This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D289C/FB7081DCA87411E9AC77AB45F8AEA228/FUgKw-djfPKntoh6_VGlPwPmrUc.mft
File:                     FUgKw-djfPKntoh6_VGlPwPmrUc.mft (raw, json)
Hash identifier:          JT3BYLBxhff+X1IbKJNpgiX1BGalgjj29mw1l4BoZIM=
Subject key identifier:   46:58:1E:52:B7:7A:EB:BF:E9:E3:9B:C2:30:08:CB:E2:AF:CE:A8:0A
Authority key identifier: 15:48:0A:C3:E7:63:7C:F2:A7:B6:88:7A:FD:51:A5:3F:03:E6:AD:47
Certificate issuer:       /CN=F36D289CAF/serialNumber=15480AC3E7637CF2A7B6887AFD51A53F03E6AD47
Certificate serial:       096E
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/FUgKw-djfPKntoh6_VGlPwPmrUc.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36D289C/FB7081DCA87411E9AC77AB45F8AEA228/FUgKw-djfPKntoh6_VGlPwPmrUc.mft
Manifest number:          096A
Signing time:             Sun 07 Dec 2025 01:31:23 +0000
Manifest this update:     Sun 07 Dec 2025 01:31:22 +0000
Manifest next update:     Tue 09 Dec 2025 01:31:22 +0000
Files and hashes:         1: FUgKw-djfPKntoh6_VGlPwPmrUc.crl (hash: 2ZZJiV1LkTMPQiVxUAzxaAyMA9egaGUCdTW9oENi7eA=)
                          2: 967E592CF1E611EFBCF7DD4F762E951A.roa (hash: OyrLKAFW3d4E09yYEW9wskKKqknjSYiMg4ra/6illO4=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36D289C/FB7081DCA87411E9AC77AB45F8AEA228/FUgKw-djfPKntoh6_VGlPwPmrUc.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36D289C/FB7081DCA87411E9AC77AB45F8AEA228/FUgKw-djfPKntoh6_VGlPwPmrUc.mft
                          rsync://rpki.afrinic.net/repository/afrinic/FUgKw-djfPKntoh6_VGlPwPmrUc.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 09 Dec 2025 01:31:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2414 (0x96e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36D289CAF, serialNumber=15480AC3E7637CF2A7B6887AFD51A53F03E6AD47
        Validity
            Not Before: Dec  7 01:31:22 2025 GMT
            Not After : Dec  9 01:31:22 2025 GMT
        Subject: CN=6934d8ea-cc6b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:ad:c7:a9:0a:0c:34:9e:1a:80:31:ee:6e:13:
                    33:12:fa:78:f1:8e:15:e1:59:aa:65:d6:fc:f2:bc:
                    43:3d:09:96:36:4f:fe:fc:0d:5a:8c:73:7f:c3:df:
                    8b:a9:dd:74:d7:96:72:5f:30:ab:12:76:b2:3a:e8:
                    15:84:da:6d:10:02:2c:53:e7:22:71:5b:f3:05:ef:
                    63:b5:81:e7:96:b3:5e:a4:a1:de:c7:b5:e8:af:e8:
                    38:f7:0f:b5:22:80:70:56:43:8d:28:f2:61:c0:9c:
                    56:c4:45:45:e6:d9:95:33:25:f5:f5:52:8a:05:1c:
                    8f:7e:84:74:f7:6a:6e:5d:42:52:8b:97:64:37:f4:
                    b5:13:d1:6f:b6:b4:af:5f:03:b9:67:a0:91:a5:36:
                    7b:2c:b9:36:e1:ba:67:8c:57:58:ae:10:f1:97:3a:
                    70:4d:35:40:98:4f:26:41:37:68:e3:80:9b:0b:4c:
                    b1:b0:04:9d:97:fd:88:80:c4:61:dd:13:46:0d:7c:
                    68:3e:7a:e8:88:fa:30:84:68:9e:3c:7f:76:d1:43:
                    f5:38:fd:60:35:a9:48:0e:52:a7:a0:2a:87:f0:b1:
                    c3:b5:95:ab:34:c6:4c:a7:2e:ac:a0:8f:a0:22:28:
                    4d:f7:1e:a6:6a:e7:61:f2:c7:56:b5:ba:21:d9:83:
