This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36723E1/7E3FA3F0FA1911EDBE8EE4254AD9E6FC/0RDaMi-Zhc--woypzoUgREhmujc.mft
File:                     0RDaMi-Zhc--woypzoUgREhmujc.mft (raw, json)
Hash identifier:          jP4yMf7i/sehjUguk1jzagDraXlB47GrTMVmrf6N0IA=
Subject key identifier:   0A:5B:E0:AF:96:7D:FC:70:C5:B8:78:6E:5C:7D:42:01:D8:27:A4:2D
Authority key identifier: D1:10:DA:32:2F:99:85:CF:BE:C2:8C:A9:CE:85:20:44:48:66:BA:37
Certificate issuer:       /CN=F36723E1AF/serialNumber=D110DA322F9985CFBEC28CA9CE8520444866BA37
Certificate serial:       03DE
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/0RDaMi-Zhc--woypzoUgREhmujc.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36723E1/7E3FA3F0FA1911EDBE8EE4254AD9E6FC/0RDaMi-Zhc--woypzoUgREhmujc.mft
Manifest number:          03D6
Signing time:             Wed 24 Dec 2025 03:34:40 +0000
Manifest this update:     Wed 24 Dec 2025 03:34:39 +0000
Manifest next update:     Fri 26 Dec 2025 03:34:39 +0000
Files and hashes:         1: 0RDaMi-Zhc--woypzoUgREhmujc.crl (hash: N8VAS0BUarev1vmevPcyCan74dlRUd36Guvy0lnOxxE=)
                          2: BFFF93DCB91C11EEADB54E9A775412E6.roa (hash: sdzYfCyDwg/PUEGK3tXmINjr+Wb452fyHwxFLwrRQCs=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36723E1/7E3FA3F0FA1911EDBE8EE4254AD9E6FC/0RDaMi-Zhc--woypzoUgREhmujc.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36723E1/7E3FA3F0FA1911EDBE8EE4254AD9E6FC/0RDaMi-Zhc--woypzoUgREhmujc.mft
                          rsync://rpki.afrinic.net/repository/afrinic/0RDaMi-Zhc--woypzoUgREhmujc.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 26 Dec 2025 03:34:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 990 (0x3de)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36723E1AF, serialNumber=D110DA322F9985CFBEC28CA9CE8520444866BA37
        Validity
            Not Before: Dec 24 03:34:39 2025 GMT
            Not After : Dec 26 03:34:39 2025 GMT
        Subject: CN=694b5f4f-b747
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:d3:42:4f:63:39:d1:55:91:e2:60:70:da:db:
                    35:87:f9:ed:78:99:fa:b3:be:63:24:3f:0f:a7:5e:
                    86:2b:55:6b:db:b8:3f:88:d5:9d:d1:52:dc:2c:1b:
                    21:6a:6c:65:6b:0a:f7:02:9a:45:5b:ee:f1:1b:a8:
                    0a:07:8e:a9:ca:80:5b:e2:83:0c:d6:b5:48:08:94:
                    d1:9f:4d:82:ca:94:41:57:c9:a1:bb:f1:43:99:d8:
                    83:52:2b:16:de:55:b1:af:37:a2:6b:2f:64:1f:0c:
                    ca:4b:ec:9e:09:41:bf:c8:28:5b:0f:30:14:53:cc:
                    cf:e9:ba:e2:dd:bc:c7:8f:17:d5:1d:3d:82:7c:9d:
                    d2:f8:61:22:1d:d7:48:a7:d7:c2:95:03:71:5e:34:
                    d4:63:d5:b9:85:21:b7:ca:59:6d:b4:98:60:69:e4:
                    99:99:1d:b1:df:05:c0:e5:0f:44:97:95:ac:d2:3c:
                    0d:1a:37:ea:35:75:af:fd:6e:47:cd:7d:d6:ac:27:
                    ee:f1:df:39:a8:bd:e0:b8:35:74:6d:0f:cf:77:7f:
                    78:53:d2:32:6e:2c:71:21:ff:5b:f8:e2:09:f1:84:
                    5e:13:1f:e4:fb:f1:50:85:fc:33:3a:65:6f:ea:ea:
                    47:0c:2b:db:c6:8d:a5:16:fd:89:9b:b8:5b:f9:33:
                    a7:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:5B:E0:AF:96:7D:FC:70:C5:B8:78:6E:5C:7D:42:01:D8:27:A4:2D
            X509v3 Authority Key Identifier:
                keyid:D1:10:DA:32:2F:99:85:CF:BE:C2:8C:A9:CE:85:20:44:48:66:BA:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36723E1/7E3FA3F0FA1911EDBE8EE4254AD9E6FC/0RDaMi-Zhc--woypzoUgREhmujc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/0RDaMi-Zhc--woypzoUgREhmujc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36723E1/7E3FA3F0FA1911EDBE8EE4254AD9E6FC/0RDaMi-Zhc--woypzoUgREhmujc.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         cd:f2:75:04:94:9b:f0:e2:dc:9f:2d:d5:d0:be:6f:d4:cd:29:
         61:ee:69:9f:3d:3b:16:47:79:88:3c:d9:2b:c4:42:98:1c:35:
         d5:49:79:32:de:5a:01:95:78:8a:65:2a:4f:cf:97:81:3f:11:
         70:08:a7:ea:69:fb:bb:28:53:e4:6b:d6:c2:09:d8:15:db:ca:
         1a:64:b6:7d:f1:d5:f3:90:4e:41:9a:cd:f2:0a:1f:e0:28:82:
         df:be:0d:d7:b3:80:94:e9:10:ad:fd:91:fd:57:1f:5d:a9:09:
         e6:1f:ac:e6:90:f5:46:3c:c2:6a:46:25:ef:99:41:a4:a9:f4:
         84:25:fd:3c:2d:a8:44:d4:be:47:cf:b4:1a:74:ce:94:07:22:
         3c:be:85:85:aa:7b:3b:4b:87:2d:27:40:64:ad:57:db:04:57:
         6e:0e:27:16:c8:e1:05:0e:a7:3b:90:d7:24:5f:37:b7:d9:ef:
         53:0a:13:cc:d6:3e:3a:57:d6:a7:1c:d6:0f:00:d7:36:f2:e4:
         db:6f:c1:42:b5:47:85:40:91:7f:f2:f1:c6:30:bf:45:6b:8e:
         c3:1b:e2:d9:97:05:df:5b:92:41:89:a0:93:18:59:4c:96:06:
         69:a0:d8:d0:22:25:5b:66:d4:a1:ad:7b:6f:7d:a2:e3:7e:d8:
         c7:7f:8e:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 25 02:50:06 2025 by rpki-client