This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36E2B69/1B6AC538F67811EDA33672194AD9E6FC/HNlmJ3URky060f0tMBT24WjMSOU.mft
File:                     HNlmJ3URky060f0tMBT24WjMSOU.mft (raw, json)
Hash identifier:          V7ZJ0l3tqMb0zl1CpAY0bvQW/bdl5WWb1JN/eSz6GpY=
Subject key identifier:   AA:68:2A:D1:29:ED:C7:C2:01:12:36:3A:AE:70:2E:C2:42:9E:C4:91
Authority key identifier: 1C:D9:66:27:75:11:93:2D:3A:D1:FD:2D:30:14:F6:E1:68:CC:48:E5
Certificate issuer:       /CN=F36E2B69AF/serialNumber=1CD966277511932D3AD1FD2D3014F6E168CC48E5
Certificate serial:       03C3
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/HNlmJ3URky060f0tMBT24WjMSOU.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36E2B69/1B6AC538F67811EDA33672194AD9E6FC/HNlmJ3URky060f0tMBT24WjMSOU.mft
Manifest number:          03C2
Signing time:             Mon 08 Dec 2025 03:27:33 +0000
Manifest this update:     Mon 08 Dec 2025 03:27:32 +0000
Manifest next update:     Wed 10 Dec 2025 03:27:32 +0000
Files and hashes:         1: HNlmJ3URky060f0tMBT24WjMSOU.crl (hash: s7DYQpnEwaquxFh0HlYyNirja6OOCIdlcxxt8PkzlTI=)
                          2: 14217AF4FD4611EDACE0A4484AD9E6FC.roa (hash: scusLfpX0zDQtYPg/Gz0vTNJwugRyOQOlFnS4UEvDsE=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36E2B69/1B6AC538F67811EDA33672194AD9E6FC/HNlmJ3URky060f0tMBT24WjMSOU.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36E2B69/1B6AC538F67811EDA33672194AD9E6FC/HNlmJ3URky060f0tMBT24WjMSOU.mft
                          rsync://rpki.afrinic.net/repository/afrinic/HNlmJ3URky060f0tMBT24WjMSOU.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 10 Dec 2025 00:06:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 963 (0x3c3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36E2B69AF, serialNumber=1CD966277511932D3AD1FD2D3014F6E168CC48E5
        Validity
            Not Before: Dec  8 03:27:32 2025 GMT
            Not After : Dec 10 03:27:32 2025 GMT
        Subject: CN=693645a5-f9c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:cb:62:82:04:6b:39:7c:c5:3b:e8:d6:e8:e3:
                    e3:c7:96:67:b5:bd:6b:c2:96:2c:c5:f5:1f:c4:a9:
                    4a:49:57:a6:1c:09:65:85:e4:f8:3d:60:29:24:11:
                    0a:fe:25:ec:86:d2:f0:98:ff:4a:0e:de:80:2d:68:
                    30:7c:50:89:e2:db:1d:d0:ca:4e:07:41:ba:23:03:
                    60:39:ff:86:23:cb:c3:31:aa:f1:1b:8d:d9:59:1b:
                    9c:75:5d:34:ad:8e:02:56:71:86:19:1d:1a:44:ad:
                    b3:12:3b:eb:12:e8:19:ab:ce:a8:aa:21:13:32:2c:
                    60:d4:6e:94:81:50:5e:cc:38:cc:43:64:19:01:76:
                    1c:93:e0:7d:86:3b:b8:d1:2d:8a:39:17:6f:2b:19:
                    dc:81:2a:fe:ca:c2:a5:3b:88:90:6b:26:c8:da:c5:
                    7d:01:99:3a:60:d1:70:c5:7d:09:52:3e:cc:72:69:
                    5f:b0:83:b4:18:a6:5f:d0:53:59:c5:e4:ee:bc:f9:
                    81:ee:6e:82:55:7b:d8:47:43:05:03:6c:37:b9:b2:
                    61:85:41:8e:a0:2a:37:22:47:12:9c:b6:72:e4:87:
                    c4:5e:d3:0a:4e:ac:38:bc:68:52:f1:f6:5a:b0:8d:
                    aa:ba:c9:87:3d:b6:2b:37:9f:4a:bf:c7:fe:88:0a:
                    b5:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:68:2A:D1:29:ED:C7:C2:01:12:36:3A:AE:70:2E:C2:42:9E:C4:91
            X509v3 Authority Key Identifier:
                keyid:1C:D9:66:27:75:11:93:2D:3A:D1:FD:2D:30:14:F6:E1:68:CC:48:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36E2B69/1B6AC538F67811EDA33672194AD9E6FC/HNlmJ3URky060f0tMBT24WjMSOU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/HNlmJ3URky060f0tMBT24WjMSOU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E2B69/1B6AC538F67811EDA33672194AD9E6FC/HNlmJ3URky060f0tMBT24WjMSOU.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c7:aa:71:ee:b2:7f:7d:8b:68:fc:7d:a9:dd:3b:d5:eb:24:8d:
         fb:ba:71:7b:31:ed:55:a0:c0:96:cf:17:5a:62:b1:c5:4e:98:
         71:e6:54:3a:75:a7:a6:ba:94:f9:05:82:98:28:c0:47:66:c8:
         c5:e0:7a:9c:99:b7:f3:2c:eb:66:8d:c1:43:0a:ef:db:29:20:
         6e:10:4e:db:c4:43:01:5c:ad:b0:bc:f6:7f:8d:cd:9b:9f:d7:
         eb:4b:cb:9f:54:8f:f6:01:4a:85:3a:d2:02:5e:fb:07:e7:5e:
         12:f0:5b:88:c8:bc:83:53:34:d2:b2:17:d4:8a:fd:e2:14:47:
         b9:5b:78:b4:c4:5c:a7:27:50:4f:99:8a:f7:72:02:fb:57:ba:
         5c:1e:b3:94:08:38:25:1a:fe:9a:61:ef:85:22:26:76:22:b6:
         45:b1:4e:88:4a:95:18:a2:5d:04:d3:fc:27:d6:aa:e9:e8:34:
         d1:b5:80:cf:64:e8:19:6e:4b:6b:69:5b:62:4c:f8:9a:30:91:
         b8:5a:d2:e8:98:55:d4:85:be:33:3c:77:80:6e:e2:e2:56:13:
         7e:1e:3d:e5:4b:a2:a5:9f:b7:e2:31:84:14:2e:d3:f0:d2:48:
         ba:4c:72:78:d1:38:67:3c:cc:c3:4b:fd:31:13:0f:0b:ab:a0:
         f3:97:76:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 8 17:23:26 2025 by rpki-client