This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C29E6/BD45789E3D7011F08FB292D3DAE4EC9C/Rjx68zvS8Ur9TSo0XZwxgXx4c3w.mft
File:                     Rjx68zvS8Ur9TSo0XZwxgXx4c3w.mft (raw, json)
Hash identifier:          z5+psrCfSJiamorXia6Djcv5+JfS3FPynBcqiUdsuvc=
Subject key identifier:   94:FD:D0:C6:2C:CB:79:79:80:6A:BF:F4:EA:86:6C:58:BD:66:C0:26
Authority key identifier: 46:3C:7A:F3:3B:D2:F1:4A:FD:4D:2A:34:5D:9C:31:81:7C:78:73:7C
Certificate issuer:       /CN=F36C29E6AF/serialNumber=463C7AF33BD2F14AFD4D2A345D9C31817C78737C
Certificate serial:       C4
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/Rjx68zvS8Ur9TSo0XZwxgXx4c3w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C29E6/BD45789E3D7011F08FB292D3DAE4EC9C/Rjx68zvS8Ur9TSo0XZwxgXx4c3w.mft
Manifest number:          C4
Signing time:             Mon 08 Dec 2025 04:58:13 +0000
Manifest this update:     Mon 08 Dec 2025 04:58:12 +0000
Manifest next update:     Wed 10 Dec 2025 04:58:12 +0000
Files and hashes:         1: Rjx68zvS8Ur9TSo0XZwxgXx4c3w.crl (hash: 8P/ZRtKpJURjxtylVNMl7imAQ6cz1ZX+uneqef+mSWU=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36C29E6/BD45789E3D7011F08FB292D3DAE4EC9C/Rjx68zvS8Ur9TSo0XZwxgXx4c3w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36C29E6/BD45789E3D7011F08FB292D3DAE4EC9C/Rjx68zvS8Ur9TSo0XZwxgXx4c3w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/Rjx68zvS8Ur9TSo0XZwxgXx4c3w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 10 Dec 2025 00:06:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 196 (0xc4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C29E6AF, serialNumber=463C7AF33BD2F14AFD4D2A345D9C31817C78737C
        Validity
            Not Before: Dec  8 04:58:12 2025 GMT
            Not After : Dec 10 04:58:12 2025 GMT
        Subject: CN=69365ae5-ab16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:ae:6c:12:3b:e6:55:83:85:7b:29:3b:00:aa:
                    75:41:18:87:98:5f:a9:aa:19:b9:97:70:bd:bd:a3:
                    8d:18:4b:9d:2f:7b:72:9a:45:90:1c:b1:60:fb:ce:
                    3f:fb:36:10:b9:c3:32:c9:69:cb:2b:11:d8:32:d6:
                    f6:02:14:14:43:ce:5a:d0:56:ec:49:42:8f:1d:b4:
                    6b:ea:fc:0e:cb:13:ee:bc:46:d1:89:62:7f:c3:92:
                    c1:2c:92:d1:99:18:64:ef:77:d9:c9:c6:c5:22:22:
                    e8:38:59:ec:23:a5:7f:02:57:85:7a:f7:84:de:d8:
                    d2:6d:36:17:90:04:78:7f:55:fb:c5:4f:92:b1:77:
                    22:f6:31:5c:28:22:b3:6f:0c:67:e3:35:90:e3:8b:
                    b7:8e:83:5f:9d:49:f4:e2:f0:55:63:60:15:7a:b9:
                    43:b9:94:ba:b1:f6:eb:10:e9:aa:3a:29:c9:50:b9:
                    d6:4c:75:9d:83:87:65:3e:27:c5:00:0e:fa:15:95:
                    95:1c:c4:87:9b:a7:23:65:8f:b1:64:1b:ce:82:a2:
                    fa:7c:a0:ba:26:48:35:87:6d:9f:83:81:a5:f8:5a:
                    25:61:7a:38:bf:dd:cb:89:10:2b:92:2b:5e:6a:81:
                    54:58:16:d1:68:c2:84:76:92:e0:52:aa:72:e8:d7:
                    e7:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:FD:D0:C6:2C:CB:79:79:80:6A:BF:F4:EA:86:6C:58:BD:66:C0:26
            X509v3 Authority Key Identifier:
                keyid:46:3C:7A:F3:3B:D2:F1:4A:FD:4D:2A:34:5D:9C:31:81:7C:78:73:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C29E6/BD45789E3D7011F08FB292D3DAE4EC9C/Rjx68zvS8Ur9TSo0XZwxgXx4c3w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Rjx68zvS8Ur9TSo0XZwxgXx4c3w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C29E6/BD45789E3D7011F08FB292D3DAE4EC9C/Rjx68zvS8Ur9TSo0XZwxgXx4c3w.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:38:69:f6:e8:36:02:9f:df:5e:3d:6b:92:a2:a1:72:18:af:
         fb:4e:11:79:71:c6:fb:85:53:c0:61:21:f8:75:2d:73:35:17:
         70:8a:f5:b3:60:c9:3f:f7:c3:16:19:e7:5b:78:82:21:dd:68:
         32:f6:54:37:74:d7:81:45:21:9c:df:14:66:ab:41:14:41:8e:
         d4:38:ad:da:da:74:81:ed:8f:ef:9e:f3:a1:43:48:a7:38:54:
         6f:e6:e0:5a:b5:ff:7c:2f:87:2c:ae:98:82:5f:e4:2b:05:75:
         5c:d5:b0:ea:6b:b4:e4:68:78:b1:f0:e3:04:7a:be:2d:9d:f3:
         42:8b:32:bc:53:ec:c8:5f:ec:f8:59:19:d7:a8:e6:c0:63:df:
         06:99:e8:14:6c:a7:c3:e1:ff:65:c9:6c:da:e8:70:45:6e:7f:
         8d:a4:e8:03:e7:72:c8:d5:9e:4d:43:bf:58:5c:bf:16:11:1e:
         ce:0e:30:ce:82:a3:fe:ee:3a:fe:5e:06:ce:52:0e:22:f1:c0:
         23:6c:c2:d7:d7:ec:e8:4f:e1:e9:66:e6:04:85:ed:f6:1a:36:
         27:a0:18:cc:9d:f6:62:fd:6c:3c:43:85:91:d7:55:0a:fe:dd:
         b0:9a:37:50:f8:d6:80:75:7b:26:c6:38:33:43:05:ff:76:71:
         32:a4:dc:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 8 17:08:58 2025 by rpki-client