This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FAE49/A7AE1658BFDE11F080720F79DAE4EC9C/MjlPmgUImlFA6Eyv6J4tGcG1IyA.mft
File:                     MjlPmgUImlFA6Eyv6J4tGcG1IyA.mft (raw, json)
Hash identifier:          BeYDgjk+fUyDzAmoHNRhMRoHVLpZkEu2URZFsGkYK9s=
Subject key identifier:   03:FF:78:56:A3:8B:79:38:DB:CF:0D:B7:7B:42:FE:45:64:57:AA:68
Authority key identifier: 32:39:4F:9A:05:08:9A:51:40:E8:4C:AF:E8:9E:2D:19:C1:B5:23:20
Certificate issuer:       /CN=F36FAE49AF/serialNumber=32394F9A05089A5140E84CAFE89E2D19C1B52320
Certificate serial:       33
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/MjlPmgUImlFA6Eyv6J4tGcG1IyA.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36FAE49/A7AE1658BFDE11F080720F79DAE4EC9C/MjlPmgUImlFA6Eyv6J4tGcG1IyA.mft
Manifest number:          2C
Signing time:             Mon 08 Dec 2025 05:20:26 +0000
Manifest this update:     Mon 08 Dec 2025 05:20:25 +0000
Manifest next update:     Wed 10 Dec 2025 05:20:25 +0000
Files and hashes:         1: MjlPmgUImlFA6Eyv6J4tGcG1IyA.crl (hash: lBV5nM9/0Rca5HMlOGuno7PiC9bHaBAPckawSdS64JQ=)
                          2: 1A11F9A6C43711F08C008AEFDAE4EC9C.roa (hash: PrDHrRVwFxmq9wa+36gsz1hsGADjZsCN6pmTpGbWs7s=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36FAE49/A7AE1658BFDE11F080720F79DAE4EC9C/MjlPmgUImlFA6Eyv6J4tGcG1IyA.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36FAE49/A7AE1658BFDE11F080720F79DAE4EC9C/MjlPmgUImlFA6Eyv6J4tGcG1IyA.mft
                          rsync://rpki.afrinic.net/repository/afrinic/MjlPmgUImlFA6Eyv6J4tGcG1IyA.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 10 Dec 2025 00:06:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 51 (0x33)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36FAE49AF, serialNumber=32394F9A05089A5140E84CAFE89E2D19C1B52320
        Validity
            Not Before: Dec  8 05:20:25 2025 GMT
            Not After : Dec 10 05:20:25 2025 GMT
        Subject: CN=6936601a-a3ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:8f:50:de:d0:54:72:0d:db:72:e0:1e:7a:8b:
                    24:79:0b:d0:b6:bb:91:5b:14:09:27:59:48:30:12:
                    3d:df:22:6a:ae:f1:ac:a0:c9:c0:b8:9a:c4:82:c4:
                    e2:5f:ab:3f:df:cc:91:eb:3e:94:04:82:7c:6a:ac:
                    31:2b:be:e7:6f:42:9e:a0:57:a0:2e:63:8c:1e:91:
                    20:6f:2c:5a:61:4f:f5:19:aa:a0:ff:e6:fa:31:be:
                    ec:1d:9a:62:ad:0f:9e:86:1e:c7:31:01:2b:2c:09:
                    a5:59:b3:f6:c9:81:a0:75:f6:6b:35:0f:82:c1:07:
                    05:01:71:f6:72:d4:8a:35:2e:c8:d6:12:62:e4:a2:
                    8d:09:43:8c:5f:10:8f:60:63:ea:a2:75:68:db:e9:
                    ea:24:f6:ec:5d:23:b8:60:9d:47:b9:a2:7c:fa:ae:
                    48:8c:5d:49:94:58:c4:23:bf:15:9b:ab:8d:f7:bd:
                    71:26:28:e9:11:d0:ee:14:fb:7c:bd:96:e3:07:61:
                    2b:58:ee:35:57:21:b9:af:c8:b1:9d:52:55:97:ce:
                    28:d4:b4:c0:aa:11:17:de:85:77:21:ec:d2:27:53:
                    9f:93:5f:44:49:b1:c8:1a:26:e2:a5:c9:ef:52:56:
                    ef:dd:c2:0a:19:5b:4e:86:d7:3d:4a:d9:29:84:a1:
                    77:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:FF:78:56:A3:8B:79:38:DB:CF:0D:B7:7B:42:FE:45:64:57:AA:68
            X509v3 Authority Key Identifier:
                keyid:32:39:4F:9A:05:08:9A:51:40:E8:4C:AF:E8:9E:2D:19:C1:B5:23:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36FAE49/A7AE1658BFDE11F080720F79DAE4EC9C/MjlPmgUImlFA6Eyv6J4tGcG1IyA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/MjlPmgUImlFA6Eyv6J4tGcG1IyA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FAE49/A7AE1658BFDE11F080720F79DAE4EC9C/MjlPmgUImlFA6Eyv6J4tGcG1IyA.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:2d:fb:97:f9:c1:31:f7:3c:47:0e:be:b9:0f:4f:e5:5c:66:
         3e:a2:77:42:ab:fc:74:cb:7c:89:5e:70:1b:e7:e4:57:f4:5f:
         8c:d7:6d:a2:3e:18:f5:6e:33:c5:e0:d4:f8:9b:6b:e9:76:41:
         a9:22:43:76:fa:b6:38:97:2f:9e:b6:80:d5:58:32:db:e0:0e:
         2d:c0:f5:15:86:a7:fb:6b:24:e7:f1:1b:e3:e9:73:7a:bc:94:
         f9:5c:c5:72:4e:81:ea:a6:8b:ba:63:03:8a:17:41:65:b7:cb:
         18:99:78:02:02:a9:21:8c:b3:97:95:26:8d:5d:c9:db:7c:75:
         88:be:fc:d8:f2:91:8f:98:b2:ea:a0:e3:40:67:eb:dc:c5:06:
         16:57:16:12:69:84:47:ba:e4:ac:6c:74:d8:f6:f5:38:5f:cc:
         b5:1c:d9:78:41:74:65:31:2f:1d:30:2a:cc:e5:85:47:e6:dc:
         e1:8b:e4:3f:65:3f:11:93:c1:bb:a8:1c:8d:5a:5c:f9:2e:5d:
         b3:8d:25:5d:ef:06:f7:17:e2:03:26:04:07:35:30:3d:77:eb:
         bb:09:07:7a:79:1d:a5:19:1f:44:eb:00:b7:8a:bf:f6:4b:59:
         0b:dd:1a:7e:c4:da:3d:a1:9a:a7:c4:4a:7b:69:d8:09:b0:01:
         0e:5d:8a:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 8 17:16:32 2025 by rpki-client