This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36E68C0/3ECE895E48EF11EFBAB935BF762E951A/jE53-jIjScCyfwF2MjOuR7DcmvM.mft
File:                     jE53-jIjScCyfwF2MjOuR7DcmvM.mft (raw, json)
Hash identifier:          IjCsF/jZTyr111+A/HA4Al6i8WxYSxK17mOpRS5IblY=
Subject key identifier:   20:04:5E:55:9B:69:41:2A:A2:6E:3C:9E:F7:B2:FA:C6:6B:30:63:DF
Authority key identifier: 8C:4E:77:FA:32:23:49:C0:B2:7F:01:76:32:33:AE:47:B0:DC:9A:F3
Certificate issuer:       /CN=F36E68C0AF/serialNumber=8C4E77FA322349C0B27F01763233AE47B0DC9AF3
Certificate serial:       020C
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/jE53-jIjScCyfwF2MjOuR7DcmvM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36E68C0/3ECE895E48EF11EFBAB935BF762E951A/jE53-jIjScCyfwF2MjOuR7DcmvM.mft
Manifest number:          0209
Signing time:             Mon 08 Dec 2025 04:23:19 +0000
Manifest this update:     Mon 08 Dec 2025 04:23:18 +0000
Manifest next update:     Wed 10 Dec 2025 04:23:18 +0000
Files and hashes:         1: jE53-jIjScCyfwF2MjOuR7DcmvM.crl (hash: 4mN/W6v7jgbKbJ2y7WwLchdHdjyNqeCFmpFl5JzHArI=)
                          2: 163B806EBEFF11F09AD7A978DAE4EC9C.roa (hash: /RRdqAjpsv8m7r2GyY/BKUpRLM+07+N7E0oDvFGiBQ8=)
                          3: A30290B4490311EFAD6D6848762E951A.roa (hash: 9DJDNrHzZVxc5zuNzgDbveKnN6iPIU3B9BicWnmYCZQ=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36E68C0/3ECE895E48EF11EFBAB935BF762E951A/jE53-jIjScCyfwF2MjOuR7DcmvM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36E68C0/3ECE895E48EF11EFBAB935BF762E951A/jE53-jIjScCyfwF2MjOuR7DcmvM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/jE53-jIjScCyfwF2MjOuR7DcmvM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 10 Dec 2025 00:06:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 524 (0x20c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36E68C0AF, serialNumber=8C4E77FA322349C0B27F01763233AE47B0DC9AF3
        Validity
            Not Before: Dec  8 04:23:18 2025 GMT
            Not After : Dec 10 04:23:18 2025 GMT
        Subject: CN=693652b6-fb83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:86:ed:48:55:ef:de:26:dc:f8:ed:fc:e8:b9:
                    8f:ab:4d:e9:5a:6d:00:49:bd:45:1f:c4:4c:25:08:
                    42:53:b5:89:2d:c2:df:37:1b:77:7c:8b:fb:ba:ac:
                    6a:02:70:fb:a4:31:d6:f6:c0:d4:cb:31:61:5c:82:
                    dd:6e:f1:db:c2:b6:42:bc:5d:21:10:f1:64:0f:b8:
                    70:5b:ad:c7:74:3d:0d:d6:eb:df:44:4b:15:21:1d:
                    1b:33:c6:0d:5e:3f:7a:ef:51:be:ed:a7:35:ad:da:
                    08:08:66:35:63:6e:b0:b3:bc:d2:09:9f:db:d9:40:
                    57:4e:8d:e2:65:29:21:dd:ce:c3:62:c8:8a:c5:69:
                    6b:00:d6:21:6f:83:bf:7e:3a:f5:10:f1:e6:fc:26:
                    bd:e6:53:f5:a5:53:8d:1a:ce:80:5f:24:b1:22:28:
                    b6:c6:4f:05:7a:47:c8:55:b4:f3:62:8f:84:e6:a6:
                    17:35:dd:12:b0:b9:9a:12:70:8b:20:0b:42:52:3c:
                    1f:c1:4a:a0:63:16:01:1c:61:41:95:89:ce:e2:be:
                    e6:84:b4:a4:90:ed:84:bc:bb:ff:1c:15:17:17:86:
                    8e:52:a9:f6:5c:13:56:c5:c9:b2:b7:47:d3:0d:90:
                    7d:28:1c:2c:18:f3:15:e4:01:1b:b6:39:95:f8:05:
