This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36E6854/385FBE92230D11EFA27C81277DDC24C2/e5q4nC36bjo-yHXuV_4sDZpxQcA.mft
File:                     e5q4nC36bjo-yHXuV_4sDZpxQcA.mft (raw, json)
Hash identifier:          ww8eoSy2eKMWZgACi0CiXWirUwy8t30yu3HNQvUR2vA=
Subject key identifier:   2F:9A:75:50:F3:F4:50:27:C7:40:BC:4B:2C:B1:8D:48:D4:0F:C5:99
Authority key identifier: 7B:9A:B8:9C:2D:FA:6E:3A:3E:C8:75:EE:57:FE:2C:0D:9A:71:41:C0
Certificate issuer:       /CN=F36E6854AF/serialNumber=7B9AB89C2DFA6E3A3EC875EE57FE2C0D9A7141C0
Certificate serial:       023A
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/e5q4nC36bjo-yHXuV_4sDZpxQcA.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36E6854/385FBE92230D11EFA27C81277DDC24C2/e5q4nC36bjo-yHXuV_4sDZpxQcA.mft
Manifest number:          0239
Signing time:             Mon 08 Dec 2025 04:15:43 +0000
Manifest this update:     Mon 08 Dec 2025 04:15:42 +0000
Manifest next update:     Wed 10 Dec 2025 04:15:42 +0000
Files and hashes:         1: e5q4nC36bjo-yHXuV_4sDZpxQcA.crl (hash: aCqCMHC7VnzANB7h/+c7vOy9j3R52zogPD2k1WkmE4s=)
                          2: 41B9BD06230F11EF89072D357DDC24C2.roa (hash: Vju6CP63vk7sWntfujwYKbfkTEsNT3KYrBm9nMWtFv8=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36E6854/385FBE92230D11EFA27C81277DDC24C2/e5q4nC36bjo-yHXuV_4sDZpxQcA.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36E6854/385FBE92230D11EFA27C81277DDC24C2/e5q4nC36bjo-yHXuV_4sDZpxQcA.mft
                          rsync://rpki.afrinic.net/repository/afrinic/e5q4nC36bjo-yHXuV_4sDZpxQcA.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 10 Dec 2025 00:06:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 570 (0x23a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36E6854AF, serialNumber=7B9AB89C2DFA6E3A3EC875EE57FE2C0D9A7141C0
        Validity
            Not Before: Dec  8 04:15:42 2025 GMT
            Not After : Dec 10 04:15:42 2025 GMT
        Subject: CN=693650ef-769d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:c9:29:56:f4:ee:d5:f7:cc:a5:86:94:24:9b:
                    7a:01:8c:bc:65:15:54:fe:30:69:79:3b:06:d8:82:
                    30:45:2e:b0:72:a4:c3:d1:78:b6:5f:18:57:57:3b:
                    a8:80:83:ed:24:c9:81:27:44:75:ea:23:eb:02:40:
                    8a:73:21:67:e5:3e:f4:41:59:c5:d5:3c:47:00:af:
                    3d:ae:1f:ad:e3:75:c5:00:1b:9f:a1:27:54:3c:ab:
                    60:36:01:f4:47:ea:21:e2:be:33:c0:b9:e7:81:da:
                    53:57:0f:09:8a:a1:c9:ff:e1:ef:0b:b0:59:59:a6:
                    6d:3c:90:21:c7:c6:d7:f9:d8:6d:80:c4:1c:49:4d:
                    aa:e2:83:d8:1c:cb:49:68:d3:2f:e9:69:54:21:df:
                    1d:fa:de:ef:b9:20:f3:3c:e4:fb:e6:32:0a:7a:3c:
                    c6:e3:6b:db:7a:a5:00:03:33:f0:bf:3f:04:ce:ce:
                    24:5e:39:36:e7:af:dc:e6:57:64:50:35:e8:0a:78:
                    f2:56:83:ea:fc:2a:d4:91:78:7b:a7:72:06:c5:a0:
                    c0:e0:2e:e0:3b:95:72:f6:bb:56:49:5e:fc:79:e7:
                    87:8a:9e:cc:37:6e:2c:46:1a:ef:fc:f4:5f:39:98:
                    48:8b:d3:80:b4:bd:82:48:33:d2:87:1a:6a:75:69:
                    fc:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:9A:75:50:F3:F4:50:27:C7:40:BC:4B:2C:B1:8D:48:D4:0F:C5:99
            X509v3 Authority Key Identifier:
                keyid:7B:9A:B8:9C:2D:FA:6E:3A:3E:C8:75:EE:57:FE:2C:0D:9A:71:41:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36E6854/385FBE92230D11EFA27C81277DDC24C2/e5q4nC36bjo-yHXuV_4sDZpxQcA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/e5q4nC36bjo-yHXuV_4sDZpxQcA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E6854/385FBE92230D11EFA27C81277DDC24C2/e5q4nC36bjo-yHXuV_4sDZpxQcA.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:8a:d3:d5:24:07:e2:f1:15:21:51:ea:1f:57:58:97:de:6e:
         8c:5d:1b:67:a5:e1:2d:d9:8f:28:4f:de:fe:91:64:5e:53:31:
         7e:80:26:d6:0a:a6:2d:55:79:d0:07:e3:7b:33:b9:8c:27:8f:
         3c:83:6e:9c:44:47:1f:0a:9a:f1:69:45:c0:64:b1:f2:0e:b8:
         a5:bd:8b:03:0e:56:8d:c9:45:9b:df:a0:d0:a5:96:08:4d:1f:
         bc:4a:72:54:09:9c:2b:6e:8c:79:6b:26:7e:5a:e2:00:e0:2f:
         55:df:4b:74:bf:94:dc:29:32:d3:36:82:40:4d:9f:68:c5:3e:
         13:af:94:ef:d7:5b:5f:6d:e1:e6:ee:db:45:a1:68:9f:0a:1b:
         00:d0:18:c3:3c:5a:50:c9:16:86:35:ee:66:98:e0:fb:48:45:
         b0:50:2f:01:f5:27:93:ca:cb:1d:f1:24:f6:c3:e7:26:3d:40:
         3e:51:ff:23:b9:f9:11:fc:f3:f3:ca:ed:07:83:8f:77:36:2b:
         cc:52:9c:b3:9f:8c:39:bb:75:2b:4f:19:9c:3a:70:db:2b:e5:
         25:af:67:4d:a5:8d:7e:a9:5e:9b:81:4d:ea:6b:24:4e:6f:84:
         59:e1:da:13:cc:e5:f3:14:18:d8:5a:4b:62:e3:17:ff:3f:99:
         fa:88:af:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 8 17:11:00 2025 by rpki-client