This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36AA372/2DD27FE8BFC211F09C621AC9DAE4EC9C/RlaXNRFZ0UHlSS-N3AARcfbR5fI.mft
File:                     RlaXNRFZ0UHlSS-N3AARcfbR5fI.mft (raw, json)
Hash identifier:          dgEcZSZ2jfXCoReVSq69O8rcdeIU2RqEqIHDHzqBi6U=
Subject key identifier:   71:01:42:42:1F:D9:97:09:F5:8B:E1:93:A3:39:9A:98:A1:68:B2:D9
Authority key identifier: 46:56:97:35:11:59:D1:41:E5:49:2F:8D:DC:00:11:71:F6:D1:E5:F2
Certificate issuer:       /CN=F36AA372AF/serialNumber=465697351159D141E5492F8DDC001171F6D1E5F2
Certificate serial:       21
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/RlaXNRFZ0UHlSS-N3AARcfbR5fI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36AA372/2DD27FE8BFC211F09C621AC9DAE4EC9C/RlaXNRFZ0UHlSS-N3AARcfbR5fI.mft
Manifest number:          1F
Signing time:             Mon 08 Dec 2025 05:19:58 +0000
Manifest this update:     Mon 08 Dec 2025 05:19:57 +0000
Manifest next update:     Wed 10 Dec 2025 05:19:57 +0000
Files and hashes:         1: RlaXNRFZ0UHlSS-N3AARcfbR5fI.crl (hash: LlUDveRVlCXWyaB8ZVbO36TbMi47+9N0xVb6S4ua1Ts=)
                          2: 5771723CBFCC11F0B32C4386DAE4EC9C.roa (hash: GFNOWIn+BnzxN06/P09ij0NnM/A7yIAgr7oflS33glE=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36AA372/2DD27FE8BFC211F09C621AC9DAE4EC9C/RlaXNRFZ0UHlSS-N3AARcfbR5fI.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36AA372/2DD27FE8BFC211F09C621AC9DAE4EC9C/RlaXNRFZ0UHlSS-N3AARcfbR5fI.mft
                          rsync://rpki.afrinic.net/repository/afrinic/RlaXNRFZ0UHlSS-N3AARcfbR5fI.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 10 Dec 2025 00:06:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 33 (0x21)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36AA372AF, serialNumber=465697351159D141E5492F8DDC001171F6D1E5F2
        Validity
            Not Before: Dec  8 05:19:57 2025 GMT
            Not After : Dec 10 05:19:57 2025 GMT
        Subject: CN=69365ffe-3478
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:39:11:e9:b3:48:d4:28:9c:17:e8:53:14:60:
                    50:67:8a:12:10:ca:02:11:6a:58:44:76:47:85:d4:
                    f4:dc:ef:24:4e:22:1a:37:3a:03:18:a8:0e:fd:ca:
                    51:bc:5d:a2:13:11:f0:aa:11:64:b9:1b:14:c2:23:
                    45:3b:df:f8:94:e6:02:9e:c5:ef:58:f5:6f:69:1f:
                    73:d8:b9:07:ca:69:89:29:ce:bf:46:d4:1e:4c:04:
                    e5:cc:bc:ab:fb:01:92:58:58:34:1b:21:af:d5:5c:
                    77:48:eb:7b:0e:62:cb:9a:c4:97:70:f7:43:3f:8b:
                    80:b0:1f:19:40:bd:f9:84:c3:53:4a:01:cb:dd:e7:
                    b7:cd:1e:e7:97:71:8a:8c:5e:58:bc:4d:47:65:60:
                    9c:4e:65:30:58:f7:c4:fa:84:f3:a8:92:f6:02:a0:
                    04:af:3b:8a:d9:02:d5:68:83:6c:ed:27:00:85:c4:
                    97:15:0d:0b:2f:dd:61:5d:b0:3f:fa:ee:ae:66:1c:
                    4d:a3:9f:71:05:9a:9d:b6:30:7d:ef:60:fb:54:9e:
                    43:d4:61:2d:90:3e:86:73:d3:b0:2d:71:61:f8:34:
                    1f:de:db:4e:a3:12:70:a4:34:94:b8:e3:e1:b3:e9:
                    21:c3:28:3a:5d:d3:ed:13:4c:20:91:0a:ba:07:ff:
                    d4:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:01:42:42:1F:D9:97:09:F5:8B:E1:93:A3:39:9A:98:A1:68:B2:D9
            X509v3 Authority Key Identifier:
                keyid:46:56:97:35:11:59:D1:41:E5:49:2F:8D:DC:00:11:71:F6:D1:E5:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36AA372/2DD27FE8BFC211F09C621AC9DAE4EC9C/RlaXNRFZ0UHlSS-N3AARcfbR5fI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/RlaXNRFZ0UHlSS-N3AARcfbR5fI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36AA372/2DD27FE8BFC211F09C621AC9DAE4EC9C/RlaXNRFZ0UHlSS-N3AARcfbR5fI.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:e6:d3:62:8d:db:8d:f1:c9:7d:6d:82:fc:6c:5d:ac:c2:5a:
         7b:26:0e:d8:9b:c2:39:72:fb:dd:de:8c:7f:8e:50:c8:89:fb:
         85:14:a7:6c:be:6e:1e:df:43:74:91:ef:98:42:e7:28:61:b6:
         d0:e1:28:c3:4c:69:8a:69:e2:be:5d:bb:de:c2:19:21:c3:60:
         12:91:8e:7b:f4:1c:a2:ba:42:69:f8:73:88:fe:8a:8d:e0:94:
         f7:54:0d:86:59:a3:c8:a2:c0:15:b4:33:13:c5:6e:d6:5a:3f:
         20:91:26:70:62:2a:6a:59:12:14:52:3b:ba:0d:d8:ec:c0:6e:
         96:fc:e5:f1:60:b7:de:17:86:77:18:79:26:d5:ed:79:9a:f6:
         76:66:e3:00:b2:83:2f:77:b3:e2:b2:e0:3b:9e:1f:64:4b:15:
         4b:ca:e3:49:db:c4:6e:7d:25:90:60:e3:3a:82:df:d6:ad:0d:
         07:4d:d7:d1:80:be:61:ae:24:77:d1:0c:35:a0:ca:67:0f:47:
         a2:98:ab:e6:a4:fd:37:85:8f:60:a0:b5:9f:ed:e6:d2:aa:a0:
         7c:56:3f:3c:5a:7f:8e:7f:fa:2c:e7:be:bb:c2:fd:57:d0:37:
         f7:1b:24:b2:07:dc:be:8a:cc:19:73:74:76:d3:e3:67:ce:74:
         11:2a:29:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 8 17:16:42 2025 by rpki-client