This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36BD4F1/0B286984358A11EBA3DE6772F8AEA228/hbCxijGOWnXQTRoKp37_lQUiiSQ.mft
File:                     hbCxijGOWnXQTRoKp37_lQUiiSQ.mft (raw, json)
Hash identifier:          5U1u01c6PCa6p5ijD5ilLkmMuSoRrKiMyO+uxCt133U=
Subject key identifier:   31:0F:11:F4:BE:44:F6:7D:17:27:1B:93:66:F3:6B:45:75:48:92:E3
Authority key identifier: 85:B0:B1:8A:31:8E:5A:75:D0:4D:1A:0A:A7:7E:FF:95:05:22:89:24
Certificate issuer:       /CN=F36BD4F1AF/serialNumber=85B0B18A318E5A75D04D1A0AA77EFF9505228924
Certificate serial:       0787
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/hbCxijGOWnXQTRoKp37_lQUiiSQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36BD4F1/0B286984358A11EBA3DE6772F8AEA228/hbCxijGOWnXQTRoKp37_lQUiiSQ.mft
Manifest number:          077E
Signing time:             Mon 22 Dec 2025 01:58:41 +0000
Manifest this update:     Mon 22 Dec 2025 01:58:40 +0000
Manifest next update:     Wed 24 Dec 2025 01:58:40 +0000
Files and hashes:         1: hbCxijGOWnXQTRoKp37_lQUiiSQ.crl (hash: K+G8iM2HDnkByZzcOLvsSq6E28ztHgnh22nMIjk7R3o=)
                          2: 67B8C7B20B7311EF82634D34017001B1.roa (hash: gTnze+sNFy8wfWQuqCuoldModdIZeS9lmW2uAevzSyE=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36BD4F1/0B286984358A11EBA3DE6772F8AEA228/hbCxijGOWnXQTRoKp37_lQUiiSQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36BD4F1/0B286984358A11EBA3DE6772F8AEA228/hbCxijGOWnXQTRoKp37_lQUiiSQ.mft
                          rsync://rpki.afrinic.net/repository/afrinic/hbCxijGOWnXQTRoKp37_lQUiiSQ.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 24 Dec 2025 00:06:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1927 (0x787)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36BD4F1AF, serialNumber=85B0B18A318E5A75D04D1A0AA77EFF9505228924
        Validity
            Not Before: Dec 22 01:58:40 2025 GMT
            Not After : Dec 24 01:58:40 2025 GMT
        Subject: CN=6948a5d0-cbae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:4d:f6:67:6a:fb:70:00:e3:9a:bd:9b:a6:a3:
                    20:5f:9b:81:bf:7e:5b:09:83:9a:1a:8c:8b:38:75:
                    75:e6:3e:46:6b:62:e2:ea:1b:16:9e:be:de:bc:fe:
                    21:a6:a0:25:5a:8e:56:ae:0f:39:94:3f:cf:8a:15:
                    5d:97:98:e1:2b:bf:79:4c:37:3e:32:f6:f0:46:d3:
                    65:ea:f4:d4:88:9d:24:45:ca:b4:b5:91:94:99:3b:
                    00:a6:08:18:fb:9e:cd:a0:90:38:75:24:74:87:e4:
                    8b:74:34:1f:34:fb:8f:39:38:44:91:43:79:e8:66:
                    2a:39:cc:5e:9f:ce:a6:7f:57:4c:a9:f2:07:7b:3a:
                    34:a3:7d:0f:7b:a0:90:a9:38:22:8b:10:6e:8a:f1:
                    40:97:86:64:cb:45:c7:d5:4c:57:41:7a:93:de:55:
                    63:56:b7:74:31:fd:3f:fa:1e:ff:94:e1:35:c7:e1:
                    f2:16:f8:5b:d0:83:d6:f7:8d:a7:49:cd:36:5e:a7:
                    95:28:31:32:60:67:18:08:d4:7b:e4:b3:79:da:35:
                    d0:a2:9a:8a:61:93:f8:58:c2:de:48:b0:0d:27:cc:
                    db:4a:fe:fd:17:db:d0:c5:ca:0c:bc:24:4e:16:93:
                    a6:4d:6f:19:22:9f:cb:4e:09:c9:9f:d1:b0:7e:37:
