This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36DA6FB/42AEAED8FE6011EF8424817E762E951A/TNw7PW0GCBEg29bsI2NRx172TMw.mft
File:                     TNw7PW0GCBEg29bsI2NRx172TMw.mft (raw, json)
Hash identifier:          qTgkPKHFj67jLG9Pt1QQFCPG6KXuq1YQsE+AG7wZDdg=
Subject key identifier:   C7:BF:2F:6D:74:C8:09:61:BA:B3:9B:1B:A9:2D:22:B5:15:9A:75:F7
Authority key identifier: 4C:DC:3B:3D:6D:06:08:11:20:DB:D6:EC:23:63:51:C7:5E:F6:4C:CC
Certificate issuer:       /CN=F36DA6FBAF/serialNumber=4CDC3B3D6D06081120DBD6EC236351C75EF64CCC
Certificate serial:       011E
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/TNw7PW0GCBEg29bsI2NRx172TMw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36DA6FB/42AEAED8FE6011EF8424817E762E951A/TNw7PW0GCBEg29bsI2NRx172TMw.mft
Manifest number:          011B
Signing time:             Mon 08 Dec 2025 04:52:44 +0000
Manifest this update:     Mon 08 Dec 2025 04:52:43 +0000
Manifest next update:     Wed 10 Dec 2025 04:52:43 +0000
Files and hashes:         1: TNw7PW0GCBEg29bsI2NRx172TMw.crl (hash: y2YO1QSDbhOLm0i5KFDSDFHmNbtjLpj8EMdpKB+qNcA=)
                          2: 51D56DFEFE6311EF8981AA93762E951A.roa (hash: v1iecGoXLrBsavXRX1kf0YmMMDAB2gV9RZnpPeiZxzU=)
                          3: 81829ED6FE6411EF86C6749A762E951A.roa (hash: p0zc+GDWSPngPzC4UqPmM1kDzoimJaQE4vWQrsCXryc=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36DA6FB/42AEAED8FE6011EF8424817E762E951A/TNw7PW0GCBEg29bsI2NRx172TMw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36DA6FB/42AEAED8FE6011EF8424817E762E951A/TNw7PW0GCBEg29bsI2NRx172TMw.mft
                          rsync://rpki.afrinic.net/repository/afrinic/TNw7PW0GCBEg29bsI2NRx172TMw.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 10 Dec 2025 00:06:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 286 (0x11e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36DA6FBAF, serialNumber=4CDC3B3D6D06081120DBD6EC236351C75EF64CCC
        Validity
            Not Before: Dec  8 04:52:43 2025 GMT
            Not After : Dec 10 04:52:43 2025 GMT
        Subject: CN=6936599c-8f77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:25:5a:73:2c:68:4a:58:41:86:2e:e8:fd:a6:
                    bd:5e:5e:5d:3c:6c:85:28:93:92:97:8f:12:b8:51:
                    3e:b4:23:48:5b:e8:63:4b:45:ac:54:98:03:2c:8c:
                    fb:92:cd:f4:55:49:9c:41:22:81:a0:c3:f6:1d:43:
                    a6:1e:3d:7e:95:34:d4:5c:ef:c0:65:62:7a:9f:bd:
                    9b:de:f7:fb:f6:ad:1b:0c:b9:3e:cb:48:cc:5d:a0:
                    66:a5:a0:53:eb:e3:86:ba:69:13:5d:f3:ea:be:7e:
                    dc:77:37:bc:b5:ac:19:73:0a:76:a4:5a:0f:35:5e:
                    9f:b6:59:c2:54:3b:20:e2:7f:50:3f:c1:82:3c:fa:
                    fc:7c:8e:9b:1c:85:95:ca:09:55:9a:57:a0:3e:b4:
                    a5:45:48:4f:cb:51:b5:a4:5c:07:3d:70:f9:7d:32:
                    e3:b7:06:96:b8:dc:c7:4c:89:06:b0:d7:99:03:20:
                    9d:0f:98:49:ff:eb:64:88:ff:94:41:01:7f:d6:1a:
                    eb:78:52:8a:ab:5d:40:2f:a4:dd:8f:d5:46:04:28:
                    90:19:7c:c2:42:cd:ae:2b:f0:69:ae:26:a9:a0:25:
                    66:cb:ab:c7:e6:17:91:02:df:97:f1:6f:ad:35:e1:
                    84:0d:3a:dc:96:12:13:e6:2a:5d:e2:1c:90:0d:0c:
                    52:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:BF:2F:6D:74:C8:09:61:BA:B3:9B:1B:A9:2D:22:B5:15:9A:75:F7
            X509v3 Authority Key Identifier:
                keyid:4C:DC:3B:3D:6D:06:08:11:20:DB:D6:EC:23:63:51:C7:5E:F6:4C:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36DA6FB/42AEAED8FE6011EF8424817E762E951A/TNw7PW0GCBEg29bsI2NRx172TMw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/TNw7PW0GCBEg29bsI2NRx172TMw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36DA6FB/42AEAED8FE6011EF8424817E762E951A/TNw7PW0GCBEg29bsI2NRx172TMw.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:54:e4:80:b6:dd:d3:8c:ae:95:bf:49:44:ac:27:95:f8:74:
         6d:21:3f:2d:a3:ca:2f:e8:a5:9a:23:83:61:e5:c8:f3:1c:eb:
         89:69:fb:69:07:93:1f:54:a4:7e:e7:43:0a:2b:6e:c3:6f:b8:
         ee:0b:15:db:5e:3d:23:a4:5b:e2:8d:5f:f8:c1:03:e4:04:47:
         0e:df:ee:df:54:1c:7a:fe:64:98:c8:b5:85:f2:1d:40:de:e3:
         1c:94:05:33:34:13:38:d0:12:d0:af:f3:1d:bc:09:e3:3a:e8:
         08:82:90:fa:81:03:d2:8c:85:a6:b7:f2:bc:48:79:a7:db:64:
         d2:cf:97:13:d2:78:0b:55:0c:61:01:37:c7:ef:8d:31:be:e2:
         60:1f:5b:5c:f6:f2:61:9c:17:62:d8:b1:8f:29:8e:37:70:18:
         3b:83:3e:42:61:51:ab:d2:b4:96:b6:a4:a0:7e:3f:5f:32:db:
         d0:e2:df:73:30:48:b3:42:d4:0d:99:b4:76:d8:38:54:3a:d2:
         85:5d:86:b3:e6:21:29:40:f5:75:73:4a:59:00:22:85:b9:95:
         fa:1a:89:40:3e:1e:67:11:eb:24:4a:24:00:5b:4c:ad:f1:93:
         0b:eb:4e:b9:b2:16:1b:05:36:37:42:f7:45:16:3f:1c:e8:d5:
         05:dd:e4:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 8 17:21:44 2025 by rpki-client