This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36B70EF/8F798B325A6611EABB216F4BF8AEA228/0L5n0EWzPwWlhxUQOZ5wnJj2130.mft
File:                     0L5n0EWzPwWlhxUQOZ5wnJj2130.mft (raw, json)
Hash identifier:          MvmM4KiPATLFb7DjERU8GuJ6TN3KBS9f70wHXf3xelg=
Subject key identifier:   CC:A7:8F:06:A9:65:F2:C4:79:18:F7:8B:2D:C5:CB:FD:26:73:64:66
Authority key identifier: D0:BE:67:D0:45:B3:3F:05:A5:87:15:10:39:9E:70:9C:98:F6:D7:7D
Certificate issuer:       /CN=F36B70EFAF/serialNumber=D0BE67D045B33F05A5871510399E709C98F6D77D
Certificate serial:       0896
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/0L5n0EWzPwWlhxUQOZ5wnJj2130.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36B70EF/8F798B325A6611EABB216F4BF8AEA228/0L5n0EWzPwWlhxUQOZ5wnJj2130.mft
Manifest number:          088C
Signing time:             Sun 21 Dec 2025 01:43:11 +0000
Manifest this update:     Sun 21 Dec 2025 01:43:10 +0000
Manifest next update:     Tue 23 Dec 2025 01:43:10 +0000
Files and hashes:         1: 0L5n0EWzPwWlhxUQOZ5wnJj2130.crl (hash: j6ixxwGzlZVEVMfztqjwFRjJZPSrQVSx/WfQC+QGOYU=)
                          2: 57D99C84A70B11EFAB610873762E951A.roa (hash: VESGhOcQ1eFdhjYgqNLQ5y+9WwlZ95aNn2gOWKom4PM=)
                          3: C67DA3FA616011EB8E25557BF8AEA228.roa (hash: lOtZThOqYZOrSs5z/Nz31HkfsJ0LpZIFin3wqJk1shU=)
                          4: 8D3DC440A70B11EF86ACE974762E951A.roa (hash: Py/R2WBbifPX4/K3F5F8kgPQCqbFBhwEISTO2st5s50=)
                          5: B217A2825A6611EAB1529D4BF8AEA228.roa (hash: vzveyzJlprOUydarhesuSRbAJ+Ui96qsAven0yoHfa4=)
                          6: 70076FD4A70B11EF8D62DB74762E951A.roa (hash: LcMYj3ITAdCe3LR23bnkb1n/C+36Ft00nt7b6GzWAhM=)
                          7: 3E87BB4E5A6711EA9C48384CF8AEA228.roa (hash: nvSN5JRFyEeP9hkBJ/sGlztv5rQhKrD7IbfV6O2PjxE=)
                          8: F7B6336C994411EBA68CD72BF8AEA228.roa (hash: tviT3PsrUHAG/3p3zGi9oQp3+ts3yl4rcv4DkfQceXI=)
                          9: DDE70E525A6611EAB8C0D34BF8AEA228.roa (hash: CTnWbvN7o+FlfyXlLcFUADgf4PWO/HvRao3/o/WHW3A=)
                          10: 1BBD15F05A6711EA9B33194CF8AEA228.roa (hash: 60FP7Xp6LdQXkJBiXGYYWOcK5OJjg1Z5omL1TTkOPXc=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36B70EF/8F798B325A6611EABB216F4BF8AEA228/0L5n0EWzPwWlhxUQOZ5wnJj2130.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36B70EF/8F798B325A6611EABB216F4BF8AEA228/0L5n0EWzPwWlhxUQOZ5wnJj2130.mft
                          rsync://rpki.afrinic.net/repository/afrinic/0L5n0EWzPwWlhxUQOZ5wnJj2130.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 23 Dec 2025 01:43:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2198 (0x896)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36B70EFAF, serialNumber=D0BE67D045B33F05A5871510399E709C98F6D77D
        Validity
            Not Before: Dec 21 01:43:10 2025 GMT
