This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D32D1/AD00932C407D11ECA8E59D0FD8A014CE/v10_TcmvF_i6c_VaHXLzlZwFGOI.mft
File:                     v10_TcmvF_i6c_VaHXLzlZwFGOI.mft (raw, json)
Hash identifier:          hCOOY6+cnZsw1wsPmgWs7u7SvRFx1ZCk2OHl8gqMwm4=
Subject key identifier:   31:6B:08:92:7B:33:30:99:0A:07:73:40:BE:39:37:5B:79:3A:C0:AE
Authority key identifier: BF:5D:3F:4D:C9:AF:17:F8:BA:73:F5:5A:1D:72:F3:95:9C:05:18:E2
Certificate issuer:       /CN=F36D32D1AF/serialNumber=BF5D3F4DC9AF17F8BA73F55A1D72F3959C0518E2
Certificate serial:       060B
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/v10_TcmvF_i6c_VaHXLzlZwFGOI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36D32D1/AD00932C407D11ECA8E59D0FD8A014CE/v10_TcmvF_i6c_VaHXLzlZwFGOI.mft
Manifest number:          0604
Signing time:             Mon 08 Dec 2025 02:30:36 +0000
Manifest this update:     Mon 08 Dec 2025 02:30:36 +0000
Manifest next update:     Wed 10 Dec 2025 02:30:36 +0000
Files and hashes:         1: v10_TcmvF_i6c_VaHXLzlZwFGOI.crl (hash: i3NmXR75qhwHVuvu7HY+KarMkZTHXHj0WMAxW0qpShQ=)
                          2: C22CE7B8848211EFB04104A3762E951A.roa (hash: UvSKfzbPPPDmh9qt5fUcWRDz2kLL0/oUIRFROj/013Y=)
                          3: DAF0E168407F11ECB8D6EB12D8A014CE.roa (hash: hHFxlWCSnH4gDexnkdfm1eIFVHKF3ZADP/XYQDBgtyE=)
                          4: EC73A322848211EFA35B4DA3762E951A.roa (hash: E9n0BXdEdCO4VUpJ00TALsQfI4M1cW8WL9kQTleR3iM=)
                          5: 4FE58CA0848211EFB21CDAA0762E951A.roa (hash: hT4mSK8j0yF0krAa2/n501dY/MbNiSKbpGMw/g08dhw=)
                          6: C6263998848011EFAA998A96762E951A.roa (hash: 7pLiVykcpNB61b9uTOfPQKtdMaNQfNXZhZHjF5fDR2M=)
                          7: FD442A68977511EFAFDE5CA6762E951A.roa (hash: jCYhuEuX8SeXpiy1mcrGpnTn+Pm2iMoNn/fsKbfF3rg=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36D32D1/AD00932C407D11ECA8E59D0FD8A014CE/v10_TcmvF_i6c_VaHXLzlZwFGOI.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36D32D1/AD00932C407D11ECA8E59D0FD8A014CE/v10_TcmvF_i6c_VaHXLzlZwFGOI.mft
                          rsync://rpki.afrinic.net/repository/afrinic/v10_TcmvF_i6c_VaHXLzlZwFGOI.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 10 Dec 2025 00:06:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1547 (0x60b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36D32D1AF, serialNumber=BF5D3F4DC9AF17F8BA73F55A1D72F3959C0518E2
        Validity
            Not Before: Dec  8 02:30:36 2025 GMT
            Not After : Dec 10 02:30:36 2025 GMT
        Subject: CN=6936384c-4dd6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:9c:a7:a6:72:f8:0d:d5:ff:87:07:f6:d1:1d:
                    21:98:b9:17:4d:bb:5b:e9:d0:42:3f:7d:b6:0d:eb:
                    d8:82:aa:78:b4:ec:49:eb:81:3c:da:5a:67:03:aa:
                    78:24:c4:af:75:ab:e8:d2:74:4d:29:1d:8b:94:75:
                    58:93:1c:58:51:cf:56:2e:d0:a0:84:b3:b3:dc:73:
                    5e:a7:37:7f:61:e1:34:c1:c2:3e:a8:9d:f5:f2:c1:
                    e3:96:4f:4d:fc:9c:1d:89:91:0d:84:36:8e:d0:0b:
                    30:8e:06:df:3a:16:f7:9f:03:1e:8e:da:e5:32:e3:
                    53:13:af:e0:01:a1:74:fc:90:c7:af:87:33:57:c3:
                    a0:59:0c:81:99:4c:02:83:03:dd:87:f0:d9:a6:c4:
                    d9:22:b6:f4:2a:7f:39:aa:c5:f5:1a:1e:26:10:f5:
                    ef:17:9d:f0:d5:29:03:6f:e6:2e:76:84:9d:25:a8:
                    c5:59:6d:04:e3:7b:ea:88:78:2b:da:e1:48:5e:82:
