This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36E6802/F6AA6EE8653D11EF844B268E762E951A/aL00PB2fcEbGL5VfhnMZ2FKxShA.mft
File:                     aL00PB2fcEbGL5VfhnMZ2FKxShA.mft (raw, json)
Hash identifier:          8+OG1/CpgwUdq2XBpj6lsRqTYv5G3BSL7LRk+ecC4qM=
Subject key identifier:   B3:9C:7B:6D:0C:EC:37:F1:A4:36:F6:5F:03:2C:13:B0:02:45:AB:73
Authority key identifier: 68:BD:34:3C:1D:9F:70:46:C6:2F:95:5F:86:73:19:D8:52:B1:4A:10
Certificate issuer:       /CN=F36E6802AF/serialNumber=68BD343C1D9F7046C62F955F867319D852B14A10
Certificate serial:       01E2
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/aL00PB2fcEbGL5VfhnMZ2FKxShA.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36E6802/F6AA6EE8653D11EF844B268E762E951A/aL00PB2fcEbGL5VfhnMZ2FKxShA.mft
Manifest number:          01E1
Signing time:             Mon 08 Dec 2025 04:29:31 +0000
Manifest this update:     Mon 08 Dec 2025 04:29:30 +0000
Manifest next update:     Wed 10 Dec 2025 04:29:30 +0000
Files and hashes:         1: aL00PB2fcEbGL5VfhnMZ2FKxShA.crl (hash: zdSCEJCMJpl0Sd2/1amDVsG1hweavqVCWmBqTJpbafs=)
                          2: 10CA293E653F11EF8C440393762E951A.roa (hash: nhNLmRsBHLhK6LTWVHLzqZimVfw7FMGqSN9TfNAWHoE=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36E6802/F6AA6EE8653D11EF844B268E762E951A/aL00PB2fcEbGL5VfhnMZ2FKxShA.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36E6802/F6AA6EE8653D11EF844B268E762E951A/aL00PB2fcEbGL5VfhnMZ2FKxShA.mft
                          rsync://rpki.afrinic.net/repository/afrinic/aL00PB2fcEbGL5VfhnMZ2FKxShA.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 10 Dec 2025 00:06:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 482 (0x1e2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36E6802AF, serialNumber=68BD343C1D9F7046C62F955F867319D852B14A10
        Validity
            Not Before: Dec  8 04:29:30 2025 GMT
            Not After : Dec 10 04:29:30 2025 GMT
        Subject: CN=6936542b-3815
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:d6:4c:b0:b7:d9:26:b2:5b:33:98:52:2a:22:
                    79:b5:b4:f6:93:17:1b:61:09:f3:22:06:e3:8c:93:
                    5a:b2:91:c6:6c:fd:6c:82:4d:74:c7:4b:a7:65:53:
                    58:df:3d:8f:88:13:aa:07:0d:f6:c2:54:e9:01:a9:
                    f1:15:53:cb:8b:4f:e8:fa:ea:d3:cf:df:b8:cc:a5:
                    e9:71:7f:20:0e:9e:b2:1c:17:3a:bb:34:18:ef:05:
                    92:9d:e1:44:a3:0a:e6:eb:eb:02:1f:68:7f:24:00:
                    5b:c0:31:38:7d:bf:bf:1f:f4:17:94:be:82:13:54:
                    be:e3:76:62:0e:f8:52:4e:47:3e:d8:f2:1b:16:e4:
                    44:9b:2c:5c:4d:67:a9:a1:d5:d2:57:f5:02:c6:a0:
                    8b:c6:73:f1:a5:ae:fb:a7:b2:1c:f6:c3:57:1a:0e:
                    68:f3:c8:ef:95:bb:ae:9f:b6:1c:1c:db:c4:30:3b:
                    5c:63:76:5d:58:90:a9:8b:b9:ef:64:96:70:f0:a2:
                    80:7a:4e:67:be:ce:02:18:0e:cd:26:bb:d3:e8:07:
                    d6:14:c7:90:d4:4a:ef:12:8f:fe:37:83:ca:5a:64:
                    69:20:c5:47:3b:e5:ee:9d:60:c7:2b:b7:77:5e:ad:
                    ae:3a:28:81:5f:7e:f5:69:24:5a:16:f5:84:73:f3:
                    8c:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:9C:7B:6D:0C:EC:37:F1:A4:36:F6:5F:03:2C:13:B0:02:45:AB:73
            X509v3 Authority Key Identifier:
                keyid:68:BD:34:3C:1D:9F:70:46:C6:2F:95:5F:86:73:19:D8:52:B1:4A:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36E6802/F6AA6EE8653D11EF844B268E762E951A/aL00PB2fcEbGL5VfhnMZ2FKxShA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/aL00PB2fcEbGL5VfhnMZ2FKxShA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E6802/F6AA6EE8653D11EF844B268E762E951A/aL00PB2fcEbGL5VfhnMZ2FKxShA.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:03:69:6a:59:85:cc:21:cb:c8:97:b5:2f:e2:7d:d4:b0:30:
         0c:5a:51:c9:42:24:a8:1a:4c:67:e8:aa:3d:46:6f:17:55:ea:
         92:0e:b6:7f:14:1a:53:bd:00:a5:5d:94:7b:0a:c2:31:5b:b6:
         8e:52:0a:fa:60:a2:2a:38:89:bb:ce:33:cf:aa:03:5d:2d:4c:
         6a:49:45:5c:8e:4e:97:19:f3:f9:47:e3:ca:50:8f:1e:9b:0c:
         ac:c2:0b:19:42:15:b3:b6:ac:e7:27:f0:c6:a6:97:64:5e:5c:
         39:e9:30:9d:aa:ab:94:91:18:ed:e6:4c:2e:d9:78:71:f6:e5:
         82:fd:cb:bb:d9:0c:4b:bf:4a:d4:25:7a:f1:7b:57:5d:de:94:
         c7:7f:7d:34:4a:5b:bc:92:70:39:5d:0d:88:47:19:6b:70:a9:
         35:5b:b3:dc:80:8f:9d:3c:e3:c4:ff:27:0b:aa:b5:83:37:e2:
         b5:b6:1a:b4:7e:00:03:bf:43:0b:1f:dd:9e:70:8b:a7:3a:56:
         d6:ad:b5:83:5c:eb:a5:3e:82:57:ae:24:50:c3:30:50:4a:4a:
         61:2e:3a:43:d2:53:a7:e9:1a:a2:d5:5f:2c:12:d8:59:99:84:
         dc:e7:85:64:35:9a:3b:10:19:80:d6:e0:5b:40:82:d7:c3:e7:
         dd:22:1e:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 8 17:27:09 2025 by rpki-client