This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36B9B8F/84E1F6DC440411EFA393C656762E951A/f5DbGDX56nljonlPXDJUNY30PvQ.mft
File:                     f5DbGDX56nljonlPXDJUNY30PvQ.mft (raw, json)
Hash identifier:          aXPB1uvYHx/rUn1GXacv+XO/7X8pCqEdl0JBuIWpBo0=
Subject key identifier:   2A:10:F8:28:33:76:98:3E:6E:00:34:EB:52:AA:70:A5:F5:EA:79:41
Authority key identifier: 7F:90:DB:18:35:F9:EA:79:63:A2:79:4F:5C:32:54:35:8D:F4:3E:F4
Certificate issuer:       /CN=F36B9B8FAF/serialNumber=7F90DB1835F9EA7963A2794F5C3254358DF43EF4
Certificate serial:       0224
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/f5DbGDX56nljonlPXDJUNY30PvQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36B9B8F/84E1F6DC440411EFA393C656762E951A/f5DbGDX56nljonlPXDJUNY30PvQ.mft
Manifest number:          0223
Signing time:             Wed 31 Dec 2025 04:25:35 +0000
Manifest this update:     Wed 31 Dec 2025 04:25:35 +0000
Manifest next update:     Fri 02 Jan 2026 04:25:35 +0000
Files and hashes:         1: f5DbGDX56nljonlPXDJUNY30PvQ.crl (hash: xTFJpRdaOh5CNFE8hvgZSLN6iV8HwAfbfhJ3D9WNmFo=)
                          2: 7921BA68440811EFB7E56F6E762E951A.roa (hash: OFKWVelsleyjCktlWeukpXxjLHKBpGPL6o0/dWVRFWo=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36B9B8F/84E1F6DC440411EFA393C656762E951A/f5DbGDX56nljonlPXDJUNY30PvQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36B9B8F/84E1F6DC440411EFA393C656762E951A/f5DbGDX56nljonlPXDJUNY30PvQ.mft
                          rsync://rpki.afrinic.net/repository/afrinic/f5DbGDX56nljonlPXDJUNY30PvQ.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 02 Jan 2026 00:06:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 548 (0x224)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36B9B8FAF, serialNumber=7F90DB1835F9EA7963A2794F5C3254358DF43EF4
        Validity
            Not Before: Dec 31 04:25:35 2025 GMT
            Not After : Jan  2 04:25:35 2026 GMT
        Subject: CN=6954a5bf-f7c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:f7:42:82:17:d1:83:75:7c:57:28:bc:47:7a:
                    c7:08:a6:dd:7b:fe:d6:1d:74:cf:c2:71:19:ff:22:
                    d9:f2:6c:93:11:b7:2c:91:e2:fa:84:05:62:73:a1:
                    86:03:58:ed:a5:db:b7:ee:03:ba:00:67:88:bc:93:
                    e9:f5:3e:66:33:49:4e:4f:40:06:aa:2a:4d:ca:99:
                    e0:e9:90:1d:52:69:db:b4:09:50:d0:46:97:da:85:
                    3a:25:e2:66:19:83:8f:a8:e9:1d:f5:03:61:5c:ce:
                    b6:5a:a7:ba:8b:66:48:64:4c:6e:fa:bb:bb:64:64:
                    14:aa:ec:2e:39:ab:28:40:55:a9:15:13:6d:84:54:
                    85:55:1a:54:dd:0b:da:01:28:fe:3f:4e:0e:ab:d4:
                    b4:fd:30:9a:5b:ec:01:8e:9e:1f:39:21:a1:e1:41:
                    3d:fe:ba:c2:92:12:82:ff:be:06:fa:11:cd:0d:22:
                    f0:c2:84:11:ba:7e:c3:e8:1c:d2:28:63:56:6f:2e:
                    de:a5:c6:02:de:45:0b:49:55:2f:88:2b:70:46:f1:
                    6d:6a:7b:a5:cd:36:a9:da:3d:e9:4a:85:41:aa:24:
                    b1:06:92:c4:08:84:11:99:35:23:27:d3:8b:94:06:
                    12:65:bf:6d:cb:15:d7:ed:19:af:7a:78:04:80:38:
