This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F0522/0F530264279411EDB2C767F3F1222468/aFg2dgHVM90hnMnjOq3p4BLA070.mft
File:                     aFg2dgHVM90hnMnjOq3p4BLA070.mft (raw, json)
Hash identifier:          9qNLQwenB0Ia1H9lRX1p8NMDIRYduF3HJifw+P1ARTI=
Subject key identifier:   34:0F:AF:47:9B:8F:FA:B1:A0:2F:B5:86:5E:5A:13:89:3D:FC:40:A3
Authority key identifier: 68:58:36:76:01:D5:33:DD:21:9C:C9:E3:3A:AD:E9:E0:12:C0:D3:BD
Certificate issuer:       /CN=F36F0522AF/serialNumber=6858367601D533DD219CC9E33AADE9E012C0D3BD
Certificate serial:       04D8
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/aFg2dgHVM90hnMnjOq3p4BLA070.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36F0522/0F530264279411EDB2C767F3F1222468/aFg2dgHVM90hnMnjOq3p4BLA070.mft
Manifest number:          04D6
Signing time:             Mon 08 Dec 2025 02:55:49 +0000
Manifest this update:     Mon 08 Dec 2025 02:55:48 +0000
Manifest next update:     Wed 10 Dec 2025 02:55:48 +0000
Files and hashes:         1: aFg2dgHVM90hnMnjOq3p4BLA070.crl (hash: Uv+rKH0L0cnDl8m66pHYTJINSF3ZpO5GFLFDx5i+ojw=)
                          2: F8655580279C11ED8AC3E690F1222468.roa (hash: x+l5je5hrDHkIdSRJfbUPuD6coe8HjIrW/1dz5GPwZg=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36F0522/0F530264279411EDB2C767F3F1222468/aFg2dgHVM90hnMnjOq3p4BLA070.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36F0522/0F530264279411EDB2C767F3F1222468/aFg2dgHVM90hnMnjOq3p4BLA070.mft
                          rsync://rpki.afrinic.net/repository/afrinic/aFg2dgHVM90hnMnjOq3p4BLA070.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 10 Dec 2025 00:06:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1240 (0x4d8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36F0522AF, serialNumber=6858367601D533DD219CC9E33AADE9E012C0D3BD
        Validity
            Not Before: Dec  8 02:55:48 2025 GMT
            Not After : Dec 10 02:55:48 2025 GMT
        Subject: CN=69363e35-e8d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:65:78:bd:fb:7f:43:c7:4f:8e:1d:d8:da:ce:
                    8a:1d:c2:67:91:25:17:84:0e:2d:dd:24:c9:04:7a:
                    e6:7b:c7:d5:af:e0:13:d8:2c:3e:a0:33:aa:70:34:
                    fa:a4:47:ec:0a:93:b8:f1:19:21:92:6f:af:60:04:
                    9b:28:44:26:58:70:c2:bb:86:f7:a9:cc:ce:c9:b8:
                    7e:e9:ce:c3:9d:92:3e:0b:ca:3f:6d:56:1b:ca:40:
                    17:1b:49:f3:1d:0e:74:cc:cb:02:e2:9b:d5:02:08:
                    53:94:28:0c:a5:ae:00:1d:6e:53:0b:d2:bf:8d:b0:
                    df:9c:3d:8e:b5:78:42:7d:08:36:6a:b0:64:bc:ec:
                    dd:47:0b:7a:4d:46:4b:0e:e2:e3:26:2a:68:ac:6a:
                    ca:77:7e:27:c6:33:7d:bf:25:7c:fa:9f:98:0a:fa:
                    12:57:e9:6d:bb:6f:f6:92:90:52:42:57:7a:67:4e:
                    67:a3:79:1b:32:9d:45:92:05:c7:dc:e4:79:c6:6d:
                    81:cd:8f:2d:78:57:1d:db:86:c7:10:99:5d:cc:b8:
                    8b:5d:a3:3a:9b:2e:97:54:02:b5:ca:6c:f0:e4:3e:
                    f3:fd:32:73:8c:6a:00:3b:2d:e5:f4:b5:5f:c2:49:
                    66:06:63:a6:da:17:08:43:27:fa:77:e8:d0:4a:91:
