This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36BC6CC/0F853534DD3811EFB2E4C477762E951A/MfeVAfcAxqZ2Yt4nthXuyDCxuHY.mft
File:                     MfeVAfcAxqZ2Yt4nthXuyDCxuHY.mft (raw, json)
Hash identifier:          VOQk6opxOTXq04+RULl716enl2HLVD9wMrMz+8K6hMQ=
Subject key identifier:   9E:D1:BC:06:E4:C1:18:05:7F:BC:31:CF:2C:71:CE:C3:F9:E0:EE:54
Authority key identifier: 31:F7:95:01:F7:00:C6:A6:76:62:DE:27:B6:15:EE:C8:30:B1:B8:76
Certificate issuer:       /CN=F36BC6CCAF/serialNumber=31F79501F700C6A67662DE27B615EEC830B1B876
Certificate serial:       014C
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/MfeVAfcAxqZ2Yt4nthXuyDCxuHY.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36BC6CC/0F853534DD3811EFB2E4C477762E951A/MfeVAfcAxqZ2Yt4nthXuyDCxuHY.mft
Manifest number:          0148
Signing time:             Mon 08 Dec 2025 04:49:16 +0000
Manifest this update:     Mon 08 Dec 2025 04:49:15 +0000
Manifest next update:     Wed 10 Dec 2025 04:49:15 +0000
Files and hashes:         1: MfeVAfcAxqZ2Yt4nthXuyDCxuHY.crl (hash: CGQQg8SxTv2/5A6/hXDPIo6KY7z66jGg9O3G1cEDHLM=)
                          2: DF18A1E640CF11F09299DFB6DAE4EC9C.roa (hash: ztjI0ZwpfaRw5ubRwQgZNSs1wBiMAXUEL6HQoRKIjlI=)
                          3: 981965A640C911F0AA7BC28FDAE4EC9C.roa (hash: /+6/RjZuNbqQtneE80fqEs+UIumXvOJpiE0MpFoYgdc=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36BC6CC/0F853534DD3811EFB2E4C477762E951A/MfeVAfcAxqZ2Yt4nthXuyDCxuHY.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36BC6CC/0F853534DD3811EFB2E4C477762E951A/MfeVAfcAxqZ2Yt4nthXuyDCxuHY.mft
                          rsync://rpki.afrinic.net/repository/afrinic/MfeVAfcAxqZ2Yt4nthXuyDCxuHY.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 10 Dec 2025 00:06:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 332 (0x14c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36BC6CCAF, serialNumber=31F79501F700C6A67662DE27B615EEC830B1B876
        Validity
            Not Before: Dec  8 04:49:15 2025 GMT
            Not After : Dec 10 04:49:15 2025 GMT
        Subject: CN=693658cc-7f69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:81:51:7e:69:88:c9:df:c3:d5:50:36:12:c5:
                    27:95:9d:0c:ff:90:44:43:07:2c:f1:1c:49:9d:eb:
                    02:01:71:6a:09:a1:08:43:a7:1f:ee:3d:9d:10:70:
                    16:1a:9a:75:ac:8a:60:9e:c8:ec:e6:93:86:29:ae:
                    8c:6b:69:6e:19:f3:a1:08:10:1f:9e:4b:62:1a:7a:
                    8f:af:df:03:03:c5:4c:52:5f:93:d1:cc:fa:5d:0b:
                    31:99:1a:4d:ba:64:02:1c:98:61:61:f0:bf:56:c3:
                    d7:1c:14:d4:d7:9d:fa:0f:91:87:1b:ca:ba:48:cd:
                    fe:f0:c3:ea:81:c2:73:a8:59:ae:15:22:8c:85:8d:
                    73:04:b4:ec:15:af:02:ca:50:0d:db:84:2b:70:3a:
                    8e:aa:7f:4b:06:fd:e1:d4:ed:3e:a9:20:af:da:57:
                    8a:e6:7f:d7:f3:fc:5a:e4:d4:de:0d:46:ea:ef:24:
                    6f:be:cb:2f:3b:bb:c9:4f:74:d5:72:27:9f:7a:4b:
                    66:ff:f8:24:2d:cf:0b:2e:e9:ba:ac:90:ab:64:1c:
                    ce:58:3f:f6:cf:64:a1:1c:32:a5:c2:36:ec:24:f0:
                    f6:91:fe:b2:94:10:c4:1e:25:de:57:e9:30:64:5c:
                    56:56:ac:ad:a9:85:c0:4c:38:80:1f:f7:de:aa:01:
                    87:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:D1:BC:06:E4:C1:18:05:7F:BC:31:CF:2C:71:CE:C3:F9:E0:EE:54
            X509v3 Authority Key Identifier:
                keyid:31:F7:95:01:F7:00:C6:A6:76:62:DE:27:B6:15:EE:C8:30:B1:B8:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36BC6CC/0F853534DD3811EFB2E4C477762E951A/MfeVAfcAxqZ2Yt4nthXuyDCxuHY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/MfeVAfcAxqZ2Yt4nthXuyDCxuHY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36BC6CC/0F853534DD3811EFB2E4C477762E951A/MfeVAfcAxqZ2Yt4nthXuyDCxuHY.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:6f:a7:97:5d:7f:ed:37:cf:c4:d5:d1:de:89:84:61:5a:d0:
         c1:ce:03:9a:03:64:a0:7a:30:68:77:b6:73:f4:36:3a:13:d8:
         5d:6e:02:a6:5b:e1:cd:41:ed:03:57:2c:af:40:4f:5d:25:d7:
         48:36:7e:d7:37:bf:41:ec:65:75:fd:66:bd:bf:ef:2b:a7:11:
         13:97:af:2d:06:65:75:92:17:13:35:24:3f:4a:60:3b:76:56:
         53:15:a1:56:57:bb:99:a9:b9:2a:84:58:79:00:48:2b:80:8f:
         21:dd:2f:59:fa:de:76:77:f0:12:a5:79:08:5b:1a:a9:16:a5:
         4a:75:eb:00:ee:50:d2:74:d8:03:d8:14:97:14:2e:c6:d7:4e:
         1d:8c:1f:7a:79:95:13:95:68:9f:92:86:02:e2:b9:d3:68:2b:
         7d:ac:25:c2:82:2c:c4:df:f1:ca:c0:5f:bd:ee:80:87:ca:1e:
         75:69:5e:c1:60:e2:c1:6f:04:b2:08:3c:79:bd:c1:e0:45:0f:
         05:c7:85:de:26:a0:75:99:86:17:85:77:ee:dc:8a:55:b1:88:
         10:dd:39:45:72:e8:0d:a5:29:92:04:08:0d:0f:43:9c:52:a3:
         bf:82:51:c0:60:f9:49:6c:97:58:c4:81:1a:e6:80:82:b5:fa:
         0f:46:1e:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 8 17:18:30 2025 by rpki-client