                    f2:af:35:fd:16:28:a0:3a:7a:2f:e2:c7:66:2c:c6:
                    bd:94:a9:d0:88:93:d0:f5:a5:80:aa:93:88:96:2e:
                    67:2c:9e:5b:bf:e8:76:83:c4:f3:33:9f:12:7c:59:
                    d8:68:18:d5:7e:00:ee:f5:3f:4c:2e:ef:fa:7d:21:
                    24:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:6B:08:92:7B:33:30:99:0A:07:73:40:BE:39:37:5B:79:3A:C0:AE
            X509v3 Authority Key Identifier:
                keyid:BF:5D:3F:4D:C9:AF:17:F8:BA:73:F5:5A:1D:72:F3:95:9C:05:18:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36D32D1/AD00932C407D11ECA8E59D0FD8A014CE/v10_TcmvF_i6c_VaHXLzlZwFGOI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/v10_TcmvF_i6c_VaHXLzlZwFGOI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D32D1/AD00932C407D11ECA8E59D0FD8A014CE/v10_TcmvF_i6c_VaHXLzlZwFGOI.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:d8:13:3a:d7:c1:90:c8:f8:f2:5a:55:08:98:83:fb:8a:aa:
         63:eb:e3:61:92:d8:88:28:3c:16:80:0c:7c:88:3c:9b:c2:cf:
         dd:2e:2c:eb:1e:ad:d3:13:49:e7:39:39:38:4b:55:7d:ed:82:
         32:91:43:2c:24:5b:27:63:ab:dd:a6:55:a3:02:25:57:a0:89:
         f1:c4:01:b8:95:11:7d:77:88:ae:62:39:71:0f:ad:85:e0:81:
         5b:3a:55:38:7d:05:ce:e1:d8:dd:fd:f8:55:eb:19:e1:8d:05:
         6c:70:b0:71:e8:9b:2f:30:9a:10:14:92:b4:90:51:35:5c:96:
         68:a7:b3:44:86:a8:60:00:76:ac:ff:ad:fd:82:11:c0:0c:fb:
         b8:20:08:c7:c2:5c:fb:5b:1e:bb:07:23:70:0d:98:9c:28:7f:
         78:8d:b6:c8:1f:fe:9d:a9:b3:33:c4:2f:67:25:da:7b:72:60:
         4b:88:20:64:84:4f:77:75:5f:41:f3:97:53:8c:d5:3c:7a:e9:
         26:07:95:e1:92:a4:61:c2:d8:08:75:12:41:fd:ae:20:e5:a6:
         8f:8d:2f:a2:d6:44:8b:b3:5e:2e:c0:c1:69:85:77:66:f8:01:
         68:50:0e:35:62:03:b1:02:9e:8b:2a:32:b9:8c:1e:6f:35:72:
         42:86:e0:6d
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICBgswDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
RDMyRDFBRjExMC8GA1UEBRMoQkY1RDNGNERDOUFGMTdGOEJBNzNGNTVBMUQ3MkYz
OTU5QzA1MThFMjAeFw0yNTEyMDgwMjMwMzZaFw0yNTEyMTAwMjMwMzZaMBgxFjAU
BgNVBAMTDTY5MzYzODRjLTRkZDYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDNnKemcvgN1f+HB/bRHSGYuRdNu1vp0EI/fbYN69iCqni07EnrgTzaWmcD
qngkxK91q+jSdE0pHYuUdViTHFhRz1Yu0KCEs7Pcc16nN39h4TTBwj6onfXyweOW
T038nB2JkQ2ENo7QCzCOBt86FvefAx6O2uUy41MTr+ABoXT8kMevhzNXw6BZDIGZ
TAKDA92H8NmmxNkitvQqfzmqxfUaHiYQ9e8XnfDVKQNv5i52hJ0lqMVZbQTje+qI
eCva4UhegvKvNf0WKKA6ei/ix2Ysxr2UqdCIk9D1pYCqk4iWLmcsnlu/6HaDxPMz
nxJ8WdhoGNV+AO71P0wu7/p9ISRpAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUMWsI
knszMJkKB3NAvjk3W3k6wK4wHwYDVR0jBBgwFoAUv10/TcmvF/i6c/VaHXLzlZwF
GOIwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkQzMkQxL0FEMDA5MzJDNDA3RDExRUNBOEU1OUQwRkQ4QTAxNENFL3YxMF9U
Y212Rl9pNmNfVmFIWEx6bFp3RkdPSS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL3YxMF9UY212Rl9pNmNfVmFIWEx6bFp3RkdPSS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2RDMyRDEvQUQwMDkzMkM0MDdEMTFFQ0E4RTU5RDBGRDhB
MDE0Q0UvdjEwX1RjbXZGX2k2Y19WYUhYTHpsWndGR09JLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQB72BM618GQyPjyWlUImIP7iqpj6+Nh
ktiIKDwWgAx8iDybws/dLizrHq3TE0nnOTk4S1V97YIykUMsJFsnY6vdplWjAiVX
oInxxAG4lRF9d4iuYjlxD62F4IFbOlU4fQXO4djd/fhV6xnhjQVscLBx6JsvMJoQ
FJK0kFE1XJZop7NEhqhgAHas/639ghHADPu4IAjHwlz7Wx67ByNwDZicKH94jbbI
H/6dqbMzxC9nJdp7cmBLiCBkhE93dV9B85dTjNU8eukmB5XhkqRhwtgIdRJB/a4g
5aaPjS+i1kSLs14uwMFphXdm+AFoUA41YgOxAp6LKjK5jB5vNXJChuBt
-----END CERTIFICATE-----
Generated at Mon Dec 8 17:10:47 2025 by rpki-client