This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36E6AB8/D8FE28F61BDC11ECB169A467D8A014CE/xel4rPl9qfSdxLKEr_AldPEDGH8.mft
File:                     xel4rPl9qfSdxLKEr_AldPEDGH8.mft (raw, json)
Hash identifier:          4Lq3UlzhnAsSvcn6UuAOosYl94eckHxeeRF0EJPGhyA=
Subject key identifier:   57:D1:7F:C2:19:C3:E7:19:46:18:AE:07:6C:8F:88:B4:BF:BB:E2:02
Authority key identifier: C5:E9:78:AC:F9:7D:A9:F4:9D:C4:B2:84:AF:F0:25:74:F1:03:18:7F
Certificate issuer:       /CN=F36E6AB8AF/serialNumber=C5E978ACF97DA9F49DC4B284AFF02574F103187F
Certificate serial:       062D
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/xel4rPl9qfSdxLKEr_AldPEDGH8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36E6AB8/D8FE28F61BDC11ECB169A467D8A014CE/xel4rPl9qfSdxLKEr_AldPEDGH8.mft
Manifest number:          062C
Signing time:             Sun 07 Dec 2025 02:24:39 +0000
Manifest this update:     Sun 07 Dec 2025 02:24:38 +0000
Manifest next update:     Tue 09 Dec 2025 02:24:38 +0000
Files and hashes:         1: xel4rPl9qfSdxLKEr_AldPEDGH8.crl (hash: n1UXPJMTq88FpwkycrkBLBekU2MG3uiLB+Aracx7RMY=)
                          2: 1C9E519E1BDD11ECA0560768D8A014CE.roa (hash: FU98lPpwZTQalULqUls0soaKI9pnCPgBWGxAh0GDG/g=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36E6AB8/D8FE28F61BDC11ECB169A467D8A014CE/xel4rPl9qfSdxLKEr_AldPEDGH8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36E6AB8/D8FE28F61BDC11ECB169A467D8A014CE/xel4rPl9qfSdxLKEr_AldPEDGH8.mft
                          rsync://rpki.afrinic.net/repository/afrinic/xel4rPl9qfSdxLKEr_AldPEDGH8.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 09 Dec 2025 00:06:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1581 (0x62d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36E6AB8AF, serialNumber=C5E978ACF97DA9F49DC4B284AFF02574F103187F
        Validity
            Not Before: Dec  7 02:24:38 2025 GMT
            Not After : Dec  9 02:24:38 2025 GMT
        Subject: CN=6934e567-8a94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:ea:c9:d5:7b:76:63:55:31:6e:73:3c:8d:1c:
                    c2:c8:ec:e9:53:b2:e6:7b:c4:f5:1c:c8:0c:3b:fa:
                    2c:cb:be:6e:5f:6d:68:4f:d7:db:a7:03:33:a7:e6:
                    6f:b0:16:15:77:7c:2f:7e:bd:66:63:9b:b6:a1:9e:
                    82:b2:cc:17:20:4d:2d:24:9d:dd:60:cd:c6:4e:18:
                    e2:98:38:31:59:3e:83:4c:bc:79:f7:23:93:a3:4f:
                    c9:14:be:86:17:fd:e7:83:fa:4f:41:4d:e4:ed:ca:
                    3f:f1:a4:ed:e7:7c:a5:6f:5e:65:34:24:d5:bd:2f:
                    8c:25:89:3e:b9:45:7e:57:11:a1:8a:8c:b4:b6:68:
                    3b:5d:a9:6d:49:b1:2b:ec:0c:e5:04:90:69:11:b1:
                    03:52:c2:ed:fc:51:ba:93:9b:ce:ea:7b:46:c2:62:
                    66:94:ca:28:d1:92:d8:b0:ce:6e:2d:83:f0:a8:c1:
                    8c:40:e7:17:83:ab:d9:d5:31:48:20:14:7d:a7:bd:
                    e8:04:ca:83:cf:6c:7d:26:73:e4:b3:d1:0b:e7:04:
                    06:c6:4e:31:3c:d6:2d:34:2e:3c:37:46:61:a5:3e:
                    46:68:b0:6a:a2:0c:8d:2f:b3:c1:bf:17:e5:8b:a1:
                    6f:fe:b3:3a:1c:12:bc:30:5d:53:92:00:99:5a:ba:
