This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36EC7CE/82014A10989911E9B7396A33F8AEA228/DgQKv0-UXzDXfaKLvwKLasSdBCw.mft
File:                     DgQKv0-UXzDXfaKLvwKLasSdBCw.mft (raw, json)
Hash identifier:          JBI04WwWDwky8+6KOa6naI+ZeO5LAba/a00oc2rVvXg=
Subject key identifier:   DF:06:91:74:C3:47:CD:D3:ED:C6:EF:69:76:AA:26:21:80:7D:92:38
Authority key identifier: 0E:04:0A:BF:4F:94:5F:30:D7:7D:A2:8B:BF:02:8B:6A:C4:9D:04:2C
Certificate issuer:       /CN=F36EC7CEAF/serialNumber=0E040ABF4F945F30D77DA28BBF028B6AC49D042C
Certificate serial:       0989
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/DgQKv0-UXzDXfaKLvwKLasSdBCw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36EC7CE/82014A10989911E9B7396A33F8AEA228/DgQKv0-UXzDXfaKLvwKLasSdBCw.mft
Manifest number:          097F
Signing time:             Mon 08 Dec 2025 01:30:35 +0000
Manifest this update:     Mon 08 Dec 2025 01:30:35 +0000
Manifest next update:     Wed 10 Dec 2025 01:30:35 +0000
Files and hashes:         1: DgQKv0-UXzDXfaKLvwKLasSdBCw.crl (hash: SiNF9L5kZ99bz9ZmBy7PycTxs9+b4/nPDwJb1GlC+PU=)
                          2: 82A311068E9D11EA936A3D74F8AEA228.roa (hash: 2fJIX7cXKI9q+Xtr5M7y3JF2k9yaJVXpVCcsMHvm1sY=)
                          3: 25FEFCBCDF7011E997CFF03AF8AEA228.roa (hash: NtIZQtczAvdXKaNMIz0m1Q59Z9nMLMNC/p7wM9puv2w=)
                          4: EAE45BCCDF6F11E9826AA83AF8AEA228.roa (hash: pbv4p9icCN4O4WG3leeCL1EpjVjH0clUw2cLgw9t0TQ=)
                          5: 9F906EFADF6E11E99541B739F8AEA228.roa (hash: hCPkplK+hVP9DlTjTX9JwAshQG3hKSM8ZsAigNstAOM=)
                          6: 57B1CD5CDF7011E994C8153BF8AEA228.roa (hash: zjnpjvYJ2wSjAd/hAZmaBFc5QxQdM4l8os6iExNvOEE=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36EC7CE/82014A10989911E9B7396A33F8AEA228/DgQKv0-UXzDXfaKLvwKLasSdBCw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36EC7CE/82014A10989911E9B7396A33F8AEA228/DgQKv0-UXzDXfaKLvwKLasSdBCw.mft
                          rsync://rpki.afrinic.net/repository/afrinic/DgQKv0-UXzDXfaKLvwKLasSdBCw.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 10 Dec 2025 00:06:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2441 (0x989)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36EC7CEAF, serialNumber=0E040ABF4F945F30D77DA28BBF028B6AC49D042C
        Validity
            Not Before: Dec  8 01:30:35 2025 GMT
            Not After : Dec 10 01:30:35 2025 GMT
        Subject: CN=69362a3b-d4a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:24:a2:1d:b3:23:18:22:5c:96:b1:ab:82:d2:
                    8f:6a:ab:08:46:00:dc:10:41:a3:2e:20:b0:d0:be:
                    ea:6a:6c:45:59:db:83:3b:ab:cd:89:52:ee:47:46:
                    5f:99:79:c6:82:01:ab:09:63:19:e3:26:81:ed:25:
                    79:9a:10:dd:fe:7e:d7:6c:36:77:9c:f3:b0:57:d1:
                    f7:ff:2f:e9:ff:14:26:ac:f2:af:7e:7c:3b:83:15:
                    d3:fb:ef:83:a3:68:ab:02:a2:5d:f2:2c:f0:5d:f7:
                    09:89:48:4e:6f:ff:d2:64:80:b1:58:d5:eb:c2:9f:
                    2d:a6:f6:6d:c9:10:80:e8:aa:d1:b2:cd:02:2f:84:
                    5c:e2:43:c5:7b:0b:c0:bb:34:bc:4e:60:77:fd:93:
                    a3:53:3b:77:f3:3d:99:a4:a0:76:ac:19:1e:f7:bc:
                    12:3d:ea:33:35:e2:97:a3:d7:2f:63:6b:96:29:c9:
                    e8:d8:fe:e4:ec:c3:4c:fa:28:e5:b1:d8:04:95:05:
                    4d:de:3b:7d:7a:6b:25:7d:93:ce:a9:a3:26:d0:18:
                    cf:e8:cc:20:26:c7:d4:79:f1:18:70:74:93:42:a3:
                    37:37:e0:8f:4b:7c:ee:a3:df:61:be:a4:48:4a:4a:
                    d8:9b:41:76:53:b8:aa:88:b2:a3:b3:4d:04:2d:b4:
                    83:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:06:91:74:C3:47:CD:D3:ED:C6:EF:69:76:AA:26:21:80:7D:92:38
            X509v3 Authority Key Identifier:
                keyid:0E:04:0A:BF:4F:94:5F:30:D7:7D:A2:8B:BF:02:8B:6A:C4:9D:04:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36EC7CE/82014A10989911E9B7396A33F8AEA228/DgQKv0-UXzDXfaKLvwKLasSdBCw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/DgQKv0-UXzDXfaKLvwKLasSdBCw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36EC7CE/82014A10989911E9B7396A33F8AEA228/DgQKv0-UXzDXfaKLvwKLasSdBCw.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:e7:5c:0a:e2:bd:c8:30:eb:fa:1b:97:91:b7:b9:d8:b0:c9:
         18:ca:6e:f4:df:7a:d1:d8:15:40:2a:55:c4:fd:8c:52:a8:7e:
         4f:ff:76:0a:e7:4a:ad:89:0c:5a:4a:cf:3c:48:fb:58:7d:a0:
         93:1a:31:7f:5f:de:f8:48:ce:7a:7d:a4:24:a0:ef:8b:d0:85:
         c3:7b:65:6a:32:c2:11:59:df:56:d5:7d:43:05:6b:44:13:ba:
         3d:55:a6:66:26:dc:32:00:5d:03:df:11:ab:4a:b2:a6:24:70:
         af:a2:5d:77:fd:36:90:42:b1:71:62:38:fe:cb:95:00:d6:a4:
         01:75:91:92:1a:06:6d:0b:69:9a:9f:e5:81:8b:05:fe:95:e9:
         a9:64:11:01:d9:20:1a:7d:3f:c3:79:a0:fa:a4:6e:df:b7:55:
         b0:1a:dc:88:b8:a0:56:0f:29:72:18:6e:cf:fc:40:c1:2d:f4:
         cd:dd:48:13:d5:02:74:58:4d:60:72:c0:12:a7:b8:1f:43:82:
         b3:46:57:b5:37:5f:a4:55:32:aa:e2:88:3d:81:e3:fd:7b:c2:
         10:cb:7d:9a:f3:92:e0:60:fa:55:a2:0c:2d:ba:cf:f1:79:5e:
         f7:d7:be:02:d0:18:01:27:f5:29:48:1a:33:c1:c0:94:07:e1:
         34:31:d7:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 8 17:04:53 2025 by rpki-client