This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A0CB0/182F4984C21811EB994E4271F8AEA228/4QUiVzRX-tnLWm9cGdaMzm1unCM.mft
File:                     4QUiVzRX-tnLWm9cGdaMzm1unCM.mft (raw, json)
Hash identifier:          DMONAw08o6WMlJWLu5jHaV9gBo13Te+UCaLOHJf2s+U=
Subject key identifier:   C0:D2:30:9A:E1:68:0E:CF:01:38:9B:16:A3:FB:21:F7:95:46:EB:1B
Authority key identifier: E1:05:22:57:34:57:FA:D9:CB:5A:6F:5C:19:D6:8C:CE:6D:6E:9C:23
Certificate issuer:       /CN=F36A0CB0AF/serialNumber=E10522573457FAD9CB5A6F5C19D68CCE6D6E9C23
Certificate serial:       06C9
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/4QUiVzRX-tnLWm9cGdaMzm1unCM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A0CB0/182F4984C21811EB994E4271F8AEA228/4QUiVzRX-tnLWm9cGdaMzm1unCM.mft
Manifest number:          06C2
Signing time:             Thu 25 Dec 2025 02:11:42 +0000
Manifest this update:     Thu 25 Dec 2025 02:11:41 +0000
Manifest next update:     Sat 27 Dec 2025 02:11:41 +0000
Files and hashes:         1: 4QUiVzRX-tnLWm9cGdaMzm1unCM.crl (hash: DWks3Wt54ySK78kM0Iwm8rV0sDZ0xIeOlMdNj86Oewg=)
                          2: 4E070DD6D22711EE84901E62775412E6.roa (hash: BH/57g82jCGEW3Gi9zhi5zpe2WKpng1h5j7GySibBtY=)
                          3: 3824F918D4D911EBACDD633EF8AEA228.roa (hash: L3vH2zmIsjZ03q0URRZICrpO1MOA0mkvPARr/jfeppg=)
                          4: 970F1E641FEA11EE99947F624AD9E6FC.roa (hash: 0Kn857c5JBdTYzWFmA6vGDiE64UxZrMNDZC0t8mHU/g=)
                          5: EED2265022E811EDAF592A9AF1222468.roa (hash: y2XN76mWZxn5ruFQMI5ZgWhqdKjQY5mD0t+GE/wohCs=)
                          6: 6BE29F76D4D911EB8763AE3EF8AEA228.roa (hash: X6fENjfD/CbaGp5w9cKC1jdpjMT1u+e4NgCmYHUQ1mc=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A0CB0/182F4984C21811EB994E4271F8AEA228/4QUiVzRX-tnLWm9cGdaMzm1unCM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A0CB0/182F4984C21811EB994E4271F8AEA228/4QUiVzRX-tnLWm9cGdaMzm1unCM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/4QUiVzRX-tnLWm9cGdaMzm1unCM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 27 Dec 2025 00:06:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1737 (0x6c9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A0CB0AF, serialNumber=E10522573457FAD9CB5A6F5C19D68CCE6D6E9C23
        Validity
            Not Before: Dec 25 02:11:41 2025 GMT
            Not After : Dec 27 02:11:41 2025 GMT
        Subject: CN=694c9d5e-6045
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:00:13:58:ad:93:01:5a:1b:27:87:38:64:f6:
                    3c:54:eb:d4:df:54:00:52:c5:6d:54:55:92:5b:70:
                    33:70:c2:08:ff:c6:14:77:ec:7b:c6:c8:37:52:4d:
                    00:1f:79:45:58:c7:80:55:39:9d:1e:47:35:cb:a5:
                    67:89:c9:4f:ff:db:37:12:04:68:d1:f5:bb:ef:23:
                    2e:72:57:dc:4b:bb:1c:87:fd:64:6e:44:15:24:9f:
                    5e:91:62:0a:dd:f6:0d:9a:81:dc:11:a3:a6:6e:7f:
                    59:59:bb:dd:ea:95:6a:d4:6f:0b:92:4b:a4:c3:71:
                    21:9e:5e:c0:0c:ee:d0:90:97:e2:2a:7c:2f:13:ce:
                    23:3c:4f:f5:9d:56:be:59:6b:51:70:cb:c1:f6:e4:
                    84:90:1e:bf:fa:01:dc:d6:e8:13:31:32:89:50:87:
                    99:1f:98:5a:91:b8:ee:73:90:d0:85:d1:28:04:29:
                    d1:d2:2b:66:bc:41:90:41:98:7a:15:0c:18:97:bd:
                    c9:34:cf:76:98:6c:68:53:e2:7b:56:56:d2:f1:de:
                    7e:db:5e:ed:50:ec:78:70:bb:b7:2e:22:02:17:d1:
                    d7:b4:95:0c:c4:72:ca:3b:c2:cb:df:ad:70:82:e0:
                    c7:3d:bc:71:70:8b:b1:b3:f4:d2:ca:a6:24:c9:17:
                    39:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:D2:30:9A:E1:68:0E:CF:01:38:9B:16:A3:FB:21:F7:95:46:EB:1B
            X509v3 Authority Key Identifier:
                keyid:E1:05:22:57:34:57:FA:D9:CB:5A:6F:5C:19:D6:8C:CE:6D:6E:9C:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A0CB0/182F4984C21811EB994E4271F8AEA228/4QUiVzRX-tnLWm9cGdaMzm1unCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/4QUiVzRX-tnLWm9cGdaMzm1unCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A0CB0/182F4984C21811EB994E4271F8AEA228/4QUiVzRX-tnLWm9cGdaMzm1unCM.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:b7:ab:b5:7f:9d:64:73:ad:38:67:54:53:f9:e7:88:26:a4:
         71:1a:f4:e5:6c:b1:dd:e8:22:cb:52:61:bb:16:26:a5:90:67:
         e6:b1:0f:8a:c9:1f:c4:7f:a5:b6:b2:ee:98:18:11:d5:a3:56:
         08:6b:29:16:8f:80:3e:51:71:40:77:1c:10:6a:b7:49:a8:fa:
         db:7d:d9:e7:33:55:15:d2:48:14:d5:71:19:e5:f6:bf:23:45:
         45:06:7b:b5:25:f6:f2:e1:78:32:b9:e3:7d:f0:59:14:de:23:
         21:58:86:d0:51:1c:9f:f6:0a:d8:53:23:5f:b8:38:1c:57:7d:
         04:73:5d:2b:d5:d5:80:bb:ad:26:70:24:a4:f6:50:19:4b:88:
         55:3b:e4:08:1f:0e:4b:13:18:f0:fc:14:a3:8f:ac:52:24:b7:
         3e:e6:43:be:b3:f6:df:61:ea:3c:1c:31:96:f4:77:9d:af:36:
         62:68:2f:fd:ef:4c:10:dc:62:5b:12:15:72:82:08:0b:fe:d2:
         bd:e7:b8:be:ae:ab:f0:4e:ff:ca:3b:b4:6b:98:65:84:2c:99:
         91:d8:e5:bb:a5:ff:19:8a:fa:a0:db:62:ef:68:32:b5:0c:c7:
         c6:7e:fb:fa:e5:76:93:a7:58:f8:1c:ea:bc:6c:d3:ac:8f:27:
         cf:22:85:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 25 19:46:19 2025 by rpki-client