            Not After : Dec 23 01:43:10 2025 GMT
        Subject: CN=694750af-478e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:da:83:77:25:b3:cd:0d:76:9f:b8:dc:a8:8a:
                    d2:57:08:33:46:e0:73:93:4d:8a:17:f1:78:39:80:
                    22:29:3f:80:8c:51:9d:19:78:08:08:be:4e:ab:0b:
                    34:c3:00:23:aa:25:c9:99:b1:f3:e5:66:d3:f4:e9:
                    b6:e6:95:c6:96:d7:75:05:b9:3c:e9:01:f4:b4:c8:
                    4b:45:4f:70:2d:2a:bc:0f:9e:2d:d6:7a:7c:5a:7d:
                    be:70:4c:82:06:df:22:40:d4:a5:b3:32:5c:1e:d2:
                    59:05:fa:5e:56:15:23:27:90:63:5d:14:f0:df:5d:
                    f4:98:ad:c3:f8:87:04:39:af:13:6d:c6:26:b4:b4:
                    d8:5e:70:32:5e:fb:5e:3c:43:3b:e9:b9:38:b6:14:
                    22:ce:cc:e6:48:5e:aa:b6:7d:08:ea:88:b1:d0:f0:
                    b3:a6:08:2d:fa:6f:6b:b3:f6:1a:21:4b:03:00:65:
                    15:a8:9c:dc:ad:8d:4a:7c:ad:da:47:e5:1e:18:b3:
                    36:ac:18:ab:cd:0e:5d:a7:f6:6c:fc:19:71:e9:02:
                    dc:3d:b2:6a:ca:9d:fd:c8:e1:99:99:c4:c9:03:63:
                    d9:29:35:f3:2c:ce:98:01:70:22:18:ca:50:1a:ed:
                    df:4c:4c:0f:70:cc:03:02:06:30:09:8c:dc:31:43:
                    9b:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:A7:8F:06:A9:65:F2:C4:79:18:F7:8B:2D:C5:CB:FD:26:73:64:66
            X509v3 Authority Key Identifier:
                keyid:D0:BE:67:D0:45:B3:3F:05:A5:87:15:10:39:9E:70:9C:98:F6:D7:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36B70EF/8F798B325A6611EABB216F4BF8AEA228/0L5n0EWzPwWlhxUQOZ5wnJj2130.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/0L5n0EWzPwWlhxUQOZ5wnJj2130.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B70EF/8F798B325A6611EABB216F4BF8AEA228/0L5n0EWzPwWlhxUQOZ5wnJj2130.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:20:be:af:da:d1:ed:82:ad:60:c6:38:01:b2:87:1d:e9:57:
         6b:33:5a:19:a4:81:dd:86:4f:94:62:03:8d:90:5d:18:05:10:
         a2:92:4a:d8:3a:dd:91:57:9c:ee:47:fb:37:54:83:a7:91:2b:
         e9:bf:00:04:ef:b1:75:a8:52:a6:d1:d5:0f:79:47:34:55:99:
         77:3a:72:a5:a8:b0:45:79:d8:b4:26:f6:6d:13:21:e6:62:65:
         7b:51:2f:54:ee:fb:6f:c4:52:b8:ca:17:e0:44:eb:1e:69:f2:
         9b:15:bd:e2:b6:14:d4:4f:fe:27:52:28:ef:0c:3a:f6:f0:6a:
         6e:b5:25:f0:8c:c4:f5:0b:34:f7:6a:67:6c:a4:0a:5d:46:a1:
         68:96:fa:10:47:af:a1:4b:b3:a7:2e:a6:22:54:af:be:91:b8:
         c8:84:57:f4:38:30:11:a8:ef:c7:2e:dd:6d:3b:ea:81:7d:49:
         2a:7d:29:9e:e9:4a:97:e1:10:eb:a0:3e:11:57:6d:72:37:31:
         17:68:38:dc:9e:cd:8e:7e:d2:bf:fe:83:3e:e3:91:28:c5:00:
         4e:4f:09:96:77:cf:49:dc:3d:72:1c:99:fc:4b:e3:1e:f1:3a:
         b1:36:00:51:0d:4a:cc:03:78:c5:b0:2e:d7:22:a2:3c:5a:8d:
         57:e6:b1:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 23:44:38 2025 by rpki-client