This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36B222D/452A30E0B5E111F0B13E07F6DAE4EC9C/Ctw8-7fdAy2pn0jHpA2G8Pkc_ho.mft
File:                     Ctw8-7fdAy2pn0jHpA2G8Pkc_ho.mft (raw, json)
Hash identifier:          MEQ2A62TCiQFDXqtTl0pw/1irDT2hDVYoKYxlD6Z7jI=
Subject key identifier:   76:67:81:F8:D6:BD:BC:E0:64:3C:44:D4:37:95:02:2C:DC:A6:70:7A
Authority key identifier: 0A:DC:3C:FB:B7:DD:03:2D:A9:9F:48:C7:A4:0D:86:F0:F9:1C:FE:1A
Certificate issuer:       /CN=F36B222DAF/serialNumber=0ADC3CFBB7DD032DA99F48C7A40D86F0F91CFE1A
Certificate serial:       2B
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/Ctw8-7fdAy2pn0jHpA2G8Pkc_ho.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36B222D/452A30E0B5E111F0B13E07F6DAE4EC9C/Ctw8-7fdAy2pn0jHpA2G8Pkc_ho.mft
Manifest number:          2A
Signing time:             Mon 08 Dec 2025 05:18:10 +0000
Manifest this update:     Mon 08 Dec 2025 05:18:09 +0000
Manifest next update:     Wed 10 Dec 2025 05:18:09 +0000
Files and hashes:         1: Ctw8-7fdAy2pn0jHpA2G8Pkc_ho.crl (hash: OCwWj3OgFKfSOlNF5/Sh4sajX7mWDEbDymhEm7/obXc=)
                          2: C4BDCF3CB82B11F0B7DB80E1DAE4EC9C.roa (hash: tOfIeOAf4uXl6pOeSJ1Xju9VQWrYerPezpD2f2dwyfA=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36B222D/452A30E0B5E111F0B13E07F6DAE4EC9C/Ctw8-7fdAy2pn0jHpA2G8Pkc_ho.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36B222D/452A30E0B5E111F0B13E07F6DAE4EC9C/Ctw8-7fdAy2pn0jHpA2G8Pkc_ho.mft
                          rsync://rpki.afrinic.net/repository/afrinic/Ctw8-7fdAy2pn0jHpA2G8Pkc_ho.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 10 Dec 2025 00:06:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 43 (0x2b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36B222DAF, serialNumber=0ADC3CFBB7DD032DA99F48C7A40D86F0F91CFE1A
        Validity
            Not Before: Dec  8 05:18:09 2025 GMT
            Not After : Dec 10 05:18:09 2025 GMT
        Subject: CN=69365f91-9805
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:50:10:8d:81:9b:87:ac:f6:ca:ff:d8:6b:bc:
                    f1:bf:9b:54:c2:8c:0f:fd:d7:55:45:1b:8a:36:d2:
                    a3:f2:6b:35:dd:28:45:21:44:3c:23:77:24:54:2b:
                    74:0b:1e:cf:cc:10:bf:90:87:9e:d9:cb:0e:f3:9a:
                    f3:31:18:56:f8:e8:47:85:2f:59:6c:4d:58:f8:8e:
                    bc:0a:6d:f5:97:c6:81:8f:f7:af:ba:72:f0:cb:69:
                    22:ce:48:24:81:61:a6:ea:00:1e:bf:39:32:50:93:
                    a1:47:e3:98:1b:c9:84:4e:c5:a5:e4:e1:fa:fb:51:
                    9f:e1:58:b0:ac:bf:ba:4e:54:64:7c:27:32:56:e4:
                    71:54:52:c2:ae:35:3a:aa:fd:7c:41:7f:39:27:d3:
                    5e:95:9d:56:ff:b2:f9:5f:f5:29:d8:12:b5:2a:ed:
                    43:0b:2d:f7:66:d7:e9:d0:fb:91:03:f7:9b:8c:3a:
                    6e:55:3f:35:20:a2:fa:df:05:fb:52:2f:07:09:72:
                    e4:96:d5:c5:7d:6c:32:e0:ae:cf:ed:cd:dd:22:f2:
                    05:de:e1:82:c4:ac:8d:4a:55:28:0d:d8:9e:54:5f:
                    66:6f:83:a5:fe:e0:05:55:de:c2:19:46:82:6d:2b:
                    c6:47:93:51:d3:ed:93:39:92:bf:39:56:5d:4a:ab:
                    61:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:67:81:F8:D6:BD:BC:E0:64:3C:44:D4:37:95:02:2C:DC:A6:70:7A
            X509v3 Authority Key Identifier:
                keyid:0A:DC:3C:FB:B7:DD:03:2D:A9:9F:48:C7:A4:0D:86:F0:F9:1C:FE:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36B222D/452A30E0B5E111F0B13E07F6DAE4EC9C/Ctw8-7fdAy2pn0jHpA2G8Pkc_ho.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Ctw8-7fdAy2pn0jHpA2G8Pkc_ho.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B222D/452A30E0B5E111F0B13E07F6DAE4EC9C/Ctw8-7fdAy2pn0jHpA2G8Pkc_ho.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:99:c1:f5:2a:8f:a7:f7:61:3a:3c:7b:a8:dc:00:fb:3a:e8:
         e6:d7:69:94:52:8b:39:7f:7d:ed:07:6d:10:c4:63:3a:3c:65:
         f1:60:8a:19:d5:af:6e:d0:c9:32:3f:90:4e:29:32:db:e5:85:
         1e:ce:6d:e9:ee:c6:bd:a8:18:52:d1:85:3c:44:8f:71:9d:be:
         5e:53:c8:57:b5:b9:52:05:5e:4d:e8:55:f3:7b:4f:39:aa:a5:
         85:ef:ef:e0:08:57:1d:07:31:fa:25:72:a6:3b:59:4b:a7:ce:
         cc:73:15:6b:62:36:7d:e7:62:a4:b2:d8:f1:76:9f:13:51:75:
         f5:6d:79:37:b4:09:ab:73:21:5e:23:dd:ed:cb:bd:5c:34:a4:
         69:cc:cb:ca:4e:85:5f:8a:39:2f:76:d6:34:5d:9a:32:64:f9:
         40:e4:db:43:3d:47:99:dc:02:31:a8:c4:79:17:3d:82:f4:7b:
         75:28:d3:ee:18:b2:62:59:27:b5:ea:eb:9a:df:40:de:04:cc:
         28:3a:f3:b4:75:9e:4a:3d:a7:7f:66:7a:65:13:d8:15:2e:5b:
         26:c6:b4:12:cd:2a:9f:54:ad:c0:30:04:07:30:d1:23:bb:72:
         70:7a:6a:0b:04:d9:61:3f:43:fc:ad:0d:4c:99:72:9b:38:97:
         ee:62:f3:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 8 17:16:41 2025 by rpki-client