This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D8C86/5682F6524A7211ED90B9E0B8F1222468/n1zGQpNoeQW6tHWMmF3HaD8QWv8.mft
File:                     n1zGQpNoeQW6tHWMmF3HaD8QWv8.mft (raw, json)
Hash identifier:          P1iFNvPW5LPstF9kimEvZMQxyGC4y4h15X3CXnoKyl0=
Subject key identifier:   C4:0E:AA:5B:11:B0:0D:61:8E:45:65:37:77:6E:AC:C7:13:27:8F:CE
Authority key identifier: 9F:5C:C6:42:93:68:79:05:BA:B4:75:8C:98:5D:C7:68:3F:10:5A:FF
Certificate issuer:       /CN=F36D8C86AF/serialNumber=9F5CC64293687905BAB4758C985DC7683F105AFF
Certificate serial:       04A8
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/n1zGQpNoeQW6tHWMmF3HaD8QWv8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36D8C86/5682F6524A7211ED90B9E0B8F1222468/n1zGQpNoeQW6tHWMmF3HaD8QWv8.mft
Manifest number:          04A7
Signing time:             Mon 08 Dec 2025 03:03:09 +0000
Manifest this update:     Mon 08 Dec 2025 03:03:08 +0000
Manifest next update:     Wed 10 Dec 2025 03:03:08 +0000
Files and hashes:         1: n1zGQpNoeQW6tHWMmF3HaD8QWv8.crl (hash: rjRuKftnXegWCnEcTjJ/fpR7vslv/JTRUZ0TNrqUSkQ=)
                          2: 98ECE8F44F7C11EDBAAD30BFF1222468.roa (hash: mB6ofAxn8aoJV2HyFdBef2cwvwi5tpjNfUdI4fOOdg8=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36D8C86/5682F6524A7211ED90B9E0B8F1222468/n1zGQpNoeQW6tHWMmF3HaD8QWv8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36D8C86/5682F6524A7211ED90B9E0B8F1222468/n1zGQpNoeQW6tHWMmF3HaD8QWv8.mft
                          rsync://rpki.afrinic.net/repository/afrinic/n1zGQpNoeQW6tHWMmF3HaD8QWv8.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 10 Dec 2025 00:06:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1192 (0x4a8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36D8C86AF, serialNumber=9F5CC64293687905BAB4758C985DC7683F105AFF
        Validity
            Not Before: Dec  8 03:03:08 2025 GMT
            Not After : Dec 10 03:03:08 2025 GMT
        Subject: CN=69363fec-2b13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:0d:7e:28:fe:7e:9d:d0:e4:bc:58:da:4b:2a:
                    51:17:97:8a:71:09:ed:e0:47:21:b8:91:d6:b5:f1:
                    6f:13:03:62:18:5f:93:b8:9c:e1:5c:e4:94:9f:7f:
                    1a:3a:78:99:76:39:ef:c0:1d:c7:3f:c1:f6:1a:82:
                    b3:2f:06:07:5b:4f:b3:b3:ff:a5:cb:43:6d:ab:e6:
                    ea:b0:b3:d7:c1:8d:74:08:bb:f8:f9:4a:ca:6d:78:
                    ba:03:cf:8c:2e:61:4e:50:4d:7b:cd:4f:83:8a:01:
                    d3:72:bd:43:16:5a:bd:0a:e4:95:dd:b3:30:21:85:
                    64:9f:e7:17:4c:d3:f1:76:ff:f3:b0:7b:51:5b:af:
                    68:01:c1:bf:30:69:41:d8:f5:50:ea:8c:d0:68:ee:
                    3e:e8:89:57:ca:4d:e3:9a:8f:25:36:6f:ae:e3:5c:
                    55:89:ff:6b:24:83:71:29:6c:f5:02:4c:7a:52:79:
                    35:b4:db:6c:21:90:6f:af:50:f2:67:69:4e:f4:41:
                    0f:ce:3d:78:aa:9d:c1:07:82:0d:1a:3d:82:14:2d:
                    3c:fe:97:6d:61:32:e7:3c:f3:84:31:72:90:8d:52:
                    97:31:58:61:30:fb:49:e2:0c:ae:ad:ba:1f:12:c7:
                    c6:0e:bf:cb:93:25:40:d0:8f:44:a3:19:68:4a:2c:
