This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36E567D/F0977E4AFE4111EFA78DF3BD762E951A/yFh1TID6yDlgC6mAc_zwo3zMrOs.mft
File:                     yFh1TID6yDlgC6mAc_zwo3zMrOs.mft (raw, json)
Hash identifier:          RyHNLp59RS//0b6y1HP8a5nW1QRIezZniuEclztaVpA=
Subject key identifier:   A0:5B:95:81:CC:C1:17:D2:65:7B:11:83:F2:43:DE:32:CB:C3:88:ED
Authority key identifier: C8:58:75:4C:80:FA:C8:39:60:0B:A9:80:73:FC:F0:A3:7C:CC:AC:EB
Certificate issuer:       /CN=F36E567DAF/serialNumber=C858754C80FAC839600BA98073FCF0A37CCCACEB
Certificate serial:       011A
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/yFh1TID6yDlgC6mAc_zwo3zMrOs.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36E567D/F0977E4AFE4111EFA78DF3BD762E951A/yFh1TID6yDlgC6mAc_zwo3zMrOs.mft
Manifest number:          0118
Signing time:             Mon 08 Dec 2025 04:52:08 +0000
Manifest this update:     Mon 08 Dec 2025 04:52:07 +0000
Manifest next update:     Wed 10 Dec 2025 04:52:07 +0000
Files and hashes:         1: yFh1TID6yDlgC6mAc_zwo3zMrOs.crl (hash: owdehuGz6LmXiKm1BImdympCYF2UdWGVp2qIr+n+Eaw=)
                          2: C3D088FEFE4411EF844C4251762E951A.roa (hash: 8c/UcInEU32uCkkd0bW2sydpnWRZBq/yumh8oAWslXQ=)
                          3: 78CEE0D6FE4311EFAC01C048762E951A.roa (hash: S/ZsWMJD4DtM1oXbegUkV+3ds1wHL2z8dUl+XkcuPAo=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36E567D/F0977E4AFE4111EFA78DF3BD762E951A/yFh1TID6yDlgC6mAc_zwo3zMrOs.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36E567D/F0977E4AFE4111EFA78DF3BD762E951A/yFh1TID6yDlgC6mAc_zwo3zMrOs.mft
                          rsync://rpki.afrinic.net/repository/afrinic/yFh1TID6yDlgC6mAc_zwo3zMrOs.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 10 Dec 2025 00:06:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 282 (0x11a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36E567DAF, serialNumber=C858754C80FAC839600BA98073FCF0A37CCCACEB
        Validity
            Not Before: Dec  8 04:52:07 2025 GMT
            Not After : Dec 10 04:52:07 2025 GMT
        Subject: CN=69365978-63db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:bb:3d:e8:e5:a2:92:85:29:f2:31:56:cd:77:
                    65:10:69:5e:f1:e9:c9:aa:ed:63:7c:c1:14:c6:5a:
                    7d:b7:20:6d:74:00:74:a8:66:3b:e5:cb:ab:3e:84:
                    29:68:6d:b0:6e:84:71:fc:df:a8:be:cf:91:04:5f:
                    07:92:c3:6d:cc:f9:5f:e7:d1:0e:a0:69:f4:05:fe:
                    fd:8c:c2:8e:7f:8a:85:80:87:65:ce:8e:15:72:c9:
                    b3:2a:08:89:df:78:63:d0:5e:b8:6e:11:a6:fb:c7:
                    2d:a6:4f:c4:1d:68:59:fb:d0:41:ad:82:eb:a0:8c:
                    8f:a2:10:4a:6f:5f:33:fa:9e:83:68:78:6d:de:b3:
                    8a:0d:cf:eb:5a:b0:b5:d6:93:09:83:b8:bd:e2:3d:
                    09:42:e3:6b:03:e8:14:b8:59:6d:63:27:8d:33:27:
                    0c:b6:7a:95:e2:97:47:2e:3a:cb:06:21:91:69:57:
                    be:aa:12:40:b7:8e:9e:e1:99:6f:36:3b:01:a7:78:
                    80:db:ae:c5:3b:94:31:b7:49:76:0e:4a:0f:33:c6:
                    dd:ea:a4:eb:e0:65:ea:eb:35:03:85:38:64:ee:d7:
                    92:95:44:0a:0c:09:aa:75:d8:af:5e:48:27:73:03:
                    3f:f0:2d:cc:dc:99:2e:4b:4d:48:63:53:4f:20:3d:
                    2f:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:5B:95:81:CC:C1:17:D2:65:7B:11:83:F2:43:DE:32:CB:C3:88:ED
            X509v3 Authority Key Identifier:
                keyid:C8:58:75:4C:80:FA:C8:39:60:0B:A9:80:73:FC:F0:A3:7C:CC:AC:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36E567D/F0977E4AFE4111EFA78DF3BD762E951A/yFh1TID6yDlgC6mAc_zwo3zMrOs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/yFh1TID6yDlgC6mAc_zwo3zMrOs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E567D/F0977E4AFE4111EFA78DF3BD762E951A/yFh1TID6yDlgC6mAc_zwo3zMrOs.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:37:9e:40:0c:55:5f:b7:72:83:98:78:1a:fd:e0:59:75:b1:
         95:ae:bd:43:1c:b4:57:b9:84:47:df:ff:77:2c:7b:69:2a:dc:
         2f:10:c5:cf:96:60:8b:22:01:c9:a0:c9:b0:23:02:15:c7:e5:
         23:5b:91:fe:a6:a1:bb:9e:59:d7:0e:51:4e:75:ff:be:7d:d5:
         58:b3:6b:f6:36:fb:36:6b:ed:ac:09:81:19:40:50:cd:d7:93:
         53:bf:a5:39:88:54:a0:7b:00:f1:83:4c:bd:06:b6:53:8a:4c:
         d5:02:e1:84:83:e7:93:81:ed:61:f0:2a:55:6b:df:2c:17:a7:
         aa:47:82:c1:0a:1e:33:3f:0f:14:1e:46:da:0f:b9:77:15:1f:
         dd:d9:01:58:0e:82:fc:9a:27:3f:ca:30:00:87:17:72:79:b3:
         aa:07:de:5b:d6:f7:bf:c9:69:b4:3e:46:c5:8c:df:b7:18:00:
         00:a3:ba:7b:57:fa:64:64:96:43:a9:9a:52:d8:12:3e:0d:a7:
         e1:6f:31:04:2b:a9:a4:f9:12:80:0a:3f:de:62:c7:b9:5c:82:
         86:f9:93:88:02:a4:7f:75:1b:5c:e6:1c:8b:b6:0d:1f:dc:a5:
         bd:b1:04:43:7d:ee:6a:0c:23:30:1b:f4:ba:21:84:84:cf:31:
         df:03:48:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 8 17:20:49 2025 by rpki-client