This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36B1FB2/ECBC7E829F8311EA84591537F8AEA228/-kNarmNKJJQBjFzfiFcJr1vONro.mft
File:                     -kNarmNKJJQBjFzfiFcJr1vONro.mft (raw, json)
Hash identifier:          5MS0cfgA+9t+pzcEEhJdEIKI9mPIIoiD1XMI9AqMr/s=
Subject key identifier:   AE:16:2D:25:BF:1E:7B:70:73:26:09:88:03:DA:CE:2C:10:A9:54:DB
Authority key identifier: FA:43:5A:AE:63:4A:24:94:01:8C:5C:DF:88:57:09:AF:5B:CE:36:BA
Certificate issuer:       /CN=F36B1FB2AF/serialNumber=FA435AAE634A2494018C5CDF885709AF5BCE36BA
Certificate serial:       0818
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/-kNarmNKJJQBjFzfiFcJr1vONro.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36B1FB2/ECBC7E829F8311EA84591537F8AEA228/-kNarmNKJJQBjFzfiFcJr1vONro.mft
Manifest number:          0818
Signing time:             Mon 08 Dec 2025 01:49:28 +0000
Manifest this update:     Mon 08 Dec 2025 01:49:27 +0000
Manifest next update:     Wed 10 Dec 2025 01:49:27 +0000
Files and hashes:         1: -kNarmNKJJQBjFzfiFcJr1vONro.crl (hash: DQfRLW/Gb/CjSMAlN3eNvTMpPRDYJ8LTPYTIE5haMy8=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36B1FB2/ECBC7E829F8311EA84591537F8AEA228/-kNarmNKJJQBjFzfiFcJr1vONro.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36B1FB2/ECBC7E829F8311EA84591537F8AEA228/-kNarmNKJJQBjFzfiFcJr1vONro.mft
                          rsync://rpki.afrinic.net/repository/afrinic/-kNarmNKJJQBjFzfiFcJr1vONro.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 10 Dec 2025 00:06:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2072 (0x818)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36B1FB2AF, serialNumber=FA435AAE634A2494018C5CDF885709AF5BCE36BA
        Validity
            Not Before: Dec  8 01:49:27 2025 GMT
            Not After : Dec 10 01:49:27 2025 GMT
        Subject: CN=69362ea8-9fda
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:e9:d7:b7:dd:e4:8a:c5:91:e0:57:e9:dc:da:
                    90:05:66:64:c3:9c:3d:25:ff:7c:b6:b3:9c:9b:9f:
                    ca:81:ad:cf:53:df:21:ba:b4:f9:98:b3:90:86:0b:
                    b6:18:a9:37:6e:80:dc:ee:47:5b:44:ab:a4:b4:2f:
                    82:f9:94:bb:78:14:3e:e1:7b:db:31:d2:5c:d7:e7:
                    9f:ca:25:d7:70:fb:19:20:35:1a:77:52:c4:e1:cb:
                    f9:c7:30:ff:33:89:32:c0:59:ff:bc:d3:c4:e8:49:
                    f5:8d:35:a1:e3:c6:92:68:2d:61:08:ee:b4:06:5a:
                    f7:2a:f6:75:eb:7a:4c:c5:18:9d:89:16:79:f9:ba:
                    0c:d6:ab:cd:08:52:e7:e7:8e:69:99:f2:79:8b:9a:
                    01:7a:cd:5e:2e:ac:12:bf:3d:ac:d8:67:4b:8c:5e:
                    bf:13:07:85:bc:ed:de:dc:8f:32:d3:9c:03:41:28:
                    96:1f:a1:f1:f7:ce:4a:23:06:fb:9c:e2:18:18:5e:
                    00:64:85:06:db:58:5d:de:fe:4d:69:28:0d:a5:fa:
                    23:d5:d7:d3:88:4a:e1:f5:37:54:35:92:c0:47:18:
                    7b:96:4b:90:88:a4:9f:31:92:45:4a:ce:0c:cf:89:
                    bd:a6:3b:fa:ff:e9:c4:e0:46:d4:36:eb:a6:83:b0:
                    2f:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:16:2D:25:BF:1E:7B:70:73:26:09:88:03:DA:CE:2C:10:A9:54:DB
            X509v3 Authority Key Identifier:
                keyid:FA:43:5A:AE:63:4A:24:94:01:8C:5C:DF:88:57:09:AF:5B:CE:36:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36B1FB2/ECBC7E829F8311EA84591537F8AEA228/-kNarmNKJJQBjFzfiFcJr1vONro.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/-kNarmNKJJQBjFzfiFcJr1vONro.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B1FB2/ECBC7E829F8311EA84591537F8AEA228/-kNarmNKJJQBjFzfiFcJr1vONro.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:cf:4c:60:e5:a2:42:b0:29:8f:ab:49:77:b7:06:2a:80:63:
         82:61:5b:eb:49:7f:74:67:be:d5:95:f6:32:3a:63:b5:f3:30:
         24:f6:21:92:ba:53:20:27:12:6e:b9:ff:87:d1:a6:5f:e3:a9:
         da:ab:4f:1d:7a:48:1c:ff:6e:22:b2:13:3a:08:30:e1:50:3c:
         80:84:ee:54:c3:18:42:9f:fa:87:16:7a:4d:92:2f:07:bc:93:
         7b:c2:11:26:94:da:f4:e0:5b:88:0d:bf:1d:c4:54:49:66:dd:
         04:ed:40:86:e4:b7:5a:a2:e9:41:c1:19:a6:12:e7:fa:ec:e0:
         8e:37:c4:58:2a:fd:8e:32:5a:d7:f1:c5:e5:85:f4:a6:e7:19:
         ca:12:10:b4:4e:eb:7d:1b:f0:05:b7:ef:01:4e:a4:16:a0:9d:
         b2:d7:69:6b:31:18:f8:6d:a9:5b:21:a9:89:aa:20:11:61:34:
         06:01:5f:cd:b1:7c:11:a3:07:7f:19:01:68:51:55:2b:17:c0:
         70:7a:c2:c1:15:e3:1f:f8:a7:52:f8:a0:2b:fe:03:89:46:53:
         4f:a2:0d:4d:d5:a2:3c:73:4d:fb:74:9b:fe:78:dd:63:53:f0:
         7d:f7:d8:a1:c8:67:76:e7:fa:be:5c:f4:ae:0a:b0:e6:ce:77:
         b5:4b:b4:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 8 17:20:49 2025 by rpki-client