This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A9104/41D036ECF61811ECA84F46AEF1222468/GP3Ir1OHeAJYm-7e6BP2tibvgv4.mft
File:                     GP3Ir1OHeAJYm-7e6BP2tibvgv4.mft (raw, json)
Hash identifier:          sht0hnfvH/Ac9XYDpASmMtm+pBwS3v6QiLdygYt7mYw=
Subject key identifier:   0B:E0:5B:67:DE:B2:A7:DE:42:07:76:DC:57:3C:B5:53:C6:07:AD:72
Authority key identifier: 18:FD:C8:AF:53:87:78:02:58:9B:EE:DE:E8:13:F6:B6:26:EF:82:FE
Certificate issuer:       /CN=F36A9104AF/serialNumber=18FDC8AF53877802589BEEDEE813F6B626EF82FE
Certificate serial:       0538
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/GP3Ir1OHeAJYm-7e6BP2tibvgv4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A9104/41D036ECF61811ECA84F46AEF1222468/GP3Ir1OHeAJYm-7e6BP2tibvgv4.mft
Manifest number:          0531
Signing time:             Wed 31 Dec 2025 02:51:45 +0000
Manifest this update:     Wed 31 Dec 2025 02:51:44 +0000
Manifest next update:     Fri 02 Jan 2026 02:51:44 +0000
Files and hashes:         1: GP3Ir1OHeAJYm-7e6BP2tibvgv4.crl (hash: LBytZMydNNn0Gj+/BEBi7QMOMAWXErTPkFC1SuYV+bs=)
                          2: C3B74EC82F1011F09BA573D8DAE4EC9C.roa (hash: De1WzwEpPZKq8ILtQhTT9NmJyj6jKrMY4SHBZFBEWUQ=)
                          3: 641B15C8F61811ECA46BC9AEF1222468.roa (hash: lmyyvzmxJhC+JbEIN1Aywg0+Vb+IK8y5pQ85m8/YB3s=)
                          4: DE6A96689BAF11ED872A3CE3F1222468.roa (hash: Azt6ehpluobbTkNPa//tv1URzUpC9mBdBjuIo2fSzCg=)
                          5: 7B865506F61811ECB0B004AFF1222468.roa (hash: PBFWsp55Byo8HpYgxxUbYwWMACFeIH4/XatY+LgkHMc=)
                          6: 18DBB0029BB011EDB3B1D3E3F1222468.roa (hash: y6T5QrNiBFE0Y9/1KUKFDLVD4S3WdtmmEEg8hWLjEb0=)
                          7: FD0720789BAF11EDA474A4E3F1222468.roa (hash: XwuRQifMxDzgCRmEHxL8Hh9MMbu+jBrnT6vSXd5rPc4=)
                          8: 355CB3D49BB011ED9DBA47E4F1222468.roa (hash: TYgeZaJhaBXGlUhHN9w35PJVWeP3Uv0WM9ubwoAhGOo=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A9104/41D036ECF61811ECA84F46AEF1222468/GP3Ir1OHeAJYm-7e6BP2tibvgv4.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A9104/41D036ECF61811ECA84F46AEF1222468/GP3Ir1OHeAJYm-7e6BP2tibvgv4.mft
                          rsync://rpki.afrinic.net/repository/afrinic/GP3Ir1OHeAJYm-7e6BP2tibvgv4.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 02 Jan 2026 00:06:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1336 (0x538)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A9104AF, serialNumber=18FDC8AF53877802589BEEDEE813F6B626EF82FE
        Validity
            Not Before: Dec 31 02:51:44 2025 GMT
            Not After : Jan  2 02:51:44 2026 GMT
        Subject: CN=69548fc1-0e69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:f3:f6:e1:e0:78:19:a6:42:59:96:a2:f0:96:
