This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36B2CCC/62285B28A35311EF9929879A762E951A/IPoazDHazMuDL9LUtfzXWC-kIsk.mft
File:                     IPoazDHazMuDL9LUtfzXWC-kIsk.mft (raw, json)
Hash identifier:          GZq0WPGqp5xpiONuOE1mMH8vzQeZ3E12YP9jwbiJoIU=
Subject key identifier:   92:9F:74:6A:33:07:A3:93:8B:3F:E7:A1:33:00:27:DB:8E:05:3D:C3
Authority key identifier: 20:FA:1A:CC:31:DA:CC:CB:83:2F:D2:D4:B5:FC:D7:58:2F:A4:22:C9
Certificate issuer:       /CN=F36B2CCCAF/serialNumber=20FA1ACC31DACCCB832FD2D4B5FCD7582FA422C9
Certificate serial:       0191
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/IPoazDHazMuDL9LUtfzXWC-kIsk.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36B2CCC/62285B28A35311EF9929879A762E951A/IPoazDHazMuDL9LUtfzXWC-kIsk.mft
Manifest number:          0190
Signing time:             Mon 08 Dec 2025 04:40:44 +0000
Manifest this update:     Mon 08 Dec 2025 04:40:43 +0000
Manifest next update:     Wed 10 Dec 2025 04:40:43 +0000
Files and hashes:         1: IPoazDHazMuDL9LUtfzXWC-kIsk.crl (hash: 1KGa6cRPNnTMBJrKlGIAsQLcev2uX3k8qajxxpIcHks=)
                          2: 8327C434A35411EF974E14A1762E951A.roa (hash: TgV6J8OnLK9ODPkaOzrwonQ7ArSo3b7jgatmRvGo6BI=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36B2CCC/62285B28A35311EF9929879A762E951A/IPoazDHazMuDL9LUtfzXWC-kIsk.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36B2CCC/62285B28A35311EF9929879A762E951A/IPoazDHazMuDL9LUtfzXWC-kIsk.mft
                          rsync://rpki.afrinic.net/repository/afrinic/IPoazDHazMuDL9LUtfzXWC-kIsk.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 10 Dec 2025 00:06:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 401 (0x191)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36B2CCCAF, serialNumber=20FA1ACC31DACCCB832FD2D4B5FCD7582FA422C9
        Validity
            Not Before: Dec  8 04:40:43 2025 GMT
            Not After : Dec 10 04:40:43 2025 GMT
        Subject: CN=693656cc-b50a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:32:6e:2c:df:14:15:1b:08:35:de:77:c1:03:
                    2a:63:a0:8f:3d:ef:4f:fc:f3:14:4f:0a:08:6c:6b:
                    d0:2c:9d:e6:55:03:71:60:b7:16:8f:d5:33:1e:5f:
                    71:ee:80:ab:07:be:94:55:20:31:50:bd:d4:ae:49:
                    83:ba:23:e0:1a:b2:f2:71:d3:b9:07:46:36:e0:27:
                    0d:17:9c:cd:9f:a6:66:4d:4f:bc:8b:71:32:de:2b:
                    72:de:ee:b4:38:48:0a:bd:5f:78:07:b9:70:9a:bb:
                    c9:7f:5f:98:73:8e:5b:db:7e:c2:b2:44:73:3d:e5:
                    f4:5b:72:9b:3c:9a:25:36:92:e4:ef:01:8c:d5:ba:
                    6e:d7:43:ea:ed:80:75:b0:bc:f0:c3:28:66:86:2f:
                    09:65:cc:b4:83:0e:90:a6:7c:bd:04:9b:11:83:18:
                    ea:99:6c:ad:7f:f7:ac:18:3e:91:d1:51:11:ff:23:
                    55:51:a8:b3:1c:c6:af:60:62:5c:a8:7c:8a:91:40:
                    a9:ff:b9:df:a4:40:56:75:0c:86:d2:0e:fa:fa:88:
                    27:49:6e:6c:ef:a6:c1:27:62:cb:b8:1c:75:16:3c:
                    f6:3c:fa:d1:5b:c4:4b:3f:bf:99:e1:6a:35:76:3d:
                    5a:3b:06:22:00:ed:c3:9c:dc:8a:5a:e2:b0:21:62:
                    c7:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:9F:74:6A:33:07:A3:93:8B:3F:E7:A1:33:00:27:DB:8E:05:3D:C3
            X509v3 Authority Key Identifier:
                keyid:20:FA:1A:CC:31:DA:CC:CB:83:2F:D2:D4:B5:FC:D7:58:2F:A4:22:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36B2CCC/62285B28A35311EF9929879A762E951A/IPoazDHazMuDL9LUtfzXWC-kIsk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/IPoazDHazMuDL9LUtfzXWC-kIsk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B2CCC/62285B28A35311EF9929879A762E951A/IPoazDHazMuDL9LUtfzXWC-kIsk.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bf:ed:83:b3:5a:ac:3f:59:59:b2:7c:2a:0d:46:18:4b:cb:e6:
         3f:46:e6:7f:64:d2:8b:b2:4e:5d:98:8b:c9:42:10:c2:79:0d:
         44:be:6a:fe:ab:b9:6c:35:e2:d2:21:7c:62:67:74:69:de:ce:
         43:da:e5:2f:0f:05:48:e1:3d:06:09:3c:5d:46:47:15:55:36:
         9d:d1:9f:06:b3:2a:23:61:ce:7c:95:c8:4f:47:a5:93:6b:6a:
         f7:84:7b:44:ac:53:99:5d:c9:88:c2:e1:70:b5:56:84:ae:13:
         72:cd:83:81:f6:1b:f8:14:37:be:5e:41:e5:e2:ac:97:1a:09:
         b2:b5:3a:a3:9f:15:40:8b:0a:7f:64:20:e9:6f:04:cc:56:3d:
         14:88:fa:e4:12:b2:90:89:d6:c4:7d:a2:f6:30:32:a2:53:31:
         29:42:bf:83:c0:c4:39:95:ff:c4:ce:1e:a1:c6:54:63:8a:13:
         62:d9:78:be:64:27:c7:1f:f5:88:d3:b1:a9:d0:11:5d:2e:b4:
         f5:7e:48:c8:2e:a1:65:9a:0e:7d:c4:aa:cf:c8:d8:1a:74:d5:
         42:72:a7:09:d8:31:2c:3a:37:ee:85:fd:02:ce:8f:c5:28:b0:
         78:bc:e5:1d:fe:04:03:d3:5d:94:d6:db:a3:43:01:78:db:1b:
         41:97:a0:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 8 17:09:04 2025 by rpki-client