This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36ED13A/413409E486F111F09AE80097DAE4EC9C/iB1VxL_O6xP8_Apy6dChQ2kVVrU.mft
File:                     iB1VxL_O6xP8_Apy6dChQ2kVVrU.mft (raw, json)
Hash identifier:          vj4W6EuqiifD/sttE+P6cVb+ovGqFsLBlrDFKFKS6Fw=
Subject key identifier:   61:CE:A3:BC:4C:93:A4:08:D6:C8:A4:AC:96:84:C9:6C:83:CC:85:C8
Authority key identifier: 88:1D:55:C4:BF:CE:EB:13:FC:FC:0A:72:E9:D0:A1:43:69:15:56:B5
Certificate issuer:       /CN=F36ED13AAF/serialNumber=881D55C4BFCEEB13FCFC0A72E9D0A143691556B5
Certificate serial:       65
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/iB1VxL_O6xP8_Apy6dChQ2kVVrU.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36ED13A/413409E486F111F09AE80097DAE4EC9C/iB1VxL_O6xP8_Apy6dChQ2kVVrU.mft
Manifest number:          65
Signing time:             Mon 08 Dec 2025 05:12:34 +0000
Manifest this update:     Mon 08 Dec 2025 05:12:31 +0000
Manifest next update:     Wed 10 Dec 2025 05:12:31 +0000
Files and hashes:         1: iB1VxL_O6xP8_Apy6dChQ2kVVrU.crl (hash: jCpFML4dFKmZN/b8xCy0hnfmlY9EPQhi64FZJpN3rlk=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36ED13A/413409E486F111F09AE80097DAE4EC9C/iB1VxL_O6xP8_Apy6dChQ2kVVrU.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36ED13A/413409E486F111F09AE80097DAE4EC9C/iB1VxL_O6xP8_Apy6dChQ2kVVrU.mft
                          rsync://rpki.afrinic.net/repository/afrinic/iB1VxL_O6xP8_Apy6dChQ2kVVrU.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 10 Dec 2025 00:06:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 101 (0x65)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36ED13AAF, serialNumber=881D55C4BFCEEB13FCFC0A72E9D0A143691556B5
        Validity
            Not Before: Dec  8 05:12:31 2025 GMT
            Not After : Dec 10 05:12:31 2025 GMT
        Subject: CN=69365e42-4e29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:20:ff:54:0b:6e:3e:9e:c4:27:a3:b9:f0:e1:
                    de:43:38:c3:f5:3f:b7:56:45:58:9a:1f:d9:1a:9d:
                    a4:e3:c7:03:59:38:20:4b:cc:99:c0:49:dd:53:10:
                    54:9e:46:2e:d2:9d:5d:72:6b:13:06:27:fc:f8:a0:
                    4f:6d:45:ef:5e:b3:1d:e7:fe:ec:a0:c3:0e:d3:92:
                    f9:ba:2c:5d:b5:8b:88:f6:ce:6e:b8:ca:37:7d:9f:
                    7f:06:03:de:43:6b:75:9b:89:4d:59:cd:ec:36:44:
                    fe:e8:bf:b8:58:a6:ee:b1:19:9d:5b:88:ac:b5:11:
                    0e:2e:fa:6d:45:ad:01:9a:f2:c7:9f:8e:6e:dc:65:
                    0a:be:a3:88:e0:f3:eb:80:42:7e:b2:fb:02:5f:f6:
                    42:60:39:71:a1:88:79:30:3f:fd:cc:5c:ff:0a:3e:
                    5b:79:14:fb:85:85:fa:e3:da:10:a5:ea:ec:48:ca:
                    91:6b:ec:b8:9f:ca:83:2e:08:c9:1f:f0:6e:59:ef:
                    1b:31:1b:75:e9:66:7c:f8:ee:2d:3b:51:3c:6c:42:
                    76:1b:97:30:c2:5f:fd:82:76:a0:5e:62:49:56:ad:
                    34:fe:d2:5b:50:e0:13:f0:85:14:e0:1e:e8:3e:79:
                    d5:f1:22:aa:0d:92:af:25:50:3c:c6:7e:a1:b4:79:
                    95:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:CE:A3:BC:4C:93:A4:08:D6:C8:A4:AC:96:84:C9:6C:83:CC:85:C8
            X509v3 Authority Key Identifier:
                keyid:88:1D:55:C4:BF:CE:EB:13:FC:FC:0A:72:E9:D0:A1:43:69:15:56:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36ED13A/413409E486F111F09AE80097DAE4EC9C/iB1VxL_O6xP8_Apy6dChQ2kVVrU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/iB1VxL_O6xP8_Apy6dChQ2kVVrU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36ED13A/413409E486F111F09AE80097DAE4EC9C/iB1VxL_O6xP8_Apy6dChQ2kVVrU.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:32:73:79:5e:eb:d8:6d:09:68:b7:5b:4d:29:4e:57:d1:df:
         51:e8:4b:84:b9:80:4d:fe:b4:a8:15:c8:5e:74:ae:f7:e7:ba:
         3b:c4:4b:1e:2c:84:22:c7:e8:28:d5:b7:14:c9:e0:a2:21:2c:
         86:55:80:30:fc:5e:0b:39:d9:95:58:b1:56:e4:67:74:e9:32:
         7b:71:f7:07:1b:44:20:73:03:4b:47:87:99:4d:fa:cc:14:8a:
         8e:44:68:f3:76:77:24:a5:28:2a:21:f5:da:21:84:fb:da:32:
         1d:7e:1a:68:c0:c0:1b:87:bf:0c:68:47:f1:9a:75:78:39:bb:
         88:3a:36:cf:7b:30:f8:43:68:ae:16:cf:2a:ad:d2:ab:9d:d0:
         cd:29:6a:57:c8:8e:12:0c:7d:34:13:87:cd:ff:a1:44:29:b7:
         2b:9c:0f:94:a5:28:25:c9:18:15:86:ed:ca:0e:6c:c6:c3:c4:
         8e:3c:6e:d7:2f:74:46:2e:2a:16:fd:a3:d0:42:98:6f:5b:14:
         e4:d2:f8:8f:dd:66:6c:13:6a:75:5a:01:4b:ce:cf:ad:57:6d:
         29:07:1b:d5:0b:af:06:1a:11:21:7d:ea:77:c6:7f:0f:46:f6:
         88:8c:5f:f0:eb:41:51:8e:02:b9:57:7c:54:c9:c0:98:c3:89:
         2e:4d:09:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 8 17:20:07 2025 by rpki-client