                    ac:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:0F:AF:47:9B:8F:FA:B1:A0:2F:B5:86:5E:5A:13:89:3D:FC:40:A3
            X509v3 Authority Key Identifier:
                keyid:68:58:36:76:01:D5:33:DD:21:9C:C9:E3:3A:AD:E9:E0:12:C0:D3:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36F0522/0F530264279411EDB2C767F3F1222468/aFg2dgHVM90hnMnjOq3p4BLA070.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/aFg2dgHVM90hnMnjOq3p4BLA070.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F0522/0F530264279411EDB2C767F3F1222468/aFg2dgHVM90hnMnjOq3p4BLA070.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:df:cf:30:c5:4a:23:e6:4d:b8:8e:b2:4c:06:a4:03:2a:e3:
         98:9c:cf:3a:9b:e0:3b:97:43:8a:82:50:cf:0a:5c:7f:c7:c8:
         a2:b2:be:24:bd:85:53:9a:57:28:b7:11:4a:2e:0f:e4:e9:49:
         08:0d:46:12:d5:0f:90:ff:68:16:23:6d:e1:3d:30:c0:94:f5:
         bf:8b:5d:4b:bc:f1:4d:f8:ce:66:72:0e:7d:81:bc:35:4b:5e:
         3a:4c:9f:d6:6f:0c:35:62:40:ea:27:ee:90:ee:d3:d4:5f:85:
         70:1c:71:cc:d1:7e:e1:ae:2b:01:67:25:24:bf:e0:fc:ac:1c:
         28:95:68:8d:f8:3f:50:a5:67:c6:46:b5:dc:5b:bf:c7:94:d7:
         3f:51:a9:c1:1c:46:a3:cc:dc:9d:4a:46:0e:80:f2:fc:f4:24:
         df:25:73:07:f7:54:d9:60:49:77:12:57:0f:01:5a:75:1b:a9:
         0e:9c:eb:8a:55:c1:74:3e:cc:89:04:a2:bb:d3:02:9c:86:f3:
         ae:89:4c:90:17:8a:5a:f8:b5:da:5d:fc:6d:23:55:f3:f0:bf:
         81:61:65:59:b9:14:fc:68:40:d4:61:f2:a6:76:80:23:6a:c6:
         c8:05:64:8c:ef:2d:f0:42:62:c2:0a:26:94:c7:98:83:aa:48:
         c3:89:2a:7e
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICBNgwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
RjA1MjJBRjExMC8GA1UEBRMoNjg1ODM2NzYwMUQ1MzNERDIxOUNDOUUzM0FBREU5
RTAxMkMwRDNCRDAeFw0yNTEyMDgwMjU1NDhaFw0yNTEyMTAwMjU1NDhaMBgxFjAU
BgNVBAMTDTY5MzYzZTM1LWU4ZDkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQClZXi9+39Dx0+OHdjazoodwmeRJReEDi3dJMkEeuZ7x9Wv4BPYLD6gM6pw
NPqkR+wKk7jxGSGSb69gBJsoRCZYcMK7hvepzM7JuH7pzsOdkj4Lyj9tVhvKQBcb
SfMdDnTMywLim9UCCFOUKAylrgAdblML0r+NsN+cPY61eEJ9CDZqsGS87N1HC3pN
RksO4uMmKmisasp3fifGM32/JXz6n5gK+hJX6W27b/aSkFJCV3pnTmejeRsynUWS
Bcfc5HnGbYHNjy14Vx3bhscQmV3MuItdozqbLpdUArXKbPDkPvP9MnOMagA7LeX0
tV/CSWYGY6baFwhDJ/p36NBKkawHAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUNA+v
R5uP+rGgL7WGXloTiT38QKMwHwYDVR0jBBgwFoAUaFg2dgHVM90hnMnjOq3p4BLA
070wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkYwNTIyLzBGNTMwMjY0Mjc5NDExRURCMkM3NjdGM0YxMjIyNDY4L2FGZzJk
Z0hWTTkwaG5NbmpPcTNwNEJMQTA3MC5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2FGZzJkZ0hWTTkwaG5NbmpPcTNwNEJMQTA3MC5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2RjA1MjIvMEY1MzAyNjQyNzk0MTFFREIyQzc2N0YzRjEy
MjI0NjgvYUZnMmRnSFZNOTBobk1uak9xM3A0QkxBMDcwLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAg388wxUoj5k24jrJMBqQDKuOYnM86
m+A7l0OKglDPClx/x8iisr4kvYVTmlcotxFKLg/k6UkIDUYS1Q+Q/2gWI23hPTDA
lPW/i11LvPFN+M5mcg59gbw1S146TJ/Wbww1YkDqJ+6Q7tPUX4VwHHHM0X7hrisB
ZyUkv+D8rBwolWiN+D9QpWfGRrXcW7/HlNc/UanBHEajzNydSkYOgPL89CTfJXMH
91TZYEl3ElcPAVp1G6kOnOuKVcF0PsyJBKK70wKchvOuiUyQF4pa+LXaXfxtI1Xz
8L+BYWVZuRT8aEDUYfKmdoAjasbIBWSM7y3wQmLCCiaUx5iDqkjDiSp+
-----END CERTIFICATE-----
Generated at Mon Dec 8 17:29:15 2025 by rpki-client