This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A6EA0/59C558DED0F511F0AE204785DAE4EC9C/5OfkzwUGmYE4HGusKKJrtmmU0rc.mft
File:                     5OfkzwUGmYE4HGusKKJrtmmU0rc.mft (raw, json)
Hash identifier:          W8P+8z0k+cIXZQwIjoaAKBSdV5r3YhUXAXEGMJnEkc8=
Subject key identifier:   F3:A1:7B:6D:DD:A2:AA:94:78:69:16:98:25:41:5A:6E:0A:00:5A:F3
Authority key identifier: E4:E7:E4:CF:05:06:99:81:38:1C:6B:AC:28:A2:6B:B6:69:94:D2:B7
Certificate issuer:       /CN=F36A6EA0AF/serialNumber=E4E7E4CF05069981381C6BAC28A26BB66994D2B7
Certificate serial:       1C
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/5OfkzwUGmYE4HGusKKJrtmmU0rc.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A6EA0/59C558DED0F511F0AE204785DAE4EC9C/5OfkzwUGmYE4HGusKKJrtmmU0rc.mft
Manifest number:          16
Signing time:             Fri 19 Dec 2025 05:23:39 +0000
Manifest this update:     Fri 19 Dec 2025 05:23:38 +0000
Manifest next update:     Sun 21 Dec 2025 05:23:38 +0000
Files and hashes:         1: 5OfkzwUGmYE4HGusKKJrtmmU0rc.crl (hash: AVCz6p6V0dCd/hqNpFzsJbka/P3NWABFf26ap1N/DSQ=)
                          2: F36F0F1AD0F611F0AB30B88FDAE4EC9C.roa (hash: dNGgCtw24nbAR58DF8sv0Wym3VwzJDfok0oC2N1xwvc=)
                          3: 2FFDE81CD34E11F0B7F1C9BADAE4EC9C.roa (hash: lmKBgc8wIXpN7ohFi3bEsVy0HhEMQZg8umYWi7PtY/0=)
                          4: 1811E4B2D34C11F0A34F27AEDAE4EC9C.roa (hash: 5J5kKxxmT3AitlgzrzKNAptdmk4cbkC8tOUOxsnY+GM=)
                          5: AFCDD206D34D11F0ADCD4EB7DAE4EC9C.roa (hash: Wushw/sA+miTMHcjq5BUALTuvax/UDlZ5uswbKq6gbc=)
                          6: B82C1EEAD34C11F0A0F487B0DAE4EC9C.roa (hash: EGArG9brFI7oxboTdJn16N3Dn9tsiL6qA8X8WNsrRI0=)
                          7: 216C2206D34D11F081CE2AB4DAE4EC9C.roa (hash: wmcnwC3N1n68tZ025Jzu1Yi8vDKdizTOQUqWDI3JT4g=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A6EA0/59C558DED0F511F0AE204785DAE4EC9C/5OfkzwUGmYE4HGusKKJrtmmU0rc.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A6EA0/59C558DED0F511F0AE204785DAE4EC9C/5OfkzwUGmYE4HGusKKJrtmmU0rc.mft
                          rsync://rpki.afrinic.net/repository/afrinic/5OfkzwUGmYE4HGusKKJrtmmU0rc.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 21 Dec 2025 00:06:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 28 (0x1c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A6EA0AF, serialNumber=E4E7E4CF05069981381C6BAC28A26BB66994D2B7
        Validity
            Not Before: Dec 19 05:23:38 2025 GMT
            Not After : Dec 21 05:23:38 2025 GMT
        Subject: CN=6944e15a-bc6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:b0:0f:e7:0c:0e:15:28:3f:1b:4b:8e:e8:68:
