This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36B52A6/6AE307B66FFD11E9A69CC134F8AEA228/Ga2syP-jkxMYpsdToKwbKukpXgM.mft
File:                     Ga2syP-jkxMYpsdToKwbKukpXgM.mft (raw, json)
Hash identifier:          0BMmhUO3EPdGCYvYT5Mg1FDM6Yb9OkP0EwMSkGaM3bk=
Subject key identifier:   22:E6:7F:43:17:35:A9:3D:8E:B0:E4:FB:A5:A7:F5:D2:75:69:62:AC
Authority key identifier: 19:AD:AC:C8:FF:A3:93:13:18:A6:C7:53:A0:AC:1B:2A:E9:29:5E:03
Certificate issuer:       /CN=F36B52A6AF/serialNumber=19ADACC8FFA3931318A6C753A0AC1B2AE9295E03
Certificate serial:       09CB
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/Ga2syP-jkxMYpsdToKwbKukpXgM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36B52A6/6AE307B66FFD11E9A69CC134F8AEA228/Ga2syP-jkxMYpsdToKwbKukpXgM.mft
Manifest number:          09C0
Signing time:             Sun 21 Dec 2025 01:18:05 +0000
Manifest this update:     Sun 21 Dec 2025 01:18:04 +0000
Manifest next update:     Tue 23 Dec 2025 01:18:04 +0000
Files and hashes:         1: Ga2syP-jkxMYpsdToKwbKukpXgM.crl (hash: pU7DlFCU3kfzipFh6ICgDeTAb/fUSxlJGZdGw2mxguo=)
                          2: 40F0EA0C864C11EF8B0D4162762E951A.roa (hash: 5nZTReAvtcbgPm+oRDhQ83p7XciRK3gVMtmCqG06N7Q=)
                          3: 19DBEAFC864C11EF91E74660762E951A.roa (hash: ssNbfh+xyxoJkv8ui9GVFM6RQk48tyv7Wmx8dqGtWao=)
                          4: 8F04BF5C864C11EF8F687464762E951A.roa (hash: MFVB+4npBxn/Yh83eigumhh31Iuk3EG7QH/ll1Qzce0=)
                          5: DF0FB1A6864B11EFAA421C60762E951A.roa (hash: wcCwWJ/0MHVkGO7m4+40u82BAL5x3asIQ+jyQE9ovPY=)
                          6: 325E4A4E864B11EF9931C05B762E951A.roa (hash: uilxINn6WdcvcjXq+Nwl5lpnynygHnR6cPspfvXc/m0=)
                          7: EB320A3E864511EF82F333B8762E951A.roa (hash: AOcstZS+3TqPjLs5Onnwkaac6jTexzGQCvTnjKOL0G4=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36B52A6/6AE307B66FFD11E9A69CC134F8AEA228/Ga2syP-jkxMYpsdToKwbKukpXgM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36B52A6/6AE307B66FFD11E9A69CC134F8AEA228/Ga2syP-jkxMYpsdToKwbKukpXgM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/Ga2syP-jkxMYpsdToKwbKukpXgM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 23 Dec 2025 01:18:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2507 (0x9cb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36B52A6AF, serialNumber=19ADACC8FFA3931318A6C753A0AC1B2AE9295E03
        Validity
            Not Before: Dec 21 01:18:04 2025 GMT
            Not After : Dec 23 01:18:04 2025 GMT
        Subject: CN=69474acd-9c98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:84:f5:62:b1:53:60:32:61:bb:15:0d:4c:c6:
                    88:56:e3:fe:4d:2a:76:44:1d:0b:47:4c:59:fb:79:
                    02:f5:dc:11:65:4f:96:95:3c:f7:20:50:ce:fb:6f:
                    35:f1:30:61:f8:fa:59:3e:a3:c7:e7:f2:83:2e:ad:
                    67:4d:4e:c0:41:54:05:03:7a:5c:69:55:69:bf:b3:
                    4d:42:1e:6f:d8:5d:24:05:52:54:04:a0:e6:c4:a2:
                    b2:6a:36:a2:9a:02:c7:8e:6d:0d:1b:6d:81:f5:d5:
                    bf:93:02:60:d7:41:57:64:17:01:3d:c8:7f:32:73:
                    f4:b3:23:4d:07:b7:9e:62:83:00:14:f1:81:93:f9:
                    27:e4:35:ff:4e:6b:d0:2b:f6:cf:29:1a:b4:bb:ea:
                    51:16:0a:14:5d:b7:3f:2d:c5:55:55:aa:a6:48:e9:
                    66:84:b6:94:72:9e:cc:5f:b0:e3:4e:50:b8:00:84:
                    b4:1a:83:29:8f:63:b7:67:ae:38:1b:66:d0:1c:9a:
