This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36BC6CC/0F853534DD3811EFB2E4C477762E951A/MfeVAfcAxqZ2Yt4nthXuyDCxuHY.mft
File:                     MfeVAfcAxqZ2Yt4nthXuyDCxuHY.mft (raw, json)
Hash identifier:          7z5t+lQl2L6xGUbmwEBbHZiBOegci+Fz4KTL6PCyoEU=
Subject key identifier:   80:00:69:33:F8:EC:33:F2:DC:30:B4:69:19:F1:9A:BB:4A:BD:57:7C
Authority key identifier: 31:F7:95:01:F7:00:C6:A6:76:62:DE:27:B6:15:EE:C8:30:B1:B8:76
Certificate issuer:       /CN=F36BC6CCAF/serialNumber=31F79501F700C6A67662DE27B615EEC830B1B876
Certificate serial:       015B
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/MfeVAfcAxqZ2Yt4nthXuyDCxuHY.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36BC6CC/0F853534DD3811EFB2E4C477762E951A/MfeVAfcAxqZ2Yt4nthXuyDCxuHY.mft
Manifest number:          0157
Signing time:             Tue 23 Dec 2025 04:49:25 +0000
Manifest this update:     Tue 23 Dec 2025 04:49:24 +0000
Manifest next update:     Thu 25 Dec 2025 04:49:24 +0000
Files and hashes:         1: MfeVAfcAxqZ2Yt4nthXuyDCxuHY.crl (hash: jmlROX3XOM9idlTyDFU/2RKe74qgHhkDC3uyOuttbH8=)
                          2: DF18A1E640CF11F09299DFB6DAE4EC9C.roa (hash: ztjI0ZwpfaRw5ubRwQgZNSs1wBiMAXUEL6HQoRKIjlI=)
                          3: 981965A640C911F0AA7BC28FDAE4EC9C.roa (hash: /+6/RjZuNbqQtneE80fqEs+UIumXvOJpiE0MpFoYgdc=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36BC6CC/0F853534DD3811EFB2E4C477762E951A/MfeVAfcAxqZ2Yt4nthXuyDCxuHY.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36BC6CC/0F853534DD3811EFB2E4C477762E951A/MfeVAfcAxqZ2Yt4nthXuyDCxuHY.mft
                          rsync://rpki.afrinic.net/repository/afrinic/MfeVAfcAxqZ2Yt4nthXuyDCxuHY.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 25 Dec 2025 04:49:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 347 (0x15b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36BC6CCAF, serialNumber=31F79501F700C6A67662DE27B615EEC830B1B876
        Validity
            Not Before: Dec 23 04:49:24 2025 GMT
            Not After : Dec 25 04:49:24 2025 GMT
        Subject: CN=694a1f55-b512
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:70:37:8e:de:58:7b:4f:8d:87:77:63:70:45:
                    06:ee:65:12:da:ff:90:bf:a8:18:13:cd:2b:0f:c9:
                    3d:e4:e3:07:1a:fb:5c:ed:93:af:64:26:0d:5b:97:
                    ea:09:df:25:38:5a:69:c2:ec:59:4b:bb:26:f6:cb:
                    58:e1:7c:48:98:e1:ab:cc:04:49:18:5e:cf:e4:24:
                    4f:c9:6f:f2:3f:0e:ed:1d:fb:6d:8f:33:44:ea:22:
                    a8:94:0a:0b:c0:55:a3:81:94:93:c7:eb:1a:f9:ab:
                    41:12:f4:d0:f9:df:c0:9b:a5:52:b7:97:60:33:de:
                    09:07:bf:20:a6:ea:7e:05:ee:6f:2d:99:08:34:65:
                    4a:7a:63:a1:a7:72:c1:a5:eb:a7:e5:22:7d:73:c8:
                    2c:25:df:38:79:39:9b:a5:22:f1:d3:33:49:a2:91:
                    eb:b8:06:40:3d:50:c2:82:3b:93:66:30:d0:11:7c:
                    e4:68:85:4b:da:c9:ed:25:2f:fb:ab:6d:d4:ac:9f:
                    f8:18:04:92:e9:b8:f5:b8:74:89:e4:ff:de:40:84:
                    68:4b:93:42:29:03:69:d0:31:0d:0c:c7:4e:26:ff:
                    7a:69:cc:e4:ad:82:a5:43:60:fe:0c:a1:bd:98:7d:
                    f2:90:b1:48:08:9f:5a:51:5b:a7:5f:6c:26:5d:39:
