This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A2CD2/553F50F064E511E8968FEF2EF8AEA228/M1pTwRMuVAw6td9C8UiHszJN60Q.mft
File:                     M1pTwRMuVAw6td9C8UiHszJN60Q.mft (raw, json)
Hash identifier:          Pm1RM8IeXZXLpHv+tLfSkheG55Rhjt2B4vPEmJeRBjg=
Subject key identifier:   E6:A5:09:8C:C7:A8:19:FB:C8:52:55:2E:3B:34:E8:12:E7:81:2B:3C
Authority key identifier: 33:5A:53:C1:13:2E:54:0C:3A:B5:DF:42:F1:48:87:B3:32:4D:EB:44
Certificate issuer:       /CN=F36A2CD2AF/serialNumber=335A53C1132E540C3AB5DF42F14887B3324DEB44
Certificate serial:       0B15
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/M1pTwRMuVAw6td9C8UiHszJN60Q.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A2CD2/553F50F064E511E8968FEF2EF8AEA228/M1pTwRMuVAw6td9C8UiHszJN60Q.mft
Manifest number:          0B12
Signing time:             Thu 25 Dec 2025 01:11:34 +0000
Manifest this update:     Thu 25 Dec 2025 01:11:33 +0000
Manifest next update:     Sat 27 Dec 2025 01:11:33 +0000
Files and hashes:         1: M1pTwRMuVAw6td9C8UiHszJN60Q.crl (hash: 02LaDfto8wzz9+LuiUjXkRPLNxV3NlI72rGerK8gKwA=)
                          2: BE11892264E511E88A76232FF8AEA228.roa (hash: dOR90EcGn41sg/4MsNNizB3oHEFvm4Z1e3qb8Nhf7Q0=)
                          3: D8C2BDE0D02211EA8498CC41F8AEA228.roa (hash: I2gZAkM/7aE0lRi9sq+Qnq3RN4IGql/esMqczFTNr+A=)
                          4: FF05885C64E511E899B3422FF8AEA228.roa (hash: SEgUfNXNKuWS5w5moDpD2nIXtoeuFn9n8YpzM5ve1qs=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A2CD2/553F50F064E511E8968FEF2EF8AEA228/M1pTwRMuVAw6td9C8UiHszJN60Q.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A2CD2/553F50F064E511E8968FEF2EF8AEA228/M1pTwRMuVAw6td9C8UiHszJN60Q.mft
                          rsync://rpki.afrinic.net/repository/afrinic/M1pTwRMuVAw6td9C8UiHszJN60Q.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 27 Dec 2025 00:06:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2837 (0xb15)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A2CD2AF, serialNumber=335A53C1132E540C3AB5DF42F14887B3324DEB44
        Validity
            Not Before: Dec 25 01:11:33 2025 GMT
            Not After : Dec 27 01:11:33 2025 GMT
        Subject: CN=694c8f46-c5e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:9f:46:b3:69:63:e2:8d:01:a0:c5:5d:46:ca:
                    87:5a:36:ec:5a:0b:8f:a9:04:63:4f:45:4d:53:39:
                    b0:65:db:dc:6a:d3:79:99:ac:d2:5d:23:de:0f:9e:
                    45:91:4d:f8:9e:ab:db:fd:db:18:1b:7a:38:2e:b3:
                    d2:99:2e:9d:9c:19:a3:c3:c8:e1:2f:8a:8b:e5:ed:
                    46:23:4c:93:43:ea:f8:3b:bb:c2:41:78:2b:65:e8:
                    b8:40:48:27:de:db:3f:d9:48:bb:94:66:c2:1b:c7:
                    91:8b:99:3d:bb:6a:a6:04:f7:ca:9d:9c:7b:1d:57:
                    6c:5b:e9:92:af:85:f9:09:8c:ba:0f:d7:ab:60:6f:
                    92:a0:c0:93:0c:e2:88:d8:c9:6d:fc:97:df:38:22:
                    17:e1:22:4e:a0:1a:66:89:0b:c9:c2:e8:1f:45:9b:
                    5a:b3:30:31:f4:fb:02:f7:85:ee:f8:67:3e:3e:4d:
                    c6:29:b4:67:97:a1:26:78:f9:6a:5a:05:76:f1:91:
                    e9:01:ab:8a:81:e2:e0:b8:a1:69:85:9a:da:27:55:
                    1b:1d:e1:3b:3f:4b:f0:d5:dd:47:02:b7:87:03:4f:
                    da:f1:87:98:91:3b:65:df:ff:16:86:91:74:5b:f8:
                    1c:39:da:05:f5:c0:71:e4:5b:b4:3c:ef:22:ff:3c:
                    96:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:A5:09:8C:C7:A8:19:FB:C8:52:55:2E:3B:34:E8:12:E7:81:2B:3C
            X509v3 Authority Key Identifier:
                keyid:33:5A:53:C1:13:2E:54:0C:3A:B5:DF:42:F1:48:87:B3:32:4D:EB:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A2CD2/553F50F064E511E8968FEF2EF8AEA228/M1pTwRMuVAw6td9C8UiHszJN60Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/M1pTwRMuVAw6td9C8UiHszJN60Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A2CD2/553F50F064E511E8968FEF2EF8AEA228/M1pTwRMuVAw6td9C8UiHszJN60Q.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:ff:dc:bf:ad:cf:de:ad:8f:61:7a:ce:78:73:db:2a:8f:77:
         be:35:9a:cc:c3:e3:29:22:88:2f:3b:a3:d8:42:3a:6d:f0:df:
         67:f2:68:47:e1:e7:4e:53:d0:de:60:18:a9:c7:79:48:9a:ef:
         c0:fd:98:20:84:a8:f7:20:56:d2:34:a0:82:3f:11:46:e4:df:
         b7:fb:ea:82:ee:3f:c0:be:4a:83:78:05:ba:17:4d:3d:e1:c5:
         a2:29:4e:ec:43:98:b0:f3:76:d9:e6:b1:52:a5:c0:ad:0b:99:
         39:f0:ce:a4:62:d7:e5:f0:e0:c0:51:41:27:fa:f0:11:fb:0d:
         e2:b3:4c:66:f0:ec:c9:18:e0:58:a5:a2:6a:06:20:12:91:79:
         86:e4:e5:7d:2b:33:e1:bb:18:24:34:ec:34:5c:b9:63:a7:b3:
         25:bb:e6:18:ec:15:ec:c1:a9:07:e1:b9:05:08:e2:d6:e5:72:
         b3:50:7c:e4:23:83:36:ac:e3:fb:ff:c3:db:f6:df:64:4c:9f:
         ef:9a:f2:3c:d0:c6:c0:43:c5:16:0c:cf:1d:a9:22:dc:28:1d:
         23:40:63:4c:48:a2:b0:6c:2a:4b:b2:56:44:85:42:c6:a8:e1:
         b5:cf:ff:47:4c:76:f1:dd:f7:8d:0e:79:cb:58:45:2b:a2:2e:
         7c:b8:97:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 25 05:31:51 2025 by rpki-client