This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36AB1CD/9D49B92681BC11EA92D8485EF8AEA228/NewylCgvp6NUePgvkJSwP-Jgb7Y.mft
File:                     NewylCgvp6NUePgvkJSwP-Jgb7Y.mft (raw, json)
Hash identifier:          LHwgMYCe7MAQCOxcDIkLzXxnNXuzLzzjahkVLVKdVBI=
Subject key identifier:   7E:EE:BC:47:93:B2:65:65:F2:83:36:1F:BF:72:3C:58:10:71:D2:D3
Authority key identifier: 35:EC:32:94:28:2F:A7:A3:54:78:F8:2F:90:94:B0:3F:E2:60:6F:B6
Certificate issuer:       /CN=F36AB1CDAF/serialNumber=35EC3294282FA7A35478F82F9094B03FE2606FB6
Certificate serial:       0850
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/NewylCgvp6NUePgvkJSwP-Jgb7Y.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36AB1CD/9D49B92681BC11EA92D8485EF8AEA228/NewylCgvp6NUePgvkJSwP-Jgb7Y.mft
Manifest number:          084A
Signing time:             Mon 08 Dec 2025 01:45:25 +0000
Manifest this update:     Mon 08 Dec 2025 01:45:24 +0000
Manifest next update:     Wed 10 Dec 2025 01:45:24 +0000
Files and hashes:         1: NewylCgvp6NUePgvkJSwP-Jgb7Y.crl (hash: dWuNS0gXBIth/ANaJmJFaLBd/coVcsi14HVwOaaOTXU=)
                          2: 274D32BAA87211F0A513AFDCDAE4EC9C.roa (hash: dMmC61qu86t31B1siiWb387Uypaf5odQkXtxFjVGQaY=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36AB1CD/9D49B92681BC11EA92D8485EF8AEA228/NewylCgvp6NUePgvkJSwP-Jgb7Y.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36AB1CD/9D49B92681BC11EA92D8485EF8AEA228/NewylCgvp6NUePgvkJSwP-Jgb7Y.mft
                          rsync://rpki.afrinic.net/repository/afrinic/NewylCgvp6NUePgvkJSwP-Jgb7Y.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 10 Dec 2025 00:06:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2128 (0x850)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36AB1CDAF, serialNumber=35EC3294282FA7A35478F82F9094B03FE2606FB6
        Validity
            Not Before: Dec  8 01:45:24 2025 GMT
            Not After : Dec 10 01:45:24 2025 GMT
        Subject: CN=69362db5-8052
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:6b:24:de:61:72:55:ea:7f:58:de:a4:46:74:
                    7b:3b:42:8d:a0:ab:4d:46:12:53:af:71:81:30:ad:
                    03:37:7c:8d:7c:07:93:eb:11:7b:b6:6f:9f:02:c4:
                    4d:9e:8c:5e:bf:d5:b7:83:32:3e:40:b3:03:13:be:
                    b4:f0:b1:e3:b2:90:18:73:bc:ad:f1:f8:6e:0c:60:
                    96:ef:0d:b1:ec:98:ef:99:fa:62:88:91:4c:ac:41:
                    5d:d5:1d:57:be:7b:83:db:4d:ca:73:e3:ae:34:1f:
                    99:e2:b2:20:55:be:09:3c:35:c7:45:ea:1b:7b:60:
                    ae:22:03:dd:d1:b5:19:a7:c6:69:5f:21:37:28:45:
                    70:00:69:43:dc:a5:ff:88:ee:50:62:9a:0c:3f:76:
                    75:65:bc:45:25:71:b6:e4:3b:ff:88:dd:24:d4:e6:
                    c4:9b:b6:5b:a9:d4:4f:bc:e8:c8:f2:4e:76:de:63:
                    66:49:bf:7d:1c:1f:ee:80:2f:0b:12:ea:e6:75:90:
                    58:99:a1:0e:72:27:c5:37:29:11:63:a3:91:b9:43:
                    00:71:8b:08:12:e3:fc:69:e1:90:f5:45:ec:ce:c2:
                    b1:0b:cf:d6:75:8f:08:d2:8a:2e:28:cc:a6:31:79:
                    25:76:94:ba:02:1a:91:23:fc:ae:eb:c2:9d:b2:8b:
                    64:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:EE:BC:47:93:B2:65:65:F2:83:36:1F:BF:72:3C:58:10:71:D2:D3
            X509v3 Authority Key Identifier:
                keyid:35:EC:32:94:28:2F:A7:A3:54:78:F8:2F:90:94:B0:3F:E2:60:6F:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36AB1CD/9D49B92681BC11EA92D8485EF8AEA228/NewylCgvp6NUePgvkJSwP-Jgb7Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/NewylCgvp6NUePgvkJSwP-Jgb7Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36AB1CD/9D49B92681BC11EA92D8485EF8AEA228/NewylCgvp6NUePgvkJSwP-Jgb7Y.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:28:82:26:df:df:37:7a:92:99:47:bd:f2:d6:a8:2a:cf:a3:
         f1:48:1b:4e:e1:b5:96:ce:ab:64:2b:a1:77:a7:16:21:99:35:
         48:d8:b2:96:38:1a:67:40:ec:e9:e8:bf:2c:5d:79:60:a8:3b:
         5b:77:50:4d:ef:53:cc:91:fb:a5:16:4e:db:84:69:1d:87:38:
         fd:87:5b:9c:a4:9f:b8:be:44:6d:ac:91:f0:6c:3b:4d:4d:3c:
         a1:5e:85:c1:8b:a4:26:c5:82:ad:8b:50:3e:6e:78:65:70:cd:
         4f:c8:04:87:74:68:14:94:fb:61:e7:7e:e1:f0:50:0a:f0:b0:
         fe:53:2a:af:f8:ff:0a:d4:53:50:fb:09:56:39:bf:17:c8:30:
         cf:de:30:69:e4:9b:60:b0:43:b7:26:fa:ab:f5:15:47:6b:c7:
         60:b2:49:65:10:d3:ae:2f:ab:d1:02:25:21:22:97:a4:6f:c1:
         91:36:12:c1:73:1c:fe:db:56:2c:4d:08:ea:7a:b0:35:72:cf:
         29:a7:77:2e:09:92:a8:b2:07:5f:1a:c5:39:98:98:66:d7:fc:
         f1:1d:bb:5b:49:f1:e4:ca:40:2c:58:b8:76:5d:61:b8:f1:73:
         d6:78:42:28:fe:3f:a2:0f:dd:74:54:b9:b3:20:59:bd:d4:a8:
         70:33:c7:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 8 17:08:58 2025 by rpki-client