This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D8ADD/99DB6EFC6AC711EBB90AF548F8AEA228/JrOnWLLY0r61xvaBylvZJYx593c.mft
File:                     JrOnWLLY0r61xvaBylvZJYx593c.mft (raw, json)
Hash identifier:          NdFIDHpOxgMphdaEyGTD5p9NyuXW5OcRkK61VxbLeNU=
Subject key identifier:   FA:BC:66:90:05:BB:57:3F:6A:FB:B6:55:F2:C7:B3:01:ED:EE:89:11
Authority key identifier: 26:B3:A7:58:B2:D8:D2:BE:B5:C6:F6:81:CA:5B:D9:25:8C:79:F7:77
Certificate issuer:       /CN=F36D8ADDAF/serialNumber=26B3A758B2D8D2BEB5C6F681CA5BD9258C79F777
Certificate serial:       0717
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JrOnWLLY0r61xvaBylvZJYx593c.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36D8ADD/99DB6EFC6AC711EBB90AF548F8AEA228/JrOnWLLY0r61xvaBylvZJYx593c.mft
Manifest number:          0714
Signing time:             Mon 08 Dec 2025 02:01:00 +0000
Manifest this update:     Mon 08 Dec 2025 02:00:59 +0000
Manifest next update:     Wed 10 Dec 2025 02:00:59 +0000
Files and hashes:         1: JrOnWLLY0r61xvaBylvZJYx593c.crl (hash: pojm20UPPxQJ3j3PWEJAe6BI9KfxuMgH/7BUUUK5xg4=)
                          2: 8725BB28177111EF81A9096D017001B1.roa (hash: 88veSwgimt5nxNF8bDTfkfTQkyjEIh0wtn0t0fyF6v4=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36D8ADD/99DB6EFC6AC711EBB90AF548F8AEA228/JrOnWLLY0r61xvaBylvZJYx593c.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36D8ADD/99DB6EFC6AC711EBB90AF548F8AEA228/JrOnWLLY0r61xvaBylvZJYx593c.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JrOnWLLY0r61xvaBylvZJYx593c.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 10 Dec 2025 00:06:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1815 (0x717)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36D8ADDAF, serialNumber=26B3A758B2D8D2BEB5C6F681CA5BD9258C79F777
        Validity
            Not Before: Dec  8 02:00:59 2025 GMT
            Not After : Dec 10 02:00:59 2025 GMT
        Subject: CN=6936315c-483b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:82:2e:de:4f:2e:04:18:07:5e:04:aa:c6:98:
                    37:05:7f:0c:eb:5e:d4:f6:40:b0:36:99:30:9a:01:
                    fe:49:5b:a2:8b:44:fe:bf:02:64:44:0a:54:d5:2a:
                    0b:00:da:6c:18:ad:a0:ad:85:1f:0b:be:05:b3:37:
                    f9:34:71:2c:2c:e2:b6:ce:ec:5c:57:a9:8e:3f:08:
                    48:ad:6c:8f:bb:12:cf:6d:2f:70:e5:e3:0f:74:0f:
                    28:8c:89:b3:f4:a0:b7:bc:4a:12:6d:c7:c6:97:27:
                    99:2a:b8:3e:ae:8b:83:9f:3a:5e:c2:8f:23:9b:66:
                    4d:10:e9:68:a6:3a:eb:fd:0e:9a:81:1e:08:a1:c8:
                    1a:13:9f:10:dc:85:9b:26:71:70:1d:96:c0:f6:94:
                    fa:a2:95:0d:57:36:5c:f0:74:24:25:da:3b:28:d3:
                    d0:0b:be:bd:cf:2d:a7:83:87:9b:36:d6:14:64:eb:
                    a0:95:67:fa:98:7a:ac:f4:9b:77:de:e0:4d:a0:60:
                    d5:67:f2:da:f2:5e:b5:8f:a1:31:09:89:32:cb:73:
                    96:c0:d8:9e:60:cc:d2:21:c1:43:89:31:66:45:e3:
                    00:14:e9:c6:35:5e:a1:e9:0a:7b:ea:43:76:3f:12:
                    0a:ae:3f:ee:73:9b:e2:6c:84:b2:5d:b5:dd:de:29:
                    d9:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:BC:66:90:05:BB:57:3F:6A:FB:B6:55:F2:C7:B3:01:ED:EE:89:11
            X509v3 Authority Key Identifier:
                keyid:26:B3:A7:58:B2:D8:D2:BE:B5:C6:F6:81:CA:5B:D9:25:8C:79:F7:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36D8ADD/99DB6EFC6AC711EBB90AF548F8AEA228/JrOnWLLY0r61xvaBylvZJYx593c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JrOnWLLY0r61xvaBylvZJYx593c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D8ADD/99DB6EFC6AC711EBB90AF548F8AEA228/JrOnWLLY0r61xvaBylvZJYx593c.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:e2:5f:44:5c:f5:13:3b:f0:b4:11:13:37:e0:5c:00:cb:c2:
         0f:72:e2:b8:9e:74:6d:1a:3c:8b:b6:44:35:02:94:9d:a9:25:
         76:5b:51:5d:16:b3:90:c5:f2:b7:37:90:e2:25:ad:24:db:34:
         6b:5f:90:53:d5:83:1c:56:05:76:60:85:7e:b2:03:84:dd:a6:
         89:0d:12:0e:3e:5f:a7:fd:2b:bd:81:04:9b:c5:ab:7c:24:8b:
         1b:7b:94:1c:95:53:4e:98:86:c9:c9:81:82:32:1a:c7:e8:8d:
         59:4a:4b:68:83:43:cc:cf:ab:f5:30:d8:7d:40:24:5c:62:63:
         01:4b:90:d1:00:5c:ac:13:1b:f1:a2:f9:f7:2f:0d:78:9c:10:
         04:11:45:77:a6:15:b7:c8:b4:f1:c7:ca:b9:a7:c4:e8:5c:ed:
         61:2e:85:30:0b:ed:d7:ca:8f:94:94:5a:d9:66:bf:1b:60:a9:
         76:15:5f:f1:d1:ca:85:ad:de:62:bd:76:bc:62:2e:ba:3a:9e:
         f2:14:d0:a3:c1:d7:fa:da:6c:71:7e:0a:9e:43:21:37:ee:06:
         b8:3b:1c:e1:9b:5c:29:9d:20:88:ff:7b:d4:fb:11:02:49:80:
         bf:88:51:f8:35:3d:69:dc:79:03:63:b7:cf:4a:40:6e:e9:7f:
         7d:37:9c:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 8 17:20:50 2025 by rpki-client