                    15:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:00:69:33:F8:EC:33:F2:DC:30:B4:69:19:F1:9A:BB:4A:BD:57:7C
            X509v3 Authority Key Identifier:
                keyid:31:F7:95:01:F7:00:C6:A6:76:62:DE:27:B6:15:EE:C8:30:B1:B8:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36BC6CC/0F853534DD3811EFB2E4C477762E951A/MfeVAfcAxqZ2Yt4nthXuyDCxuHY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/MfeVAfcAxqZ2Yt4nthXuyDCxuHY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36BC6CC/0F853534DD3811EFB2E4C477762E951A/MfeVAfcAxqZ2Yt4nthXuyDCxuHY.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:f3:d3:18:a3:fd:29:d7:af:e1:2c:b2:4c:fc:29:94:ae:bd:
         fa:64:e0:3e:de:03:ea:33:3c:73:a7:f1:69:44:1e:ac:13:4f:
         f8:63:0f:13:2d:86:73:af:13:78:68:8b:c5:8d:f1:0d:df:61:
         d1:41:69:db:15:e7:e6:3a:c4:79:cf:da:71:73:58:6f:f0:f2:
         d1:8e:f3:07:bf:f7:8b:82:7c:ce:79:26:1d:5f:71:db:b3:f3:
         9b:eb:44:12:24:70:33:5e:8a:3e:cc:b8:bb:af:fc:97:d5:16:
         00:77:b0:26:9a:29:c1:98:3f:2a:62:32:d3:bf:c0:6d:63:2d:
         ff:7a:d8:d6:32:de:1b:ab:15:44:98:0d:f9:46:f8:88:1f:b4:
         f7:67:dd:3d:b7:f4:91:47:b1:30:ac:b2:a3:7a:50:3b:a3:a0:
         4f:eb:ba:42:ed:87:80:ef:95:11:8a:fb:8c:39:9f:4c:95:ee:
         1c:28:04:10:fd:34:f3:3a:8e:23:68:28:af:b5:86:13:88:81:
         8d:81:62:33:5a:b6:ba:e2:37:59:93:fe:79:ff:03:68:67:31:
         e6:61:b8:4d:6a:33:9e:f7:68:1e:b2:a8:81:2b:2d:7f:13:bb:
         d7:7a:36:21:b6:f7:dc:e4:50:63:6d:2a:50:a6:5a:dd:3b:79:
         23:38:37:e0
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICAVswDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QkM2Q0NBRjExMC8GA1UEBRMoMzFGNzk1MDFGNzAwQzZBNjc2NjJERTI3QjYxNUVF
QzgzMEIxQjg3NjAeFw0yNTEyMjMwNDQ5MjRaFw0yNTEyMjUwNDQ5MjRaMBgxFjAU
BgNVBAMTDTY5NGExZjU1LWI1MTIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDscDeO3lh7T42Hd2NwRQbuZRLa/5C/qBgTzSsPyT3k4wca+1ztk69kJg1b
l+oJ3yU4WmnC7FlLuyb2y1jhfEiY4avMBEkYXs/kJE/Jb/I/Du0d+22PM0TqIqiU
CgvAVaOBlJPH6xr5q0ES9ND538CbpVK3l2Az3gkHvyCm6n4F7m8tmQg0ZUp6Y6Gn
csGl66flIn1zyCwl3zh5OZulIvHTM0mikeu4BkA9UMKCO5NmMNARfORohUvaye0l
L/urbdSsn/gYBJLpuPW4dInk/95AhGhLk0IpA2nQMQ0Mx04m/3ppzOStgqVDYP4M
ob2YffKQsUgIn1pRW6dfbCZdORVrAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUgABp
M/jsM/LcMLRpGfGau0q9V3wwHwYDVR0jBBgwFoAUMfeVAfcAxqZ2Yt4nthXuyDCx
uHYwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkJDNkNDLzBGODUzNTM0REQzODExRUZCMkU0QzQ3Nzc2MkU5NTFBL01mZVZB
ZmNBeHFaMll0NG50aFh1eURDeHVIWS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL01mZVZBZmNBeHFaMll0NG50aFh1eURDeHVIWS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2QkM2Q0MvMEY4NTM1MzRERDM4MTFFRkIyRTRDNDc3NzYy
RTk1MUEvTWZlVkFmY0F4cVoyWXQ0bnRoWHV5REN4dUhZLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQA589MYo/0p16/hLLJM/CmUrr36ZOA+
3gPqMzxzp/FpRB6sE0/4Yw8TLYZzrxN4aIvFjfEN32HRQWnbFefmOsR5z9pxc1hv
8PLRjvMHv/eLgnzOeSYdX3Hbs/Ob60QSJHAzXoo+zLi7r/yX1RYAd7AmminBmD8q
YjLTv8BtYy3/etjWMt4bqxVEmA35RviIH7T3Z909t/SRR7EwrLKjelA7o6BP67pC
7YeA75URivuMOZ9Mle4cKAQQ/TTzOo4jaCivtYYTiIGNgWIzWra64jdZk/55/wNo
ZzHmYbhNajOe92gesqiBKy1/E7vXejYhtvfc5FBjbSpQplrdO3kjODfg
-----END CERTIFICATE-----
Generated at Tue Dec 23 17:14:57 2025 by rpki-client