This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36B52A6/6AE307B66FFD11E9A69CC134F8AEA228/Ga2syP-jkxMYpsdToKwbKukpXgM.mft
File:                     Ga2syP-jkxMYpsdToKwbKukpXgM.mft (raw, json)
Hash identifier:          mJTnno6HsKk9vHRkLICBVrPVVXqRLJLf6d4gREyRDoo=
Subject key identifier:   70:A1:D4:38:10:CF:E6:5F:B6:04:C6:CF:F4:79:16:0D:FE:A8:47:CC
Authority key identifier: 19:AD:AC:C8:FF:A3:93:13:18:A6:C7:53:A0:AC:1B:2A:E9:29:5E:03
Certificate issuer:       /CN=F36B52A6AF/serialNumber=19ADACC8FFA3931318A6C753A0AC1B2AE9295E03
Certificate serial:       09BE
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/Ga2syP-jkxMYpsdToKwbKukpXgM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36B52A6/6AE307B66FFD11E9A69CC134F8AEA228/Ga2syP-jkxMYpsdToKwbKukpXgM.mft
Manifest number:          09B3
Signing time:             Mon 08 Dec 2025 01:18:19 +0000
Manifest this update:     Mon 08 Dec 2025 01:18:18 +0000
Manifest next update:     Wed 10 Dec 2025 01:18:18 +0000
Files and hashes:         1: Ga2syP-jkxMYpsdToKwbKukpXgM.crl (hash: uC+j6fAOpRqheRKIIH7/Q8f1o7GGKC8OY9Mqdehffdc=)
                          2: 40F0EA0C864C11EF8B0D4162762E951A.roa (hash: 5nZTReAvtcbgPm+oRDhQ83p7XciRK3gVMtmCqG06N7Q=)
                          3: 19DBEAFC864C11EF91E74660762E951A.roa (hash: ssNbfh+xyxoJkv8ui9GVFM6RQk48tyv7Wmx8dqGtWao=)
                          4: 8F04BF5C864C11EF8F687464762E951A.roa (hash: MFVB+4npBxn/Yh83eigumhh31Iuk3EG7QH/ll1Qzce0=)
                          5: DF0FB1A6864B11EFAA421C60762E951A.roa (hash: wcCwWJ/0MHVkGO7m4+40u82BAL5x3asIQ+jyQE9ovPY=)
                          6: 325E4A4E864B11EF9931C05B762E951A.roa (hash: uilxINn6WdcvcjXq+Nwl5lpnynygHnR6cPspfvXc/m0=)
                          7: EB320A3E864511EF82F333B8762E951A.roa (hash: AOcstZS+3TqPjLs5Onnwkaac6jTexzGQCvTnjKOL0G4=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36B52A6/6AE307B66FFD11E9A69CC134F8AEA228/Ga2syP-jkxMYpsdToKwbKukpXgM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36B52A6/6AE307B66FFD11E9A69CC134F8AEA228/Ga2syP-jkxMYpsdToKwbKukpXgM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/Ga2syP-jkxMYpsdToKwbKukpXgM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 10 Dec 2025 00:06:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2494 (0x9be)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36B52A6AF, serialNumber=19ADACC8FFA3931318A6C753A0AC1B2AE9295E03
        Validity
            Not Before: Dec  8 01:18:18 2025 GMT
            Not After : Dec 10 01:18:18 2025 GMT
        Subject: CN=6936275b-2104
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:9c:08:d3:69:d3:90:2d:2f:b0:3c:c3:44:9d:
                    8e:bc:10:f7:9c:c2:2c:62:cd:a7:97:5f:57:c4:ca:
                    c1:fa:9b:a8:eb:13:a2:12:bf:c9:fd:75:06:de:a0:
                    6d:f0:b5:27:40:e7:26:d7:10:5d:b6:3a:03:54:87:
                    eb:83:47:8a:02:3e:3a:f9:33:7d:36:e3:81:4f:c8:
                    c6:23:d9:2e:ac:59:78:6d:68:dc:87:d6:51:ad:94:
                    7f:2d:a0:3e:31:7c:ed:3c:db:1d:d3:24:00:a2:8e:
                    c1:1e:20:f5:b2:a6:86:23:7e:b3:cf:29:18:3e:8c:
                    6c:60:d9:5a:a3:10:1a:e2:e7:ac:99:58:2d:05:71:
                    48:17:de:49:44:26:e4:be:68:34:0f:06:ab:2c:15:
                    a2:3b:59:4b:8c:6c:6d:4c:b1:4f:56:aa:da:a4:d9:
                    b1:2c:05:d3:63:67:66:3f:de:ba:90:66:3e:07:6a:
                    ee:37:07:33:d0:fa:9a:5c:e8:de:38:27:7d:4c:2d:
                    3c:79:a0:75:82:01:9d:f6:40:1e:de:e5:1d:28:87:
                    00:17:4d:7b:15:84:c2:ff:97:74:7e:b5:53:b4:86:
                    a9:38:8f:4e:e6:83:73:46:1e:38:41:9b:8e:29:d2:
                    76:ea:97:0b:b5:23:91:57:67:96:98:17:93:b4:83:
                    53:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:A1:D4:38:10:CF:E6:5F:B6:04:C6:CF:F4:79:16:0D:FE:A8:47:CC
            X509v3 Authority Key Identifier:
                keyid:19:AD:AC:C8:FF:A3:93:13:18:A6:C7:53:A0:AC:1B:2A:E9:29:5E:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36B52A6/6AE307B66FFD11E9A69CC134F8AEA228/Ga2syP-jkxMYpsdToKwbKukpXgM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Ga2syP-jkxMYpsdToKwbKukpXgM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B52A6/6AE307B66FFD11E9A69CC134F8AEA228/Ga2syP-jkxMYpsdToKwbKukpXgM.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:4d:83:2b:c1:70:83:95:b5:19:0b:d9:eb:27:2d:d9:04:0f:
         34:32:25:c7:e8:e1:3c:79:e5:09:b5:b2:1a:10:a8:fe:c7:ca:
         9c:4d:fb:40:d2:83:49:c7:c5:76:de:cb:e7:b3:ef:13:ae:86:
         05:df:8e:60:ce:35:b4:71:21:94:84:7e:c5:a6:1e:b0:6b:fb:
         96:94:cb:bd:7f:5c:6b:aa:cf:fc:78:59:3e:51:0b:ca:fd:3e:
         53:7d:e7:70:1e:fa:29:89:58:80:07:c9:a0:00:a4:c6:44:cf:
         52:10:38:57:65:eb:06:4c:48:59:29:40:f7:31:97:4b:da:51:
         23:73:72:19:ae:06:1b:51:68:49:4c:ac:5c:c3:c0:59:cc:cd:
         8b:46:08:4d:40:63:cb:d4:d5:9b:5c:87:25:71:8f:61:bc:a3:
         8a:27:e1:5a:7d:a4:8d:dd:89:cf:fc:ba:d1:21:49:d5:2f:32:
         0b:a8:bc:43:cb:0f:76:db:50:41:c8:24:a1:21:50:d1:42:d3:
         4a:b4:1c:ab:03:4b:bb:4a:fd:21:a8:cd:f7:9e:cf:dd:20:fa:
         35:5b:ad:31:ba:69:10:54:14:4c:e0:ba:e1:11:06:01:fd:ea:
         4f:be:f2:01:c4:a5:a8:e6:c1:c2:4e:10:cc:9c:47:10:1e:0d:
         94:ba:f1:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 8 17:07:20 2025 by rpki-client