                    b3:9d:15:b8:ba:9f:56:40:c9:81:52:5a:b9:ec:5e:
                    b3:c8:2c:19:f0:2c:a3:a1:e4:56:cf:cf:a4:73:0d:
                    78:bc:67:04:5f:f4:41:97:02:bb:92:05:a8:f0:d9:
                    5c:f7:bb:a3:42:a3:b0:18:78:63:99:93:0b:76:41:
                    21:8d:fc:d9:01:07:00:13:7e:49:f0:e3:f0:a0:09:
                    8f:e7:37:40:b0:5a:04:ba:0e:8f:45:45:f7:e2:1f:
                    93:ff:a6:18:a6:a0:45:96:c6:b0:90:e0:07:c8:59:
                    5b:62:b7:11:4b:fb:51:89:1b:94:53:65:41:88:81:
                    d0:df:37:f9:c4:5c:b5:7d:cc:db:a6:09:7b:e2:39:
                    f0:06:d3:e8:e6:ea:dd:08:b6:ea:fc:75:e9:04:ea:
                    41:5c:7e:d3:2f:df:06:16:8a:bd:e0:b3:1e:80:2b:
                    9c:10:d1:43:dd:03:9b:51:03:bf:72:80:dc:4d:f0:
                    b0:5e:8d:f2:21:c0:92:89:74:48:69:b0:0a:96:e8:
                    47:0a:71:f4:56:27:b3:ce:3b:4e:61:cc:13:c8:d3:
                    94:07:64:bb:c7:7f:47:3c:bd:8b:d9:6d:bb:6c:51:
                    02:0f:b1:1f:65:a5:43:6c:a0:34:c3:40:54:1d:ae:
                    24:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:E0:5B:67:DE:B2:A7:DE:42:07:76:DC:57:3C:B5:53:C6:07:AD:72
            X509v3 Authority Key Identifier:
                keyid:18:FD:C8:AF:53:87:78:02:58:9B:EE:DE:E8:13:F6:B6:26:EF:82:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A9104/41D036ECF61811ECA84F46AEF1222468/GP3Ir1OHeAJYm-7e6BP2tibvgv4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/GP3Ir1OHeAJYm-7e6BP2tibvgv4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A9104/41D036ECF61811ECA84F46AEF1222468/GP3Ir1OHeAJYm-7e6BP2tibvgv4.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:06:28:af:e4:be:aa:8d:b8:66:2d:11:6f:b5:9d:12:88:d2:
         91:25:96:cd:a9:e4:a5:4b:64:53:c9:7b:ea:26:11:8e:c5:78:
         f9:3a:1d:0f:1f:e7:cd:54:ba:74:1d:b5:58:46:2a:e4:23:be:
         bb:6f:23:19:c7:67:ed:be:d8:0b:eb:4a:c1:ae:f7:28:f9:bf:
         19:3c:c2:30:50:ac:6d:5b:6a:67:90:5d:9a:d5:14:27:9e:58:
         4e:cf:9d:49:48:8a:93:39:b6:c1:ed:9b:a7:f3:5a:f3:55:ab:
         0c:71:77:93:75:f5:a5:ee:6a:94:70:8d:60:93:12:7c:10:95:
         26:77:20:61:af:99:dc:73:a6:de:e8:d9:56:e3:65:b6:1f:a3:
         5b:23:69:c7:05:9d:42:cc:52:d6:e0:04:86:1a:2a:74:0e:bb:
         d2:cb:fb:a7:dd:2e:50:bc:9d:b8:33:bc:26:10:bb:bd:2e:f8:
         6e:63:0b:6e:71:21:6f:8b:07:bb:c0:d1:c9:66:3a:5e:dc:f3:
         cf:e1:76:17:a3:b0:61:62:cc:2f:1d:bb:86:c8:72:d2:b7:8e:
         7c:c9:14:00:bc:a9:4f:c8:b5:50:67:50:dc:ad:15:6c:de:94:
         c5:4a:8a:06:61:e3:3b:12:81:91:80:6c:59:41:11:79:31:a4:
         2d:c0:59:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 31 23:28:11 2025 by rpki-client