This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36818C8/E820A7FCF9F211EBAC18522DD8A014CE/Ic9mCQ8NCPeTru46mq74zw9BMAs.mft
File:                     Ic9mCQ8NCPeTru46mq74zw9BMAs.mft (raw, json)
Hash identifier:          cswDvSWWdSXxV0XPiGAELgw7/uC4ggAY1NPO9hdEy9o=
Subject key identifier:   BB:A0:31:CF:58:83:B9:94:9E:07:A1:A5:25:69:1C:49:F8:5A:F1:6B
Authority key identifier: 21:CF:66:09:0F:0D:08:F7:93:AE:EE:3A:9A:AE:F8:CF:0F:41:30:0B
Certificate issuer:       /CN=F36818C8AF/serialNumber=21CF66090F0D08F793AEEE3A9AAEF8CF0F41300B
Certificate serial:       066E
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/Ic9mCQ8NCPeTru46mq74zw9BMAs.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36818C8/E820A7FCF9F211EBAC18522DD8A014CE/Ic9mCQ8NCPeTru46mq74zw9BMAs.mft
Manifest number:          066B
Signing time:             Wed 24 Dec 2025 02:18:37 +0000
Manifest this update:     Wed 24 Dec 2025 02:18:36 +0000
Manifest next update:     Fri 26 Dec 2025 02:18:36 +0000
Files and hashes:         1: Ic9mCQ8NCPeTru46mq74zw9BMAs.crl (hash: ro4X6FhDMU/J/62VFUvL206Q3dwbQ1l0ZWl6h0/wmC4=)
                          2: E0505504C53611F09BAB2BC1DAE4EC9C.roa (hash: quGCMeMgrGs/I61IGIUq5ARCX8eAFzJjwoxXSU6rXcg=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36818C8/E820A7FCF9F211EBAC18522DD8A014CE/Ic9mCQ8NCPeTru46mq74zw9BMAs.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36818C8/E820A7FCF9F211EBAC18522DD8A014CE/Ic9mCQ8NCPeTru46mq74zw9BMAs.mft
                          rsync://rpki.afrinic.net/repository/afrinic/Ic9mCQ8NCPeTru46mq74zw9BMAs.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 26 Dec 2025 02:18:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1646 (0x66e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36818C8AF, serialNumber=21CF66090F0D08F793AEEE3A9AAEF8CF0F41300B
        Validity
            Not Before: Dec 24 02:18:36 2025 GMT
            Not After : Dec 26 02:18:36 2025 GMT
        Subject: CN=694b4d7d-0984
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:9b:a4:36:d3:b9:43:cc:8d:89:0a:ee:6e:ca:
                    28:a3:a9:6a:7c:cf:68:fe:30:5f:48:d4:63:7f:27:
                    d6:b8:04:1d:2d:14:d5:3c:d2:cd:98:05:91:f8:5e:
                    12:9f:58:6e:06:12:26:4a:6b:40:ca:64:d1:ce:cf:
                    32:d2:f7:60:44:93:e7:c5:85:12:b9:17:80:91:10:
                    fc:fb:fe:65:9a:f4:3c:83:0a:72:92:29:f4:b1:57:
                    75:dc:28:33:09:ee:9f:81:13:0c:2d:af:10:eb:c6:
                    ea:6a:45:c5:ae:d8:21:9a:a5:61:ea:1d:00:00:16:
                    35:30:e7:89:0f:b8:df:7a:11:a1:04:24:dc:10:aa:
                    b9:e0:6b:12:6a:e1:84:ad:5f:cd:5f:20:98:51:19:
                    31:27:3b:3d:2a:cf:8f:92:7a:d4:96:04:46:1d:f7:
                    4f:66:3d:71:55:31:31:6a:f3:98:55:af:8a:81:1e:
                    34:ea:11:a9:1e:13:97:70:32:04:80:e2:50:59:67:
                    b4:73:f7:52:6e:c0:04:95:38:09:f3:3b:20:90:c3:
                    ec:2f:90:16:6a:24:f0:5f:20:11:65:3d:12:61:37:
                    51:3a:24:7c:44:cd:68:47:56:6f:7e:73:c7:58:74:
                    ff:86:a1:73:9d:dd:f1:79:dc:ee:1c:af:fa:7d:9e:
                    6f:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:A0:31:CF:58:83:B9:94:9E:07:A1:A5:25:69:1C:49:F8:5A:F1:6B
            X509v3 Authority Key Identifier:
                keyid:21:CF:66:09:0F:0D:08:F7:93:AE:EE:3A:9A:AE:F8:CF:0F:41:30:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36818C8/E820A7FCF9F211EBAC18522DD8A014CE/Ic9mCQ8NCPeTru46mq74zw9BMAs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Ic9mCQ8NCPeTru46mq74zw9BMAs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36818C8/E820A7FCF9F211EBAC18522DD8A014CE/Ic9mCQ8NCPeTru46mq74zw9BMAs.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:46:40:a6:0d:a1:90:cc:8f:82:a6:cb:e8:40:4e:f7:64:fd:
         33:db:7d:f7:4a:4d:93:7a:5a:8d:5f:b5:6b:b5:a4:7a:a6:81:
         0b:92:24:10:0e:73:d0:be:5d:5a:8a:e1:28:6d:b9:e1:c3:69:
         16:55:1e:9c:d0:45:9d:02:ab:b2:43:3d:6a:2e:0f:c8:71:ec:
         94:c1:13:6a:08:9a:99:be:28:c1:e0:e0:8d:eb:9f:fd:4d:9f:
         66:96:2c:8e:30:0c:f7:88:5d:15:d8:52:00:5f:be:67:d3:55:
         b2:5b:06:b7:20:8f:22:49:79:e4:d3:0d:87:f2:fd:c5:87:34:
         15:d5:fb:c3:92:72:ea:87:d1:bf:1c:c4:e3:20:4b:d2:68:e3:
         57:3b:8a:8f:80:e8:8d:ed:72:76:dd:d1:bd:96:07:3e:da:62:
         43:e8:71:6d:4f:3f:1d:6f:ee:a9:bb:ff:ad:f4:e9:57:9d:22:
         3c:f8:2b:60:e6:0a:72:64:53:cc:f5:1e:7a:39:4d:12:94:49:
         b2:db:17:fd:6b:66:0e:96:67:ae:f6:6c:f2:dc:7b:d6:6a:5e:
         5b:c9:65:81:21:4e:ec:eb:ab:e2:f9:ef:b2:50:43:f6:d3:68:
         08:77:01:08:4c:cc:fc:6d:ea:2a:f9:86:33:26:7b:51:e2:08:
         a7:6f:8a:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 14:52:50 2025 by rpki-client