This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F143F/54BBD744314411EEAD49313E4AD9E6FC/HolOwLKGpu3ZMRfXo73Nj1dxAZ0.mft
File:                     HolOwLKGpu3ZMRfXo73Nj1dxAZ0.mft (raw, json)
Hash identifier:          NDE+6hGFfjoSlA9aLqShDjErfERSvBljTFhrrDXczRg=
Subject key identifier:   A6:3D:E8:D1:85:47:37:15:C3:08:AD:EA:21:5A:4A:36:83:0C:07:C1
Authority key identifier: 1E:89:4E:C0:B2:86:A6:ED:D9:31:17:D7:A3:BD:CD:8F:57:71:01:9D
Certificate issuer:       /CN=F36F143FAF/serialNumber=1E894EC0B286A6EDD93117D7A3BDCD8F5771019D
Certificate serial:       037A
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/HolOwLKGpu3ZMRfXo73Nj1dxAZ0.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36F143F/54BBD744314411EEAD49313E4AD9E6FC/HolOwLKGpu3ZMRfXo73Nj1dxAZ0.mft
Manifest number:          0377
Signing time:             Mon 08 Dec 2025 03:39:35 +0000
Manifest this update:     Mon 08 Dec 2025 03:39:35 +0000
Manifest next update:     Wed 10 Dec 2025 03:39:35 +0000
Files and hashes:         1: HolOwLKGpu3ZMRfXo73Nj1dxAZ0.crl (hash: 76e0rkaMbiVNoMLT1GWNSDklhIdUQWzsew0Hz6oIZcM=)
                          2: 146B2AA8374F11EE8C7415794AD9E6FC.roa (hash: ctcRoXeX+WjrHPxrmzGzA7un7tUh7u0StB40cjvt+SU=)
                          3: F145B322374E11EE8F129E784AD9E6FC.roa (hash: MBk8OyWgetmt/dAZbGXNZYY9i8llqzp1g5jqzySwP50=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36F143F/54BBD744314411EEAD49313E4AD9E6FC/HolOwLKGpu3ZMRfXo73Nj1dxAZ0.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36F143F/54BBD744314411EEAD49313E4AD9E6FC/HolOwLKGpu3ZMRfXo73Nj1dxAZ0.mft
                          rsync://rpki.afrinic.net/repository/afrinic/HolOwLKGpu3ZMRfXo73Nj1dxAZ0.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 10 Dec 2025 00:06:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 890 (0x37a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36F143FAF, serialNumber=1E894EC0B286A6EDD93117D7A3BDCD8F5771019D
        Validity
            Not Before: Dec  8 03:39:35 2025 GMT
            Not After : Dec 10 03:39:35 2025 GMT
        Subject: CN=69364877-2106
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:70:c8:50:29:db:6d:c5:71:6d:c5:0b:4f:0e:
                    8f:96:e7:dd:ea:94:9e:03:0e:7c:0a:3c:01:ea:1b:
                    19:26:b2:e2:83:94:5b:86:0a:ec:c9:b4:b8:8d:30:
                    06:19:7b:e1:7e:e5:8f:36:f7:ac:62:15:3e:b3:29:
                    90:3f:8f:8c:5d:35:fd:52:3c:ef:cd:b9:78:cc:37:
                    0d:a7:cb:a6:1b:d7:6c:68:56:bf:cb:ba:6f:a8:49:
                    b2:bf:71:7a:9c:05:48:ab:0e:20:97:0a:c4:9b:60:
                    a3:fb:33:f0:fb:91:f9:72:a3:d4:3d:e0:ec:00:73:
                    cf:a9:5b:6a:b8:0a:43:fc:b9:59:53:49:fe:a5:13:
                    0a:64:c4:1a:20:7b:c9:fe:9d:b1:f8:26:ac:08:60:
                    91:f1:91:09:d1:e9:97:e4:de:45:9d:ef:29:f9:51:
                    29:97:2d:a0:a1:02:6f:fb:c7:f6:73:56:99:aa:04:
                    b7:f2:45:1d:13:ee:ef:87:df:4f:84:9d:ea:45:b1:
                    9c:62:37:e8:9f:e7:d2:1b:2a:a7:e0:98:ba:aa:5b:
                    d3:64:8b:3c:65:42:b1:7f:97:62:4d:e7:84:30:0e:
                    40:42:23:d9:9d:70:e1:51:3f:c8:65:82:37:d6:5f:
                    bb:76:35:e5:a1:e5:7d:19:71:93:d5:66:6e:1a:18:
                    90:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:3D:E8:D1:85:47:37:15:C3:08:AD:EA:21:5A:4A:36:83:0C:07:C1
            X509v3 Authority Key Identifier:
                keyid:1E:89:4E:C0:B2:86:A6:ED:D9:31:17:D7:A3:BD:CD:8F:57:71:01:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36F143F/54BBD744314411EEAD49313E4AD9E6FC/HolOwLKGpu3ZMRfXo73Nj1dxAZ0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/HolOwLKGpu3ZMRfXo73Nj1dxAZ0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F143F/54BBD744314411EEAD49313E4AD9E6FC/HolOwLKGpu3ZMRfXo73Nj1dxAZ0.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:e6:5a:ff:0e:73:2d:d0:0b:c1:d3:fd:77:14:1d:52:c3:a5:
         95:82:6d:04:bd:52:44:fd:d1:ab:a1:ec:c8:0b:1f:e2:3a:ff:
         ed:28:a3:fb:89:c0:9d:f1:c3:95:79:45:61:84:6d:ab:a3:7b:
         e2:7f:a5:04:81:76:d5:c9:94:2b:13:22:ca:c7:cf:9a:65:6e:
         19:9f:31:20:a4:2b:24:73:b9:94:08:4d:ea:a5:2c:55:7d:08:
         39:46:66:af:e6:19:29:bd:8a:e5:03:38:f9:f4:77:3b:52:ea:
         64:4f:b8:02:8a:58:09:96:83:2d:6b:03:da:83:1f:21:d0:17:
         d1:33:b7:73:8b:b0:ed:ab:59:a5:74:21:9a:4e:2e:01:07:18:
         03:2b:ae:9b:9f:01:99:ba:91:8e:9b:b0:ca:a0:1b:81:ed:81:
         a6:01:ad:e1:70:92:09:fc:8f:1b:5a:2f:56:00:e9:99:b3:dd:
         8c:13:3e:f0:bb:1e:4c:7e:5a:e3:19:d4:39:52:6f:a4:2b:62:
         a3:98:0d:4e:46:05:b4:b3:0f:b8:99:9a:e1:92:7a:96:21:19:
         95:89:81:80:55:f7:f4:00:f0:9d:c2:60:27:6d:d6:a8:fd:5d:
         d1:0b:5e:8c:5b:47:54:b8:a7:16:19:29:31:98:e9:4f:86:f0:
         ef:f7:df:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 8 17:10:47 2025 by rpki-client