This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36CEA2A/4C669B2C484611F097D84AD9DAE4EC9C/sNdja0QI8KwoxZz1uRZkvYIxQFA.mft
File:                     sNdja0QI8KwoxZz1uRZkvYIxQFA.mft (raw, json)
Hash identifier:          BzochVJmxWQne1fU5SrjK3Z2wVMVQOyXMPnhFpAUcys=
Subject key identifier:   F1:F6:29:DD:07:15:18:2A:DC:E2:4E:F3:A2:40:F3:EE:95:2C:5C:C8
Authority key identifier: B0:D7:63:6B:44:08:F0:AC:28:C5:9C:F5:B9:16:64:BD:82:31:40:50
Certificate issuer:       /CN=F36CEA2AAF/serialNumber=B0D7636B4408F0AC28C59CF5B91664BD82314050
Certificate serial:       B7
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/sNdja0QI8KwoxZz1uRZkvYIxQFA.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36CEA2A/4C669B2C484611F097D84AD9DAE4EC9C/sNdja0QI8KwoxZz1uRZkvYIxQFA.mft
Manifest number:          B7
Signing time:             Mon 08 Dec 2025 04:59:02 +0000
Manifest this update:     Mon 08 Dec 2025 04:59:01 +0000
Manifest next update:     Wed 10 Dec 2025 04:59:01 +0000
Files and hashes:         1: sNdja0QI8KwoxZz1uRZkvYIxQFA.crl (hash: XMXeui9KDuZpZB9MgzqQXgykyPEmk/Nd+ZZfntba8IM=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36CEA2A/4C669B2C484611F097D84AD9DAE4EC9C/sNdja0QI8KwoxZz1uRZkvYIxQFA.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36CEA2A/4C669B2C484611F097D84AD9DAE4EC9C/sNdja0QI8KwoxZz1uRZkvYIxQFA.mft
                          rsync://rpki.afrinic.net/repository/afrinic/sNdja0QI8KwoxZz1uRZkvYIxQFA.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 10 Dec 2025 00:06:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 183 (0xb7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36CEA2AAF, serialNumber=B0D7636B4408F0AC28C59CF5B91664BD82314050
        Validity
            Not Before: Dec  8 04:59:01 2025 GMT
            Not After : Dec 10 04:59:01 2025 GMT
        Subject: CN=69365b16-afb1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:88:77:05:a6:c1:cb:05:93:14:c3:ab:ef:ba:
                    d9:65:99:ac:73:5f:9a:1a:31:23:9f:02:5a:d0:0f:
                    65:08:2f:1f:a1:3d:2d:84:6e:2b:96:58:d0:27:69:
                    fe:76:b2:72:d0:8f:45:d7:dc:72:f5:59:95:11:55:
                    5f:81:47:bc:64:68:7c:fa:4c:ba:23:c7:32:1b:bf:
                    d9:8c:12:4b:68:f0:eb:a5:f7:e0:b9:e0:f2:13:db:
                    35:06:f1:46:46:c3:a7:93:26:be:dc:c4:4a:c1:dc:
                    57:f5:44:9b:35:7e:d7:db:8e:e4:b6:6c:a2:b4:aa:
                    30:e8:ab:7b:bc:84:c6:5a:be:91:14:d4:12:63:de:
                    83:1d:3c:29:c0:7c:02:fb:a6:ab:cd:d6:e2:73:65:
                    e0:ea:a6:74:ad:20:89:fa:da:0a:e6:ef:b2:89:f0:
                    0f:b9:62:0c:a5:f6:87:15:08:ad:11:2e:97:de:0d:
                    e6:9c:73:28:cf:d4:98:48:91:49:54:39:ad:2f:73:
                    3b:e2:3e:66:5e:1c:ea:3e:b9:b1:b5:24:7c:ca:4a:
                    47:67:cf:ea:ca:b6:2e:75:c1:10:71:f6:cf:11:64:
                    69:d6:be:15:2e:d1:2f:c4:0b:30:7c:57:cd:75:b4:
                    83:01:b1:63:10:d1:d9:08:11:ec:9c:80:02:9d:78:
                    e5:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:F6:29:DD:07:15:18:2A:DC:E2:4E:F3:A2:40:F3:EE:95:2C:5C:C8
            X509v3 Authority Key Identifier:
                keyid:B0:D7:63:6B:44:08:F0:AC:28:C5:9C:F5:B9:16:64:BD:82:31:40:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36CEA2A/4C669B2C484611F097D84AD9DAE4EC9C/sNdja0QI8KwoxZz1uRZkvYIxQFA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/sNdja0QI8KwoxZz1uRZkvYIxQFA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36CEA2A/4C669B2C484611F097D84AD9DAE4EC9C/sNdja0QI8KwoxZz1uRZkvYIxQFA.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:37:8f:90:d7:2a:72:59:25:0b:14:ca:98:9d:35:ce:f9:b2:
         b9:d4:80:9a:6e:e2:3c:77:c9:de:a5:3e:4d:de:6e:f5:9a:71:
         a1:6f:6a:a0:c6:8b:4b:30:f7:53:03:43:5a:c5:c0:8e:38:3b:
         7b:74:b1:e3:32:47:51:7a:49:c2:a5:3a:bd:ce:a2:51:c2:73:
         f8:d8:d8:e0:d0:ef:81:ad:97:99:59:6e:46:f7:2a:9b:da:f0:
         e7:1d:80:b6:ce:53:04:51:45:6e:6a:56:89:4f:e8:cb:17:dd:
         0d:00:b1:76:29:85:ba:07:02:f6:bd:69:0c:22:a7:1c:4b:27:
         50:25:8a:65:db:98:a4:52:9b:8b:71:f5:1f:ab:f4:cf:95:3e:
         4c:be:f6:d3:35:83:2e:ce:88:21:4e:74:8c:68:39:b5:84:87:
         05:6e:88:89:ca:4c:f5:a6:61:0f:74:b8:46:e5:f6:72:e6:e4:
         b8:6d:66:cf:a8:d9:f5:30:f6:a9:2d:34:e5:3a:86:74:02:51:
         09:1c:28:06:e1:c9:2b:2c:1a:27:78:35:ba:72:43:b5:e0:d8:
         4b:3a:02:3b:82:d7:e9:13:83:15:4f:ca:b9:71:72:f0:5e:24:
         25:b1:bb:f2:b5:d3:a8:29:e0:8a:21:60:cd:51:82:59:da:21:
         2f:23:f7:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 8 17:06:41 2025 by rpki-client