This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36E1839/E500630CD06411E79AA93B49F8AEA228/37GYokEhr76oC-bCVT7Qn4UiUDI.mft
File:                     37GYokEhr76oC-bCVT7Qn4UiUDI.mft (raw, json)
Hash identifier:          s2CkmvQl1muS+RKHEBrTl1H3KxGxNO0kIZuqLGTwT3Q=
Subject key identifier:   4F:83:D9:D8:0A:69:83:E5:F4:B0:8F:B1:54:D1:1F:4D:AD:9D:81:59
Authority key identifier: DF:B1:98:A2:41:21:AF:BE:A8:0B:E6:C2:55:3E:D0:9F:85:22:50:32
Certificate issuer:       /CN=F36E1839AF/serialNumber=DFB198A24121AFBEA80BE6C2553ED09F85225032
Certificate serial:       0BBD
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/37GYokEhr76oC-bCVT7Qn4UiUDI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36E1839/E500630CD06411E79AA93B49F8AEA228/37GYokEhr76oC-bCVT7Qn4UiUDI.mft
Manifest number:          0BBC
Signing time:             Mon 08 Dec 2025 01:10:02 +0000
Manifest this update:     Mon 08 Dec 2025 01:10:01 +0000
Manifest next update:     Wed 10 Dec 2025 01:10:01 +0000
Files and hashes:         1: 37GYokEhr76oC-bCVT7Qn4UiUDI.crl (hash: q5+EWtVk+pY6LCQ9kPP32dwp8xyES+IoZSaobpDx9Rw=)
                          2: FA78454ADDC111E8B15C694DF8AEA228.roa (hash: uu495Ulte7M9lqyB0F6mlOadgmAPbSCrWmqWcuFpoQU=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36E1839/E500630CD06411E79AA93B49F8AEA228/37GYokEhr76oC-bCVT7Qn4UiUDI.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36E1839/E500630CD06411E79AA93B49F8AEA228/37GYokEhr76oC-bCVT7Qn4UiUDI.mft
                          rsync://rpki.afrinic.net/repository/afrinic/37GYokEhr76oC-bCVT7Qn4UiUDI.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 10 Dec 2025 00:06:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3005 (0xbbd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36E1839AF, serialNumber=DFB198A24121AFBEA80BE6C2553ED09F85225032
        Validity
            Not Before: Dec  8 01:10:01 2025 GMT
            Not After : Dec 10 01:10:01 2025 GMT
        Subject: CN=6936256a-3ade
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:0c:20:06:20:78:ef:9c:8f:21:c2:a7:c2:62:
                    cc:42:d0:93:78:46:2b:e6:fe:2a:00:0d:42:17:5f:
                    01:b4:60:a5:36:3a:30:f8:a9:bf:67:d2:8c:ba:71:
                    b0:60:73:9b:29:2b:51:a7:5e:e4:f0:78:5d:d5:a7:
                    64:de:86:45:9b:21:88:a7:47:9c:59:bf:36:1b:e3:
                    b0:39:70:c9:90:ea:1e:01:93:ad:3a:82:09:1f:2f:
                    58:af:05:3f:c8:41:5c:ea:fa:b4:8b:af:98:a3:a8:
                    5f:3a:87:f3:6c:31:a5:4c:99:c3:82:0e:49:2a:69:
                    12:99:aa:d6:21:b5:ab:8a:06:bb:49:56:a2:24:5e:
                    ad:e3:5d:55:7e:99:7e:ab:22:d8:68:80:80:9f:d9:
                    b0:ff:3b:80:ba:26:2f:33:fa:58:ca:12:38:d0:e4:
                    60:5e:af:e3:9a:00:c8:e9:47:a0:93:3e:97:e2:f7:
                    c4:a5:bb:67:36:45:4d:d1:f6:ca:08:36:9a:e4:14:
                    77:6c:54:20:1d:ce:bf:7e:02:2e:1c:21:f8:3f:7f:
                    c5:a6:c3:c5:27:78:d3:89:fb:e0:8d:d8:48:51:97:
                    57:26:da:2b:61:7f:cf:8a:f9:6e:27:6d:93:f7:29:
                    df:3a:e2:74:16:8e:71:4d:fb:23:e9:7f:04:59:0b:
                    4d:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:83:D9:D8:0A:69:83:E5:F4:B0:8F:B1:54:D1:1F:4D:AD:9D:81:59
            X509v3 Authority Key Identifier:
                keyid:DF:B1:98:A2:41:21:AF:BE:A8:0B:E6:C2:55:3E:D0:9F:85:22:50:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36E1839/E500630CD06411E79AA93B49F8AEA228/37GYokEhr76oC-bCVT7Qn4UiUDI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/37GYokEhr76oC-bCVT7Qn4UiUDI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E1839/E500630CD06411E79AA93B49F8AEA228/37GYokEhr76oC-bCVT7Qn4UiUDI.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:e1:8f:b8:0e:3b:84:49:77:1f:74:95:dd:b7:8f:44:28:84:
         7e:a1:a5:d3:17:98:a0:05:fc:e2:34:f5:a6:6c:6e:e5:50:56:
         f5:24:d3:4b:b7:e9:f3:80:b0:00:3f:2f:d0:0c:04:d2:84:50:
         bf:c2:fe:79:73:bb:50:70:6a:86:c4:15:d0:0c:e8:1b:42:bc:
         d1:5f:bc:68:ae:d2:c4:29:3c:cf:b0:a8:c3:ea:88:54:2b:cc:
         67:bf:bb:5a:2d:ea:33:b8:03:2a:5e:9b:eb:64:91:3b:05:73:
         41:b3:f7:25:5f:d8:dd:f3:db:fe:46:8a:c0:91:62:8a:60:d6:
         1e:bf:8a:d0:ed:2e:7c:5b:b1:75:05:93:6b:bc:a5:f9:42:78:
         59:f4:23:51:a2:b9:f6:f3:d5:4d:b1:a2:5f:2b:13:7b:35:93:
         7e:16:83:47:c2:bf:59:e4:9a:be:5f:00:62:9f:d8:b5:38:25:
         c2:64:76:fb:ac:76:30:e2:e9:1f:c1:19:4a:75:e3:a6:64:e4:
         5f:0a:82:86:a4:2c:05:d6:b1:0a:44:ac:52:55:da:0b:9b:c1:
         03:2d:19:64:d3:4d:2c:36:92:c2:d0:ee:70:a5:97:28:d1:a9:
         ed:c6:de:1a:75:7d:35:c3:57:0d:e1:0d:c3:05:d4:d3:71:4b:
         63:71:e7:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 8 17:17:26 2025 by rpki-client