This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A9104/41D036ECF61811ECA84F46AEF1222468/GP3Ir1OHeAJYm-7e6BP2tibvgv4.mft
File:                     GP3Ir1OHeAJYm-7e6BP2tibvgv4.mft (raw, json)
Hash identifier:          z5J5/UCktubUh7A45/zStLi0n+Ty4mj6raki4pDVK74=
Subject key identifier:   C6:F0:8F:4D:C1:9F:68:10:DD:4D:DC:CE:06:D0:BB:EF:EA:2A:14:30
Authority key identifier: 18:FD:C8:AF:53:87:78:02:58:9B:EE:DE:E8:13:F6:B6:26:EF:82:FE
Certificate issuer:       /CN=F36A9104AF/serialNumber=18FDC8AF53877802589BEEDEE813F6B626EF82FE
Certificate serial:       0521
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/GP3Ir1OHeAJYm-7e6BP2tibvgv4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A9104/41D036ECF61811ECA84F46AEF1222468/GP3Ir1OHeAJYm-7e6BP2tibvgv4.mft
Manifest number:          051A
Signing time:             Mon 08 Dec 2025 02:49:33 +0000
Manifest this update:     Mon 08 Dec 2025 02:49:32 +0000
Manifest next update:     Wed 10 Dec 2025 02:49:32 +0000
Files and hashes:         1: GP3Ir1OHeAJYm-7e6BP2tibvgv4.crl (hash: NxcZO+xajlBFgTiRQXY0n7p8093F7WP9+2e14NffjKM=)
                          2: C3B74EC82F1011F09BA573D8DAE4EC9C.roa (hash: De1WzwEpPZKq8ILtQhTT9NmJyj6jKrMY4SHBZFBEWUQ=)
                          3: 641B15C8F61811ECA46BC9AEF1222468.roa (hash: lmyyvzmxJhC+JbEIN1Aywg0+Vb+IK8y5pQ85m8/YB3s=)
                          4: DE6A96689BAF11ED872A3CE3F1222468.roa (hash: Azt6ehpluobbTkNPa//tv1URzUpC9mBdBjuIo2fSzCg=)
                          5: 7B865506F61811ECB0B004AFF1222468.roa (hash: PBFWsp55Byo8HpYgxxUbYwWMACFeIH4/XatY+LgkHMc=)
                          6: 18DBB0029BB011EDB3B1D3E3F1222468.roa (hash: y6T5QrNiBFE0Y9/1KUKFDLVD4S3WdtmmEEg8hWLjEb0=)
                          7: FD0720789BAF11EDA474A4E3F1222468.roa (hash: XwuRQifMxDzgCRmEHxL8Hh9MMbu+jBrnT6vSXd5rPc4=)
                          8: 355CB3D49BB011ED9DBA47E4F1222468.roa (hash: TYgeZaJhaBXGlUhHN9w35PJVWeP3Uv0WM9ubwoAhGOo=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A9104/41D036ECF61811ECA84F46AEF1222468/GP3Ir1OHeAJYm-7e6BP2tibvgv4.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A9104/41D036ECF61811ECA84F46AEF1222468/GP3Ir1OHeAJYm-7e6BP2tibvgv4.mft
                          rsync://rpki.afrinic.net/repository/afrinic/GP3Ir1OHeAJYm-7e6BP2tibvgv4.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 10 Dec 2025 00:06:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1313 (0x521)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A9104AF, serialNumber=18FDC8AF53877802589BEEDEE813F6B626EF82FE
        Validity
            Not Before: Dec  8 02:49:32 2025 GMT
            Not After : Dec 10 02:49:32 2025 GMT
        Subject: CN=69363cbc-ca9a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:25:19:fd:3e:20:14:3f:c3:0a:0e:4a:d3:e2:
