This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A3983/09B8183E9B9C11EFA012F94F762E951A/ih_PKB86N6VQ5kE32QhVCuiQIzo.mft
File:                     ih_PKB86N6VQ5kE32QhVCuiQIzo.mft (raw, json)
Hash identifier:          woECd36BwRRWpkPbyihlfJIg5jilfXTNtNBY6Oywfoc=
Subject key identifier:   42:7C:F7:07:0C:9F:27:79:69:91:2E:B2:5F:CA:68:5D:38:26:02:96
Authority key identifier: 8A:1F:CF:28:1F:3A:37:A5:50:E6:41:37:D9:08:55:0A:E8:90:23:3A
Certificate issuer:       /CN=F36A3983AF/serialNumber=8A1FCF281F3A37A550E64137D908550AE890233A
Certificate serial:       01AE
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/ih_PKB86N6VQ5kE32QhVCuiQIzo.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A3983/09B8183E9B9C11EFA012F94F762E951A/ih_PKB86N6VQ5kE32QhVCuiQIzo.mft
Manifest number:          01AD
Signing time:             Sat 27 Dec 2025 04:43:43 +0000
Manifest this update:     Sat 27 Dec 2025 04:43:43 +0000
Manifest next update:     Mon 29 Dec 2025 04:43:43 +0000
Files and hashes:         1: ih_PKB86N6VQ5kE32QhVCuiQIzo.crl (hash: kTgAG1ldbpIOUlAyp2ni2Vf0zyxK+tSpcK6BKlLW+YU=)
                          2: 06EE82A89B9E11EFA256DA5A762E951A.roa (hash: 2jh2P8eMrHu4GkQNFQFJgeOA87Bp3duiKWGcRIfCjWE=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A3983/09B8183E9B9C11EFA012F94F762E951A/ih_PKB86N6VQ5kE32QhVCuiQIzo.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A3983/09B8183E9B9C11EFA012F94F762E951A/ih_PKB86N6VQ5kE32QhVCuiQIzo.mft
                          rsync://rpki.afrinic.net/repository/afrinic/ih_PKB86N6VQ5kE32QhVCuiQIzo.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 29 Dec 2025 00:06:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 430 (0x1ae)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A3983AF, serialNumber=8A1FCF281F3A37A550E64137D908550AE890233A
        Validity
            Not Before: Dec 27 04:43:43 2025 GMT
            Not After : Dec 29 04:43:43 2025 GMT
        Subject: CN=694f63ff-9500
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:7c:04:de:dd:15:d2:56:da:77:80:f1:c9:05:
                    9d:7f:d7:09:92:f3:15:11:bc:8b:e7:0f:59:5f:e9:
                    ed:ec:a5:1d:18:05:19:94:fe:d8:ea:c2:ed:ca:29:
                    f0:ad:ff:55:4a:46:94:7d:08:5f:3c:60:85:47:c4:
                    78:b2:f6:dd:2c:7a:e5:55:c2:bf:95:2b:b8:fd:79:
                    16:6a:db:50:20:20:57:d0:16:1f:c6:c8:26:bc:41:
                    50:52:74:ac:cb:27:37:23:1f:34:22:08:b6:e7:6b:
                    5f:b7:db:85:26:a6:8f:71:09:7e:4b:11:85:50:4b:
                    49:51:58:85:23:09:f7:5a:93:db:d0:68:9e:93:79:
                    49:aa:e0:4e:b7:45:61:4a:ac:ce:73:e1:83:93:6d:
                    28:0d:8f:5f:fb:b6:dc:bc:88:3e:04:13:bb:a5:6c:
                    b0:3a:c5:10:0a:45:0e:f5:1b:69:11:9b:ff:60:5a:
                    4d:0b:6b:70:dd:4b:0c:95:0d:cc:01:c7:35:43:9c:
                    ea:72:08:34:95:ac:ec:b6:f6:bb:a7:17:77:ae:7f:
                    7c:ce:ea:40:f8:92:e1:cb:46:ec:03:da:22:8a:02:
                    21:64:c1:36:db:54:22:98:14:a1:ea:d3:b8:d5:00:
                    e4:4f:32:3b:ef:26:5d:29:e3:98:7c:da:47:34:a2:
