This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36AF9EE/90DED0CC0DCC11E59C25B724F8AEA228/-ardXUWuw8xVsfhJ4vzOB289bjQ.mft
File:                     -ardXUWuw8xVsfhJ4vzOB289bjQ.mft (raw, json)
Hash identifier:          lKIh0rDD87/WEHu6Qm9Kp4QYEjk66VeLh5Ik/2m/z6k=
Subject key identifier:   20:27:27:D7:3B:89:64:D4:28:8F:C8:86:0B:19:56:CB:01:EB:14:0A
Authority key identifier: F9:AA:DD:5D:45:AE:C3:CC:55:B1:F8:49:E2:FC:CE:07:6F:3D:6E:34
Certificate issuer:       /CN=F36AF9EEAF/serialNumber=F9AADD5D45AEC3CC55B1F849E2FCCE076F3D6E34
Certificate serial:       0F98
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/-ardXUWuw8xVsfhJ4vzOB289bjQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36AF9EE/90DED0CC0DCC11E59C25B724F8AEA228/-ardXUWuw8xVsfhJ4vzOB289bjQ.mft
Manifest number:          0F7F
Signing time:             Mon 08 Dec 2025 00:51:03 +0000
Manifest this update:     Mon 08 Dec 2025 00:51:02 +0000
Manifest next update:     Wed 10 Dec 2025 00:51:02 +0000
Files and hashes:         1: -ardXUWuw8xVsfhJ4vzOB289bjQ.crl (hash: lGGzbhk5svdYxDjo39Dg/SCwcwepHW88D6+HZH+jshM=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36AF9EE/90DED0CC0DCC11E59C25B724F8AEA228/-ardXUWuw8xVsfhJ4vzOB289bjQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36AF9EE/90DED0CC0DCC11E59C25B724F8AEA228/-ardXUWuw8xVsfhJ4vzOB289bjQ.mft
                          rsync://rpki.afrinic.net/repository/afrinic/-ardXUWuw8xVsfhJ4vzOB289bjQ.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 10 Dec 2025 00:06:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3992 (0xf98)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36AF9EEAF, serialNumber=F9AADD5D45AEC3CC55B1F849E2FCCE076F3D6E34
        Validity
            Not Before: Dec  8 00:51:02 2025 GMT
            Not After : Dec 10 00:51:02 2025 GMT
        Subject: CN=693620f7-daae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:8b:7e:fd:a8:07:19:15:36:2b:09:28:8c:8c:
                    49:f3:b2:4f:4a:a6:e5:1e:9a:9b:18:04:00:1d:69:
                    b3:6b:ae:be:89:c2:8f:65:f1:1f:c4:92:0c:66:fa:
                    40:31:dd:4d:11:56:36:7b:38:20:20:a2:cf:bc:2d:
                    de:8d:df:88:c6:05:a9:94:16:d6:8a:23:da:27:3c:
                    10:d6:89:2b:57:43:85:b0:51:46:37:ad:7c:bc:6f:
                    e2:8c:5d:7e:44:77:66:9b:6e:a1:f2:c8:d6:b4:c5:
                    4a:bb:2c:b1:62:ad:11:e3:92:ea:d4:8a:cf:8e:a7:
                    53:63:91:56:59:e8:34:fc:97:e7:da:fc:22:70:f5:
                    c4:29:75:f3:22:13:52:1e:94:d8:fe:a5:d8:15:0d:
                    4b:67:0b:bb:74:05:a2:bb:06:b1:0a:d5:f8:27:8b:
                    71:d7:dd:99:b9:c9:63:03:df:be:b8:bd:f4:c8:85:
                    b5:af:70:51:6b:b5:20:be:1a:c8:7f:ba:a4:bd:75:
                    0e:14:38:14:00:a5:dd:ca:1a:78:c0:c2:17:38:ac:
                    d2:b6:0e:4d:3f:55:99:f7:ed:64:58:92:6c:69:b2:
                    23:34:8e:e9:c8:af:89:19:89:5d:af:17:78:4c:61:
                    8f:51:3e:ad:be:55:b8:9e:76:8d:7b:ff:07:11:79:
                    df:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:27:27:D7:3B:89:64:D4:28:8F:C8:86:0B:19:56:CB:01:EB:14:0A