                    86:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:D1:7F:C2:19:C3:E7:19:46:18:AE:07:6C:8F:88:B4:BF:BB:E2:02
            X509v3 Authority Key Identifier:
                keyid:C5:E9:78:AC:F9:7D:A9:F4:9D:C4:B2:84:AF:F0:25:74:F1:03:18:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36E6AB8/D8FE28F61BDC11ECB169A467D8A014CE/xel4rPl9qfSdxLKEr_AldPEDGH8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/xel4rPl9qfSdxLKEr_AldPEDGH8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E6AB8/D8FE28F61BDC11ECB169A467D8A014CE/xel4rPl9qfSdxLKEr_AldPEDGH8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:33:ac:0d:2c:03:32:36:43:b1:1a:29:27:7e:7d:8a:46:c0:
         41:28:cf:43:ff:c1:d9:71:4a:d2:9c:13:e6:69:a4:ed:67:0a:
         2f:e3:39:d4:cb:7a:c9:fe:cc:9e:4a:f3:2c:17:e0:73:de:f8:
         65:84:27:f9:8a:8d:51:fd:f8:58:7e:89:88:0b:f7:ad:c1:23:
         db:a3:3d:63:cb:1e:7b:12:07:46:d6:07:f1:95:b0:84:9c:e2:
         2a:18:4c:b1:f8:78:a6:b5:e1:c4:53:5b:28:fb:73:19:5f:62:
         03:27:64:24:20:ed:bc:c3:74:36:64:e4:97:16:6b:a5:0e:dd:
         cd:5b:8b:2d:21:e5:2c:96:e0:ed:df:51:d3:cc:ba:5c:4a:f9:
         b3:b6:dc:ad:e0:87:74:9a:ce:1d:50:b8:4b:05:14:17:a3:70:
         e8:30:f2:4d:1e:27:fb:fd:f4:5d:7c:9e:75:4a:9d:4d:a8:5f:
         58:88:fb:15:b9:6c:43:1b:ab:21:d2:71:57:c9:af:11:b6:e8:
         29:ef:4c:f9:9e:50:03:e8:63:5a:cf:d4:c3:b0:4e:d2:4e:6a:
         97:e3:e3:34:32:c5:c4:71:7e:21:f9:d4:3e:b1:9b:0a:dd:ee:
         cc:7a:d2:2a:7e:64:14:5a:8c:2a:22:21:5b:1b:2d:6d:c9:16:
         59:11:44:40
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICBi0wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
RTZBQjhBRjExMC8GA1UEBRMoQzVFOTc4QUNGOTdEQTlGNDlEQzRCMjg0QUZGMDI1
NzRGMTAzMTg3RjAeFw0yNTEyMDcwMjI0MzhaFw0yNTEyMDkwMjI0MzhaMBgxFjAU
BgNVBAMTDTY5MzRlNTY3LThhOTQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC06snVe3ZjVTFuczyNHMLI7OlTsuZ7xPUcyAw7+izLvm5fbWhP19unAzOn
5m+wFhV3fC9+vWZjm7ahnoKyzBcgTS0knd1gzcZOGOKYODFZPoNMvHn3I5OjT8kU
voYX/eeD+k9BTeTtyj/xpO3nfKVvXmU0JNW9L4wliT65RX5XEaGKjLS2aDtdqW1J
sSvsDOUEkGkRsQNSwu38UbqTm87qe0bCYmaUyijRktiwzm4tg/CowYxA5xeDq9nV
MUggFH2nvegEyoPPbH0mc+Sz0QvnBAbGTjE81i00Ljw3RmGlPkZosGqiDI0vs8G/
F+WLoW/+szocErwwXVOSAJlauobfAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUV9F/
whnD5xlGGK4HbI+ItL+74gIwHwYDVR0jBBgwFoAUxel4rPl9qfSdxLKEr/AldPED
GH8wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkU2QUI4L0Q4RkUyOEY2MUJEQzExRUNCMTY5QTQ2N0Q4QTAxNENFL3hlbDRy
UGw5cWZTZHhMS0VyX0FsZFBFREdIOC5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL3hlbDRyUGw5cWZTZHhMS0VyX0FsZFBFREdIOC5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2RTZBQjgvRDhGRTI4RjYxQkRDMTFFQ0IxNjlBNDY3RDhB
MDE0Q0UveGVsNHJQbDlxZlNkeExLRXJfQWxkUEVER0g4Lm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAtM6wNLAMyNkOxGiknfn2KRsBBKM9D
/8HZcUrSnBPmaaTtZwov4znUy3rJ/syeSvMsF+Bz3vhlhCf5io1R/fhYfomIC/et
wSPboz1jyx57EgdG1gfxlbCEnOIqGEyx+HimteHEU1so+3MZX2IDJ2QkIO28w3Q2
ZOSXFmulDt3NW4stIeUsluDt31HTzLpcSvmzttyt4Id0ms4dULhLBRQXo3DoMPJN
Hif7/fRdfJ51Sp1NqF9YiPsVuWxDG6sh0nFXya8Rtugp70z5nlAD6GNaz9TDsE7S
TmqX4+M0MsXEcX4h+dQ+sZsK3e7MetIqfmQUWowqIiFbGy1tyRZZEURA
-----END CERTIFICATE-----
Generated at Sun Dec 7 10:29:46 2025 by rpki-client