This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36E6D28/0192A7F2EA1D11EBB8B69A0BD8A014CE/Peh56gnhe4ORxyjbem-nsnOQS3o.mft
File:                     Peh56gnhe4ORxyjbem-nsnOQS3o.mft (raw, json)
Hash identifier:          Xq+WQDRPn7iDdmkWcGpjiPdBc9pMdMkzAkQU8tSRkX0=
Subject key identifier:   97:8A:56:01:14:28:84:0C:8B:7F:11:77:97:B0:5E:48:75:CE:6F:9D
Authority key identifier: 3D:E8:79:EA:09:E1:7B:83:91:C7:28:DB:7A:6F:A7:B2:73:90:4B:7A
Certificate issuer:       /CN=F36E6D28AF/serialNumber=3DE879EA09E17B8391C728DB7A6FA7B273904B7A
Certificate serial:       066E
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/Peh56gnhe4ORxyjbem-nsnOQS3o.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36E6D28/0192A7F2EA1D11EBB8B69A0BD8A014CE/Peh56gnhe4ORxyjbem-nsnOQS3o.mft
Manifest number:          066D
Signing time:             Mon 08 Dec 2025 02:16:31 +0000
Manifest this update:     Mon 08 Dec 2025 02:16:30 +0000
Manifest next update:     Wed 10 Dec 2025 02:16:30 +0000
Files and hashes:         1: Peh56gnhe4ORxyjbem-nsnOQS3o.crl (hash: dvcvP6XuSrvSr55iiZPipS9hwnjYf1CxnXVmsaMOB3I=)
                          2: 4CA13A74EA1D11EBAEB1FE0BD8A014CE.roa (hash: sIG4V1gL0C8GEyce4Zp/c68CcXuUBRgl5avwx6jTy/M=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36E6D28/0192A7F2EA1D11EBB8B69A0BD8A014CE/Peh56gnhe4ORxyjbem-nsnOQS3o.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36E6D28/0192A7F2EA1D11EBB8B69A0BD8A014CE/Peh56gnhe4ORxyjbem-nsnOQS3o.mft
                          rsync://rpki.afrinic.net/repository/afrinic/Peh56gnhe4ORxyjbem-nsnOQS3o.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 10 Dec 2025 00:06:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1646 (0x66e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36E6D28AF, serialNumber=3DE879EA09E17B8391C728DB7A6FA7B273904B7A
        Validity
            Not Before: Dec  8 02:16:30 2025 GMT
            Not After : Dec 10 02:16:30 2025 GMT
        Subject: CN=693634ff-094c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:b8:10:cb:e6:f1:62:51:b1:bd:31:98:c5:6f:
                    8b:50:2d:fa:7a:d9:23:05:70:c3:08:bd:3d:5a:fa:
                    d6:a4:f2:51:76:73:83:62:6c:2b:ff:4d:6f:03:52:
                    bd:c5:1f:e9:d3:a3:9a:f0:91:9c:9c:0a:a9:da:63:
                    d0:5c:02:e2:a8:4f:f4:a4:c1:ab:96:ab:b1:81:f9:
                    19:06:29:d1:93:3e:03:95:d4:52:e9:14:b9:9d:0b:
                    60:64:52:be:0a:05:be:04:1d:eb:60:86:82:ee:0f:
                    fb:0f:c0:66:4f:d7:d8:ee:81:dd:b3:bd:d8:93:38:
                    0f:e3:51:70:6e:07:5e:d6:0f:0b:f2:c4:6f:1c:bb:
                    f8:c2:b2:26:cd:70:14:09:ba:56:76:dc:47:a0:18:
                    de:4b:ba:59:b8:c8:2b:ec:e6:94:47:fc:44:85:50:
                    2c:d6:f2:14:b7:eb:2e:5a:68:14:11:16:8c:b7:24:
                    9e:9a:37:c1:70:45:fb:3b:60:de:cf:85:94:6a:24:
                    51:89:0f:69:04:3a:10:f6:a1:3b:2d:f7:c4:98:93:
                    b6:70:15:7a:7a:5f:86:b1:f6:ff:07:45:0e:57:14:
                    09:34:eb:74:74:5f:ba:d8:84:30:49:63:51:30:ac:
                    64:a1:08:8d:28:b3:6a:1e:4f:5d:c1:0e:a8:1f:3d:
                    9d:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:8A:56:01:14:28:84:0C:8B:7F:11:77:97:B0:5E:48:75:CE:6F:9D
            X509v3 Authority Key Identifier:
                keyid:3D:E8:79:EA:09:E1:7B:83:91:C7:28:DB:7A:6F:A7:B2:73:90:4B:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36E6D28/0192A7F2EA1D11EBB8B69A0BD8A014CE/Peh56gnhe4ORxyjbem-nsnOQS3o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Peh56gnhe4ORxyjbem-nsnOQS3o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E6D28/0192A7F2EA1D11EBB8B69A0BD8A014CE/Peh56gnhe4ORxyjbem-nsnOQS3o.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:1a:26:e6:4e:7d:be:fc:32:14:90:1c:15:6c:04:41:5b:dc:
         a7:4c:05:83:c5:5e:ea:d8:f4:18:5e:08:30:66:7b:31:bc:19:
         72:8e:fc:c9:6c:ba:33:b1:f2:ee:92:ad:d9:2f:38:18:67:2c:
         4b:24:ad:8e:ec:aa:68:5f:83:6e:86:dd:81:e2:9c:c6:6e:fe:
         05:94:e5:81:40:a7:41:07:9c:76:97:63:52:38:05:ad:36:bd:
         79:85:ff:2b:e2:ff:3a:4a:e8:f0:22:7c:fe:e7:20:70:e6:6d:
         7d:71:b9:f2:17:7c:77:b5:b1:8e:f8:91:4e:c5:d2:80:93:47:
         7e:48:ec:dd:0d:ea:ec:bc:d1:bd:8c:fd:0c:f3:f7:de:e0:18:
         a5:01:f4:da:cc:fd:38:c6:ee:19:eb:21:62:21:16:4b:e3:ad:
         c5:72:93:34:f6:33:f9:1d:3d:54:64:89:ca:4d:6c:e5:6c:99:
         aa:fc:61:30:26:df:ad:ec:f5:f2:cc:f9:a4:2f:16:af:94:0a:
         3f:24:be:21:8a:14:2c:d4:87:f6:c2:ab:9c:eb:59:ed:48:22:
         f9:da:f0:5c:9a:30:82:be:1e:40:3b:1e:8d:ef:01:51:3f:64:
         02:d4:bf:6e:c4:e7:e8:f8:db:e0:89:ef:c2:78:4b:9a:5b:06:
         54:0b:51:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 8 17:07:05 2025 by rpki-client