                    33:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:0F:11:F4:BE:44:F6:7D:17:27:1B:93:66:F3:6B:45:75:48:92:E3
            X509v3 Authority Key Identifier:
                keyid:85:B0:B1:8A:31:8E:5A:75:D0:4D:1A:0A:A7:7E:FF:95:05:22:89:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36BD4F1/0B286984358A11EBA3DE6772F8AEA228/hbCxijGOWnXQTRoKp37_lQUiiSQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/hbCxijGOWnXQTRoKp37_lQUiiSQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36BD4F1/0B286984358A11EBA3DE6772F8AEA228/hbCxijGOWnXQTRoKp37_lQUiiSQ.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:0b:59:d7:68:0f:cf:b3:28:f6:c0:0d:1d:80:ac:2a:c1:fb:
         ae:73:6f:1c:3d:cd:07:56:26:e3:0d:1b:57:a0:51:2f:a0:0d:
         72:81:8d:3c:2b:63:a7:22:e4:6b:eb:ce:a7:ce:82:ce:5e:18:
         6a:39:55:91:93:a1:0a:d9:04:cb:fa:ea:bf:01:86:98:b9:90:
         d2:ea:d1:20:d5:c1:60:52:b5:d1:44:7a:4b:ef:21:80:4d:31:
         0b:96:9b:92:aa:dd:51:e7:6f:a7:a6:c0:2e:ab:fe:74:0e:51:
         3f:c6:8f:0b:8f:7e:79:8a:78:99:af:cd:7b:a6:43:ed:f9:d5:
         11:1f:1f:8c:da:83:95:b3:4c:f8:5a:8f:59:df:cb:3b:68:02:
         f0:a2:f7:79:58:58:e9:3e:bf:b5:f0:4a:9c:1e:03:29:66:8e:
         ff:44:65:7a:57:da:7a:bc:36:ed:a7:a6:3d:dd:e8:12:7d:fa:
         0e:ac:1e:e8:b8:29:a6:0b:d4:0f:90:ef:9a:7f:14:ea:88:b0:
         fb:69:c4:45:7e:36:6b:0c:41:d8:72:1b:ce:e5:20:d9:15:b8:
         16:7c:56:b9:80:6c:48:1c:66:a3:cc:02:e8:71:bb:f7:e6:79:
         b6:1f:5f:64:e7:e6:d1:4b:58:6e:4b:d7:81:ab:c3:db:89:fd:
         ee:fb:13:ed
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICB4cwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QkQ0RjFBRjExMC8GA1UEBRMoODVCMEIxOEEzMThFNUE3NUQwNEQxQTBBQTc3RUZG
OTUwNTIyODkyNDAeFw0yNTEyMjIwMTU4NDBaFw0yNTEyMjQwMTU4NDBaMBgxFjAU
BgNVBAMTDTY5NDhhNWQwLWNiYWUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDsTfZnavtwAOOavZumoyBfm4G/flsJg5oajIs4dXXmPkZrYuLqGxaevt68
/iGmoCVajlauDzmUP8+KFV2XmOErv3lMNz4y9vBG02Xq9NSInSRFyrS1kZSZOwCm
CBj7ns2gkDh1JHSH5It0NB80+485OESRQ3noZio5zF6fzqZ/V0yp8gd7OjSjfQ97
oJCpOCKLEG6K8UCXhmTLRcfVTFdBepPeVWNWt3Qx/T/6Hv+U4TXH4fIW+FvQg9b3
jadJzTZep5UoMTJgZxgI1Hvks3naNdCimophk/hYwt5IsA0nzNtK/v0X29DFygy8
JE4Wk6ZNbxkin8tOCcmf0bB+NzOJAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUMQ8R
9L5E9n0XJxuTZvNrRXVIkuMwHwYDVR0jBBgwFoAUhbCxijGOWnXQTRoKp37/lQUi
iSQwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkJENEYxLzBCMjg2OTg0MzU4QTExRUJBM0RFNjc3MkY4QUVBMjI4L2hiQ3hp
akdPV25YUVRSb0twMzdfbFFVaWlTUS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2hiQ3hpakdPV25YUVRSb0twMzdfbFFVaWlTUS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2QkQ0RjEvMEIyODY5ODQzNThBMTFFQkEzREU2NzcyRjhB
RUEyMjgvaGJDeGlqR09XblhRVFJvS3AzN19sUVVpaVNRLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBDC1nXaA/Psyj2wA0dgKwqwfuuc28c
Pc0HVibjDRtXoFEvoA1ygY08K2OnIuRr686nzoLOXhhqOVWRk6EK2QTL+uq/AYaY
uZDS6tEg1cFgUrXRRHpL7yGATTELlpuSqt1R52+npsAuq/50DlE/xo8Lj355iniZ
r817pkPt+dURHx+M2oOVs0z4Wo9Z38s7aALwovd5WFjpPr+18EqcHgMpZo7/RGV6
V9p6vDbtp6Y93egSffoOrB7ouCmmC9QPkO+afxTqiLD7acRFfjZrDEHYchvO5SDZ
FbgWfFa5gGxIHGajzALocbv35nm2H19k5+bRS1huS9eBq8Pbif3u+xPt
-----END CERTIFICATE-----
Generated at Mon Dec 22 03:23:26 2025 by rpki-client