This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36ADFB8/17B4B1A8E95D11EB87F37562D8A014CE/9oCEVKFPM27F0FtEVliFDrv9ZWU.mft
File:                     9oCEVKFPM27F0FtEVliFDrv9ZWU.mft (raw, json)
Hash identifier:          qISxG/cL+cdKdFTdp1E28/uwjIbPh8or507CfKSYQK0=
Subject key identifier:   6D:41:D9:2C:8B:D9:11:21:F9:60:E6:4C:02:EB:50:31:80:F3:D7:0C
Authority key identifier: F6:80:84:54:A1:4F:33:6E:C5:D0:5B:44:56:58:85:0E:BB:FD:65:65
Certificate issuer:       /CN=F36ADFB8AF/serialNumber=F6808454A14F336EC5D05B445658850EBBFD6565
Certificate serial:       0689
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/9oCEVKFPM27F0FtEVliFDrv9ZWU.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36ADFB8/17B4B1A8E95D11EB87F37562D8A014CE/9oCEVKFPM27F0FtEVliFDrv9ZWU.mft
Manifest number:          0687
Signing time:             Mon 29 Dec 2025 02:17:35 +0000
Manifest this update:     Mon 29 Dec 2025 02:17:34 +0000
Manifest next update:     Wed 31 Dec 2025 02:17:34 +0000
Files and hashes:         1: 9oCEVKFPM27F0FtEVliFDrv9ZWU.crl (hash: +A/jE87WvUo0DQrZJv+o8ughZAK0q+oydb0OP8UFokY=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36ADFB8/17B4B1A8E95D11EB87F37562D8A014CE/9oCEVKFPM27F0FtEVliFDrv9ZWU.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36ADFB8/17B4B1A8E95D11EB87F37562D8A014CE/9oCEVKFPM27F0FtEVliFDrv9ZWU.mft
                          rsync://rpki.afrinic.net/repository/afrinic/9oCEVKFPM27F0FtEVliFDrv9ZWU.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 31 Dec 2025 00:06:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1673 (0x689)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36ADFB8AF, serialNumber=F6808454A14F336EC5D05B445658850EBBFD6565
        Validity
            Not Before: Dec 29 02:17:34 2025 GMT
            Not After : Dec 31 02:17:34 2025 GMT
        Subject: CN=6951e4bf-5d22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:a9:ed:8e:dc:1d:8a:56:d4:03:4c:db:2e:12:
                    ae:0c:6c:80:d0:2e:5f:7c:cd:64:01:4d:4a:c2:57:
                    46:d3:09:8d:6b:b4:68:9f:03:7e:e1:af:e4:07:b2:
                    d2:1a:29:53:8e:c9:b7:87:81:05:b1:4c:a0:07:19:
                    1c:b3:47:42:83:48:76:f9:2c:6f:f4:80:39:85:2f:
                    6c:34:6e:95:c2:83:6c:93:9c:98:7c:ec:e8:6f:0f:
                    2e:c2:28:ae:d4:7c:06:6b:4a:45:f9:fd:fc:a2:6b:
                    45:e5:39:eb:0e:d6:7e:b6:07:69:9d:ac:3c:6e:95:
                    d0:48:41:2a:fc:8a:e1:e1:04:f9:1a:4d:fa:71:70:
                    bd:2c:a9:6d:60:cf:8c:02:90:e5:21:11:a5:c4:19:
                    17:34:64:58:0b:8a:83:bb:7c:67:de:73:0d:f1:5e:
                    5a:95:87:68:cf:47:85:ce:c4:98:c8:b2:4b:bf:72:
                    34:5b:28:cb:63:ec:fb:43:77:d2:a5:47:3f:51:6a:
                    56:15:6d:00:11:c5:c7:aa:c0:51:60:d7:ae:cf:aa:
                    cc:ee:fc:b9:61:8f:f3:0e:ac:7a:73:3a:49:28:08:
                    00:f3:6e:65:2f:b6:5d:e2:5f:9b:55:95:fd:d8:13:
                    0f:f6:8f:93:36:d4:78:af:f7:03:d2:3f:ed:8e:b1:
                    6f:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:41:D9:2C:8B:D9:11:21:F9:60:E6:4C:02:EB:50:31:80:F3:D7:0C
            X509v3 Authority Key Identifier:
                keyid:F6:80:84:54:A1:4F:33:6E:C5:D0:5B:44:56:58:85:0E:BB:FD:65:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36ADFB8/17B4B1A8E95D11EB87F37562D8A014CE/9oCEVKFPM27F0FtEVliFDrv9ZWU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/9oCEVKFPM27F0FtEVliFDrv9ZWU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36ADFB8/17B4B1A8E95D11EB87F37562D8A014CE/9oCEVKFPM27F0FtEVliFDrv9ZWU.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:e0:42:e0:d7:af:06:9a:b8:d1:2c:bf:d8:54:dd:b8:41:7b:
         94:22:57:de:7c:ae:f7:1e:42:2a:e0:9c:1a:ae:c1:80:dc:13:
         7f:55:2f:ad:76:10:86:da:a6:5b:09:07:14:e0:72:db:93:98:
         04:93:8b:a2:e6:98:3f:61:5b:59:10:99:95:1a:85:c1:c6:83:
         8e:e7:bf:6c:63:f3:d2:dc:50:5a:db:82:ae:32:65:2f:7e:af:
         b4:fd:81:c5:7f:33:67:b4:ee:8b:17:9c:40:6b:de:bd:e0:ae:
         80:78:4d:37:6e:f3:a8:a5:06:33:52:a4:52:e3:9d:83:26:aa:
         97:49:91:17:10:ad:4d:0e:ca:69:8e:b9:c7:91:39:0f:5c:66:
         c7:7a:eb:a5:e0:e0:f1:1e:1d:d2:0d:83:a1:5f:af:bb:36:bc:
         23:e9:64:d8:5a:c9:63:ce:89:57:ec:ac:80:f4:b4:94:8c:f4:
         f1:89:7c:ee:af:e2:9a:3d:2a:84:db:5b:69:eb:84:3b:82:d5:
         58:4b:80:70:a2:9a:59:db:8a:82:8b:87:84:a1:d1:92:b3:95:
         87:c6:87:f1:28:0c:ca:f2:cb:f6:08:6b:37:a4:d4:82:3e:03:
         a2:42:95:65:75:c7:2f:e2:48:6e:09:84:1e:d4:66:43:1e:01:
         f6:bf:4a:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 29 14:40:03 2025 by rpki-client