This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36217DF/54BDBB24E93811EF998A6679762E951A/OE9qPQyKkcXy3zehH1p7nFJb7hY.mft
File:                     OE9qPQyKkcXy3zehH1p7nFJb7hY.mft (raw, json)
Hash identifier:          N0jnVVUzSfRWJ06ER1GMNDutr+IlHBzytwFah47vfbI=
Subject key identifier:   4A:52:25:97:24:B4:9E:61:08:16:45:15:49:37:4F:B0:8C:9F:73:7B
Authority key identifier: 38:4F:6A:3D:0C:8A:91:C5:F2:DF:37:A1:1F:5A:7B:9C:52:5B:EE:16
Certificate issuer:       /CN=F36217DFAF/serialNumber=384F6A3D0C8A91C5F2DF37A11F5A7B9C525BEE16
Certificate serial:       0144
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/OE9qPQyKkcXy3zehH1p7nFJb7hY.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36217DF/54BDBB24E93811EF998A6679762E951A/OE9qPQyKkcXy3zehH1p7nFJb7hY.mft
Manifest number:          0141
Signing time:             Sat 20 Dec 2025 04:52:32 +0000
Manifest this update:     Sat 20 Dec 2025 04:52:31 +0000
Manifest next update:     Mon 22 Dec 2025 04:52:31 +0000
Files and hashes:         1: OE9qPQyKkcXy3zehH1p7nFJb7hY.crl (hash: TooN66FU7qNeVHYAYl1prjvHd/R0VatZwGkYAISmn1g=)
                          2: 12C71FFA414211F08D0BA2A9DAE4EC9C.roa (hash: L0xlt1TQw2jjAYhdxTaR7ffVXvpBJOWHJHDBNeBUdlQ=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36217DF/54BDBB24E93811EF998A6679762E951A/OE9qPQyKkcXy3zehH1p7nFJb7hY.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36217DF/54BDBB24E93811EF998A6679762E951A/OE9qPQyKkcXy3zehH1p7nFJb7hY.mft
                          rsync://rpki.afrinic.net/repository/afrinic/OE9qPQyKkcXy3zehH1p7nFJb7hY.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 22 Dec 2025 00:06:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 324 (0x144)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36217DFAF, serialNumber=384F6A3D0C8A91C5F2DF37A11F5A7B9C525BEE16
        Validity
            Not Before: Dec 20 04:52:31 2025 GMT
            Not After : Dec 22 04:52:31 2025 GMT
        Subject: CN=69462b90-070f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:45:7b:d9:e0:51:3b:d2:d6:4c:44:02:6f:d8:
                    60:71:aa:da:7a:ef:09:c4:74:65:f7:16:8d:61:a0:
                    de:cc:8a:e9:7c:bf:21:3f:07:aa:97:7f:d1:7c:5f:
                    ef:cf:f8:32:5e:57:69:f0:2e:1c:99:2d:62:03:02:
                    24:75:e0:f8:ba:c9:73:e3:7b:c8:1d:2f:83:cf:4d:
                    52:0a:05:1e:fb:d9:6c:b5:f6:ff:03:3b:0a:ea:00:
                    ea:a5:4d:81:2c:fa:70:68:fe:49:a5:d1:16:14:c1:
                    98:e9:4a:e3:a8:bf:8a:11:32:3c:3d:8d:01:50:bd:
                    74:50:30:fc:9d:45:fb:0a:28:72:9b:04:35:f3:9e:
                    53:5e:0b:00:e4:00:97:74:bd:72:be:25:5b:6a:e2:
                    bf:25:e2:e8:38:e4:cc:d3:57:da:9b:5f:44:d4:76:
                    0f:ff:4c:1c:18:29:ae:64:a0:08:6b:1f:86:20:a3:
                    50:31:f4:e0:11:90:a5:fc:10:eb:ec:15:09:1c:1c:
                    eb:ec:ce:02:4f:80:b4:da:26:ea:90:85:c2:b6:0d:
                    9e:e7:ea:a3:65:aa:4b:d5:61:ba:88:74:a2:b9:ab:
                    28:71:68:8e:eb:5a:b4:e9:5e:8e:28:39:e1:fa:00:
                    6a:e8:d1:9a:18:4c:2d:63:6e:67:f3:86:9c:60:aa:
                    f1:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:52:25:97:24:B4:9E:61:08:16:45:15:49:37:4F:B0:8C:9F:73:7B
            X509v3 Authority Key Identifier:
                keyid:38:4F:6A:3D:0C:8A:91:C5:F2:DF:37:A1:1F:5A:7B:9C:52:5B:EE:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36217DF/54BDBB24E93811EF998A6679762E951A/OE9qPQyKkcXy3zehH1p7nFJb7hY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/OE9qPQyKkcXy3zehH1p7nFJb7hY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36217DF/54BDBB24E93811EF998A6679762E951A/OE9qPQyKkcXy3zehH1p7nFJb7hY.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:c9:8b:4a:de:23:f9:16:2f:a2:f5:41:79:2f:d2:90:c6:5d:
         9e:37:cd:92:ab:45:9f:dd:d0:f1:f4:d0:43:f9:71:c3:eb:f3:
         e5:db:03:b4:8e:fb:e7:f0:01:48:a3:e3:ed:68:84:31:1d:ec:
         c1:ea:e6:fa:2e:d9:1c:ae:da:65:f4:d1:75:24:31:40:1d:75:
         9b:95:b7:0e:78:e5:46:9d:c3:11:f3:f0:b6:5a:fe:07:6b:3a:
         dd:00:60:bd:d8:e5:10:02:39:b8:19:62:3c:7f:89:36:33:56:
         f1:c3:37:2e:26:32:2f:1a:64:54:e6:7c:91:9e:da:1e:3c:85:
         64:a2:e2:11:b7:cb:c8:84:ff:85:37:51:c3:41:18:61:f3:fc:
         98:4f:4a:11:e0:b4:1b:d8:bd:f1:cb:54:ad:dc:83:45:ed:b1:
         d6:31:33:7d:ff:06:b2:09:70:60:a8:6d:1a:47:3d:e1:e0:00:
         5d:2c:1e:1d:5f:88:a1:a0:b5:30:9a:fa:fc:3d:81:99:af:8d:
         b0:c0:96:d4:3e:7a:58:61:74:23:6d:9a:b6:28:b5:39:d3:ee:
         19:79:03:94:d0:28:ed:82:50:73:ca:48:2c:0e:9a:80:67:b3:
         05:fc:33:c4:47:91:7d:b0:66:4c:8f:d6:21:1c:f6:a6:29:9a:
         80:e7:60:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 00:30:55 2025 by rpki-client