                    7c:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:0E:AA:5B:11:B0:0D:61:8E:45:65:37:77:6E:AC:C7:13:27:8F:CE
            X509v3 Authority Key Identifier:
                keyid:9F:5C:C6:42:93:68:79:05:BA:B4:75:8C:98:5D:C7:68:3F:10:5A:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36D8C86/5682F6524A7211ED90B9E0B8F1222468/n1zGQpNoeQW6tHWMmF3HaD8QWv8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/n1zGQpNoeQW6tHWMmF3HaD8QWv8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D8C86/5682F6524A7211ED90B9E0B8F1222468/n1zGQpNoeQW6tHWMmF3HaD8QWv8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:7b:0d:d6:a4:b7:ab:4d:21:ec:95:84:d8:8f:76:4e:cb:59:
         7a:09:96:92:70:23:e4:d7:1b:e5:03:73:3e:9e:8d:6b:1c:f4:
         87:09:42:d1:02:87:1a:e2:c4:e4:53:9f:ab:d2:af:d5:a4:a9:
         ba:6a:b5:04:44:a2:15:b4:f5:a0:58:ef:76:cb:f8:ae:cb:fc:
         c9:ed:f7:86:c0:8b:b0:4c:57:05:7e:ba:61:df:58:bd:51:9d:
         f4:32:75:4d:16:ca:be:37:e8:ea:05:dc:f3:44:41:ea:a7:83:
         18:f6:b4:19:34:89:8b:d4:e3:c5:23:1d:a1:fc:8f:0c:ea:37:
         ea:3a:03:b2:96:9a:0d:6d:4a:9a:36:a2:94:49:3a:03:30:19:
         e6:86:0b:04:a6:88:01:81:2f:c3:79:37:c7:68:42:20:35:4f:
         c6:c3:ee:69:11:e8:64:59:18:28:f2:1d:71:88:5a:8e:3a:c4:
         e5:49:ea:ce:cc:aa:d6:d8:59:43:14:5c:76:09:27:09:24:85:
         f0:9b:25:f0:39:9e:17:a5:cb:05:92:6a:f1:73:ab:c7:65:35:
         4c:e9:20:f0:92:b8:c6:25:f8:5c:f6:db:1a:3d:dc:a0:b1:8a:
         7e:e0:4e:6c:d9:c5:87:fb:0d:88:1d:65:3c:93:aa:26:fb:fc:
         dc:f8:df:08
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICBKgwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
RDhDODZBRjExMC8GA1UEBRMoOUY1Q0M2NDI5MzY4NzkwNUJBQjQ3NThDOTg1REM3
NjgzRjEwNUFGRjAeFw0yNTEyMDgwMzAzMDhaFw0yNTEyMTAwMzAzMDhaMBgxFjAU
BgNVBAMTDTY5MzYzZmVjLTJiMTMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDHDX4o/n6d0OS8WNpLKlEXl4pxCe3gRyG4kda18W8TA2IYX5O4nOFc5JSf
fxo6eJl2Oe/AHcc/wfYagrMvBgdbT7Oz/6XLQ22r5uqws9fBjXQIu/j5SspteLoD
z4wuYU5QTXvNT4OKAdNyvUMWWr0K5JXdszAhhWSf5xdM0/F2//Owe1Fbr2gBwb8w
aUHY9VDqjNBo7j7oiVfKTeOajyU2b67jXFWJ/2skg3EpbPUCTHpSeTW022whkG+v
UPJnaU70QQ/OPXiqncEHgg0aPYIULTz+l21hMuc884QxcpCNUpcxWGEw+0niDK6t
uh8Sx8YOv8uTJUDQj0SjGWhKLHzLAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUxA6q
WxGwDWGORWU3d26sxxMnj84wHwYDVR0jBBgwFoAUn1zGQpNoeQW6tHWMmF3HaD8Q
Wv8wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkQ4Qzg2LzU2ODJGNjUyNEE3MjExRUQ5MEI5RTBCOEYxMjIyNDY4L24xekdR
cE5vZVFXNnRIV01tRjNIYUQ4UVd2OC5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL24xekdRcE5vZVFXNnRIV01tRjNIYUQ4UVd2OC5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2RDhDODYvNTY4MkY2NTI0QTcyMTFFRDkwQjlFMEI4RjEy
MjI0NjgvbjF6R1FwTm9lUVc2dEhXTW1GM0hhRDhRV3Y4Lm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQApew3WpLerTSHslYTYj3ZOy1l6CZaS
cCPk1xvlA3M+no1rHPSHCULRAoca4sTkU5+r0q/VpKm6arUERKIVtPWgWO92y/iu
y/zJ7feGwIuwTFcFfrph31i9UZ30MnVNFsq+N+jqBdzzREHqp4MY9rQZNImL1OPF
Ix2h/I8M6jfqOgOylpoNbUqaNqKUSToDMBnmhgsEpogBgS/DeTfHaEIgNU/Gw+5p
EehkWRgo8h1xiFqOOsTlSerOzKrW2FlDFFx2CScJJIXwmyXwOZ4XpcsFkmrxc6vH
ZTVM6SDwkrjGJfhc9tsaPdygsYp+4E5s2cWH+w2IHWU8k6om+/zc+N8I
-----END CERTIFICATE-----
Generated at Mon Dec 8 17:21:46 2025 by rpki-client