            X509v3 Authority Key Identifier:
                keyid:F9:AA:DD:5D:45:AE:C3:CC:55:B1:F8:49:E2:FC:CE:07:6F:3D:6E:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36AF9EE/90DED0CC0DCC11E59C25B724F8AEA228/-ardXUWuw8xVsfhJ4vzOB289bjQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/-ardXUWuw8xVsfhJ4vzOB289bjQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36AF9EE/90DED0CC0DCC11E59C25B724F8AEA228/-ardXUWuw8xVsfhJ4vzOB289bjQ.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:fa:90:c3:dc:79:1b:21:06:2b:df:20:f2:c9:07:18:b7:77:
         6f:d2:e2:c9:d7:b2:48:f4:93:8d:67:89:b8:de:1a:5b:96:75:
         6e:fb:19:b6:20:a2:0b:8b:1a:3f:db:c6:da:72:a5:6d:f8:86:
         bb:c9:3e:17:40:06:e2:ec:2d:f5:61:35:e4:f3:f9:7e:25:4a:
         2c:e4:44:0d:da:31:88:b7:04:85:0e:9c:53:b8:8e:a7:d7:59:
         e7:d6:fb:b2:0c:e1:de:0f:d0:ed:d4:d7:94:0c:81:4b:f2:64:
         78:1d:df:02:34:30:79:81:ca:ad:ec:a0:87:99:d6:96:a7:08:
         14:51:b8:8b:04:5c:53:aa:97:fd:60:14:2f:be:de:91:8f:c6:
         05:fe:a4:2b:42:6e:37:0b:38:10:36:ee:35:dc:44:36:67:cd:
         07:fb:36:33:6d:39:77:c6:36:14:dd:e2:1e:27:15:3a:af:af:
         f4:1f:38:5e:ba:6b:dc:2b:7d:ed:14:23:06:67:27:3a:dd:06:
         48:39:2f:c1:60:90:64:1c:82:af:0e:b1:be:47:f6:97:5f:9f:
         d8:d9:41:03:eb:58:16:ae:d0:99:4b:4a:2f:a3:b5:aa:af:5b:
         51:e3:75:57:f0:3b:5c:b2:34:8b:0b:5b:ac:ba:ee:74:fa:4e:
         bd:d0:bb:d1
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICD5gwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QUY5RUVBRjExMC8GA1UEBRMoRjlBQURENUQ0NUFFQzNDQzU1QjFGODQ5RTJGQ0NF
MDc2RjNENkUzNDAeFw0yNTEyMDgwMDUxMDJaFw0yNTEyMTAwMDUxMDJaMBgxFjAU
BgNVBAMTDTY5MzYyMGY3LWRhYWUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDci379qAcZFTYrCSiMjEnzsk9KpuUempsYBAAdabNrrr6Jwo9l8R/Ekgxm
+kAx3U0RVjZ7OCAgos+8Ld6N34jGBamUFtaKI9onPBDWiStXQ4WwUUY3rXy8b+KM
XX5Ed2abbqHyyNa0xUq7LLFirRHjkurUis+Op1NjkVZZ6DT8l+fa/CJw9cQpdfMi
E1IelNj+pdgVDUtnC7t0BaK7BrEK1fgni3HX3Zm5yWMD3764vfTIhbWvcFFrtSC+
Gsh/uqS9dQ4UOBQApd3KGnjAwhc4rNK2Dk0/VZn37WRYkmxpsiM0junIr4kZiV2v
F3hMYY9RPq2+Vbiedo17/wcRed8/AgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUICcn
1zuJZNQoj8iGCxlWywHrFAowHwYDVR0jBBgwFoAU+ardXUWuw8xVsfhJ4vzOB289
bjQwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkFGOUVFLzkwREVEMENDMERDQzExRTU5QzI1QjcyNEY4QUVBMjI4Ly1hcmRY
VVd1dzh4VnNmaEo0dnpPQjI4OWJqUS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljLy1hcmRYVVd1dzh4VnNmaEo0dnpPQjI4OWJqUS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2QUY5RUUvOTBERUQwQ0MwRENDMTFFNTlDMjVCNzI0RjhB
RUEyMjgvLWFyZFhVV3V3OHhWc2ZoSjR2ek9CMjg5YmpRLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCY+pDD3HkbIQYr3yDyyQcYt3dv0uLJ
17JI9JONZ4m43hpblnVu+xm2IKILixo/28bacqVt+Ia7yT4XQAbi7C31YTXk8/l+
JUos5EQN2jGItwSFDpxTuI6n11nn1vuyDOHeD9Dt1NeUDIFL8mR4Hd8CNDB5gcqt
7KCHmdaWpwgUUbiLBFxTqpf9YBQvvt6Rj8YF/qQrQm43CzgQNu413EQ2Z80H+zYz
bTl3xjYU3eIeJxU6r6/0HzheumvcK33tFCMGZyc63QZIOS/BYJBkHIKvDrG+R/aX
X5/Y2UED61gWrtCZS0ovo7Wqr1tR43VX8DtcsjSLC1usuu50+k690LvR
-----END CERTIFICATE-----
Generated at Mon Dec 8 17:09:15 2025 by rpki-client