This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36BCCC8/B66E9294968611EFB8C3B245762E951A/ODJQ0j7BqsxGZlWyIZsZ8uHJRVs.mft
File:                     ODJQ0j7BqsxGZlWyIZsZ8uHJRVs.mft (raw, json)
Hash identifier:          VVdYak/fpjEJ++i8zUCTa36+txu3hitlBc/r4XPbmvw=
Subject key identifier:   F1:66:B3:53:D5:85:7C:D1:C6:27:C1:FA:26:38:02:F6:39:84:3D:0B
Authority key identifier: 38:32:50:D2:3E:C1:AA:CC:46:66:55:B2:21:9B:19:F2:E1:C9:45:5B
Certificate issuer:       /CN=F36BCCC8AF/serialNumber=383250D23EC1AACC466655B2219B19F2E1C9455B
Certificate serial:       01A1
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/ODJQ0j7BqsxGZlWyIZsZ8uHJRVs.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36BCCC8/B66E9294968611EFB8C3B245762E951A/ODJQ0j7BqsxGZlWyIZsZ8uHJRVs.mft
Manifest number:          01A0
Signing time:             Mon 08 Dec 2025 04:39:19 +0000
Manifest this update:     Mon 08 Dec 2025 04:39:18 +0000
Manifest next update:     Wed 10 Dec 2025 04:39:18 +0000
Files and hashes:         1: ODJQ0j7BqsxGZlWyIZsZ8uHJRVs.crl (hash: GAso2fOjf+rqwFQgXIwukuaKRrX1GGlUej/H6T2iS2E=)
                          2: 5822D58E969911EFBB03BAB6762E951A.roa (hash: OlnjZbEYMFxAprqREi0XurB39VJQTTPlIESsXPJn9fE=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36BCCC8/B66E9294968611EFB8C3B245762E951A/ODJQ0j7BqsxGZlWyIZsZ8uHJRVs.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36BCCC8/B66E9294968611EFB8C3B245762E951A/ODJQ0j7BqsxGZlWyIZsZ8uHJRVs.mft
                          rsync://rpki.afrinic.net/repository/afrinic/ODJQ0j7BqsxGZlWyIZsZ8uHJRVs.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 10 Dec 2025 00:06:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 417 (0x1a1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36BCCC8AF, serialNumber=383250D23EC1AACC466655B2219B19F2E1C9455B
        Validity
            Not Before: Dec  8 04:39:18 2025 GMT
            Not After : Dec 10 04:39:18 2025 GMT
        Subject: CN=69365677-97f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:e9:5e:40:46:93:14:fb:db:26:cf:2e:65:ba:
                    46:58:86:00:28:5b:78:39:79:f4:5a:7a:e3:30:f8:
                    54:0f:57:51:86:d9:92:52:cb:09:96:18:22:8b:f9:
                    56:58:7f:78:3e:d3:a0:23:cd:d7:40:62:60:bb:9c:
                    c3:11:dd:4c:46:0e:6d:0d:82:9d:36:8d:46:3c:f1:
                    e9:64:8e:af:13:7a:a2:b4:31:a6:e9:fb:e9:dd:e4:
                    ee:11:de:88:9c:2f:7f:76:05:2f:29:53:4a:b2:7a:
                    92:ff:16:77:97:4a:3d:00:ad:f6:71:66:cd:d1:cc:
                    35:31:0d:11:bd:76:a5:09:f4:c3:f3:b4:75:de:16:
                    51:4c:2e:7b:56:14:f4:fe:58:9c:a2:a9:a8:2b:69:
                    ae:19:2d:46:ea:37:8a:6c:e4:03:5b:f0:15:40:65:
                    ce:39:ff:97:70:32:5d:f3:d9:50:3c:3b:aa:d1:e6:
                    fd:39:3b:9c:49:7f:cb:ba:e4:b7:bd:6c:49:18:74:
                    e9:77:69:97:0a:a4:3d:0c:f2:f2:79:db:f4:4f:8e:
                    b2:5e:72:9d:3e:73:3a:71:e3:e2:f4:9a:cb:01:6e:
                    60:f6:d4:02:69:8c:0f:59:77:da:6c:45:1c:4a:44:
                    79:18:13:f5:81:b8:9d:4e:81:47:81:11:be:b0:89:
                    f2:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:66:B3:53:D5:85:7C:D1:C6:27:C1:FA:26:38:02:F6:39:84:3D:0B
            X509v3 Authority Key Identifier:
                keyid:38:32:50:D2:3E:C1:AA:CC:46:66:55:B2:21:9B:19:F2:E1:C9:45:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36BCCC8/B66E9294968611EFB8C3B245762E951A/ODJQ0j7BqsxGZlWyIZsZ8uHJRVs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/ODJQ0j7BqsxGZlWyIZsZ8uHJRVs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36BCCC8/B66E9294968611EFB8C3B245762E951A/ODJQ0j7BqsxGZlWyIZsZ8uHJRVs.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:ff:4c:c9:69:7b:ec:57:7d:e6:84:d2:7f:bd:0b:43:e1:0c:
         49:86:17:d2:9a:a6:87:d9:ac:8b:94:12:dc:de:8a:1c:e1:85:
         52:32:0c:3e:f0:95:e0:cb:8a:f0:67:a3:7e:b1:05:b9:6a:63:
         69:f1:07:f6:56:35:a6:76:37:2d:25:0e:c1:59:3a:c5:e1:f3:
         6d:e9:ce:93:cd:14:a2:f8:7d:86:91:fd:6d:a2:73:8f:9c:14:
         44:18:3c:0b:83:63:e5:a4:34:53:ab:3a:58:25:d3:a4:54:55:
         13:ae:a8:82:08:c2:53:2b:c0:34:4f:ef:f0:bf:08:96:ac:e7:
         0d:e0:f5:dc:68:a0:ac:66:82:2a:3e:c8:b5:b4:ea:4f:f2:92:
         89:a5:7e:ea:74:f5:c8:c6:df:a0:7f:1e:59:e6:29:be:e3:70:
         25:1e:79:6d:40:50:ff:14:9d:ce:4a:ea:ed:42:6e:b6:ed:46:
         c3:f4:6a:85:2a:08:12:71:48:a3:e8:ec:d9:a3:fe:85:16:5b:
         2f:4f:80:de:9f:c2:00:e8:9e:50:af:99:d7:62:1e:cc:dd:d7:
         a2:cf:b0:89:9b:91:75:5a:70:c0:f7:50:ef:cf:94:dc:73:82:
         75:51:4c:4e:08:f5:9f:dc:cc:2a:05:60:f1:c5:80:d8:4c:22:
         65:c4:ba:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 8 17:09:14 2025 by rpki-client