                    ee:e9:22:3d:89:51:5e:00:cd:9a:4a:45:7c:3f:f0:
                    91:09:4e:2c:73:bb:83:ec:8e:5b:58:68:e2:e5:41:
                    e6:96:19:22:9b:74:b3:38:61:0a:9c:32:fb:0b:d4:
                    1f:62:0d:5c:d0:d7:52:24:8b:27:8f:2a:f1:f5:09:
                    ac:25:71:0e:04:75:49:24:dd:f5:d0:b3:3d:08:4c:
                    54:c9:10:fe:8d:93:ea:a2:ad:f6:24:21:e2:df:a0:
                    c6:71:94:c5:a9:23:7a:08:fc:51:1f:81:b3:d7:97:
                    69:a0:e0:58:4e:c2:5a:59:b7:73:aa:13:01:85:df:
                    f2:bc:cb:5d:c2:4e:64:3e:ba:67:ed:56:96:54:97:
                    eb:68:54:4a:e9:dd:30:f2:6f:25:bb:82:0d:9d:8c:
                    a3:0a:d9:ea:0d:b3:41:9d:52:84:c3:0b:a2:ff:2d:
                    6a:74:55:6a:fd:d0:29:cb:9a:a6:c8:d8:61:9c:1f:
                    4e:71:06:f4:f0:85:0d:b3:a1:c3:54:a9:f5:2a:e5:
                    de:3c:e1:e5:13:3d:14:8a:e4:92:65:a3:33:1e:8c:
                    03:7c:6e:eb:2f:49:5d:b6:8e:2f:09:19:75:24:92:
                    2a:b7:ab:72:4b:51:82:d2:e2:b4:dd:8a:b8:d9:24:
                    af:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:F0:8F:4D:C1:9F:68:10:DD:4D:DC:CE:06:D0:BB:EF:EA:2A:14:30
            X509v3 Authority Key Identifier:
                keyid:18:FD:C8:AF:53:87:78:02:58:9B:EE:DE:E8:13:F6:B6:26:EF:82:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A9104/41D036ECF61811ECA84F46AEF1222468/GP3Ir1OHeAJYm-7e6BP2tibvgv4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/GP3Ir1OHeAJYm-7e6BP2tibvgv4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A9104/41D036ECF61811ECA84F46AEF1222468/GP3Ir1OHeAJYm-7e6BP2tibvgv4.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:37:b2:45:48:97:5c:65:22:00:74:c9:49:a5:17:ad:cc:19:
         69:e1:7c:14:bb:1c:e8:2b:c5:f7:17:aa:d2:b8:35:b8:82:be:
         e6:69:46:33:fd:c9:88:81:fd:03:29:9b:c5:1c:74:7c:45:23:
         ff:77:78:41:5d:02:a2:75:6e:f6:41:17:2c:fc:4a:28:db:7e:
         82:43:38:f9:2c:fb:4e:64:d8:30:22:14:ae:99:8d:f2:f1:94:
         e9:6a:3e:33:08:d8:aa:13:aa:40:fa:8b:96:c2:ca:ad:35:ae:
         a8:02:f8:67:2b:d7:a0:9e:df:3a:4c:70:77:66:46:4c:58:cd:
         f2:4f:34:c2:43:cc:ae:fd:56:05:4f:a1:09:74:c7:27:d4:54:
         3a:ca:b1:c6:f8:c0:24:c9:07:dd:ed:e0:dd:bb:c7:6b:b8:8f:
         f5:4e:dd:2c:be:e0:5a:9d:c2:a8:b9:1d:5e:a9:91:2c:b0:2f:
         5a:49:a0:cc:f5:06:cf:01:fa:e0:29:fa:62:51:98:1d:eb:32:
         33:98:a0:24:85:57:93:c3:71:91:02:3c:4a:bf:9b:ab:e4:67:
         05:f8:df:4e:a1:53:7b:a2:7c:ed:eb:f7:75:23:0e:21:98:49:
         a5:1a:08:2f:76:c1:0b:db:63:b9:6e:23:0b:6d:cf:a0:7f:61:
         8d:45:42:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 8 17:20:31 2025 by rpki-client