This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36BB12F/5C09C380A7E511EFB56A0C52762E951A/F0S8ILcGBXnJPk4qp-ZUKJwq98o.mft
File:                     F0S8ILcGBXnJPk4qp-ZUKJwq98o.mft (raw, json)
Hash identifier:          aHor6105Hxh2n+ALHYmFEMXDc+nqpmfouFQ8Kp8SyAA=
Subject key identifier:   F3:72:22:5C:08:56:61:47:42:6F:49:32:9C:21:7F:A8:9F:3E:14:4A
Authority key identifier: 17:44:BC:20:B7:06:05:79:C9:3E:4E:2A:A7:E6:54:28:9C:2A:F7:CA
Certificate issuer:       /CN=F36BB12FAF/serialNumber=1744BC20B7060579C93E4E2AA7E654289C2AF7CA
Certificate serial:       0193
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/F0S8ILcGBXnJPk4qp-ZUKJwq98o.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36BB12F/5C09C380A7E511EFB56A0C52762E951A/F0S8ILcGBXnJPk4qp-ZUKJwq98o.mft
Manifest number:          018E
Signing time:             Mon 08 Dec 2025 04:41:45 +0000
Manifest this update:     Mon 08 Dec 2025 04:41:45 +0000
Manifest next update:     Wed 10 Dec 2025 04:41:45 +0000
Files and hashes:         1: F0S8ILcGBXnJPk4qp-ZUKJwq98o.crl (hash: tx36xr+6i67pfPGeJVY55YLwaH30AMOe2WMBCqY/fvQ=)
                          2: 2AF19AACA99D11EF9770FA9D762E951A.roa (hash: 8M8qeh2c4jU96jCRf8I7t2WItg43FZr+wCVd7xVx4+A=)
                          3: 65EE6608A93411EF8563F881762E951A.roa (hash: XRj1rCaLDHj9RuND/dNnP241OC1a/Tkrtdg/iPOM2xc=)
                          4: 3F1DD4FEA93011EFB957CF66762E951A.roa (hash: mf8in6dN/rBkyYBFBPJrqKH3gZCm9Dld1VfS1yx67mU=)
                          5: ACD5EF52A92D11EFB660CA57762E951A.roa (hash: x+lXF/o9k7izJiAJeM43TTxxkhFqOAoIEnFPFeHdVRM=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36BB12F/5C09C380A7E511EFB56A0C52762E951A/F0S8ILcGBXnJPk4qp-ZUKJwq98o.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36BB12F/5C09C380A7E511EFB56A0C52762E951A/F0S8ILcGBXnJPk4qp-ZUKJwq98o.mft
                          rsync://rpki.afrinic.net/repository/afrinic/F0S8ILcGBXnJPk4qp-ZUKJwq98o.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 10 Dec 2025 00:06:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 403 (0x193)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36BB12FAF, serialNumber=1744BC20B7060579C93E4E2AA7E654289C2AF7CA
        Validity
            Not Before: Dec  8 04:41:45 2025 GMT
            Not After : Dec 10 04:41:45 2025 GMT
        Subject: CN=69365709-63b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:ec:38:08:65:37:18:cf:47:2d:cf:98:89:6b:
                    f8:0c:a0:34:1f:9d:7c:76:6b:a4:04:d4:35:82:3f:
                    3a:b5:91:f0:68:57:6c:fd:a6:e8:09:3c:81:eb:68:
                    90:cc:08:64:b7:c2:af:30:79:45:19:6c:8f:97:5c:
                    96:f5:9f:8e:c9:a0:fd:b0:6a:25:fd:52:59:90:52:
                    42:07:04:39:f0:85:8a:a6:0d:3f:1e:e4:5f:07:54:
                    86:16:e5:5e:22:9d:6d:cd:f8:2c:97:bd:ad:e3:ed:
                    0e:f1:41:8b:f8:94:ce:31:0f:72:5a:22:ec:02:3d:
                    f3:78:eb:c1:35:2c:a1:10:61:aa:31:6a:8a:5c:a2:
                    34:0a:8c:8a:76:b0:df:86:70:b9:83:27:28:5f:ac:
                    81:91:43:ef:61:69:98:fb:5d:da:ee:ff:07:51:d1:
                    e5:fa:13:cc:3a:31:6c:55:62:48:c4:db:00:5b:e7:
                    7b:de:60:56:b0:04:1c:71:29:04:67:07:ec:14:72:
                    d3:d3:64:68:f4:39:48:3d:23:df:f5:51:aa:62:4f:
                    66:4e:27:8d:39:d1:b6:cf:12:a7:df:81:2d:50:80:
                    fe:3e:fb:45:ae:22:92:f8:bf:41:3d:58:f9:b2:4d:
                    30:61:bf:f9:bf:ab:5c:2e:ce:be:89:d0:eb:b2:e3:
                    06:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:72:22:5C:08:56:61:47:42:6F:49:32:9C:21:7F:A8:9F:3E:14:4A
            X509v3 Authority Key Identifier:
                keyid:17:44:BC:20:B7:06:05:79:C9:3E:4E:2A:A7:E6:54:28:9C:2A:F7:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36BB12F/5C09C380A7E511EFB56A0C52762E951A/F0S8ILcGBXnJPk4qp-ZUKJwq98o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/F0S8ILcGBXnJPk4qp-ZUKJwq98o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36BB12F/5C09C380A7E511EFB56A0C52762E951A/F0S8ILcGBXnJPk4qp-ZUKJwq98o.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:d3:ce:13:51:b5:5d:dd:75:f9:1f:30:5a:73:51:3b:33:71:
         ed:1f:d6:34:ad:40:de:c0:96:66:59:9e:05:aa:33:2b:bc:60:
         33:91:20:b1:23:2f:bb:98:f2:df:c1:01:e4:39:8a:a2:d7:35:
         4c:6a:48:76:69:df:e7:28:8c:84:c5:2d:3c:8d:b1:40:10:a5:
         77:b1:bc:e9:38:02:22:8a:0c:72:62:83:27:ca:96:bd:7b:e0:
         93:4e:1d:22:21:f9:4f:5d:90:7d:c3:cc:d7:98:66:13:6e:2e:
         1b:72:d0:ba:a0:df:33:ac:50:73:12:09:c6:24:38:22:02:f3:
         43:61:87:8d:33:dc:58:5e:bd:61:a9:c9:7f:e2:22:84:7a:e7:
         08:63:b7:b0:88:24:03:e2:db:15:c2:59:e4:be:b2:eb:6f:94:
         d3:3f:7a:64:67:b2:ae:c6:b9:4e:dd:9f:44:0a:f3:64:12:8b:
         d7:55:3c:fe:fb:e6:5b:ea:0e:3b:4f:44:78:ca:9c:c6:db:91:
         5b:db:99:30:43:5a:63:17:03:d2:9a:86:51:bd:bf:4c:92:fd:
         83:81:39:cd:17:39:86:dc:0f:b0:46:fc:f0:42:c3:ac:a5:0f:
         52:5d:05:63:6e:d9:1d:b9:3b:f1:f7:b2:5b:10:68:0a:83:b3:
         9f:bf:b4:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 8 17:21:58 2025 by rpki-client