                    cd:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:04:5E:55:9B:69:41:2A:A2:6E:3C:9E:F7:B2:FA:C6:6B:30:63:DF
            X509v3 Authority Key Identifier:
                keyid:8C:4E:77:FA:32:23:49:C0:B2:7F:01:76:32:33:AE:47:B0:DC:9A:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36E68C0/3ECE895E48EF11EFBAB935BF762E951A/jE53-jIjScCyfwF2MjOuR7DcmvM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/jE53-jIjScCyfwF2MjOuR7DcmvM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E68C0/3ECE895E48EF11EFBAB935BF762E951A/jE53-jIjScCyfwF2MjOuR7DcmvM.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:9e:05:65:96:75:7a:c7:f4:6e:3b:05:d5:9c:4d:8a:d3:df:
         02:09:ec:f0:90:a7:ad:24:45:be:0c:43:c7:14:11:6f:f9:b6:
         da:e9:ab:02:8e:8e:28:b1:41:ee:fb:33:32:69:a5:2f:76:3f:
         0d:41:29:25:1f:78:0d:34:87:2d:e0:45:f5:33:95:be:9b:50:
         bf:47:1b:6f:94:f6:05:20:c3:ea:97:f0:b8:57:f2:63:15:a4:
         fa:ea:c5:41:41:bc:57:37:b6:79:af:bc:a6:7b:43:65:fa:5c:
         36:dc:d6:ee:8c:84:9f:c5:bd:b4:96:f5:06:86:f2:87:20:1c:
         6c:12:8d:ed:e0:42:13:22:f9:23:b9:43:c5:ae:5b:6a:4c:a7:
         65:61:59:23:65:62:e9:cf:01:31:cb:09:6b:93:20:4b:1b:3c:
         cf:d3:04:ce:09:40:38:07:24:a4:8a:1f:3c:83:63:8a:45:d4:
         43:46:40:7e:24:4d:9d:cb:34:9a:63:3d:42:8f:ab:ac:17:83:
         71:da:fb:6d:8a:a7:69:6b:38:ec:f5:6f:2e:54:0a:81:36:c5:
         bd:bc:d1:30:b5:0f:0a:44:a0:08:8f:5c:8b:2b:f3:28:82:81:
         30:3a:34:39:fc:b8:8f:11:8a:6d:6e:28:e9:a2:89:69:de:02:
         0b:cd:80:a9
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICAgwwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
RTY4QzBBRjExMC8GA1UEBRMoOEM0RTc3RkEzMjIzNDlDMEIyN0YwMTc2MzIzM0FF
NDdCMERDOUFGMzAeFw0yNTEyMDgwNDIzMThaFw0yNTEyMTAwNDIzMThaMBgxFjAU
BgNVBAMTDTY5MzY1MmI2LWZiODMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDuhu1IVe/eJtz47fzouY+rTelabQBJvUUfxEwlCEJTtYktwt83G3d8i/u6
rGoCcPukMdb2wNTLMWFcgt1u8dvCtkK8XSEQ8WQPuHBbrcd0PQ3W699ESxUhHRsz
xg1eP3rvUb7tpzWt2ggIZjVjbrCzvNIJn9vZQFdOjeJlKSHdzsNiyIrFaWsA1iFv
g79+OvUQ8eb8Jr3mU/WlU40azoBfJLEiKLbGTwV6R8hVtPNij4Tmphc13RKwuZoS
cIsgC0JSPB/BSqBjFgEcYUGVic7ivuaEtKSQ7YS8u/8cFRcXho5SqfZcE1bFybK3
R9MNkH0oHCwY8xXkARu2OZX4Bc31AgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUIARe
VZtpQSqibjye97L6xmswY98wHwYDVR0jBBgwFoAUjE53+jIjScCyfwF2MjOuR7Dc
mvMwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkU2OEMwLzNFQ0U4OTVFNDhFRjExRUZCQUI5MzVCRjc2MkU5NTFBL2pFNTMt
aklqU2NDeWZ3RjJNak91UjdEY212TS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2pFNTMtaklqU2NDeWZ3RjJNak91UjdEY212TS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2RTY4QzAvM0VDRTg5NUU0OEVGMTFFRkJBQjkzNUJGNzYy
RTk1MUEvakU1My1qSWpTY0N5ZndGMk1qT3VSN0RjbXZNLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCWngVllnV6x/RuOwXVnE2K098CCezw
kKetJEW+DEPHFBFv+bba6asCjo4osUHu+zMyaaUvdj8NQSklH3gNNIct4EX1M5W+
m1C/RxtvlPYFIMPql/C4V/JjFaT66sVBQbxXN7Z5r7yme0Nl+lw23NbujISfxb20
lvUGhvKHIBxsEo3t4EITIvkjuUPFrltqTKdlYVkjZWLpzwExywlrkyBLGzzP0wTO
CUA4BySkih88g2OKRdRDRkB+JE2dyzSaYz1Cj6usF4Nx2vttiqdpazjs9W8uVAqB
NsW9vNEwtQ8KRKAIj1yLK/MogoEwOjQ5/LiPEYptbijpoolp3gILzYCp
-----END CERTIFICATE-----
Generated at Mon Dec 8 17:05:14 2025 by rpki-client