                    bd:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:7C:F7:07:0C:9F:27:79:69:91:2E:B2:5F:CA:68:5D:38:26:02:96
            X509v3 Authority Key Identifier:
                keyid:8A:1F:CF:28:1F:3A:37:A5:50:E6:41:37:D9:08:55:0A:E8:90:23:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A3983/09B8183E9B9C11EFA012F94F762E951A/ih_PKB86N6VQ5kE32QhVCuiQIzo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/ih_PKB86N6VQ5kE32QhVCuiQIzo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A3983/09B8183E9B9C11EFA012F94F762E951A/ih_PKB86N6VQ5kE32QhVCuiQIzo.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:c0:ab:b4:93:f6:54:70:8e:bd:72:13:04:8e:4d:d8:6b:8d:
         49:c9:09:cd:8a:70:42:6b:e4:71:74:07:f0:96:f5:1c:4c:e8:
         4c:f0:7f:47:27:d1:7b:78:77:33:94:e7:29:ad:35:44:52:08:
         4c:6b:33:0a:4a:f9:23:71:04:15:67:82:a5:f7:19:ba:01:9a:
         1c:53:e4:fb:2e:ed:35:b5:d7:1b:18:dc:c6:5f:d7:b9:7d:13:
         18:8c:14:68:7b:97:a2:24:04:b3:24:e9:92:da:19:6f:49:eb:
         a1:e0:8c:d8:b1:16:cd:6a:d7:63:16:e0:4d:02:fd:bc:ee:5a:
         9f:a2:d3:b7:93:67:67:fc:85:6f:f0:eb:80:eb:ed:73:04:72:
         9e:2b:d2:81:d3:e4:fe:ad:4a:e3:50:7a:7c:86:ff:61:b6:63:
         e0:ca:84:99:fb:35:07:e2:c5:e6:00:52:57:fc:93:a3:a6:c1:
         b6:4b:a0:a9:ce:21:61:be:84:df:36:94:43:8a:02:9e:8e:55:
         4c:8e:b8:69:0d:ff:9c:c4:ed:84:c3:bc:6d:86:13:50:4a:ce:
         ec:91:4a:81:cd:21:d8:65:3c:99:a5:d5:a0:cf:43:5e:67:1b:
         49:26:d0:30:5f:8e:85:3b:21:aa:d3:b7:e2:f5:28:88:c4:2a:
         a7:f0:24:47
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICAa4wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QTM5ODNBRjExMC8GA1UEBRMoOEExRkNGMjgxRjNBMzdBNTUwRTY0MTM3RDkwODU1
MEFFODkwMjMzQTAeFw0yNTEyMjcwNDQzNDNaFw0yNTEyMjkwNDQzNDNaMBgxFjAU
BgNVBAMTDTY5NGY2M2ZmLTk1MDAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQD0fATe3RXSVtp3gPHJBZ1/1wmS8xURvIvnD1lf6e3spR0YBRmU/tjqwu3K
KfCt/1VKRpR9CF88YIVHxHiy9t0seuVVwr+VK7j9eRZq21AgIFfQFh/GyCa8QVBS
dKzLJzcjHzQiCLbna1+324Umpo9xCX5LEYVQS0lRWIUjCfdak9vQaJ6TeUmq4E63
RWFKrM5z4YOTbSgNj1/7tty8iD4EE7ulbLA6xRAKRQ71G2kRm/9gWk0La3DdSwyV
DcwBxzVDnOpyCDSVrOy29runF3euf3zO6kD4kuHLRuwD2iKKAiFkwTbbVCKYFKHq
07jVAORPMjvvJl0p45h82kc0or0dAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUQnz3
BwyfJ3lpkS6yX8poXTgmApYwHwYDVR0jBBgwFoAUih/PKB86N6VQ5kE32QhVCuiQ
IzowDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkEzOTgzLzA5QjgxODNFOUI5QzExRUZBMDEyRjk0Rjc2MkU5NTFBL2loX1BL
Qjg2TjZWUTVrRTMyUWhWQ3VpUUl6by5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2loX1BLQjg2TjZWUTVrRTMyUWhWQ3VpUUl6by5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2QTM5ODMvMDlCODE4M0U5QjlDMTFFRkEwMTJGOTRGNzYy
RTk1MUEvaWhfUEtCODZONlZRNWtFMzJRaFZDdWlRSXpvLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQB8wKu0k/ZUcI69chMEjk3Ya41JyQnN
inBCa+RxdAfwlvUcTOhM8H9HJ9F7eHczlOcprTVEUghMazMKSvkjcQQVZ4Kl9xm6
AZocU+T7Lu01tdcbGNzGX9e5fRMYjBRoe5eiJASzJOmS2hlvSeuh4IzYsRbNatdj
FuBNAv287lqfotO3k2dn/IVv8OuA6+1zBHKeK9KB0+T+rUrjUHp8hv9htmPgyoSZ
+zUH4sXmAFJX/JOjpsG2S6CpziFhvoTfNpRDigKejlVMjrhpDf+cxO2Ew7xthhNQ
Ss7skUqBzSHYZTyZpdWgz0NeZxtJJtAwX46FOyGq07fi9SiIxCqn8CRH
-----END CERTIFICATE-----
Generated at Sat Dec 27 11:01:10 2025 by rpki-client