This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D2FA4/28EF067EC9A911EE801F6F7B775412E6/_IwxIe9n77axzoOCjjTdt-4B7nc.mft
File:                     _IwxIe9n77axzoOCjjTdt-4B7nc.mft (raw, json)
Hash identifier:          v6SU1GhLWqfMJD3a7srengvnzDD0XfMqoN1b4tFvCOc=
Subject key identifier:   FB:8B:FF:21:57:E7:7F:78:F7:D5:88:24:C7:F5:B8:73:EA:80:C0:7A
Authority key identifier: FC:8C:31:21:EF:67:EF:B6:B1:CE:83:82:8E:34:DD:B7:EE:01:EE:77
Certificate issuer:       /CN=F36D2FA4AF/serialNumber=FC8C3121EF67EFB6B1CE83828E34DDB7EE01EE77
Certificate serial:       02AC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/_IwxIe9n77axzoOCjjTdt-4B7nc.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36D2FA4/28EF067EC9A911EE801F6F7B775412E6/_IwxIe9n77axzoOCjjTdt-4B7nc.mft
Manifest number:          02AC
Signing time:             Mon 08 Dec 2025 04:04:18 +0000
Manifest this update:     Mon 08 Dec 2025 04:04:17 +0000
Manifest next update:     Wed 10 Dec 2025 04:04:17 +0000
Files and hashes:         1: _IwxIe9n77axzoOCjjTdt-4B7nc.crl (hash: uH5ZQcDK2r79ph10hNGkfaVHPDB0SjqDIeLxJ9sPhIA=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36D2FA4/28EF067EC9A911EE801F6F7B775412E6/_IwxIe9n77axzoOCjjTdt-4B7nc.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36D2FA4/28EF067EC9A911EE801F6F7B775412E6/_IwxIe9n77axzoOCjjTdt-4B7nc.mft
                          rsync://rpki.afrinic.net/repository/afrinic/_IwxIe9n77axzoOCjjTdt-4B7nc.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 10 Dec 2025 00:06:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 684 (0x2ac)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36D2FA4AF, serialNumber=FC8C3121EF67EFB6B1CE83828E34DDB7EE01EE77
        Validity
            Not Before: Dec  8 04:04:17 2025 GMT
            Not After : Dec 10 04:04:17 2025 GMT
        Subject: CN=69364e42-3bc2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:37:27:59:ea:69:54:50:e1:9f:5f:6d:2a:ea:
                    cf:37:c1:ca:10:19:d5:c2:96:7d:58:4e:18:6c:4a:
                    69:6c:6d:44:bf:05:c2:e0:43:b3:b0:e6:be:24:eb:
                    a1:60:86:0e:aa:0e:c0:a6:38:eb:dd:ba:27:50:38:
                    96:57:ad:66:39:83:62:ad:58:cd:53:94:f4:48:71:
                    17:fe:ad:8a:4c:24:f0:b9:59:da:27:eb:0b:65:7c:
                    80:b2:cb:df:c5:46:49:03:40:e5:df:9c:69:30:d3:
                    93:87:02:94:cf:c0:19:7f:df:58:77:4d:1b:b6:f0:
                    f6:90:9a:ed:8b:0e:ed:a7:63:e9:04:2b:6a:86:f1:
                    98:40:8e:aa:c0:d7:07:42:5f:ae:f1:28:52:a6:80:
                    8b:65:85:57:f9:17:43:47:ca:f2:30:7b:29:e4:a0:
                    69:7d:1e:d6:ed:55:ae:48:6a:cc:14:b1:5a:a3:41:
                    3b:a6:da:0b:cf:aa:fb:4b:69:c8:33:6c:1b:41:b5:
                    90:88:a4:37:40:98:ce:68:46:eb:db:de:b7:63:5d:
                    30:e4:22:6f:d0:19:fc:0f:96:5a:ef:28:e6:c3:ac:
                    da:ab:37:81:60:99:a5:ef:c6:09:0d:c7:6d:69:d3:
                    ef:55:cc:03:bd:a6:2b:8c:3f:99:b2:e3:f9:f5:e9:
                    6a:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:8B:FF:21:57:E7:7F:78:F7:D5:88:24:C7:F5:B8:73:EA:80:C0:7A
