This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F61A5/06F7F66C0FC911EC8545E973D8A014CE/4u30RuwlLhL_hY7r4xim2a4EMbA.mft
File:                     4u30RuwlLhL_hY7r4xim2a4EMbA.mft (raw, json)
Hash identifier:          FXC+1E6fljrz/JSTnQh70pYfdfwTEtVo8H3LQVcOS1I=
Subject key identifier:   F2:3B:12:70:A6:CA:49:75:19:2B:55:B5:D8:93:E4:D0:F7:E5:56:59
Authority key identifier: E2:ED:F4:46:EC:25:2E:12:FF:85:8E:EB:E3:18:A6:D9:AE:04:31:B0
Certificate issuer:       /CN=F36F61A5AF/serialNumber=E2EDF446EC252E12FF858EEBE318A6D9AE0431B0
Certificate serial:       063C
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/4u30RuwlLhL_hY7r4xim2a4EMbA.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36F61A5/06F7F66C0FC911EC8545E973D8A014CE/4u30RuwlLhL_hY7r4xim2a4EMbA.mft
Manifest number:          063B
Signing time:             Sun 07 Dec 2025 02:22:02 +0000
Manifest this update:     Sun 07 Dec 2025 02:22:01 +0000
Manifest next update:     Tue 09 Dec 2025 02:22:01 +0000
Files and hashes:         1: 4u30RuwlLhL_hY7r4xim2a4EMbA.crl (hash: GCrr0+rRGbmLVp80xzxgDigqOE1pVA9cA/8vNxaOlfI=)
                          2: F2E8745215FF11EC9C41353BD8A014CE.roa (hash: DALkcQgZJxSOm1jJNi52fbxFVjnJTlBys9WoNl+MGWs=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36F61A5/06F7F66C0FC911EC8545E973D8A014CE/4u30RuwlLhL_hY7r4xim2a4EMbA.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36F61A5/06F7F66C0FC911EC8545E973D8A014CE/4u30RuwlLhL_hY7r4xim2a4EMbA.mft
                          rsync://rpki.afrinic.net/repository/afrinic/4u30RuwlLhL_hY7r4xim2a4EMbA.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 09 Dec 2025 00:06:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1596 (0x63c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36F61A5AF, serialNumber=E2EDF446EC252E12FF858EEBE318A6D9AE0431B0
        Validity
            Not Before: Dec  7 02:22:01 2025 GMT
            Not After : Dec  9 02:22:01 2025 GMT
        Subject: CN=6934e4c9-c910
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:b6:77:dd:eb:dd:da:a8:d1:ec:db:8d:a4:19:
                    e8:9e:e1:4c:31:4a:4c:ed:b8:5c:6e:c4:c2:45:8e:
                    96:ae:d8:2d:cb:a0:ee:7d:6b:8f:b3:c3:f7:1b:88:
                    9d:57:db:be:fb:61:63:e1:79:46:c2:46:95:fd:70:
                    d8:8d:2e:fb:94:b6:bc:5c:b1:71:39:eb:95:8d:f2:
                    ff:c7:c2:a9:55:a2:0d:4a:e9:05:b6:92:ea:42:4b:
                    02:9a:f0:99:2a:da:b2:11:b0:eb:0f:49:e4:54:26:
                    95:17:b8:14:c0:1a:93:a4:e0:72:13:3c:46:4b:e0:
                    3e:ec:47:a6:cd:1a:b5:7d:66:ca:6c:1f:97:ff:4e:
                    1d:03:c8:b4:52:b6:00:6c:ec:17:d9:60:db:fc:68:
                    59:31:0d:59:71:b5:18:d4:17:ce:44:20:f4:b8:2d:
                    4b:8d:ab:4f:f6:19:57:6f:ac:b6:c6:0f:80:5b:ba:
                    f5:90:37:f9:b3:d8:77:b6:49:8a:e9:d9:2d:62:2c:
                    79:8f:11:ce:41:a0:55:27:fb:b0:25:ce:b6:f1:72:
                    f7:e9:e9:c1:9a:09:21:35:7c:76:d7:63:f8:c0:57:
                    9c:75:2c:ad:61:ee:64:d0:43:42:bc:ca:9d:ee:f6:
                    ce:6c:de:3c:d3:7f:a4:44:27:0f:c8:40:56:c2:b2:
                    69:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:3B:12:70:A6:CA:49:75:19:2B:55:B5:D8:93:E4:D0:F7:E5:56:59
            X509v3 Authority Key Identifier:
                keyid:E2:ED:F4:46:EC:25:2E:12:FF:85:8E:EB:E3:18:A6:D9:AE:04:31:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36F61A5/06F7F66C0FC911EC8545E973D8A014CE/4u30RuwlLhL_hY7r4xim2a4EMbA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/4u30RuwlLhL_hY7r4xim2a4EMbA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F61A5/06F7F66C0FC911EC8545E973D8A014CE/4u30RuwlLhL_hY7r4xim2a4EMbA.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:e7:7b:a3:7e:3a:8b:6c:fa:27:9d:34:19:bf:06:54:bc:85:
         d8:f2:69:d3:f3:1c:50:3a:42:00:bd:27:2b:c7:9c:ce:27:ef:
         f2:92:b0:e1:0b:74:87:38:7f:00:b1:33:c7:bc:4d:33:7b:83:
         46:c7:4f:e3:dc:8f:9f:84:8a:4f:bd:4e:8d:70:2a:14:52:1d:
         52:c6:28:78:88:6c:25:d6:15:20:51:7a:6c:f7:df:0a:ee:8c:
         7d:de:36:5a:79:44:9f:d9:5d:3c:0c:47:b1:09:59:3a:46:b3:
         da:dc:15:76:b3:c0:68:01:53:05:c8:0d:34:bc:65:61:52:20:
         d3:cb:e0:50:6d:f2:6d:d9:b4:43:ed:0a:52:c5:40:10:70:bc:
         09:67:42:98:db:92:3a:c4:13:21:7e:00:bb:bc:9d:54:dd:d3:
         dd:44:f2:08:c5:e6:30:19:49:db:82:ee:b2:98:95:dd:53:c0:
         68:06:57:36:9f:9c:e3:59:3a:fe:de:0b:67:a6:3b:28:2d:ad:
         42:54:72:33:43:16:94:45:d8:2f:d4:d4:47:06:88:56:99:1d:
         d7:60:6a:c2:7b:fe:67:aa:d7:0b:36:a7:a0:5a:a4:73:00:df:
         dd:91:59:e5:f9:cf:1e:03:d0:e1:57:e3:71:05:95:de:b6:7c:
         0d:62:ab:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 10:12:47 2025 by rpki-client