This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36B4C8A/8F7B80A2CC3B11F09E4F4EE3DAE4EC9C/sOM0w8FyGlubyhiSUD6QUkaIKTo.mft
File:                     sOM0w8FyGlubyhiSUD6QUkaIKTo.mft (raw, json)
Hash identifier:          Qe45L6m0Y3WXVQDXHRKtfUCXaXRWWqFWnscjgDNaQN8=
Subject key identifier:   88:39:C0:AE:73:ED:DA:41:EE:CF:DB:91:CB:C8:B4:5B:1C:D6:F6:D7
Authority key identifier: B0:E3:34:C3:C1:72:1A:5B:9B:CA:18:92:50:3E:90:52:46:88:29:3A
Certificate issuer:       /CN=F36B4C8AAF/serialNumber=B0E334C3C1721A5B9BCA1892503E90524688293A
Certificate serial:       10
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/sOM0w8FyGlubyhiSUD6QUkaIKTo.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36B4C8A/8F7B80A2CC3B11F09E4F4EE3DAE4EC9C/sOM0w8FyGlubyhiSUD6QUkaIKTo.mft
Manifest number:          0E
Signing time:             Mon 08 Dec 2025 05:22:58 +0000
Manifest this update:     Mon 08 Dec 2025 05:22:57 +0000
Manifest next update:     Wed 10 Dec 2025 05:22:57 +0000
Files and hashes:         1: sOM0w8FyGlubyhiSUD6QUkaIKTo.crl (hash: wjozwy+B4bib5+CIUmmq8XZkOoCVFWyEdF6l3E6Rvio=)
                          2: 4A0CDA10CC3C11F094748AE7DAE4EC9C.roa (hash: uoTxni0vC5SEB/kG6P4nz0RjmOt92nw/J4LO6zq7Ppg=)
                          3: AEBE6DA6CC3D11F0A0E3F5EFDAE4EC9C.roa (hash: IO+N7lJMSFwuh89yHL6Fm/wq2e70cnS2owajXPspnmI=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36B4C8A/8F7B80A2CC3B11F09E4F4EE3DAE4EC9C/sOM0w8FyGlubyhiSUD6QUkaIKTo.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36B4C8A/8F7B80A2CC3B11F09E4F4EE3DAE4EC9C/sOM0w8FyGlubyhiSUD6QUkaIKTo.mft
                          rsync://rpki.afrinic.net/repository/afrinic/sOM0w8FyGlubyhiSUD6QUkaIKTo.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 10 Dec 2025 00:06:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16 (0x10)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36B4C8AAF, serialNumber=B0E334C3C1721A5B9BCA1892503E90524688293A
        Validity
            Not Before: Dec  8 05:22:57 2025 GMT
            Not After : Dec 10 05:22:57 2025 GMT
        Subject: CN=693660b2-a71e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:be:3a:58:20:cd:27:1d:5e:c6:f5:0d:b6:65:
                    f4:f4:9f:dc:47:cf:94:0d:0c:ec:7b:e9:44:ff:de:
                    dc:f8:ab:8d:a8:f8:14:0f:b9:fe:7e:f6:0f:b0:86:
                    86:cc:8f:67:c2:fb:49:39:2e:f7:d4:7a:1b:ba:c4:
                    46:fc:17:e6:fa:61:44:de:0c:f8:38:26:55:78:be:
                    c9:a0:59:e8:00:6a:69:09:5b:d4:ec:6e:47:fa:22:
                    7b:47:30:b1:75:18:45:3b:89:cd:da:5e:3b:87:5c:
                    54:cc:53:09:94:f5:60:af:a0:63:d7:83:c2:47:45:
                    36:b9:71:ef:1d:90:1b:93:17:b9:f5:86:de:2b:02:
                    68:5e:83:f6:b2:e5:70:6f:44:c1:a8:15:df:fc:b5:
                    57:c9:40:23:f9:d5:a3:24:0b:87:7c:5d:cb:0f:07:
                    c8:47:46:b3:01:0f:06:18:7e:ff:85:92:cd:07:ec:
                    10:95:c7:54:23:6b:90:dd:46:56:64:5a:7f:d3:c4:
                    78:3b:1e:eb:f7:2f:2d:c8:2c:81:f2:94:2a:b5:1e:
                    c5:0a:5d:40:68:cf:76:8b:1f:15:86:9f:3b:40:39:
                    c1:cf:f9:95:40:42:11:a8:38:6c:0f:8f:ea:3b:a7:
                    76:91:fc:8b:6a:aa:2e:eb:8b:42:2a:f5:15:4e:28:
                    cd:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:39:C0:AE:73:ED:DA:41:EE:CF:DB:91:CB:C8:B4:5B:1C:D6:F6:D7
            X509v3 Authority Key Identifier:
                keyid:B0:E3:34:C3:C1:72:1A:5B:9B:CA:18:92:50:3E:90:52:46:88:29:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36B4C8A/8F7B80A2CC3B11F09E4F4EE3DAE4EC9C/sOM0w8FyGlubyhiSUD6QUkaIKTo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/sOM0w8FyGlubyhiSUD6QUkaIKTo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B4C8A/8F7B80A2CC3B11F09E4F4EE3DAE4EC9C/sOM0w8FyGlubyhiSUD6QUkaIKTo.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b7:a4:5b:28:ea:ba:47:cd:9c:74:46:8d:ce:c9:c0:f8:e8:43:
         ea:ac:91:0d:5d:59:4e:36:db:30:2f:a1:80:09:9d:32:70:62:
         65:a7:2a:c9:df:b8:43:ba:b6:35:c4:e5:2a:d4:76:8d:25:db:
         f9:62:6f:ed:78:d6:e5:2d:02:87:dd:6a:0a:48:1f:bc:92:bb:
         83:05:b6:b0:12:ed:9d:e3:b3:e6:f8:5e:7f:6d:ba:e6:05:43:
         8f:8a:48:27:64:49:30:0e:1a:eb:19:60:80:a3:da:4f:b0:21:
         dd:83:68:f2:c7:85:65:b6:6a:03:76:0c:4c:dc:35:99:62:ca:
         8e:fb:5c:7c:35:ae:f8:ec:46:e7:15:b9:01:a2:ba:1e:29:6e:
         eb:4a:9f:ac:bb:cb:fb:ba:34:bb:8c:ca:6d:98:47:1f:aa:dc:
         91:61:7b:5b:33:a5:50:44:d0:43:8b:f5:45:f7:09:a9:d7:39:
         be:36:6c:33:b4:70:01:ea:ab:11:96:0c:ce:c6:6f:62:80:0a:
         25:10:c2:51:b8:a5:e6:b2:c9:1e:cf:96:71:50:d2:eb:39:8f:
         2e:ba:e0:45:48:fa:8a:2d:9d:b6:69:69:02:45:9d:a0:67:86:
         2e:ce:95:d5:c7:a9:08:96:44:84:72:55:af:3c:62:34:b7:b5:
         24:e6:8e:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 8 17:16:40 2025 by rpki-client