            X509v3 Authority Key Identifier:
                keyid:FC:8C:31:21:EF:67:EF:B6:B1:CE:83:82:8E:34:DD:B7:EE:01:EE:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36D2FA4/28EF067EC9A911EE801F6F7B775412E6/_IwxIe9n77axzoOCjjTdt-4B7nc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/_IwxIe9n77axzoOCjjTdt-4B7nc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D2FA4/28EF067EC9A911EE801F6F7B775412E6/_IwxIe9n77axzoOCjjTdt-4B7nc.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:c1:33:01:1d:66:47:5f:6d:91:9f:48:f2:92:b8:29:48:12:
         11:b0:7e:3f:10:a9:58:e3:1d:3b:ca:be:ba:83:81:72:86:82:
         46:11:e3:04:16:4b:22:fa:0d:bf:ef:ee:32:54:82:0a:8a:0d:
         f1:86:da:69:0c:82:b6:38:4d:d1:62:11:e6:00:64:a9:28:b4:
         c0:53:fc:f8:43:23:ce:58:f5:d4:a4:30:3b:5b:91:bb:d2:a2:
         0f:7b:c5:b7:ad:78:7d:76:24:fd:88:8d:5c:7c:e4:c6:b8:60:
         17:91:fc:d7:8c:64:40:56:91:c0:6f:72:1b:8c:66:56:51:bb:
         6d:49:4a:a1:1b:90:b1:a6:b0:67:e7:d7:e7:4d:82:73:48:34:
         0e:b5:c4:1d:b4:8c:4b:23:b6:d3:a5:ff:76:2c:9e:26:38:25:
         18:a5:d9:94:d0:21:6b:7e:91:0d:b4:2f:53:aa:ee:ac:d3:75:
         75:5d:df:fc:3d:72:b0:0d:ae:30:a8:05:1a:9f:92:bc:91:50:
         e8:0b:d5:71:e9:c9:31:a9:99:3c:bf:f0:fc:b2:8d:a8:b8:df:
         4e:f2:e1:2a:3b:06:f5:99:2e:b3:04:b9:0e:e6:46:cf:31:ee:
         30:24:72:04:37:98:7e:25:c6:a8:58:80:4e:b3:1f:c5:b1:4c:
         bb:0c:c6:de
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICAqwwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
RDJGQTRBRjExMC8GA1UEBRMoRkM4QzMxMjFFRjY3RUZCNkIxQ0U4MzgyOEUzNERE
QjdFRTAxRUU3NzAeFw0yNTEyMDgwNDA0MTdaFw0yNTEyMTAwNDA0MTdaMBgxFjAU
BgNVBAMTDTY5MzY0ZTQyLTNiYzIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCXNydZ6mlUUOGfX20q6s83wcoQGdXCln1YThhsSmlsbUS/BcLgQ7Ow5r4k
66Fghg6qDsCmOOvduidQOJZXrWY5g2KtWM1TlPRIcRf+rYpMJPC5Wdon6wtlfICy
y9/FRkkDQOXfnGkw05OHApTPwBl/31h3TRu28PaQmu2LDu2nY+kEK2qG8ZhAjqrA
1wdCX67xKFKmgItlhVf5F0NHyvIweynkoGl9HtbtVa5IaswUsVqjQTum2gvPqvtL
acgzbBtBtZCIpDdAmM5oRuvb3rdjXTDkIm/QGfwPllrvKObDrNqrN4FgmaXvxgkN
x21p0+9VzAO9piuMP5my4/n16Wp1AgMBAAGjggK4MIICtDAdBgNVHQ4EFgQU+4v/
IVfnf3j31Ygkx/W4c+qAwHowHwYDVR0jBBgwFoAU/IwxIe9n77axzoOCjjTdt+4B
7ncwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkQyRkE0LzI4RUYwNjdFQzlBOTExRUU4MDFGNkY3Qjc3NTQxMkU2L19Jd3hJ
ZTluNzdheHpvT0NqalRkdC00QjduYy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL19Jd3hJZTluNzdheHpvT0NqalRkdC00QjduYy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2RDJGQTQvMjhFRjA2N0VDOUE5MTFFRTgwMUY2RjdCNzc1
NDEyRTYvX0l3eEllOW43N2F4em9PQ2pqVGR0LTRCN25jLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCxwTMBHWZHX22Rn0jykrgpSBIRsH4/
EKlY4x07yr66g4FyhoJGEeMEFksi+g2/7+4yVIIKig3xhtppDIK2OE3RYhHmAGSp
KLTAU/z4QyPOWPXUpDA7W5G70qIPe8W3rXh9diT9iI1cfOTGuGAXkfzXjGRAVpHA
b3IbjGZWUbttSUqhG5CxprBn59fnTYJzSDQOtcQdtIxLI7bTpf92LJ4mOCUYpdmU
0CFrfpENtC9Tqu6s03V1Xd/8PXKwDa4wqAUan5K8kVDoC9Vx6ckxqZk8v/D8so2o
uN9O8uEqOwb1mS6zBLkO5kbPMe4wJHIEN5h+JcaoWIBOsx/FsUy7DMbe
-----END CERTIFICATE-----
Generated at Mon Dec 8 17:15:20 2025 by rpki-client