This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C8DB2/FEFAB188DC4111E8AF4EAF55F8AEA228/G-LsVuSB2cQGqMGrnFIvumhbdwk.mft
File:                     G-LsVuSB2cQGqMGrnFIvumhbdwk.mft (raw, json)
Hash identifier:          JgHafbnHa2gueyN9YpC4Bgzwy+aFYrKp0GHXs+qMlgI=
Subject key identifier:   3E:EF:3B:64:4A:6D:86:BB:0A:D9:0C:B5:85:87:FA:A5:0E:D7:98:90
Authority key identifier: 1B:E2:EC:56:E4:81:D9:C4:06:A8:C1:AB:9C:52:2F:BA:68:5B:77:09
Certificate issuer:       /CN=F36C8DB2AF/serialNumber=1BE2EC56E481D9C406A8C1AB9C522FBA685B7709
Certificate serial:       0A71
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/G-LsVuSB2cQGqMGrnFIvumhbdwk.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C8DB2/FEFAB188DC4111E8AF4EAF55F8AEA228/G-LsVuSB2cQGqMGrnFIvumhbdwk.mft
Manifest number:          0A6C
Signing time:             Mon 08 Dec 2025 01:15:28 +0000
Manifest this update:     Mon 08 Dec 2025 01:15:27 +0000
Manifest next update:     Wed 10 Dec 2025 01:15:27 +0000
Files and hashes:         1: G-LsVuSB2cQGqMGrnFIvumhbdwk.crl (hash: jijXoCYtlDKeVNxvvUDuAq2oWjfMt5CGvPbe4WHu7E0=)
                          2: 3A5D54C8064011EF8CD97956017001B1.roa (hash: 9/mp/JPe+mMfGz2E8/eg18PGdN/V1h9ltv/VJ2aQXwQ=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36C8DB2/FEFAB188DC4111E8AF4EAF55F8AEA228/G-LsVuSB2cQGqMGrnFIvumhbdwk.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36C8DB2/FEFAB188DC4111E8AF4EAF55F8AEA228/G-LsVuSB2cQGqMGrnFIvumhbdwk.mft
                          rsync://rpki.afrinic.net/repository/afrinic/G-LsVuSB2cQGqMGrnFIvumhbdwk.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 10 Dec 2025 00:06:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2673 (0xa71)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C8DB2AF, serialNumber=1BE2EC56E481D9C406A8C1AB9C522FBA685B7709
        Validity
            Not Before: Dec  8 01:15:27 2025 GMT
            Not After : Dec 10 01:15:27 2025 GMT
        Subject: CN=693626b0-a86e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:96:96:2e:8f:dc:ab:a4:18:0f:c1:ae:6d:85:
                    ed:54:40:06:b5:00:95:12:f5:31:6d:48:b6:27:65:
                    09:e0:31:2b:48:9c:22:49:3c:54:9e:d3:e2:1c:ee:
                    69:26:71:0d:08:81:37:97:12:83:a3:c6:cb:cc:a5:
                    2b:78:b1:fe:9c:20:85:ec:f0:d0:5c:9e:b9:a8:4c:
                    b1:49:d1:8e:a3:0b:27:f9:eb:28:6a:fc:ef:40:07:
                    c6:ab:6b:76:35:7c:f2:8d:40:d6:83:08:a2:fd:90:
                    e9:46:c0:57:95:fa:61:54:25:44:9a:da:db:a8:0c:
                    a0:a4:66:86:fe:bf:cf:b5:b3:d7:fa:d4:dd:17:36:
                    bd:f1:d7:c1:d9:aa:46:2b:7c:0e:d0:e4:44:37:01:
                    66:f0:38:cc:ef:de:c4:66:0a:a7:6c:34:92:2d:ec:
                    6a:ec:11:0d:e1:13:f9:53:ca:ea:53:67:a1:ff:ba:
                    1f:e9:9e:18:53:a7:5e:19:67:22:9e:87:bd:94:9a:
                    6f:56:e1:68:8a:9c:39:7d:a9:fc:d9:0e:e3:46:cb:
                    60:ed:46:62:d2:4a:b7:8f:76:fc:00:c0:e8:9c:ed:
                    3f:ac:05:fa:d8:0d:7c:3f:d0:ba:de:84:c1:a8:eb:
                    ff:24:c7:ac:a7:56:bc:ad:b1:b4:1c:14:a0:92:01:
                    2a:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:EF:3B:64:4A:6D:86:BB:0A:D9:0C:B5:85:87:FA:A5:0E:D7:98:90
            X509v3 Authority Key Identifier:
                keyid:1B:E2:EC:56:E4:81:D9:C4:06:A8:C1:AB:9C:52:2F:BA:68:5B:77:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C8DB2/FEFAB188DC4111E8AF4EAF55F8AEA228/G-LsVuSB2cQGqMGrnFIvumhbdwk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/G-LsVuSB2cQGqMGrnFIvumhbdwk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C8DB2/FEFAB188DC4111E8AF4EAF55F8AEA228/G-LsVuSB2cQGqMGrnFIvumhbdwk.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:cc:68:dd:d8:47:84:d5:3f:4e:0e:66:c1:b4:6c:23:6f:0c:
         11:06:f2:5b:18:30:eb:f9:d3:09:95:3d:3b:22:5c:ab:38:a3:
         cd:78:14:c7:ad:5f:26:ea:38:71:50:24:1e:89:66:a2:d2:0b:
         68:59:1a:1d:c0:24:67:d6:9a:c9:ba:6b:96:52:fe:2c:06:07:
         f4:96:72:6f:fa:fb:d0:f9:55:bb:c2:17:fe:d3:70:a3:43:4e:
         bd:d1:c1:65:ef:7a:d1:b5:c2:55:cb:10:83:e0:80:c0:f1:4d:
         88:9d:87:5e:be:e8:20:a8:2b:ec:13:b2:33:62:23:35:98:19:
         d6:24:c9:a0:df:95:91:bf:f9:c8:84:d6:38:11:f0:15:1f:bb:
         dd:c0:71:3c:45:47:1b:a7:40:49:57:ea:e2:c7:53:e5:42:82:
         34:a9:0a:0e:af:7f:2c:34:f7:4c:3b:44:52:5c:b2:ab:40:99:
         d2:dc:dc:42:1a:4f:89:89:09:81:b4:5a:cc:03:31:85:de:f1:
         80:77:34:43:c6:f5:35:e0:08:c6:b7:ea:73:91:2e:14:6f:d0:
         6b:9d:f7:c9:3f:37:83:2f:25:3d:cf:39:6a:7b:cc:ad:90:0e:
         8b:8a:f0:fd:dd:46:ac:55:cb:ac:0d:cf:e6:da:d2:71:6a:b6:
         35:ec:ab:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 8 17:21:04 2025 by rpki-client