This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36E4353/8AE09C2C19F611EC96E1D276D8A014CE/rDTyPLJrGR-mwlc2ZqQWPdmGg4k.mft
File:                     rDTyPLJrGR-mwlc2ZqQWPdmGg4k.mft (raw, json)
Hash identifier:          xQBMionRfc+H1bceyIrFGZgwd5l426rWPQHoZx7jxSI=
Subject key identifier:   BE:42:28:9C:12:E5:91:67:7E:EC:BE:7F:0D:FA:9C:78:3E:E5:FA:39
Authority key identifier: AC:34:F2:3C:B2:6B:19:1F:A6:C2:57:36:66:A4:16:3D:D9:86:83:89
Certificate issuer:       /CN=F36E4353AF/serialNumber=AC34F23CB26B191FA6C2573666A4163DD9868389
Certificate serial:       0637
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/rDTyPLJrGR-mwlc2ZqQWPdmGg4k.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36E4353/8AE09C2C19F611EC96E1D276D8A014CE/rDTyPLJrGR-mwlc2ZqQWPdmGg4k.mft
Manifest number:          0633
Signing time:             Mon 08 Dec 2025 02:23:39 +0000
Manifest this update:     Mon 08 Dec 2025 02:23:38 +0000
Manifest next update:     Wed 10 Dec 2025 02:23:38 +0000
Files and hashes:         1: rDTyPLJrGR-mwlc2ZqQWPdmGg4k.crl (hash: w8gZtg2FRQGz6gEtff+Hm6Jm+rsLnbroJG6DVn2DgVw=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36E4353/8AE09C2C19F611EC96E1D276D8A014CE/rDTyPLJrGR-mwlc2ZqQWPdmGg4k.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36E4353/8AE09C2C19F611EC96E1D276D8A014CE/rDTyPLJrGR-mwlc2ZqQWPdmGg4k.mft
                          rsync://rpki.afrinic.net/repository/afrinic/rDTyPLJrGR-mwlc2ZqQWPdmGg4k.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 10 Dec 2025 00:06:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1591 (0x637)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36E4353AF, serialNumber=AC34F23CB26B191FA6C2573666A4163DD9868389
        Validity
            Not Before: Dec  8 02:23:38 2025 GMT
            Not After : Dec 10 02:23:38 2025 GMT
        Subject: CN=693636ab-846c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:85:5f:f2:e9:07:9a:78:1c:3d:b8:b6:11:ad:
                    cc:38:48:6b:17:a8:c7:15:3d:37:51:0f:83:9c:bb:
                    d7:4c:d6:73:91:ca:ce:02:74:65:3b:d0:78:4f:4e:
                    6e:00:1e:37:a6:33:12:39:5f:1e:30:27:81:a3:c9:
                    21:d1:af:01:e5:cf:f8:a8:1b:5b:e3:e5:cf:20:7f:
                    34:8d:95:fa:de:7f:cd:e6:dc:43:db:e0:08:ba:c1:
                    90:8a:39:dc:cf:60:fd:fe:67:79:c4:30:c6:41:80:
                    12:4b:e6:d1:bd:01:e7:66:2e:e9:6c:20:4e:b2:95:
                    ad:a9:18:23:61:e1:c4:a5:ad:41:4f:5b:a7:8b:10:
                    cd:80:a1:88:95:c8:9a:7a:94:16:ed:1d:4d:de:25:
                    b7:d2:d9:2f:dd:ce:eb:e5:22:6b:69:f3:a4:2c:d5:
                    55:7d:3b:6a:ec:90:1f:56:ea:d8:17:44:ca:8a:21:
                    98:7e:e6:27:70:65:e2:63:73:d3:46:17:93:b8:52:
                    70:94:e7:fd:15:12:fa:a2:43:e0:2c:b6:77:68:08:
                    4c:ed:09:eb:0b:cb:8c:89:56:97:da:0d:1c:44:94:
                    94:01:a8:5d:1b:8a:3a:24:87:22:54:cd:31:6a:f4:
                    b6:d1:01:84:60:ac:d6:c2:a6:93:96:0d:0b:36:5c:
                    c6:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:42:28:9C:12:E5:91:67:7E:EC:BE:7F:0D:FA:9C:78:3E:E5:FA:39
            X509v3 Authority Key Identifier:
                keyid:AC:34:F2:3C:B2:6B:19:1F:A6:C2:57:36:66:A4:16:3D:D9:86:83:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36E4353/8AE09C2C19F611EC96E1D276D8A014CE/rDTyPLJrGR-mwlc2ZqQWPdmGg4k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/rDTyPLJrGR-mwlc2ZqQWPdmGg4k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E4353/8AE09C2C19F611EC96E1D276D8A014CE/rDTyPLJrGR-mwlc2ZqQWPdmGg4k.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:27:37:25:10:cd:3f:20:95:1d:51:02:0f:f9:59:e9:7c:e7:
         c6:2e:7b:ad:94:3b:66:17:00:d7:3a:e1:a1:de:f1:1b:e4:a5:
         dd:12:2e:b1:9b:d1:bd:69:65:d9:7f:95:54:9f:0f:71:a1:2c:
         b7:e3:5b:2c:03:3b:e6:12:f1:a3:58:05:ac:4f:3a:65:e3:ee:
         6f:6c:a5:87:9b:3f:23:09:f5:af:40:71:70:7c:43:af:e2:34:
         bf:b8:2d:85:c4:4d:01:44:5d:f5:f4:e5:48:6d:09:2e:b8:ae:
         54:5c:ab:2b:c5:fc:b1:80:54:1c:9a:09:6f:8f:e4:76:05:af:
         1d:64:f6:40:47:61:77:af:60:33:fa:dc:cd:15:56:f5:b8:7d:
         6d:46:af:15:c2:06:e3:33:2e:9a:0a:4d:4f:46:87:46:dc:1f:
         bc:ec:16:f6:98:f6:d0:09:64:4b:4d:48:27:1b:54:9e:9a:50:
         a2:06:38:a4:f2:30:a3:9b:bb:f1:b9:69:9b:71:d3:03:34:ef:
         37:23:ee:9e:74:57:2d:57:5d:fc:8b:31:0b:54:97:5c:dc:78:
         50:99:ef:38:3f:cc:a1:56:8d:18:41:0a:74:44:32:96:ed:a1:
         6e:9d:d4:c4:ec:bb:13:62:da:d2:4f:50:55:ed:7c:f2:89:49:
         0d:b3:13:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 8 17:19:13 2025 by rpki-client