This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A7021/E503991C02C311EFBD1277F5007001B1/S0hmIAQIn1u2gZSrBLgwzUM6K3A.mft
File:                     S0hmIAQIn1u2gZSrBLgwzUM6K3A.mft (raw, json)
Hash identifier:          xsM796AFk5KLiC0PeNwq4mHe1Papr9rc1tDhcrUcYNw=
Subject key identifier:   C2:EA:EA:5D:A2:B9:3F:4B:EE:29:5A:9C:0C:B2:1B:88:CC:46:38:E6
Authority key identifier: 4B:48:66:20:04:08:9F:5B:B6:81:94:AB:04:B8:30:CD:43:3A:2B:70
Certificate issuer:       /CN=F36A7021AF/serialNumber=4B48662004089F5BB68194AB04B830CD433A2B70
Certificate serial:       0287
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/S0hmIAQIn1u2gZSrBLgwzUM6K3A.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A7021/E503991C02C311EFBD1277F5007001B1/S0hmIAQIn1u2gZSrBLgwzUM6K3A.mft
Manifest number:          027C
Signing time:             Wed 24 Dec 2025 04:19:19 +0000
Manifest this update:     Wed 24 Dec 2025 04:19:18 +0000
Manifest next update:     Fri 26 Dec 2025 04:19:18 +0000
Files and hashes:         1: S0hmIAQIn1u2gZSrBLgwzUM6K3A.crl (hash: 5duPrdJTv8E4Q67RPoeSxf+r3o3UNM6ZTyqa9YtcR+E=)
                          2: 13E45E1C0E8911EF82A4F35A017001B1.roa (hash: eSu/uNHefvRDyXuPd6bFN5AOugU7elsPo3xlxIjj8Jg=)
                          3: 8A38C304166411EFB6DD9865017001B1.roa (hash: BNl8LzAAIi2V4u4Uq6J4OERouFI7xdVKsG2qa+DYXuM=)
                          4: 5386CFDE0B8A11EF94113C6D017001B1.roa (hash: +ksSk336SAPxQuepQDqlYfI3yCwLjxok4/1qF910PT0=)
                          5: 67A273EE166411EFBD7C3965017001B1.roa (hash: XYlnou7kQfD138NpOpxfEa0ALGHIsAR97sWZnC83Ikk=)
                          6: 2342ECF6166411EF86A28464017001B1.roa (hash: LAeP18nBFk8e55lig13p1FU7erjKKZ2bUOy7MssyCfI=)
                          7: 10F75FE0166511EF9BA89F6A017001B1.roa (hash: tQ6IcNtYg4Q1dSfQDi4FIUeQKLa90qMyIm8jTAnmXuE=)
                          8: C37E4A0E166311EFB9A5E45F017001B1.roa (hash: Qp36Juuigfj3IghvTSmzrtpde3+TFB8XRGmUObCG6Jw=)
                          9: 258EC7AC02E911EF84DA781F017001B1.roa (hash: MKLHz01B1hcRnrm1BW8ZdbgoDIWCXXjJPB+3zMRkn5k=)
                          10: 45A131960E8911EFB58ADB5E017001B1.roa (hash: h14yox0jQvTPprZRCXkBDOwPFxmyJDOyS+ltHOkYJCY=)
                          11: ED324F4E166311EF80A74E60017001B1.roa (hash: yLMrRx31o9f3857chkGq2HGPGPmxnmeZmw24iYDHkdE=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A7021/E503991C02C311EFBD1277F5007001B1/S0hmIAQIn1u2gZSrBLgwzUM6K3A.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A7021/E503991C02C311EFBD1277F5007001B1/S0hmIAQIn1u2gZSrBLgwzUM6K3A.mft
                          rsync://rpki.afrinic.net/repository/afrinic/S0hmIAQIn1u2gZSrBLgwzUM6K3A.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 26 Dec 2025 04:19:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 647 (0x287)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A7021AF, serialNumber=4B48662004089F5BB68194AB04B830CD433A2B70
        Validity
