This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36B1BD7/6E7BF640E54911EF87332F61762E951A/_fBwBNUH4xafjwTMLtjgu_Sq38Y.mft
File:                     _fBwBNUH4xafjwTMLtjgu_Sq38Y.mft (raw, json)
Hash identifier:          T2iRrlOkaXmh77DT3+WNgLxGtNSMO1/PJ+LkLsyumSk=
Subject key identifier:   A0:A5:33:49:B6:ED:AE:56:18:AB:C1:F3:9B:59:0D:7C:0D:F2:94:EC
Authority key identifier: FD:F0:70:04:D5:07:E3:16:9F:8F:04:CC:2E:D8:E0:BB:F4:AA:DF:C6
Certificate issuer:       /CN=F36B1BD7AF/serialNumber=FDF07004D507E3169F8F04CC2ED8E0BBF4AADFC6
Certificate serial:       014C
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/_fBwBNUH4xafjwTMLtjgu_Sq38Y.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36B1BD7/6E7BF640E54911EF87332F61762E951A/_fBwBNUH4xafjwTMLtjgu_Sq38Y.mft
Manifest number:          0149
Signing time:             Tue 23 Dec 2025 04:50:50 +0000
Manifest this update:     Tue 23 Dec 2025 04:50:49 +0000
Manifest next update:     Thu 25 Dec 2025 04:50:49 +0000
Files and hashes:         1: _fBwBNUH4xafjwTMLtjgu_Sq38Y.crl (hash: 5B111FGnT9n4MAaVOp/+YCHVfmLlAr34+sAeaK4WC20=)
                          2: 58A4F560E54E11EF908E0F81762E951A.roa (hash: RGKTeSXUz+Sp60GwrTqbGbFazRAHGX0bbtXYfxY2Mws=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36B1BD7/6E7BF640E54911EF87332F61762E951A/_fBwBNUH4xafjwTMLtjgu_Sq38Y.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36B1BD7/6E7BF640E54911EF87332F61762E951A/_fBwBNUH4xafjwTMLtjgu_Sq38Y.mft
                          rsync://rpki.afrinic.net/repository/afrinic/_fBwBNUH4xafjwTMLtjgu_Sq38Y.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 25 Dec 2025 04:50:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 332 (0x14c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36B1BD7AF, serialNumber=FDF07004D507E3169F8F04CC2ED8E0BBF4AADFC6
        Validity
            Not Before: Dec 23 04:50:49 2025 GMT
            Not After : Dec 25 04:50:49 2025 GMT
        Subject: CN=694a1faa-282a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:6b:81:d8:bf:c4:23:27:31:81:1b:25:65:18:
                    1a:8a:44:94:bf:73:c1:8f:3a:fa:1a:fa:9f:09:b5:
                    15:ae:0a:77:1e:0c:62:fa:f9:ca:97:9a:d3:b3:83:
                    2f:74:35:ef:40:9d:27:fc:ef:ad:3f:a9:d0:db:4b:
                    0f:28:e2:d0:bb:d7:a5:d4:61:55:12:e8:c5:2f:32:
                    bb:21:3f:18:68:86:7c:1e:2f:c0:6d:a9:d9:70:6e:
                    ef:20:ad:6c:9c:e1:4d:fe:b9:df:ec:4b:eb:dc:2c:
                    e5:94:74:c1:e1:25:4d:c1:4b:da:34:32:a0:2c:65:
                    84:b9:f6:91:dc:a7:58:47:c4:8b:fa:75:c5:d9:28:
                    d7:ec:0e:ec:bd:ca:ab:f3:55:4a:08:ba:fe:2a:43:
                    4a:f2:cd:49:96:c6:93:85:71:63:a1:db:84:ef:b9:
                    0a:7e:ab:e7:ba:f4:35:2e:1a:f6:92:82:c3:f1:1e:
                    89:9d:13:d7:9b:fa:97:67:f0:49:0e:97:50:a0:c4:
                    29:14:12:d7:0a:b4:2f:e8:43:9c:1b:2f:28:96:62:
                    95:7b:48:fd:18:a2:4e:2a:7e:06:61:06:18:11:51:
                    af:3e:5e:a7:c6:d6:7b:36:c8:76:3f:6f:62:cc:5f:
                    3a:3f:16:ab:d7:f1:2e:e3:ae:b8:a4:f5:0a:5c:88:
                    64:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:A5:33:49:B6:ED:AE:56:18:AB:C1:F3:9B:59:0D:7C:0D:F2:94:EC
            X509v3 Authority Key Identifier:
                keyid:FD:F0:70:04:D5:07:E3:16:9F:8F:04:CC:2E:D8:E0:BB:F4:AA:DF:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36B1BD7/6E7BF640E54911EF87332F61762E951A/_fBwBNUH4xafjwTMLtjgu_Sq38Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/_fBwBNUH4xafjwTMLtjgu_Sq38Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B1BD7/6E7BF640E54911EF87332F61762E951A/_fBwBNUH4xafjwTMLtjgu_Sq38Y.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:34:ad:d0:33:e1:a1:92:9f:05:91:50:fd:33:93:1f:bd:14:
         b4:ca:ca:57:73:38:58:47:35:5c:e2:ae:84:b4:0a:7d:5f:01:
         63:58:f4:62:59:db:a8:a8:5c:d4:32:f9:97:ed:0c:1f:38:fb:
         98:13:5d:0e:ae:2f:fd:d3:13:10:54:b4:49:f9:bf:ab:29:25:
         2b:92:16:36:39:63:09:db:a2:e1:da:d4:d2:08:46:e8:79:91:
         64:ab:31:a8:d0:fd:ef:50:4d:97:42:6e:9f:80:eb:b9:39:6c:
         f9:ad:bd:5c:2e:c6:8c:53:90:63:7d:d6:5c:b4:83:fd:7a:b4:
         25:ca:c1:f3:37:bc:d9:24:45:ed:c3:ea:2b:aa:db:c1:e7:74:
         bf:38:33:13:7a:68:1c:42:85:4a:77:44:61:06:81:25:5a:27:
         38:a5:2e:1e:c1:e0:23:2d:9a:bc:c8:0a:4f:b4:96:9c:e6:0c:
         44:ec:4c:d2:84:be:29:d3:25:b4:69:af:18:bd:e3:58:68:05:
         af:0b:3a:27:12:5e:db:79:3b:17:bc:e1:c9:49:81:7f:c2:b5:
         29:d4:95:fc:84:20:1b:e1:4c:67:b8:46:cf:22:1a:df:4c:e1:
         92:42:bd:10:bd:c2:26:1e:71:91:4d:a5:7d:96:d1:2d:68:83:
         2d:b3:ee:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 10:51:14 2025 by rpki-client