3e:34:21:a9:59:3f:
                    53:89:50:95:3e:3b:f2:42:f3:fe:26:5c:32:77:e6:
                    cf:19:6b:40:83:47:4f:d4:79:d9:5c:f0:48:2c:99:
                    38:d3:bd:9d:9c:58:68:5b:fa:93:76:96:f9:e0:5b:
                    6e:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:87:1B:CB:41:FA:64:E5:21:0D:18:DB:DB:16:DE:A1:12:3A:24:B3
            X509v3 Authority Key Identifier:
                keyid:E4:E7:E4:CF:05:06:99:81:38:1C:6B:AC:28:A2:6B:B6:69:94:D2:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A6EA0/59C558DED0F511F0AE204785DAE4EC9C/5OfkzwUGmYE4HGusKKJrtmmU0rc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/5OfkzwUGmYE4HGusKKJrtmmU0rc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A6EA0/59C558DED0F511F0AE204785DAE4EC9C/5OfkzwUGmYE4HGusKKJrtmmU0rc.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:06:7d:6b:a7:4f:66:9e:46:e4:53:9c:bd:27:36:fa:ca:eb:
         a8:d3:38:49:48:16:81:46:15:76:b9:3a:9f:a5:02:98:34:0b:
         c6:fe:69:15:cd:bd:18:74:93:01:4c:d4:6f:ee:47:e3:89:45:
         f5:78:5b:1c:8d:91:9c:dc:2c:59:72:31:83:d7:c0:17:47:a1:
         96:a9:59:c6:6f:ba:ac:bf:8e:f0:17:a4:db:bf:fa:96:1c:e8:
         e5:5f:b8:54:0f:c7:6d:85:9c:05:b8:11:bf:80:72:70:ca:eb:
         7d:82:0c:10:7f:02:9e:09:e3:27:02:ec:af:43:64:8b:7d:84:
         f2:f3:c1:73:58:55:bd:59:d8:dc:23:9b:d2:91:56:d8:0c:b1:
         9a:18:7e:a1:b2:2e:13:c4:ab:c9:32:de:bf:77:f7:39:bd:35:
         e1:44:13:8f:48:59:1e:e2:08:4b:eb:4f:62:b9:70:7b:4e:ee:
         88:68:28:3b:82:21:b5:dc:3f:dc:29:1b:70:92:1a:01:e8:6e:
         a5:25:52:0e:af:1a:65:6b:81:16:3a:88:36:70:25:b3:59:0c:
         57:ed:32:30:52:78:dc:25:1f:d0:00:15:40:c4:11:2b:33:56:
         ec:82:69:1e:30:b4:c4:a2:86:ab:30:ca:64:6e:de:d2:0f:5e:
         8c:37:09:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 13:24:10 2025 by rpki-client