                    9a:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:10:F8:28:33:76:98:3E:6E:00:34:EB:52:AA:70:A5:F5:EA:79:41
            X509v3 Authority Key Identifier:
                keyid:7F:90:DB:18:35:F9:EA:79:63:A2:79:4F:5C:32:54:35:8D:F4:3E:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36B9B8F/84E1F6DC440411EFA393C656762E951A/f5DbGDX56nljonlPXDJUNY30PvQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/f5DbGDX56nljonlPXDJUNY30PvQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B9B8F/84E1F6DC440411EFA393C656762E951A/f5DbGDX56nljonlPXDJUNY30PvQ.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:10:ea:c8:c1:f7:79:7b:95:09:45:47:bd:e2:3c:2c:a7:d6:
         de:ee:a8:02:3f:4f:93:e4:5a:0a:f3:b3:07:a8:19:21:6d:03:
         69:2a:6f:1f:c1:95:1d:f1:1e:20:ef:de:99:cd:92:c1:62:79:
         7f:e2:a0:ec:d3:e0:15:27:16:ad:59:43:20:a8:f8:82:ae:67:
         2b:29:a1:08:33:08:0a:68:60:fa:15:fc:b9:de:87:94:14:51:
         42:c1:c6:f1:ba:33:fe:ae:a3:a6:b9:3e:f4:d4:91:77:7d:3b:
         94:62:64:be:4f:ae:a4:81:25:a9:d0:09:05:66:42:78:5b:3e:
         5d:b6:af:f1:54:a0:18:6d:93:82:a8:b5:c5:9c:a5:84:53:e6:
         ba:af:dc:31:ec:6c:ba:eb:1d:79:9d:e4:20:13:0f:ae:d4:25:
         fb:01:de:d5:6b:7c:ac:50:91:35:79:72:e0:7c:bb:53:4b:8d:
         46:ab:a5:ee:f3:39:0c:95:86:85:98:12:d0:8d:5c:0a:46:17:
         07:ba:17:98:ec:bd:1d:14:9c:17:cb:53:43:60:1a:35:45:66:
         d7:15:09:ff:25:45:d2:2e:a6:8d:66:27:32:3a:79:1e:34:64:
         be:e6:c4:ec:3d:4f:4e:ae:2b:bf:a7:84:6a:57:ca:c5:cf:6d:
         bc:01:db:f1
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICAiQwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QjlCOEZBRjExMC8GA1UEBRMoN0Y5MERCMTgzNUY5RUE3OTYzQTI3OTRGNUMzMjU0
MzU4REY0M0VGNDAeFw0yNTEyMzEwNDI1MzVaFw0yNjAxMDIwNDI1MzVaMBgxFjAU
BgNVBAMTDTY5NTRhNWJmLWY3YzMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDj90KCF9GDdXxXKLxHescIpt17/tYddM/CcRn/ItnybJMRtyyR4vqEBWJz
oYYDWO2l27fuA7oAZ4i8k+n1PmYzSU5PQAaqKk3KmeDpkB1Sadu0CVDQRpfahTol
4mYZg4+o6R31A2FczrZap7qLZkhkTG76u7tkZBSq7C45qyhAVakVE22EVIVVGlTd
C9oBKP4/Tg6r1LT9MJpb7AGOnh85IaHhQT3+usKSEoL/vgb6Ec0NIvDChBG6fsPo
HNIoY1ZvLt6lxgLeRQtJVS+IK3BG8W1qe6XNNqnaPelKhUGqJLEGksQIhBGZNSMn
04uUBhJlv23LFdftGa96eASAOJpjAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUKhD4
KDN2mD5uADTrUqpwpfXqeUEwHwYDVR0jBBgwFoAUf5DbGDX56nljonlPXDJUNY30
PvQwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkI5QjhGLzg0RTFGNkRDNDQwNDExRUZBMzkzQzY1Njc2MkU5NTFBL2Y1RGJH
RFg1Nm5sam9ubFBYREpVTlkzMFB2US5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2Y1RGJHRFg1Nm5sam9ubFBYREpVTlkzMFB2US5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2QjlCOEYvODRFMUY2REM0NDA0MTFFRkEzOTNDNjU2NzYy
RTk1MUEvZjVEYkdEWDU2bmxqb25sUFhESlVOWTMwUHZRLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBaEOrIwfd5e5UJRUe94jwsp9be7qgC
P0+T5FoK87MHqBkhbQNpKm8fwZUd8R4g796ZzZLBYnl/4qDs0+AVJxatWUMgqPiC
rmcrKaEIMwgKaGD6Ffy53oeUFFFCwcbxujP+rqOmuT701JF3fTuUYmS+T66kgSWp
0AkFZkJ4Wz5dtq/xVKAYbZOCqLXFnKWEU+a6r9wx7Gy66x15neQgEw+u1CX7Ad7V
a3ysUJE1eXLgfLtTS41Gq6Xu8zkMlYaFmBLQjVwKRhcHuheY7L0dFJwXy1NDYBo1
RWbXFQn/JUXSLqaNZicyOnkeNGS+5sTsPU9Oriu/p4RqV8rFz228Advx
-----END CERTIFICATE-----
Generated at Wed Dec 31 21:12:14 2025 by rpki-client