                    1d:6c:57:14:c6:cb:ca:6d:84:ad:7a:b8:4a:83:d3:
                    33:61:18:62:ff:31:89:f6:d0:25:82:4f:01:85:cc:
                    3c:06:22:ae:b0:7a:1f:74:4b:c0:ba:c7:eb:ab:97:
                    48:f3:11:31:a6:2e:76:23:e6:b2:51:73:68:70:2a:
                    9d:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:E6:7F:43:17:35:A9:3D:8E:B0:E4:FB:A5:A7:F5:D2:75:69:62:AC
            X509v3 Authority Key Identifier:
                keyid:19:AD:AC:C8:FF:A3:93:13:18:A6:C7:53:A0:AC:1B:2A:E9:29:5E:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36B52A6/6AE307B66FFD11E9A69CC134F8AEA228/Ga2syP-jkxMYpsdToKwbKukpXgM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Ga2syP-jkxMYpsdToKwbKukpXgM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B52A6/6AE307B66FFD11E9A69CC134F8AEA228/Ga2syP-jkxMYpsdToKwbKukpXgM.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:eb:ab:4d:ce:a0:c9:2e:2e:40:ec:e4:45:34:34:5c:bc:ca:
         7c:40:33:40:3b:f3:0b:81:1b:a0:82:e9:a5:99:1c:af:0a:4a:
         d2:e8:0a:67:b9:4e:96:1a:eb:88:4d:78:88:22:5f:5a:86:72:
         28:ed:e2:ab:c4:94:d6:f4:62:82:91:1d:7d:34:b0:7b:d6:99:
         4c:e2:c1:51:d7:27:3f:b9:ae:ed:d4:5b:fb:52:84:db:1f:39:
         ce:21:4f:d9:47:28:57:f4:4d:6f:6e:88:37:c0:31:0c:68:d7:
         2c:f0:83:85:11:b7:32:6f:bd:27:5a:07:7f:d5:54:14:f7:93:
         29:3d:30:69:97:32:c2:79:05:71:0d:e9:90:85:62:a1:99:c3:
         0f:cb:af:49:5a:84:f9:2e:4d:8e:d5:61:92:e5:0e:e6:cd:dc:
         c5:39:6a:50:69:74:58:92:23:66:eb:9d:ba:9d:67:8c:d9:ad:
         76:8d:c9:a8:d4:4a:26:49:12:23:87:08:3d:c6:8f:26:dd:12:
         f8:35:1c:74:79:ed:12:2f:9d:78:50:eb:f4:ce:29:cb:5b:51:
         0b:fb:c2:1e:54:83:62:c1:bc:d8:8a:e1:2b:f0:25:40:bc:28:
         37:6f:66:1f:64:24:24:3d:e8:b0:9c:b7:5c:a2:a0:d6:23:07:
         4b:5e:38:8a
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICCcswDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QjUyQTZBRjExMC8GA1UEBRMoMTlBREFDQzhGRkEzOTMxMzE4QTZDNzUzQTBBQzFC
MkFFOTI5NUUwMzAeFw0yNTEyMjEwMTE4MDRaFw0yNTEyMjMwMTE4MDRaMBgxFjAU
BgNVBAMTDTY5NDc0YWNkLTljOTgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCzhPVisVNgMmG7FQ1MxohW4/5NKnZEHQtHTFn7eQL13BFlT5aVPPcgUM77
bzXxMGH4+lk+o8fn8oMurWdNTsBBVAUDelxpVWm/s01CHm/YXSQFUlQEoObEorJq
NqKaAseObQ0bbYH11b+TAmDXQVdkFwE9yH8yc/SzI00Ht55igwAU8YGT+SfkNf9O
a9Ar9s8pGrS76lEWChRdtz8txVVVqqZI6WaEtpRynsxfsONOULgAhLQagymPY7dn
rjgbZtAcmh1sVxTGy8pthK16uEqD0zNhGGL/MYn20CWCTwGFzDwGIq6weh90S8C6
x+url0jzETGmLnYj5rJRc2hwKp1FAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUIuZ/
Qxc1qT2OsOT7paf10nVpYqwwHwYDVR0jBBgwFoAUGa2syP+jkxMYpsdToKwbKukp
XgMwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkI1MkE2LzZBRTMwN0I2NkZGRDExRTlBNjlDQzEzNEY4QUVBMjI4L0dhMnN5
UC1qa3hNWXBzZFRvS3diS3VrcFhnTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0dhMnN5UC1qa3hNWXBzZFRvS3diS3VrcFhnTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2QjUyQTYvNkFFMzA3QjY2RkZEMTFFOUE2OUNDMTM0RjhB
RUEyMjgvR2Eyc3lQLWpreE1ZcHNkVG9Ld2JLdWtwWGdNLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBB66tNzqDJLi5A7ORFNDRcvMp8QDNA
O/MLgRuggumlmRyvCkrS6ApnuU6WGuuITXiIIl9ahnIo7eKrxJTW9GKCkR19NLB7
1plM4sFR1yc/ua7t1Fv7UoTbHznOIU/ZRyhX9E1vbog3wDEMaNcs8IOFEbcyb70n
Wgd/1VQU95MpPTBplzLCeQVxDemQhWKhmcMPy69JWoT5Lk2O1WGS5Q7mzdzFOWpQ
aXRYkiNm6526nWeM2a12jcmo1EomSRIjhwg9xo8m3RL4NRx0ee0SL514UOv0zinL
W1EL+8IeVINiwbzYiuEr8CVAvCg3b2YfZCQkPeiwnLdcoqDWIwdLXjiK
-----END CERTIFICATE-----
Generated at Sun Dec 21 17:04:51 2025 by rpki-client