This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D26A1/9BFDE1BA3EAE11EF8EE2C15E762E951A/tMAcTWHoBZAF2upMZ3oW5ER9VSw.mft
File:                     tMAcTWHoBZAF2upMZ3oW5ER9VSw.mft (raw, json)
Hash identifier:          Em6fvvQE3+wSbKrJJj3ohfAbwnuzYtIYYgO0fPeKa/g=
Subject key identifier:   2C:81:2F:F3:7E:C6:B6:0F:FC:05:59:CF:E4:F5:53:30:E2:F7:3B:A1
Authority key identifier: B4:C0:1C:4D:61:E8:05:90:05:DA:EA:4C:67:7A:16:E4:44:7D:55:2C
Certificate issuer:       /CN=F36D26A1AF/serialNumber=B4C01C4D61E8059005DAEA4C677A16E4447D552C
Certificate serial:       0210
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/tMAcTWHoBZAF2upMZ3oW5ER9VSw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36D26A1/9BFDE1BA3EAE11EF8EE2C15E762E951A/tMAcTWHoBZAF2upMZ3oW5ER9VSw.mft
Manifest number:          0210
Signing time:             Mon 08 Dec 2025 04:20:27 +0000
Manifest this update:     Mon 08 Dec 2025 04:20:26 +0000
Manifest next update:     Wed 10 Dec 2025 04:20:26 +0000
Files and hashes:         1: tMAcTWHoBZAF2upMZ3oW5ER9VSw.crl (hash: AoFUDofwb3HTF7RJ2qOwIpLUNXpaf9f0q1FxTBllroQ=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36D26A1/9BFDE1BA3EAE11EF8EE2C15E762E951A/tMAcTWHoBZAF2upMZ3oW5ER9VSw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36D26A1/9BFDE1BA3EAE11EF8EE2C15E762E951A/tMAcTWHoBZAF2upMZ3oW5ER9VSw.mft
                          rsync://rpki.afrinic.net/repository/afrinic/tMAcTWHoBZAF2upMZ3oW5ER9VSw.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 10 Dec 2025 00:06:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 528 (0x210)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36D26A1AF, serialNumber=B4C01C4D61E8059005DAEA4C677A16E4447D552C
        Validity
            Not Before: Dec  8 04:20:26 2025 GMT
            Not After : Dec 10 04:20:26 2025 GMT
        Subject: CN=6936520b-f492
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:71:07:7d:f9:64:5b:a3:bf:27:a5:10:b6:f4:
                    31:e3:fe:3a:9c:48:28:ec:f6:de:b6:d1:d1:2a:ba:
                    87:29:b9:64:37:22:d8:1d:d3:d4:a5:a6:5f:8a:b2:
                    c5:05:3f:bb:75:f8:8e:71:d9:45:fd:e7:81:75:31:
                    89:a0:2f:41:0d:79:df:f8:c7:98:f4:c8:ce:91:ff:
                    0a:7c:ec:f8:88:d8:9f:82:24:6c:7c:02:62:a2:57:
                    8b:07:5d:7f:28:0f:9f:12:0a:0b:cc:99:d7:74:40:
                    84:15:75:1a:21:6a:c9:41:70:ff:f3:2c:9a:07:66:
                    09:8b:7d:84:e1:13:4b:24:9e:9b:f9:ab:62:cd:9e:
                    42:72:e3:ae:08:d2:98:68:36:ed:55:fc:b7:78:a6:
                    68:fe:2f:17:ab:f6:8e:ed:de:d3:fa:f7:b7:94:4c:
                    63:83:83:d8:de:b4:9b:c0:06:d0:ac:c6:4e:8f:ac:
                    57:eb:71:09:72:8e:91:b1:25:72:97:6c:32:b0:0c:
                    dc:83:0a:2e:14:f1:1f:ac:d8:12:04:f8:92:a4:ae:
                    6f:4a:99:c9:64:16:02:8b:2b:50:aa:33:31:4f:d9:
                    44:e1:da:09:07:3c:de:a1:10:1c:f7:67:73:f4:bd:
                    49:f6:d7:3a:de:72:43:4a:17:3a:67:14:ab:d2:79:
                    4b:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:81:2F:F3:7E:C6:B6:0F:FC:05:59:CF:E4:F5:53:30:E2:F7:3B:A1
            X509v3 Authority Key Identifier:
                keyid:B4:C0:1C:4D:61:E8:05:90:05:DA:EA:4C:67:7A:16:E4:44:7D:55:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36D26A1/9BFDE1BA3EAE11EF8EE2C15E762E951A/tMAcTWHoBZAF2upMZ3oW5ER9VSw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/tMAcTWHoBZAF2upMZ3oW5ER9VSw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D26A1/9BFDE1BA3EAE11EF8EE2C15E762E951A/tMAcTWHoBZAF2upMZ3oW5ER9VSw.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:95:4f:7e:99:a4:1a:f3:ac:18:14:a2:4c:9f:88:67:e1:87:
         02:04:33:88:f5:60:ae:27:d5:52:d7:8e:dc:f0:70:a2:a9:41:
         5a:08:d5:9b:2a:d7:83:26:2d:64:30:b6:83:ac:cf:02:18:7f:
         d0:0e:10:ce:97:c0:82:2b:73:f7:b8:b7:12:6a:a1:a1:ac:d5:
         89:cf:5b:36:57:fa:88:6d:e0:95:db:5d:7b:54:f5:1d:60:d2:
         80:2e:fd:5d:e2:11:08:f0:d8:14:29:d6:c2:35:37:38:af:4c:
         46:98:1a:c5:51:6e:6e:1f:11:30:23:1d:b4:b5:b2:50:90:87:
         f8:83:6a:a7:bb:f4:28:20:29:0c:dc:8f:bb:8c:13:55:46:96:
         c9:87:2e:4d:b1:3e:78:1a:12:41:b5:16:6c:49:e9:fc:03:9b:
         08:b8:fe:00:b6:92:a0:35:14:4f:00:74:cb:cd:ae:3a:7e:f1:
         7e:7f:d2:e4:65:4e:3b:3a:d0:fd:23:45:95:b3:ca:19:64:3e:
         f9:75:63:a0:a9:ef:b9:0d:f2:82:2c:dc:f7:8e:6f:aa:64:f3:
         3b:9e:a9:b3:fd:83:7f:15:a1:d6:6c:b9:bc:14:03:ea:9a:a2:
         a4:b5:bf:44:99:6a:34:bd:08:39:ad:a6:e2:a5:51:24:e9:35:
         90:cd:4e:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 8 17:04:54 2025 by rpki-client