This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36AAA81/94D74B4E4F2311EF9CE27067762E951A/PI4FEuJ2ut5a3AyBxlk04DQ8YB8.mft
File:                     PI4FEuJ2ut5a3AyBxlk04DQ8YB8.mft (raw, json)
Hash identifier:          UoGc7rqgiAq6ClLDZZBO35EwuuHZEbufulVLTQb74Ww=
Subject key identifier:   A2:32:AB:9B:E8:D3:3D:FC:32:37:DB:19:BD:EA:EC:4E:3B:7E:D8:3B
Authority key identifier: 3C:8E:05:12:E2:76:BA:DE:5A:DC:0C:81:C6:59:34:E0:34:3C:60:1F
Certificate issuer:       /CN=F36AAA81AF/serialNumber=3C8E0512E276BADE5ADC0C81C65934E0343C601F
Certificate serial:       01FB
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/PI4FEuJ2ut5a3AyBxlk04DQ8YB8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36AAA81/94D74B4E4F2311EF9CE27067762E951A/PI4FEuJ2ut5a3AyBxlk04DQ8YB8.mft
Manifest number:          01FB
Signing time:             Mon 08 Dec 2025 04:24:45 +0000
Manifest this update:     Mon 08 Dec 2025 04:24:44 +0000
Manifest next update:     Wed 10 Dec 2025 04:24:44 +0000
Files and hashes:         1: PI4FEuJ2ut5a3AyBxlk04DQ8YB8.crl (hash: vo2xdQZk2diR5MXnRRESE6qaasMuVmIov1YRYWVAeSU=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36AAA81/94D74B4E4F2311EF9CE27067762E951A/PI4FEuJ2ut5a3AyBxlk04DQ8YB8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36AAA81/94D74B4E4F2311EF9CE27067762E951A/PI4FEuJ2ut5a3AyBxlk04DQ8YB8.mft
                          rsync://rpki.afrinic.net/repository/afrinic/PI4FEuJ2ut5a3AyBxlk04DQ8YB8.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 10 Dec 2025 00:06:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 507 (0x1fb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36AAA81AF, serialNumber=3C8E0512E276BADE5ADC0C81C65934E0343C601F
        Validity
            Not Before: Dec  8 04:24:44 2025 GMT
            Not After : Dec 10 04:24:44 2025 GMT
        Subject: CN=6936530d-1ea5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:65:cd:1d:df:f3:60:4a:a4:61:16:7e:1b:6e:
                    02:5f:17:cc:9a:bf:58:74:39:85:9d:62:5d:9a:9d:
                    79:d5:53:4e:a5:43:2a:70:ae:9c:d2:48:27:f7:e6:
                    b4:0e:d3:fc:62:b8:77:f5:e9:e8:a5:92:81:2e:0b:
                    7e:d0:e3:7d:4b:70:1c:44:5f:56:7e:a4:29:fd:8a:
                    17:0d:25:3a:c0:e4:1b:ec:64:00:24:6e:21:77:58:
                    4a:c4:c5:06:99:8c:37:ed:e1:41:d6:a4:c0:d7:9a:
                    3d:50:57:de:de:d3:d6:e7:08:40:c2:59:58:1b:1b:
                    c1:9e:a8:1f:d5:00:f5:ed:b7:9f:34:08:16:ce:d2:
                    de:56:40:80:ea:7f:9d:c1:23:9a:98:69:1c:f9:58:
                    3a:7d:07:80:4d:d4:7e:ae:32:52:5c:5a:5d:82:ae:
                    d3:c3:65:39:da:6f:70:30:34:0e:ca:f2:32:6f:a2:
                    b7:bc:97:5a:f5:9d:c0:8c:e4:a8:bf:23:7d:e1:c9:
                    25:63:ad:aa:7f:21:1f:8e:b7:73:9a:56:a7:1f:0b:
                    9b:8c:4f:35:1e:c1:e5:3a:a4:d4:7d:11:d7:14:7f:
                    3c:33:b7:fa:b9:3c:80:46:ad:14:2e:08:59:de:15:
                    6d:7b:b4:dd:57:b8:8f:43:27:c1:53:57:a9:c5:7f:
                    2f:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:32:AB:9B:E8:D3:3D:FC:32:37:DB:19:BD:EA:EC:4E:3B:7E:D8:3B
            X509v3 Authority Key Identifier:
                keyid:3C:8E:05:12:E2:76:BA:DE:5A:DC:0C:81:C6:59:34:E0:34:3C:60:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36AAA81/94D74B4E4F2311EF9CE27067762E951A/PI4FEuJ2ut5a3AyBxlk04DQ8YB8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/PI4FEuJ2ut5a3AyBxlk04DQ8YB8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36AAA81/94D74B4E4F2311EF9CE27067762E951A/PI4FEuJ2ut5a3AyBxlk04DQ8YB8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bb:a4:c4:7c:95:d9:8e:69:ca:d6:ec:c8:07:49:e5:ec:1b:7a:
         40:5e:5b:67:29:af:24:80:05:38:23:da:5a:d3:3e:c4:31:88:
         68:35:cf:61:a7:df:b1:f9:55:9a:1c:b6:d0:e0:81:36:a0:ae:
         ff:b8:0f:b3:69:a7:ef:84:e9:2c:01:4c:48:cd:ce:7d:17:31:
         c0:2a:3e:2a:15:0b:ea:59:3b:c6:9d:b4:ba:61:6d:82:b7:b0:
         28:6a:74:f3:04:69:59:e2:98:fe:b2:ee:c3:2e:70:a4:21:68:
         51:7e:aa:b4:5d:35:26:d3:8e:3e:7e:b8:c1:b4:dd:c6:c5:32:
         a4:9a:1e:c9:26:03:ce:1f:74:78:ff:c3:80:1f:be:6b:1f:cb:
         57:f0:3d:e1:b5:b9:ca:d8:6d:8a:89:cc:a2:49:1b:01:ac:1b:
         e0:3a:17:3b:3a:63:1d:fe:8b:b4:bf:6e:04:38:b0:9c:08:c0:
         d5:f0:40:df:5f:a8:ac:81:99:17:27:2a:ed:f2:bd:e2:cd:00:
         41:fb:c6:81:a1:02:b0:29:a2:02:77:9f:ef:2a:94:b9:f0:75:
         c9:ad:37:98:5b:30:d7:c8:b9:2c:be:4a:81:20:b1:7d:e6:6a:
         80:19:14:83:57:ff:3f:03:0a:bb:2b:1b:6a:bf:4c:dd:a0:17:
         b1:ec:95:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 8 17:19:14 2025 by rpki-client