This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C04EA/32396F8EC49E11F087F92A78DAE4EC9C/0dnDKIjyz6bSCgEYk0QuSI-rEy4.mft
File:                     0dnDKIjyz6bSCgEYk0QuSI-rEy4.mft (raw, json)
Hash identifier:          4Y2gS6J0eyemgyY8/oprGoTBI1X83WAXuOttq8a7eP0=
Subject key identifier:   8D:49:6C:74:8D:78:25:9F:BF:F2:08:49:C7:1B:8C:04:7C:07:F5:C3
Authority key identifier: D1:D9:C3:28:88:F2:CF:A6:D2:0A:01:18:93:44:2E:48:8F:AB:13:2E
Certificate issuer:       /CN=F36C04EAAF/serialNumber=D1D9C32888F2CFA6D20A011893442E488FAB132E
Certificate serial:       18
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/0dnDKIjyz6bSCgEYk0QuSI-rEy4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C04EA/32396F8EC49E11F087F92A78DAE4EC9C/0dnDKIjyz6bSCgEYk0QuSI-rEy4.mft
Manifest number:          17
Signing time:             Mon 08 Dec 2025 05:22:09 +0000
Manifest this update:     Mon 08 Dec 2025 05:22:08 +0000
Manifest next update:     Wed 10 Dec 2025 05:22:08 +0000
Files and hashes:         1: 0dnDKIjyz6bSCgEYk0QuSI-rEy4.crl (hash: p4GGWUNFwcO1edvuMKoC+knvE0nrxYjHtGk6PiQfBL0=)
                          2: B44DBBD6C4A011F0BB1FE885DAE4EC9C.roa (hash: 22n46w2qwRYfa/D7JhUZRieOUn/D6egNiKVqvc6gQks=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36C04EA/32396F8EC49E11F087F92A78DAE4EC9C/0dnDKIjyz6bSCgEYk0QuSI-rEy4.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36C04EA/32396F8EC49E11F087F92A78DAE4EC9C/0dnDKIjyz6bSCgEYk0QuSI-rEy4.mft
                          rsync://rpki.afrinic.net/repository/afrinic/0dnDKIjyz6bSCgEYk0QuSI-rEy4.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 10 Dec 2025 00:06:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 24 (0x18)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C04EAAF, serialNumber=D1D9C32888F2CFA6D20A011893442E488FAB132E
        Validity
            Not Before: Dec  8 05:22:08 2025 GMT
            Not After : Dec 10 05:22:08 2025 GMT
        Subject: CN=69366081-a20b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:5d:90:8d:33:c6:73:32:ed:82:d9:ee:c8:be:
                    f6:4a:63:ce:90:8b:f9:ca:34:ec:75:19:3c:45:6e:
                    27:77:72:4f:64:27:78:7b:ab:cc:0b:64:97:3b:33:
                    7e:76:fa:85:c1:fe:f6:d2:d7:4a:eb:74:82:f0:c8:
                    e0:43:8e:13:06:d3:42:27:83:2c:27:1b:29:b3:15:
                    56:41:50:56:89:4f:df:8e:d5:65:02:cb:56:15:a2:
                    0a:6e:88:df:5d:be:45:b8:65:71:7f:a7:08:ab:13:
                    02:05:b5:b7:6e:37:34:b6:60:28:bf:7f:c2:91:b9:
                    66:12:ff:ad:f4:2d:5a:29:ee:a1:84:59:f3:ca:8e:
                    81:bd:61:d5:1e:86:6f:76:80:15:36:4a:84:ea:40:
                    8c:25:fa:43:a3:c0:02:2f:12:60:ca:d1:77:3a:a8:
                    9f:2f:3a:cb:24:d3:1d:6c:04:55:24:d3:bd:94:5b:
                    34:27:11:3c:1e:ce:f3:58:c6:1e:87:6c:20:8c:08:
                    98:af:24:bc:99:b3:c7:57:d6:e1:df:66:7f:5a:88:
                    6b:30:38:c2:6f:9b:e7:4f:5d:c3:61:1d:5d:85:03:
                    96:df:8b:0c:53:06:85:eb:a9:bd:40:c3:c0:00:b0:
                    31:43:d7:83:2c:f9:4d:48:fe:5e:16:d3:2c:e6:e0:
                    51:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:49:6C:74:8D:78:25:9F:BF:F2:08:49:C7:1B:8C:04:7C:07:F5:C3
            X509v3 Authority Key Identifier:
                keyid:D1:D9:C3:28:88:F2:CF:A6:D2:0A:01:18:93:44:2E:48:8F:AB:13:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C04EA/32396F8EC49E11F087F92A78DAE4EC9C/0dnDKIjyz6bSCgEYk0QuSI-rEy4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/0dnDKIjyz6bSCgEYk0QuSI-rEy4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C04EA/32396F8EC49E11F087F92A78DAE4EC9C/0dnDKIjyz6bSCgEYk0QuSI-rEy4.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:63:ce:1a:0e:d2:b1:f0:61:1c:90:26:4d:f1:48:3a:b6:3f:
         6a:52:37:0e:b9:91:76:d0:27:5b:ef:0f:3f:9c:a2:49:14:66:
         ba:62:6d:59:e5:21:1c:ed:22:38:1d:27:99:15:c0:7e:bc:f7:
         2a:4e:57:75:74:21:bf:e5:39:fc:ae:dc:5b:11:8b:4e:95:ba:
         d4:6b:79:fc:9c:d4:a7:d4:2d:f3:6e:97:e1:86:68:34:77:28:
         cf:2f:53:d9:39:af:5d:df:15:26:c9:ba:2d:45:b2:0c:aa:b7:
         8d:85:32:c2:c2:71:0b:5d:6c:2d:23:a9:86:62:39:64:2c:db:
         56:88:4d:ea:6e:e9:31:5d:9d:34:be:3c:1b:d9:df:cf:12:ed:
         86:c8:38:63:ac:5a:c7:1a:1b:dc:7b:11:a4:ce:f9:05:44:87:
         6e:fd:0d:a6:d2:88:0d:47:12:ef:40:8e:ad:e0:1e:09:60:03:
         e7:02:f1:1e:58:9f:27:d2:69:30:b3:bf:f9:54:22:04:2a:88:
         00:16:b3:52:c3:d1:8b:52:59:5a:f9:ba:b0:1f:35:f1:2c:db:
         b2:9d:33:d3:6d:19:f1:87:8e:6f:73:0f:77:bd:50:5d:ae:84:
         17:b2:22:c4:c2:93:38:62:b2:79:a9:f0:25:ef:c2:3c:39:6d:
         92:b9:9e:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 8 17:16:37 2025 by rpki-client