This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36E3A59/29E748185D4E11F0AB0058C9DAE4EC9C/DZvooDz0-SG-roASCfDNqfpcKKk.mft
File:                     DZvooDz0-SG-roASCfDNqfpcKKk.mft (raw, json)
Hash identifier:          h+6bxY/QDYAb6jmD3ahjfSjVtOxMN63AoAbcGVvkTZQ=
Subject key identifier:   0A:52:0D:75:DF:89:2E:17:96:E8:F7:95:6E:33:DF:4E:1D:E6:0E:D4
Authority key identifier: 0D:9B:E8:A0:3C:F4:F9:21:BE:AE:80:12:09:F0:CD:A9:FA:5C:28:A9
Certificate issuer:       /CN=F36E3A59AF/serialNumber=0D9BE8A03CF4F921BEAE801209F0CDA9FA5C28A9
Certificate serial:       9E
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/DZvooDz0-SG-roASCfDNqfpcKKk.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36E3A59/29E748185D4E11F0AB0058C9DAE4EC9C/DZvooDz0-SG-roASCfDNqfpcKKk.mft
Manifest number:          9C
Signing time:             Mon 08 Dec 2025 05:03:07 +0000
Manifest this update:     Mon 08 Dec 2025 05:03:07 +0000
Manifest next update:     Wed 10 Dec 2025 05:03:07 +0000
Files and hashes:         1: DZvooDz0-SG-roASCfDNqfpcKKk.crl (hash: ROfyxbzmfvwkW7HfUw5F3tiBF81lUy59WbcS1UBIQEw=)
                          2: D7020A285D5411F0A19246F2DAE4EC9C.roa (hash: uN0l59Tox4G2lWnbUbB4GpnAjc1D9Z8ciy/6RrH/ngM=)
                          3: 9AD7B3405D5411F08FFEE8F1DAE4EC9C.roa (hash: tG5jCWxr8NnTaFHCnUdyN5XLLiYftQEzWisN5lfMzy0=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36E3A59/29E748185D4E11F0AB0058C9DAE4EC9C/DZvooDz0-SG-roASCfDNqfpcKKk.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36E3A59/29E748185D4E11F0AB0058C9DAE4EC9C/DZvooDz0-SG-roASCfDNqfpcKKk.mft
                          rsync://rpki.afrinic.net/repository/afrinic/DZvooDz0-SG-roASCfDNqfpcKKk.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 10 Dec 2025 00:06:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 158 (0x9e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36E3A59AF, serialNumber=0D9BE8A03CF4F921BEAE801209F0CDA9FA5C28A9
        Validity
            Not Before: Dec  8 05:03:07 2025 GMT
            Not After : Dec 10 05:03:07 2025 GMT
        Subject: CN=69365c0b-a82c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:12:bb:92:66:c2:91:39:90:4c:0f:20:00:05:
                    08:5c:01:d7:f0:e8:30:01:4c:07:c5:9e:27:8d:30:
                    95:db:1d:2b:3d:30:c0:d9:cf:d0:34:72:ed:4a:bd:
                    e4:9a:68:0f:19:af:8b:e5:11:b5:36:ac:f2:64:eb:
                    04:24:1c:ea:59:49:b5:0f:39:af:f1:58:88:5b:26:
                    da:78:21:71:c3:37:c7:fa:33:c9:9f:74:29:0a:b6:
                    e3:7a:60:ed:58:e5:67:0f:60:fa:9b:36:9f:81:3e:
                    95:0f:dd:04:59:7e:62:f3:de:8d:62:22:58:31:ed:
                    70:31:45:95:b2:90:21:dd:29:e6:f2:55:c5:6c:71:
                    71:ed:13:e6:f7:13:30:4a:3e:85:df:48:aa:86:a8:
                    e1:76:24:e1:1e:75:45:d7:71:4b:5e:34:f4:1d:18:
                    28:f0:4c:0b:d5:f3:72:9f:fe:21:cd:8b:21:ad:31:
                    fa:00:a7:aa:aa:97:fc:93:c5:8b:8b:ba:5f:a1:c0:
                    04:50:fc:a7:c0:fc:c9:3b:0a:0a:74:6a:82:70:11:
                    59:4b:78:16:50:9e:8d:f5:33:af:3f:b7:dd:52:54:
                    10:82:73:f0:8c:e0:5b:02:cc:04:f1:20:34:8e:5f:
                    2f:d5:ed:82:03:c2:b2:5b:5b:3d:d7:99:82:28:38:
