This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C4E2C/E0F97572FD6511ECA2EAAFE1F1222468/ATo4w5zLZNj-6M3mvzaPRtpzjEA.mft
File:                     ATo4w5zLZNj-6M3mvzaPRtpzjEA.mft (raw, json)
Hash identifier:          tQurOffsmOMtJUIrAPVn6HITHDV2LlQ4d9/m98//CyU=
Subject key identifier:   60:D3:83:27:5D:F1:50:A6:D6:59:18:44:34:9E:5C:26:57:12:37:80
Authority key identifier: 01:3A:38:C3:9C:CB:64:D8:FE:E8:CD:E6:BF:36:8F:46:DA:73:8C:40
Certificate issuer:       /CN=F36C4E2CAF/serialNumber=013A38C39CCB64D8FEE8CDE6BF368F46DA738C40
Certificate serial:       050A
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/ATo4w5zLZNj-6M3mvzaPRtpzjEA.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C4E2C/E0F97572FD6511ECA2EAAFE1F1222468/ATo4w5zLZNj-6M3mvzaPRtpzjEA.mft
Manifest number:          0509
Signing time:             Mon 08 Dec 2025 02:50:47 +0000
Manifest this update:     Mon 08 Dec 2025 02:50:46 +0000
Manifest next update:     Wed 10 Dec 2025 02:50:46 +0000
Files and hashes:         1: ATo4w5zLZNj-6M3mvzaPRtpzjEA.crl (hash: j4DeJBSHGaZMK4N0wxVonYSfLIZOUvJm3RkvpwqNe+k=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36C4E2C/E0F97572FD6511ECA2EAAFE1F1222468/ATo4w5zLZNj-6M3mvzaPRtpzjEA.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36C4E2C/E0F97572FD6511ECA2EAAFE1F1222468/ATo4w5zLZNj-6M3mvzaPRtpzjEA.mft
                          rsync://rpki.afrinic.net/repository/afrinic/ATo4w5zLZNj-6M3mvzaPRtpzjEA.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 10 Dec 2025 00:06:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1290 (0x50a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C4E2CAF, serialNumber=013A38C39CCB64D8FEE8CDE6BF368F46DA738C40
        Validity
            Not Before: Dec  8 02:50:46 2025 GMT
            Not After : Dec 10 02:50:46 2025 GMT
        Subject: CN=69363d06-ddb3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:ee:18:ea:e6:f0:07:d2:bc:f0:64:f6:0d:ab:
                    66:76:a7:13:8b:08:80:dc:6a:45:a6:04:38:80:40:
                    8d:0c:1c:46:10:a1:41:37:a5:72:90:e0:cd:71:4d:
                    32:ab:fe:e8:a9:7b:43:d3:48:f1:b6:3f:0d:c5:3b:
                    37:6f:1f:27:18:51:6e:f6:ab:60:da:b0:b0:a4:a2:
                    31:bc:cd:d9:90:5c:22:ed:b0:06:cb:55:55:f8:e5:
                    6a:3e:22:8c:0d:71:2b:e0:66:a8:f0:58:59:ea:4f:
                    24:22:7d:e3:ad:8d:c7:5a:1e:2a:1f:39:d7:29:bf:
                    55:ef:75:8b:2d:7c:8b:40:0a:c9:6f:73:6a:e4:e9:
                    73:14:83:57:03:f7:0c:bd:0a:b4:02:5c:cc:7d:6c:
                    27:cd:79:e5:54:9a:79:b5:53:6e:49:81:63:2c:a0:
                    f9:84:ee:e6:4c:b0:07:d7:6d:da:88:c7:5c:e9:47:
                    8e:14:1d:1f:cb:25:e2:16:88:72:6f:fd:44:71:7e:
                    19:c2:69:23:80:62:6f:24:7e:f2:f7:d5:81:e4:9f:
                    d5:7d:e3:a4:50:3d:4d:e3:d7:d1:62:ca:2a:bc:63:
                    89:1a:da:e1:c9:f1:65:99:d9:09:86:24:d2:f8:dd:
                    ab:9e:3c:5f:d4:ed:cd:b8:49:c8:38:9f:4e:89:3a:
                    be:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:D3:83:27:5D:F1:50:A6:D6:59:18:44:34:9E:5C:26:57:12:37:80
            X509v3 Authority Key Identifier:
                keyid:01:3A:38:C3:9C:CB:64:D8:FE:E8:CD:E6:BF:36:8F:46:DA:73:8C:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C4E2C/E0F97572FD6511ECA2EAAFE1F1222468/ATo4w5zLZNj-6M3mvzaPRtpzjEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/ATo4w5zLZNj-6M3mvzaPRtpzjEA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C4E2C/E0F97572FD6511ECA2EAAFE1F1222468/ATo4w5zLZNj-6M3mvzaPRtpzjEA.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:5d:b2:34:9d:9d:de:45:3e:32:fc:7e:ff:d6:45:17:e2:02:
         93:a1:51:87:24:d8:c1:96:5a:66:12:de:ed:f3:bf:9b:03:43:
         50:08:4a:2a:d1:6a:5e:02:29:cb:ca:56:e5:35:3b:cf:24:fe:
         d7:d6:52:1d:26:e2:41:be:2d:e0:0b:ce:24:c3:b2:b8:1e:41:
         ef:da:97:a6:4f:04:3b:41:8e:65:a1:df:6c:17:8f:28:13:55:
         ff:d0:d5:d1:87:ea:46:70:11:56:1d:d3:ec:01:05:ce:c7:18:
         6d:db:b2:25:af:4a:85:20:cf:47:00:f3:fc:d4:b1:32:44:ac:
         b0:a9:a3:fb:de:01:10:e3:55:f7:0e:0f:3e:dc:9c:bc:3d:9e:
         e2:03:82:39:e9:ad:b3:d0:27:09:30:5f:d8:ca:77:0a:d1:28:
         5a:56:7c:f8:89:6d:5a:59:45:d1:b2:a1:a0:d8:aa:c4:e9:d4:
         00:15:7a:62:cf:f1:34:3b:e2:ee:7e:12:57:b0:2b:81:9d:49:
         83:01:4b:66:79:7c:6b:4b:36:1e:cc:02:96:e3:73:72:b1:c5:
         83:39:f3:4d:8c:e3:9a:35:b5:b8:6c:46:e5:1c:bc:28:53:8b:
         d6:6a:53:eb:73:a3:2c:31:56:e0:72:a3:4f:13:4b:38:8b:8d:
         7c:2d:10:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 8 17:25:10 2025 by rpki-client