                    68:e0:b5:f6:88:2e:f1:31:14:79:19:11:eb:b1:83:
                    79:a9:ab:ad:a9:3e:0d:92:f6:e4:de:b6:47:39:dd:
                    a1:f7:8b:b0:d9:54:35:6e:4b:ba:62:65:85:9d:ed:
                    04:fb:8b:10:02:c1:2a:66:8f:f8:5b:3f:0f:b0:6f:
                    fd:c1:05:57:eb:e5:61:e7:fa:d9:f3:74:fa:c5:50:
                    01:65:a1:85:eb:f4:02:c6:5e:9c:f2:4e:e5:be:e5:
                    7d:97:45:26:81:d1:16:3d:62:68:12:39:f3:31:39:
                    e1:6f:8e:2c:e5:29:bf:63:c0:de:4f:5b:ec:83:00:
                    bc:ce:9d:b5:92:e5:53:09:bc:9f:83:ad:c0:e5:12:
                    f8:72:e4:fd:27:cc:b4:b2:da:28:f9:bc:c4:92:4e:
                    93:6b:40:a6:10:22:21:63:7a:b2:70:f2:4f:e6:da:
                    bf:6f:66:4e:42:fb:62:0d:0b:6b:42:b7:e8:4c:59:
                    bb:77:92:3e:08:20:8c:dc:2b:b1:ec:b6:38:78:29:
                    f6:41:af:2d:88:4f:f7:11:34:e2:84:b8:4d:08:44:
                    4b:b8:85:15:01:58:3a:09:4c:3b:3b:ea:f6:36:25:
                    8d:3c:44:b0:b5:e7:fd:39:d7:89:65:f2:33:23:b7:
                    d9:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:A1:7B:6D:DD:A2:AA:94:78:69:16:98:25:41:5A:6E:0A:00:5A:F3
            X509v3 Authority Key Identifier:
                keyid:E4:E7:E4:CF:05:06:99:81:38:1C:6B:AC:28:A2:6B:B6:69:94:D2:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A6EA0/59C558DED0F511F0AE204785DAE4EC9C/5OfkzwUGmYE4HGusKKJrtmmU0rc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/5OfkzwUGmYE4HGusKKJrtmmU0rc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A6EA0/59C558DED0F511F0AE204785DAE4EC9C/5OfkzwUGmYE4HGusKKJrtmmU0rc.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:e6:9f:60:e7:bf:99:91:c6:32:6f:00:03:c9:29:a6:82:db:
         51:0e:54:65:e6:f3:9c:84:b9:ee:fb:00:65:53:b2:ac:c5:38:
         2a:db:a0:42:e7:b3:9d:ec:64:23:db:4c:4b:82:7b:6e:1c:5a:
         35:3c:9c:6b:42:fe:cc:52:37:1a:ea:b5:43:e5:19:ec:75:fc:
         82:71:8b:18:4b:0b:8b:6e:1f:ac:17:7d:76:51:88:4a:5c:58:
         59:5d:22:51:89:cf:91:1e:b4:0c:ad:b3:bf:7a:c0:81:49:00:
         1d:ad:9d:a6:52:fe:79:60:66:60:80:e8:04:0d:ca:d6:41:64:
         09:f8:b2:1d:74:b4:7a:a5:98:88:cc:0e:39:c1:eb:49:e6:d5:
         97:5b:b8:f3:0f:7a:36:8d:b8:58:77:ec:3c:60:d6:ee:b6:5f:
         65:c0:31:90:eb:48:76:16:a6:35:fb:a8:24:d8:79:d8:25:61:
         15:21:1f:d4:ab:15:13:e4:92:21:e3:c1:99:f1:a3:fc:4d:3c:
         45:c6:a4:dd:c1:7f:52:e0:f3:65:44:91:d9:a2:0b:a3:56:c5:
         6e:d4:a0:42:fd:9a:e0:0c:17:66:77:fa:99:a5:a6:2d:e4:e7:
         72:34:83:fb:1d:df:de:df:88:82:05:cf:f7:df:6e:36:93:cc:
         ac:d8:dc:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 01:04:15 2025 by rpki-client