This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F1295/2F0EBC8C0F6611EE814E22364AD9E6FC/vbGvH4tOtvOkI3D5HnHFMsf0YAU.mft
File:                     vbGvH4tOtvOkI3D5HnHFMsf0YAU.mft (raw, json)
Hash identifier:          auaef7jRTJI+53G+0VATy2yK0gwOA1Ingm7OhuiMqIU=
Subject key identifier:   9B:B5:E4:50:FF:C5:93:B1:79:A4:CA:97:A9:82:08:DD:30:C1:82:2B
Authority key identifier: BD:B1:AF:1F:8B:4E:B6:F3:A4:23:70:F9:1E:71:C5:32:C7:F4:60:05
Certificate issuer:       /CN=F36F1295AF/serialNumber=BDB1AF1F8B4EB6F3A42370F91E71C532C7F46005
Certificate serial:       03A2
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/vbGvH4tOtvOkI3D5HnHFMsf0YAU.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36F1295/2F0EBC8C0F6611EE814E22364AD9E6FC/vbGvH4tOtvOkI3D5HnHFMsf0YAU.mft
Manifest number:          03A1
Signing time:             Mon 08 Dec 2025 03:34:04 +0000
Manifest this update:     Mon 08 Dec 2025 03:34:04 +0000
Manifest next update:     Wed 10 Dec 2025 03:34:04 +0000
Files and hashes:         1: vbGvH4tOtvOkI3D5HnHFMsf0YAU.crl (hash: 0wiq7RWuYE4zHQM7za1yad08iP+WXhaK1mAhW2c2p78=)
                          2: C66A8CFA0F6611EE86DEEA374AD9E6FC.roa (hash: CtMLiyHqHp/2c3885KFMX3Kp1Td1UoRIr2a2dfZo4lI=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36F1295/2F0EBC8C0F6611EE814E22364AD9E6FC/vbGvH4tOtvOkI3D5HnHFMsf0YAU.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36F1295/2F0EBC8C0F6611EE814E22364AD9E6FC/vbGvH4tOtvOkI3D5HnHFMsf0YAU.mft
                          rsync://rpki.afrinic.net/repository/afrinic/vbGvH4tOtvOkI3D5HnHFMsf0YAU.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 10 Dec 2025 00:06:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 930 (0x3a2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36F1295AF, serialNumber=BDB1AF1F8B4EB6F3A42370F91E71C532C7F46005
        Validity
            Not Before: Dec  8 03:34:04 2025 GMT
            Not After : Dec 10 03:34:04 2025 GMT
        Subject: CN=6936472c-61bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:d6:20:05:6d:4a:ce:b2:8b:db:08:94:6e:f0:
                    bd:5a:36:9f:b8:31:e8:7c:03:eb:db:81:36:c4:84:
                    86:a5:a9:e9:b1:c4:2c:1f:29:bb:30:4e:a2:bc:87:
                    4a:3c:9c:6d:6f:0d:07:eb:d2:6f:93:3b:91:76:3f:
                    6b:32:a7:96:7b:c1:22:05:49:bf:9a:cd:95:87:a8:
                    f7:bf:8d:f5:3a:70:b1:b1:89:36:f8:c1:91:1a:00:
                    a1:3f:0a:4f:41:98:d8:40:4b:d4:08:b3:dc:72:07:
                    81:5d:49:6e:38:b9:38:f0:cc:ac:c8:b0:9a:ae:9b:
                    82:07:5c:7e:b5:13:89:43:43:b7:18:3e:4b:b3:98:
                    ca:3b:4e:c2:44:ec:16:b0:5f:ae:96:5b:d7:c3:f4:
                    5b:64:0b:a2:a4:d1:09:09:4b:b6:82:65:b3:ae:17:
                    4e:85:2c:bb:2b:70:da:83:6b:f6:d4:ba:7a:06:37:
                    f4:47:47:da:4b:8a:49:89:74:8a:c3:4f:35:f1:61:
                    c7:c6:3b:a4:cd:73:af:71:9f:a4:38:9f:3e:09:cf:
                    57:a9:ef:9f:d5:44:9c:b7:03:f1:f2:4a:75:45:31:
                    e1:06:33:16:22:00:8b:c6:52:4b:43:58:a8:54:53:
                    04:4c:a2:45:1c:2c:7c:d9:5c:ec:0b:5e:0b:e2:d5:
                    aa:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:B5:E4:50:FF:C5:93:B1:79:A4:CA:97:A9:82:08:DD:30:C1:82:2B
            X509v3 Authority Key Identifier:
                keyid:BD:B1:AF:1F:8B:4E:B6:F3:A4:23:70:F9:1E:71:C5:32:C7:F4:60:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36F1295/2F0EBC8C0F6611EE814E22364AD9E6FC/vbGvH4tOtvOkI3D5HnHFMsf0YAU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/vbGvH4tOtvOkI3D5HnHFMsf0YAU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F1295/2F0EBC8C0F6611EE814E22364AD9E6FC/vbGvH4tOtvOkI3D5HnHFMsf0YAU.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:58:25:12:ca:b0:0c:26:4e:08:d6:a3:62:77:2e:1a:16:2b:
         ee:d7:f0:68:92:b1:a1:cb:aa:d3:17:e7:c0:26:62:ef:10:4c:
         e5:13:d9:47:18:b4:df:cb:c8:30:25:3d:4e:14:15:9a:de:71:
         52:da:25:a6:41:0a:81:09:2d:3b:09:23:44:b0:6d:0f:13:eb:
         8c:3e:3e:99:36:b9:ef:1a:a3:be:bc:02:a7:6f:f6:40:d3:cd:
         60:0d:49:59:04:a3:20:03:66:29:c5:56:1b:d1:0e:ac:93:00:
         f2:1e:95:84:bd:ca:2b:1f:d5:7b:8c:68:57:f3:5a:3a:2b:83:
         80:09:2d:ea:71:9c:ea:fb:e6:c7:38:89:73:77:08:74:02:fb:
         62:13:74:af:2f:fc:15:0d:dd:bc:d0:6c:7d:f2:11:16:cc:23:
         69:e9:92:ce:fc:ef:8a:13:26:43:47:d1:b6:1f:84:cb:94:4b:
         73:46:11:d8:bd:38:73:ae:a7:fa:63:d5:a0:46:09:50:02:7d:
         95:79:60:d3:ae:a6:ec:28:4d:66:e2:99:d8:89:0c:02:ba:a2:
         7b:ee:fc:d0:97:b8:a3:9a:a7:20:d7:85:2a:7f:f0:57:75:3e:
         a1:6a:d7:97:73:47:bd:cf:8e:d5:f5:49:b3:db:7f:c5:6a:04:
         17:63:2f:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 8 17:17:38 2025 by rpki-client