This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C4A3B/4FAFFDAEA48D11EE88CB8763D25BE465/zr6Z7rC-POjbGbpEdmyj48gHqYk.mft
File:                     zr6Z7rC-POjbGbpEdmyj48gHqYk.mft (raw, json)
Hash identifier:          vVg/xOj16MEU+rhF+Wptgt0QMPdTHj2IaJXUOX6FIKQ=
Subject key identifier:   65:26:C2:5E:E6:29:B0:38:FF:EE:90:89:F4:F3:43:5B:EF:36:CF:E8
Authority key identifier: CE:BE:99:EE:B0:BE:3C:E8:DB:19:BA:44:76:6C:A3:E3:C8:07:A9:89
Certificate issuer:       /CN=F36C4A3BAF/serialNumber=CEBE99EEB0BE3CE8DB19BA44766CA3E3C807A989
Certificate serial:       02DF
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/zr6Z7rC-POjbGbpEdmyj48gHqYk.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C4A3B/4FAFFDAEA48D11EE88CB8763D25BE465/zr6Z7rC-POjbGbpEdmyj48gHqYk.mft
Manifest number:          02DE
Signing time:             Mon 08 Dec 2025 03:56:57 +0000
Manifest this update:     Mon 08 Dec 2025 03:56:56 +0000
Manifest next update:     Wed 10 Dec 2025 03:56:56 +0000
Files and hashes:         1: zr6Z7rC-POjbGbpEdmyj48gHqYk.crl (hash: C/3N808U4W+9r20Qs0d8hsIV3NvBIJHJIHzSUyaYRXg=)
                          2: B4ABD18CA48E11EEB808FE65D25BE465.roa (hash: S5XSL+t01DymTgJeqFWNkxH4TrI/NWZhOLYNwLD+7Qs=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36C4A3B/4FAFFDAEA48D11EE88CB8763D25BE465/zr6Z7rC-POjbGbpEdmyj48gHqYk.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36C4A3B/4FAFFDAEA48D11EE88CB8763D25BE465/zr6Z7rC-POjbGbpEdmyj48gHqYk.mft
                          rsync://rpki.afrinic.net/repository/afrinic/zr6Z7rC-POjbGbpEdmyj48gHqYk.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 10 Dec 2025 00:06:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 735 (0x2df)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C4A3BAF, serialNumber=CEBE99EEB0BE3CE8DB19BA44766CA3E3C807A989
        Validity
            Not Before: Dec  8 03:56:56 2025 GMT
            Not After : Dec 10 03:56:56 2025 GMT
        Subject: CN=69364c89-e1eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:67:bb:57:76:9e:c8:1f:64:7b:52:d2:13:f2:
                    60:1a:37:13:e2:41:a0:7d:b1:0b:16:31:19:07:08:
                    55:99:e8:c6:97:50:82:f8:f2:c5:89:42:07:02:50:
                    9f:5c:5e:1e:50:8d:ca:37:96:53:7e:c6:b9:04:45:
                    df:52:87:f4:14:91:63:8a:69:b6:d2:62:48:ed:e6:
                    ed:a5:bc:82:12:0d:8d:ab:42:e5:21:a0:4e:3c:52:
                    88:19:cd:8d:64:89:81:da:3c:91:14:5f:45:2b:e1:
                    79:87:76:05:cb:19:e9:8b:eb:09:8b:0e:48:59:b8:
                    2b:08:ee:86:33:4d:c9:1b:8c:6d:0d:fe:e1:c0:ee:
                    bc:93:9f:4e:31:11:4d:93:d2:c8:10:bc:4c:40:9d:
                    8c:63:81:a3:e7:a7:81:10:9d:77:9b:ae:68:d7:42:
                    9d:b9:5a:7d:ca:70:b4:a7:df:4d:58:7b:f7:f8:bc:
                    ed:f2:06:ee:e4:26:49:44:c6:1a:e9:cd:43:ad:bb:
                    6f:ba:c4:c9:c1:62:16:c8:c1:ab:5c:91:38:b4:55:
                    e8:fe:fe:19:58:1c:24:42:08:35:32:5b:04:7e:b5:
                    92:76:12:60:9d:ee:8f:3a:46:5a:1a:3e:d6:96:5e:
                    e8:38:53:5f:3a:73:4e:9a:60:20:30:39:f9:ba:c5:
                    48:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:26:C2:5E:E6:29:B0:38:FF:EE:90:89:F4:F3:43:5B:EF:36:CF:E8
            X509v3 Authority Key Identifier:
                keyid:CE:BE:99:EE:B0:BE:3C:E8:DB:19:BA:44:76:6C:A3:E3:C8:07:A9:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C4A3B/4FAFFDAEA48D11EE88CB8763D25BE465/zr6Z7rC-POjbGbpEdmyj48gHqYk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/zr6Z7rC-POjbGbpEdmyj48gHqYk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C4A3B/4FAFFDAEA48D11EE88CB8763D25BE465/zr6Z7rC-POjbGbpEdmyj48gHqYk.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:12:ad:c3:62:d1:7b:aa:ca:b6:35:58:17:cf:ed:2e:08:fa:
         e7:c3:c5:f3:32:8e:6a:15:9e:71:61:f6:7c:33:89:aa:1c:d3:
         a4:65:d7:6b:83:98:6f:2f:eb:33:84:05:59:b3:28:e1:60:25:
         5b:c2:1a:5f:51:f5:30:06:4a:bb:9d:60:7a:c5:54:c9:a8:54:
         07:4f:c4:26:0e:70:7c:e2:70:48:02:65:9b:ea:5e:73:58:38:
         c5:43:3a:c5:42:1c:0d:6f:e4:68:83:11:64:12:f5:bb:ec:9f:
         08:e5:1d:da:5d:d5:0f:e9:d1:42:3a:e0:63:7e:5d:d2:e4:c0:
         aa:6b:86:87:db:c6:8c:bf:33:43:86:76:5b:24:ef:1d:40:bb:
         45:86:30:30:cd:99:8a:b9:45:f8:60:ce:d5:49:bb:a1:13:0d:
         5f:e1:ff:e2:8e:5a:d7:b9:fe:de:4f:4f:b7:5c:6b:a1:1d:77:
         a1:03:ab:64:4a:e2:a4:b2:1b:c4:aa:4e:93:f1:a0:c0:f6:90:
         a3:4a:fe:75:4a:7e:19:57:3f:a1:c7:4e:16:70:a0:88:aa:0e:
         e0:15:fc:78:db:b5:d1:2a:e0:de:0b:6d:31:5d:40:ea:87:9c:
         c7:d7:6f:89:e0:4e:a9:8d:a3:b8:b6:34:c4:48:43:37:2d:1c:
         46:22:8f:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 8 17:09:03 2025 by rpki-client