                    23:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:58:1E:52:B7:7A:EB:BF:E9:E3:9B:C2:30:08:CB:E2:AF:CE:A8:0A
            X509v3 Authority Key Identifier:
                keyid:15:48:0A:C3:E7:63:7C:F2:A7:B6:88:7A:FD:51:A5:3F:03:E6:AD:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36D289C/FB7081DCA87411E9AC77AB45F8AEA228/FUgKw-djfPKntoh6_VGlPwPmrUc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/FUgKw-djfPKntoh6_VGlPwPmrUc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D289C/FB7081DCA87411E9AC77AB45F8AEA228/FUgKw-djfPKntoh6_VGlPwPmrUc.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:88:22:38:6f:8b:3d:c4:24:21:2a:92:04:54:58:01:7f:c1:
         63:db:74:5e:d7:a8:9b:21:63:f4:b2:12:f5:41:44:3a:7c:8a:
         7f:45:5d:b3:92:f2:25:65:0f:92:43:18:72:1e:bb:a7:d3:bd:
         a8:79:ed:6f:31:25:c3:6e:3e:de:64:8e:40:62:64:da:48:51:
         d8:97:24:0c:e0:06:c3:ac:d0:e0:fb:d8:96:08:e7:14:e5:24:
         55:86:35:56:31:47:01:ec:b4:e5:9a:1f:d9:43:7f:42:9c:8d:
         5a:05:dc:54:51:08:3c:d2:1e:7d:03:32:f9:45:5b:16:4a:c2:
         ba:15:75:ce:46:5e:78:94:80:66:86:63:4b:50:07:ef:d3:e5:
         95:4d:91:f7:af:34:2b:e1:0b:70:f6:e7:53:a4:ee:dd:4b:2e:
         b2:66:5d:43:ad:a7:b7:b9:0b:c3:5d:32:eb:7e:55:6a:2d:5f:
         55:dc:23:41:05:2e:d6:78:d6:5c:15:d0:a0:b7:ec:80:be:ac:
         92:2b:5c:1b:17:20:a2:fb:c3:f6:3b:a2:08:fa:73:4c:f0:6c:
         44:34:6d:c5:28:26:f9:a4:ac:a1:e3:ff:26:37:41:36:f7:95:
         d7:84:e6:88:5b:a6:d2:30:9b:19:54:11:a7:d0:f7:90:7f:29:
         4e:cb:21:4e
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICCW4wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
RDI4OUNBRjExMC8GA1UEBRMoMTU0ODBBQzNFNzYzN0NGMkE3QjY4ODdBRkQ1MUE1
M0YwM0U2QUQ0NzAeFw0yNTEyMDcwMTMxMjJaFw0yNTEyMDkwMTMxMjJaMBgxFjAU
BgNVBAMTDTY5MzRkOGVhLWNjNmIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCsrcepCgw0nhqAMe5uEzMS+njxjhXhWapl1vzyvEM9CZY2T/78DVqMc3/D
34up3XTXlnJfMKsSdrI66BWE2m0QAixT5yJxW/MF72O1geeWs16kod7Hteiv6Dj3
D7UigHBWQ40o8mHAnFbERUXm2ZUzJfX1UooFHI9+hHT3am5dQlKLl2Q39LUT0W+2
tK9fA7lnoJGlNnssuTbhumeMV1iuEPGXOnBNNUCYTyZBN2jjgJsLTLGwBJ2X/YiA
xGHdE0YNfGg+euiI+jCEaJ48f3bRQ/U4/WA1qUgOUqegKofwscO1las0xkynLqyg
j6AiKE33HqZq52Hyx1a1uiHZgyNTAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQURlge
Urd667/p45vCMAjL4q/OqAowHwYDVR0jBBgwFoAUFUgKw+djfPKntoh6/VGlPwPm
rUcwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkQyODlDL0ZCNzA4MURDQTg3NDExRTlBQzc3QUI0NUY4QUVBMjI4L0ZVZ0t3
LWRqZlBLbnRvaDZfVkdsUHdQbXJVYy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0ZVZ0t3LWRqZlBLbnRvaDZfVkdsUHdQbXJVYy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2RDI4OUMvRkI3MDgxRENBODc0MTFFOUFDNzdBQjQ1RjhB
RUEyMjgvRlVnS3ctZGpmUEtudG9oNl9WR2xQd1BtclVjLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBEiCI4b4s9xCQhKpIEVFgBf8Fj23Re
16ibIWP0shL1QUQ6fIp/RV2zkvIlZQ+SQxhyHrun072oee1vMSXDbj7eZI5AYmTa
SFHYlyQM4AbDrNDg+9iWCOcU5SRVhjVWMUcB7LTlmh/ZQ39CnI1aBdxUUQg80h59
AzL5RVsWSsK6FXXORl54lIBmhmNLUAfv0+WVTZH3rzQr4Qtw9udTpO7dSy6yZl1D
rae3uQvDXTLrflVqLV9V3CNBBS7WeNZcFdCgt+yAvqySK1wbFyCi+8P2O6II+nNM
8GxENG3FKCb5pKyh4/8mN0E295XXhOaIW6bSMJsZVBGn0PeQfylOyyFO
-----END CERTIFICATE-----
Generated at Mon Dec 8 01:20:58 2025 by rpki-client