This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F361E99D/87DF1A466A0411EB9094717DF8AEA228/GNpoLB4-w0ZNOR2bcaW4UqbJtuM.mft
File:                     GNpoLB4-w0ZNOR2bcaW4UqbJtuM.mft (raw, json)
Hash identifier:          V2T85ILAcgdFk25x7DBVDKGD3lFY2wgqLr8G/zioAIU=
Subject key identifier:   AC:CA:B8:3F:6B:B0:E2:D3:D8:29:48:03:B7:AD:F4:11:E1:B4:9B:D6
Authority key identifier: 18:DA:68:2C:1E:3E:C3:46:4D:39:1D:9B:71:A5:B8:52:A6:C9:B6:E3
Certificate issuer:       /CN=F361E99DAF/serialNumber=18DA682C1E3EC3464D391D9B71A5B852A6C9B6E3
Certificate serial:       0720
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/GNpoLB4-w0ZNOR2bcaW4UqbJtuM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F361E99D/87DF1A466A0411EB9094717DF8AEA228/GNpoLB4-w0ZNOR2bcaW4UqbJtuM.mft
Manifest number:          071E
Signing time:             Fri 19 Dec 2025 02:01:36 +0000
Manifest this update:     Fri 19 Dec 2025 02:01:35 +0000
Manifest next update:     Sun 21 Dec 2025 02:01:35 +0000
Files and hashes:         1: GNpoLB4-w0ZNOR2bcaW4UqbJtuM.crl (hash: CrZSyGxiU84WQreBnJAwjLQNmWxl5xiHOYNXEYgnXM4=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F361E99D/87DF1A466A0411EB9094717DF8AEA228/GNpoLB4-w0ZNOR2bcaW4UqbJtuM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F361E99D/87DF1A466A0411EB9094717DF8AEA228/GNpoLB4-w0ZNOR2bcaW4UqbJtuM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/GNpoLB4-w0ZNOR2bcaW4UqbJtuM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 21 Dec 2025 00:06:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1824 (0x720)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F361E99DAF, serialNumber=18DA682C1E3EC3464D391D9B71A5B852A6C9B6E3
        Validity
            Not Before: Dec 19 02:01:35 2025 GMT
            Not After : Dec 21 02:01:35 2025 GMT
        Subject: CN=6944b200-1239
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:c4:9f:e3:08:c0:a2:8e:91:f9:e5:e3:ca:1e:
                    0c:c4:cf:3c:85:7c:4a:da:6d:82:69:53:23:9a:a3:
                    f3:ed:c2:37:9f:c4:17:0f:5b:c9:f8:c6:98:77:2c:
                    d7:47:f5:52:b4:fb:79:6a:62:79:b7:44:7d:c9:23:
                    c3:0c:1c:63:40:50:f9:09:1a:06:ef:3f:dc:ca:f9:
                    dd:f4:01:cf:b5:6c:7f:b3:13:e4:b2:d9:20:c5:f9:
                    c6:fc:56:36:7a:83:ab:41:94:b2:05:dc:2e:76:90:
                    b4:26:b2:23:69:9f:fe:ab:79:ee:0a:9e:9f:e9:45:
                    1c:fc:22:bd:d3:32:92:6a:ba:c8:47:0c:92:10:6e:
                    46:4b:f2:89:91:8f:d7:f0:55:26:5c:df:cb:f1:0f:
                    f6:8f:9f:2f:3f:b2:5f:2c:79:35:41:14:ed:96:84:
                    38:d8:6e:69:62:8c:8f:29:68:e7:e4:9d:95:4e:27:
                    99:21:a6:e4:ef:fb:15:35:8d:56:83:dd:e1:7e:ef:
                    6a:c7:4f:f2:f3:ea:dd:52:80:af:e9:7e:2d:79:b6:
                    e9:02:fa:fc:32:c6:09:62:7f:11:5c:17:02:64:1e:
                    54:50:7a:67:03:c5:f8:be:f7:c5:8b:85:bf:d9:e7:
                    7d:e2:1f:89:2c:90:77:d6:54:ca:a1:cc:2d:ba:48:
                    16:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:CA:B8:3F:6B:B0:E2:D3:D8:29:48:03:B7:AD:F4:11:E1:B4:9B:D6
            X509v3 Authority Key Identifier:
                keyid:18:DA:68:2C:1E:3E:C3:46:4D:39:1D:9B:71:A5:B8:52:A6:C9:B6:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F361E99D/87DF1A466A0411EB9094717DF8AEA228/GNpoLB4-w0ZNOR2bcaW4UqbJtuM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/GNpoLB4-w0ZNOR2bcaW4UqbJtuM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F361E99D/87DF1A466A0411EB9094717DF8AEA228/GNpoLB4-w0ZNOR2bcaW4UqbJtuM.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:b7:ce:38:98:6c:14:61:11:b9:75:6c:37:b9:a4:32:ce:15:
         79:81:bb:32:2b:43:cc:da:59:d6:d3:68:33:5f:f1:6b:f6:23:
         3a:67:7d:ad:9f:e5:69:bb:62:71:d3:bf:49:a4:08:a9:fd:54:
         a5:8f:74:e9:71:65:3f:e8:df:0a:1a:9f:d3:4a:19:05:32:96:
         2c:76:be:a6:90:02:f7:39:b0:b6:75:48:5b:ef:40:7e:5f:3b:
         8b:ab:2f:89:90:4e:59:4e:08:e7:c3:83:0e:52:c0:3a:68:26:
         95:5c:04:ed:e2:9d:77:89:39:37:ec:8f:2f:6c:33:65:46:e0:
         d3:2b:a9:12:86:c3:e4:fc:89:e7:bc:b5:15:69:e3:f4:87:25:
         5d:84:88:54:4d:ea:34:6a:e7:c4:32:9b:7c:96:40:b6:42:93:
         da:0f:02:ed:a0:76:4a:6e:13:fa:4a:e9:1b:bd:60:62:7c:eb:
         49:a4:52:b9:7d:d6:cc:fe:a5:7a:a7:25:fa:76:06:cb:d2:fc:
         92:c8:b1:56:b9:cf:e9:2c:68:f1:c9:67:25:85:44:1b:30:a4:
         6d:6b:a9:41:d1:7d:28:82:36:41:a5:fd:9b:65:64:4f:a9:86:
         07:b1:be:c4:51:d7:0d:32:69:c2:08:27:1a:39:0a:f1:af:c2:
         bc:ac:64:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 09:59:24 2025 by rpki-client