                    cc:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:52:0D:75:DF:89:2E:17:96:E8:F7:95:6E:33:DF:4E:1D:E6:0E:D4
            X509v3 Authority Key Identifier:
                keyid:0D:9B:E8:A0:3C:F4:F9:21:BE:AE:80:12:09:F0:CD:A9:FA:5C:28:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36E3A59/29E748185D4E11F0AB0058C9DAE4EC9C/DZvooDz0-SG-roASCfDNqfpcKKk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/DZvooDz0-SG-roASCfDNqfpcKKk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E3A59/29E748185D4E11F0AB0058C9DAE4EC9C/DZvooDz0-SG-roASCfDNqfpcKKk.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:0e:63:48:e2:c4:1d:92:db:60:e7:e7:05:4b:4e:74:e1:7c:
         33:6e:8d:77:16:2b:8d:eb:01:84:92:af:1f:72:28:5d:39:94:
         33:9f:e5:89:38:78:1f:76:98:12:9c:73:73:85:17:e8:f7:57:
         6b:4f:22:bf:4a:e0:e5:d5:31:be:27:50:70:40:9a:dd:34:0e:
         7e:5b:8e:c1:d2:50:01:1a:f0:85:3d:60:fd:4f:12:b0:5b:88:
         55:86:c0:51:67:c0:66:9c:73:45:52:af:e3:18:3c:16:94:e9:
         ce:48:b1:c6:da:6a:95:6d:0e:70:f2:fb:ec:e8:f2:da:00:e0:
         67:bb:bd:86:8a:0d:95:f0:d1:20:dd:31:90:d3:e5:c0:c4:41:
         ef:db:3a:33:88:b9:43:24:a5:e8:90:26:b0:0a:00:c2:15:d6:
         d2:44:d6:87:72:6a:63:97:a2:d9:a6:cf:59:2e:f4:20:ed:60:
         a7:35:0d:12:f0:68:a7:bf:5b:58:89:a0:3f:df:7c:82:ab:9c:
         60:fd:5e:a8:fa:93:c2:5c:30:c0:c8:fb:1b:a1:8e:b8:d8:50:
         8e:54:97:19:b9:19:79:dc:30:fc:45:b4:62:62:d2:48:ee:78:
         09:eb:e8:c1:b8:ee:f6:06:c5:d0:be:c6:a0:95:98:a3:6f:85:
         26:d7:e3:f5
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICAJ4wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
RTNBNTlBRjExMC8GA1UEBRMoMEQ5QkU4QTAzQ0Y0RjkyMUJFQUU4MDEyMDlGMENE
QTlGQTVDMjhBOTAeFw0yNTEyMDgwNTAzMDdaFw0yNTEyMTAwNTAzMDdaMBgxFjAU
BgNVBAMTDTY5MzY1YzBiLWE4MmMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDBEruSZsKROZBMDyAABQhcAdfw6DABTAfFnieNMJXbHSs9MMDZz9A0cu1K
veSaaA8Zr4vlEbU2rPJk6wQkHOpZSbUPOa/xWIhbJtp4IXHDN8f6M8mfdCkKtuN6
YO1Y5WcPYPqbNp+BPpUP3QRZfmLz3o1iIlgx7XAxRZWykCHdKebyVcVscXHtE+b3
EzBKPoXfSKqGqOF2JOEedUXXcUteNPQdGCjwTAvV83Kf/iHNiyGtMfoAp6qql/yT
xYuLul+hwARQ/KfA/Mk7Cgp0aoJwEVlLeBZQno31M68/t91SVBCCc/CM4FsCzATx
IDSOXy/V7YIDwrJbWz3XmYIoOMwTAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUClIN
dd+JLheW6PeVbjPfTh3mDtQwHwYDVR0jBBgwFoAUDZvooDz0+SG+roASCfDNqfpc
KKkwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkUzQTU5LzI5RTc0ODE4NUQ0RTExRjBBQjAwNThDOURBRTRFQzlDL0Radm9v
RHowLVNHLXJvQVNDZkROcWZwY0tLay5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0Radm9vRHowLVNHLXJvQVNDZkROcWZwY0tLay5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2RTNBNTkvMjlFNzQ4MTg1RDRFMTFGMEFCMDA1OEM5REFF
NEVDOUMvRFp2b29EejAtU0ctcm9BU0NmRE5xZnBjS0trLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQB0DmNI4sQdkttg5+cFS0504Xwzbo13
FiuN6wGEkq8fcihdOZQzn+WJOHgfdpgSnHNzhRfo91drTyK/SuDl1TG+J1BwQJrd
NA5+W47B0lABGvCFPWD9TxKwW4hVhsBRZ8BmnHNFUq/jGDwWlOnOSLHG2mqVbQ5w
8vvs6PLaAOBnu72Gig2V8NEg3TGQ0+XAxEHv2zoziLlDJKXokCawCgDCFdbSRNaH
cmpjl6LZps9ZLvQg7WCnNQ0S8Ginv1tYiaA/33yCq5xg/V6o+pPCXDDAyPsboY64
2FCOVJcZuRl53DD8RbRiYtJI7ngJ6+jBuO72BsXQvsaglZijb4Um1+P1
-----END CERTIFICATE-----
Generated at Mon Dec 8 17:17:37 2025 by rpki-client