This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36CAF37/426A0AD6586F11E5A3276231F8AEA228/imnjE5vX78CApC4WBIM5j6bHW7Y.mft
File:                     imnjE5vX78CApC4WBIM5j6bHW7Y.mft (raw, json)
Hash identifier:          pDZ7TvkZiHAt0k4CY9j9O6aluvj4oZppBpnzcpGeF/M=
Subject key identifier:   52:15:73:7C:7E:96:EE:60:B4:56:6F:05:32:86:EB:F1:76:90:2C:76
Authority key identifier: 8A:69:E3:13:9B:D7:EF:C0:80:A4:2E:16:04:83:39:8F:A6:C7:5B:B6
Certificate issuer:       /CN=F36CAF37AF/serialNumber=8A69E3139BD7EFC080A42E160483398FA6C75BB6
Certificate serial:       0EE7
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/imnjE5vX78CApC4WBIM5j6bHW7Y.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36CAF37/426A0AD6586F11E5A3276231F8AEA228/imnjE5vX78CApC4WBIM5j6bHW7Y.mft
Manifest number:          0EE7
Signing time:             Mon 08 Dec 2025 00:57:25 +0000
Manifest this update:     Mon 08 Dec 2025 00:57:24 +0000
Manifest next update:     Wed 10 Dec 2025 00:57:24 +0000
Files and hashes:         1: imnjE5vX78CApC4WBIM5j6bHW7Y.crl (hash: 74lzkLGAZz6KFligrXUMaIBfHwYXdqE+KpJUxqgs0tQ=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36CAF37/426A0AD6586F11E5A3276231F8AEA228/imnjE5vX78CApC4WBIM5j6bHW7Y.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36CAF37/426A0AD6586F11E5A3276231F8AEA228/imnjE5vX78CApC4WBIM5j6bHW7Y.mft
                          rsync://rpki.afrinic.net/repository/afrinic/imnjE5vX78CApC4WBIM5j6bHW7Y.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 10 Dec 2025 00:06:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3815 (0xee7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36CAF37AF, serialNumber=8A69E3139BD7EFC080A42E160483398FA6C75BB6
        Validity
            Not Before: Dec  8 00:57:24 2025 GMT
            Not After : Dec 10 00:57:24 2025 GMT
        Subject: CN=69362275-e60d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:9d:45:f4:8b:bc:6a:d4:07:02:a1:b3:71:f3:
                    50:f9:a5:df:a5:b4:29:3c:98:56:13:ab:45:75:4c:
                    f9:6e:46:a5:98:d0:ff:50:ab:dc:0b:96:8b:81:fd:
                    aa:51:1e:7d:8b:d3:84:37:b8:0d:59:ec:f2:f7:56:
                    07:b2:16:ec:22:1a:29:de:5b:cb:6b:31:8a:ca:a3:
                    ff:18:9c:4d:b2:f1:ad:1d:ff:9b:4b:36:0f:28:1b:
                    79:69:91:64:70:e2:38:e8:c7:18:9e:01:07:fd:80:
                    bd:09:b7:cd:de:72:80:79:e2:9f:fc:df:dd:2e:a3:
                    29:c9:fd:68:95:c5:45:e5:6e:c3:d0:85:05:80:a2:
                    fd:9b:a5:dc:17:e0:ab:08:3b:fa:02:3c:24:4f:78:
                    94:4f:ee:fb:fb:a9:70:21:d2:06:ed:f5:f6:f6:10:
                    43:10:a1:c7:f0:db:96:eb:33:e5:f0:54:8c:47:b9:
                    84:21:3b:36:57:94:bc:3f:2d:eb:00:79:8f:e1:1b:
                    7a:a1:b2:4e:b4:b0:f6:1e:c2:47:76:d0:cd:32:12:
                    2d:f9:2e:be:01:a5:ac:49:24:28:9b:7a:3f:91:3a:
                    8b:ee:b5:b5:d4:ab:eb:fa:b7:50:d1:95:fc:30:d4:
                    fe:65:b2:57:5e:bf:27:62:9c:1f:5f:d2:39:ee:7e:
                    f0:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:15:73:7C:7E:96:EE:60:B4:56:6F:05:32:86:EB:F1:76:90:2C:76
            X509v3 Authority Key Identifier:
                keyid:8A:69:E3:13:9B:D7:EF:C0:80:A4:2E:16:04:83:39:8F:A6:C7:5B:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36CAF37/426A0AD6586F11E5A3276231F8AEA228/imnjE5vX78CApC4WBIM5j6bHW7Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/imnjE5vX78CApC4WBIM5j6bHW7Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36CAF37/426A0AD6586F11E5A3276231F8AEA228/imnjE5vX78CApC4WBIM5j6bHW7Y.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:b9:73:1a:e0:05:8b:3e:fe:39:80:ec:1d:13:f4:fd:17:c4:
         d1:6e:11:c8:01:3b:40:26:ab:8f:65:02:0a:f0:6d:6f:74:e3:
         54:2d:e6:d2:f0:c7:83:2e:63:39:47:08:25:9a:5a:30:48:67:
         84:aa:e5:3b:fd:71:0d:04:bb:36:66:05:f4:bf:1b:b6:ce:e7:
         65:5b:01:82:7e:9d:0e:b1:e4:85:a9:15:ea:55:d4:34:64:28:
         d6:ae:8a:35:38:65:f0:d0:d3:f4:1a:ba:31:21:d0:16:b3:cf:
         3f:94:ad:62:ae:14:36:b4:df:21:2d:1a:14:07:ba:02:b5:62:
         e4:6e:6b:fd:97:8c:8c:1a:87:0a:10:76:72:92:d7:a1:21:56:
         07:b0:38:a8:98:63:f8:95:a4:98:8e:e2:28:80:d5:b3:b2:1d:
         02:d8:f4:47:38:6b:2d:96:8f:37:6b:05:32:22:80:b4:f9:6b:
         4e:ed:46:e2:67:ff:8d:92:f6:0b:f7:2f:bf:97:3c:ed:e1:08:
         30:dd:93:81:72:72:18:31:ad:d5:93:04:24:2c:98:7a:7d:e6:
         97:01:d2:e2:b0:cc:0c:b2:f0:32:ce:84:0d:f5:d7:bb:78:c1:
         29:f1:0f:76:8d:bc:7f:c1:01:d0:04:f9:59:3e:3a:0e:ef:eb:
         bd:6f:40:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 8 17:09:14 2025 by rpki-client