This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36B665C/4ED166A4AA2211ED833D5FE6F1222468/LGoJiRwP7ADgo5_HfDIoMabr-Xk.mft
File:                     LGoJiRwP7ADgo5_HfDIoMabr-Xk.mft (raw, json)
Hash identifier:          /T2toXHviB6ycliTQpsib/jZmFNtp3ztUa/WXE1F0Jg=
Subject key identifier:   62:72:3A:2D:22:2D:E0:86:71:B2:01:83:EC:57:96:7F:2E:0E:B1:C6
Authority key identifier: 2C:6A:09:89:1C:0F:EC:00:E0:A3:9F:C7:7C:32:28:31:A6:EB:F9:79
Certificate issuer:       /CN=F36B665CAF/serialNumber=2C6A09891C0FEC00E0A39FC77C322831A6EBF979
Certificate serial:       043D
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/LGoJiRwP7ADgo5_HfDIoMabr-Xk.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36B665C/4ED166A4AA2211ED833D5FE6F1222468/LGoJiRwP7ADgo5_HfDIoMabr-Xk.mft
Manifest number:          043A
Signing time:             Sat 20 Dec 2025 03:16:48 +0000
Manifest this update:     Sat 20 Dec 2025 03:16:48 +0000
Manifest next update:     Mon 22 Dec 2025 03:16:48 +0000
Files and hashes:         1: LGoJiRwP7ADgo5_HfDIoMabr-Xk.crl (hash: 5Nudrf8e4zx/PQhsMUglMFjsQV1MmzHOORoAzDQuUgw=)
                          2: 2ABD80D2C13411F0AD109DEBDAE4EC9C.roa (hash: tUKltNBSVOXmWEDpCanmFgVIXoiOPsSX9STsk3muu/Y=)
                          3: D6BCB23CAA2511ED900EFAEFF1222468.roa (hash: OxJceCLxLN2HEtk5IYbEb+LCfIUbND+00xlfPzw4WkM=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36B665C/4ED166A4AA2211ED833D5FE6F1222468/LGoJiRwP7ADgo5_HfDIoMabr-Xk.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36B665C/4ED166A4AA2211ED833D5FE6F1222468/LGoJiRwP7ADgo5_HfDIoMabr-Xk.mft
                          rsync://rpki.afrinic.net/repository/afrinic/LGoJiRwP7ADgo5_HfDIoMabr-Xk.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 22 Dec 2025 00:06:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1085 (0x43d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36B665CAF, serialNumber=2C6A09891C0FEC00E0A39FC77C322831A6EBF979
        Validity
            Not Before: Dec 20 03:16:48 2025 GMT
            Not After : Dec 22 03:16:48 2025 GMT
        Subject: CN=69461520-521e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:34:29:97:bb:22:3a:78:c4:0c:bc:38:5b:bb:
                    f3:46:87:ec:10:c6:2a:1c:3c:7b:b2:53:d0:a2:3e:
                    11:44:92:4c:c6:f8:bf:c3:28:19:02:e0:33:fc:58:
                    85:03:9c:8d:a9:d1:88:1e:c6:be:cf:18:bc:b3:9c:
                    3b:d6:50:4c:ec:79:ba:4a:45:03:ae:99:5d:2f:0d:
                    2e:3a:91:5d:5d:d7:c4:c9:c1:f4:af:94:1b:40:3d:
                    5d:19:66:8d:5e:77:ef:29:89:f3:33:c9:75:4d:83:
                    cb:56:bc:85:a2:28:69:e8:d8:7c:3e:6f:31:79:a6:
                    67:53:b0:0e:3e:65:3f:83:f9:46:47:a3:b6:c9:74:
                    06:e2:4d:6a:43:d1:50:41:67:3d:d2:ea:5d:81:a3:
                    0d:d0:78:d2:74:98:ef:e7:2e:c4:62:ac:29:fb:f2:
                    fd:e8:bd:b1:a6:a7:57:63:8f:bf:1e:04:ef:f2:02:
                    cb:f3:02:24:4f:60:ce:df:3e:1e:9c:06:87:1f:c5:
                    f8:a9:f6:d5:d5:df:a8:af:f5:15:94:58:8a:a9:d5:
                    64:7a:a1:01:76:4a:ac:1b:f6:e6:53:dd:12:44:40:
                    29:f0:79:0e:a2:90:1b:77:5e:d6:1c:be:36:77:d4:
                    93:fc:7d:27:8a:f9:42:5f:0f:b4:9a:16:08:da:21:
                    73:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:72:3A:2D:22:2D:E0:86:71:B2:01:83:EC:57:96:7F:2E:0E:B1:C6
            X509v3 Authority Key Identifier:
                keyid:2C:6A:09:89:1C:0F:EC:00:E0:A3:9F:C7:7C:32:28:31:A6:EB:F9:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36B665C/4ED166A4AA2211ED833D5FE6F1222468/LGoJiRwP7ADgo5_HfDIoMabr-Xk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/LGoJiRwP7ADgo5_HfDIoMabr-Xk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B665C/4ED166A4AA2211ED833D5FE6F1222468/LGoJiRwP7ADgo5_HfDIoMabr-Xk.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:1f:7d:55:8d:2a:2c:6a:1a:b6:65:6d:55:c0:4f:8a:5a:a0:
         e2:79:47:00:6a:0c:10:cc:bb:52:04:f3:96:eb:44:d1:b4:2e:
         02:2d:94:5a:1e:85:1f:cc:61:bf:18:83:91:37:7c:c5:76:64:
         d6:71:48:72:32:a2:39:9b:de:08:8b:ae:e0:da:6e:6a:2d:68:
         84:b1:29:d4:4a:29:94:ae:07:6d:aa:5e:ae:7a:6e:5f:1d:c9:
         fd:88:de:4b:c0:d0:48:ba:13:69:31:a5:56:8b:15:ff:d0:78:
         59:ff:2c:66:43:b5:e8:ab:4d:f7:87:5c:41:2e:0c:7d:4a:17:
         38:32:4b:a2:3f:5b:48:3b:9f:4e:e7:57:53:82:19:7d:ce:b8:
         64:17:60:19:82:82:56:80:81:5e:4c:e2:6d:e0:cf:3f:e0:bd:
         23:d2:51:be:bd:cc:73:29:83:e0:34:0b:c8:5a:8c:61:0f:3d:
         c3:06:e2:ab:ed:fc:ea:a3:82:dd:2d:01:cc:2a:aa:5f:84:4f:
         d9:5d:96:e4:fd:e9:b4:1f:fd:fa:84:8b:cc:df:2c:9d:39:a2:
         4b:90:30:78:9f:d5:d9:6b:8d:24:55:48:68:03:30:5b:35:1e:
         c0:ae:bd:02:b9:89:c6:14:3e:84:e4:0b:26:56:29:1e:c6:58:
         02:25:6f:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 18:56:28 2025 by rpki-client