This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36598F5/A410D350DC0211EC99E36188F1222468/PUpO_QKaES64mqyOyp2RekfLbFw.mft
File:                     PUpO_QKaES64mqyOyp2RekfLbFw.mft (raw, json)
Hash identifier:          F06VkUuyaNdrNuiWzoxaCsTjLSY1vkiLNNdC14cfnAE=
Subject key identifier:   14:43:82:A1:CF:81:2F:13:08:09:B6:4E:CD:BE:0B:08:4D:13:71:0A
Authority key identifier: 3D:4A:4E:FD:02:9A:11:2E:B8:9A:AC:8E:CA:9D:91:7A:47:CB:6C:5C
Certificate issuer:       /CN=F36598F5AF/serialNumber=3D4A4EFD029A112EB89AAC8ECA9D917A47CB6C5C
Certificate serial:       0549
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/PUpO_QKaES64mqyOyp2RekfLbFw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36598F5/A410D350DC0211EC99E36188F1222468/PUpO_QKaES64mqyOyp2RekfLbFw.mft
Manifest number:          0546
Signing time:             Mon 22 Dec 2025 02:46:41 +0000
Manifest this update:     Mon 22 Dec 2025 02:46:41 +0000
Manifest next update:     Wed 24 Dec 2025 02:46:41 +0000
Files and hashes:         1: PUpO_QKaES64mqyOyp2RekfLbFw.crl (hash: 8Q47oLroTi5+sNA4ZE3PsfnkCRqV7Iebu8kHOT0YTXk=)
                          2: FDE0E02C1E4611EF94A680057DDC24C2.roa (hash: 1djty5fRWOAsejw0HL8rgxOF0W9HT4RaKUN6d3OwjTM=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36598F5/A410D350DC0211EC99E36188F1222468/PUpO_QKaES64mqyOyp2RekfLbFw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36598F5/A410D350DC0211EC99E36188F1222468/PUpO_QKaES64mqyOyp2RekfLbFw.mft
                          rsync://rpki.afrinic.net/repository/afrinic/PUpO_QKaES64mqyOyp2RekfLbFw.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 24 Dec 2025 00:06:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1353 (0x549)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36598F5AF, serialNumber=3D4A4EFD029A112EB89AAC8ECA9D917A47CB6C5C
        Validity
            Not Before: Dec 22 02:46:41 2025 GMT
            Not After : Dec 24 02:46:41 2025 GMT
        Subject: CN=6948b111-2e03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:7a:b1:2f:c3:cb:0b:58:fb:07:30:e0:37:03:
                    7e:f3:f0:a7:2b:b2:6b:59:ef:22:58:33:fe:9b:aa:
                    3b:b7:72:84:25:83:1d:ec:03:c8:63:37:3d:4c:b6:
                    94:0c:54:24:2e:6f:e2:56:75:22:ad:08:4e:1e:ad:
                    e6:1d:57:be:24:60:8c:88:23:aa:95:04:2c:df:89:
                    4e:09:86:9c:f9:ce:90:79:19:15:c2:2d:d6:b8:03:
                    9f:b9:95:c3:9c:25:31:45:51:b5:af:f8:b1:38:70:
                    c1:c4:bf:4b:3b:bd:33:ec:2d:4e:dd:1f:22:fc:bf:
                    b5:c2:54:31:45:8f:f3:b8:51:31:3f:17:ff:d7:99:
                    c1:91:21:60:b8:91:4a:52:df:2e:ae:03:df:b3:bc:
                    5c:08:7b:88:2f:8b:fe:d2:a3:6a:77:b3:4d:66:0b:
                    07:1c:ec:00:e6:4a:25:52:c1:ec:7d:fc:e7:26:a3:
                    c6:00:e5:7d:6c:d2:8e:e1:1a:38:14:c9:f2:43:cf:
                    b8:97:82:73:e2:63:35:65:f0:77:d3:e9:c2:81:dd:
                    81:7c:83:88:18:c8:0a:76:47:08:fd:e5:4f:19:84:
                    65:fa:2b:ea:7b:6b:a2:db:c9:12:24:3c:f0:33:c1:
                    ed:9f:bc:64:09:c0:b2:ca:ec:49:6c:87:e6:cd:ee:
                    ae:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:43:82:A1:CF:81:2F:13:08:09:B6:4E:CD:BE:0B:08:4D:13:71:0A
            X509v3 Authority Key Identifier:
                keyid:3D:4A:4E:FD:02:9A:11:2E:B8:9A:AC:8E:CA:9D:91:7A:47:CB:6C:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36598F5/A410D350DC0211EC99E36188F1222468/PUpO_QKaES64mqyOyp2RekfLbFw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/PUpO_QKaES64mqyOyp2RekfLbFw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36598F5/A410D350DC0211EC99E36188F1222468/PUpO_QKaES64mqyOyp2RekfLbFw.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:e0:8b:5c:14:05:5f:a1:94:46:91:d6:16:68:db:20:6b:49:
         a9:00:44:9c:17:8d:8e:24:88:16:af:f3:b3:16:da:bf:05:45:
         fe:c0:95:dc:b9:cf:9a:d6:52:ff:f4:fe:c4:7e:14:e8:16:14:
         30:b6:36:d1:1d:f4:c4:c3:f4:9a:eb:17:8f:32:1b:04:c3:b5:
         5f:f3:0f:51:37:ca:b5:a5:41:0c:4e:ca:f9:a9:12:47:a6:30:
         e9:8f:18:ca:61:e9:2f:c7:2e:27:0b:fd:0a:4a:fb:bc:98:65:
         39:c6:16:dd:8c:51:46:c6:a9:10:07:17:5a:33:36:50:40:47:
         3b:38:03:4b:30:1b:5b:a0:26:d3:35:9b:9c:dc:45:66:e3:08:
         4e:b0:e0:d5:71:ec:6e:53:96:e6:23:8e:98:86:b2:db:18:03:
         64:46:ba:73:17:79:2a:d1:16:7f:ee:b2:ab:9d:db:9c:9e:19:
         4f:02:f3:ac:5a:f6:9e:e8:a7:95:b9:fa:45:11:55:f4:3b:37:
         46:3d:f3:a5:4b:0a:1a:c9:38:3c:06:75:31:ca:1b:04:6e:b8:
         19:25:d4:4d:7c:a4:01:be:ef:74:86:b4:3b:a5:f9:6d:9e:0f:
         70:91:54:02:6b:55:e9:5e:83:ca:bb:87:5d:05:40:84:a6:63:
         13:c9:2b:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 10:04:33 2025 by rpki-client