            Not Before: Dec 24 04:19:18 2025 GMT
            Not After : Dec 26 04:19:18 2025 GMT
        Subject: CN=694b69c7-7210
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:dd:5e:4d:95:0a:c8:b5:2c:d2:2a:b0:ed:3f:
                    df:0f:60:5f:bc:12:57:15:d0:63:74:50:74:25:d3:
                    83:e2:21:e8:1c:73:1b:a2:b0:05:e2:b1:8e:1a:ea:
                    40:dd:3d:2c:36:1b:d3:bc:3b:eb:b2:67:95:4f:81:
                    36:73:d4:9d:cc:a0:b2:7d:e1:ee:c4:52:d8:28:ae:
                    97:8c:72:08:cf:16:02:b7:4d:42:fd:25:61:73:f8:
                    11:44:4f:ee:f3:fb:c1:f6:e2:f8:ad:4a:b2:01:73:
                    c0:74:f2:b9:97:41:c8:9f:36:01:75:bd:6a:e0:59:
                    ed:36:f0:2d:11:9d:1e:97:57:d0:d5:ce:f3:65:b0:
                    a1:83:3f:64:7c:9c:28:8c:dd:c1:25:77:b4:43:3b:
                    7e:b2:eb:38:99:0a:8b:2e:d6:20:d6:eb:14:85:26:
                    9a:27:6b:1c:c1:ce:7c:2f:27:fa:e2:d2:58:20:64:
                    01:21:df:b3:5b:ce:5b:18:a3:a0:5d:1e:79:d4:31:
                    a8:01:86:8d:da:52:52:63:49:59:8c:45:3d:ae:91:
                    a4:a8:25:79:87:76:c5:b6:13:9e:96:69:b2:b8:99:
                    e8:38:65:25:7d:26:a3:10:08:db:60:80:ae:b1:25:
                    8a:4c:5b:75:91:a0:bb:84:f6:18:0e:a3:42:01:76:
                    1d:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:EA:EA:5D:A2:B9:3F:4B:EE:29:5A:9C:0C:B2:1B:88:CC:46:38:E6
            X509v3 Authority Key Identifier:
                keyid:4B:48:66:20:04:08:9F:5B:B6:81:94:AB:04:B8:30:CD:43:3A:2B:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A7021/E503991C02C311EFBD1277F5007001B1/S0hmIAQIn1u2gZSrBLgwzUM6K3A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/S0hmIAQIn1u2gZSrBLgwzUM6K3A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A7021/E503991C02C311EFBD1277F5007001B1/S0hmIAQIn1u2gZSrBLgwzUM6K3A.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:2e:d3:a1:21:dc:d8:66:ea:f2:3b:8e:8c:6a:27:cb:3e:a9:
         aa:11:f8:1b:e2:49:ac:b0:73:96:a1:c9:17:eb:30:e1:43:54:
         ea:d3:c9:94:b2:92:21:0b:a7:8d:c6:52:13:e8:a6:19:8a:1f:
         ed:5a:f6:f8:d3:6b:ed:6c:d0:14:75:ab:36:1a:9d:ee:34:cd:
         5e:f6:97:43:50:2b:89:99:73:72:c0:dd:4b:fd:3d:a4:b6:e0:
         13:ba:8a:d9:c9:0b:e8:c5:ad:15:f8:cc:9d:1d:89:7e:b9:96:
         d5:20:7b:8a:41:23:32:59:44:06:29:fa:6c:7b:75:11:b8:ae:
         00:3f:23:7f:2f:22:f9:c9:74:48:38:bb:c4:81:4f:0a:15:60:
         25:91:82:a3:09:58:44:ba:94:a6:6d:75:dc:bd:6e:3d:51:f1:
         d7:c5:4d:3a:1d:8d:7a:3e:95:b9:56:09:5e:7b:24:59:87:dd:
         49:72:0e:61:eb:18:30:40:34:86:ac:65:62:8d:ee:d6:51:90:
         28:79:2d:23:6d:54:4a:8d:f4:c8:28:d2:0f:27:73:4b:3a:68:
         6f:57:f1:a1:82:ff:be:5b:b9:9d:2d:80:7a:71:7b:44:17:46:
         80:24:86:e6:c4:83:e2:10:87:4b:1c:78:3b:bd:70:7a:a5:7c:
         6b:ed:07:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 18:30:12 2025 by rpki-client