This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36BC80A/472EF5B2E75C11EC9D7F90D8F1222468/jI-M4q1VuTZr7G7fSSzZwUmOBmQ.mft
File:                     jI-M4q1VuTZr7G7fSSzZwUmOBmQ.mft (raw, json)
Hash identifier:          kRpczBLUp1Iu7eegj2W+SCzOEUZzWrzVkcfbAe5EvnM=
Subject key identifier:   04:06:0D:43:C4:E0:3A:1A:CC:6B:38:6E:BE:44:49:0B:E2:A6:7D:36
Authority key identifier: 8C:8F:8C:E2:AD:55:B9:36:6B:EC:6E:DF:49:2C:D9:C1:49:8E:06:64
Certificate issuer:       /CN=F36BC80AAF/serialNumber=8C8F8CE2AD55B9366BEC6EDF492CD9C1498E0664
Certificate serial:       059B
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/jI-M4q1VuTZr7G7fSSzZwUmOBmQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36BC80A/472EF5B2E75C11EC9D7F90D8F1222468/jI-M4q1VuTZr7G7fSSzZwUmOBmQ.mft
Manifest number:          0572
Signing time:             Sat 20 Dec 2025 02:48:05 +0000
Manifest this update:     Sat 20 Dec 2025 02:48:05 +0000
Manifest next update:     Mon 22 Dec 2025 02:48:05 +0000
Files and hashes:         1: jI-M4q1VuTZr7G7fSSzZwUmOBmQ.crl (hash: U+e0rAGu1W9NOagLdMbIgbiyKKqaDWFnwMpI6zkEzYs=)
                          2: B3F00DD8B5D211F0A032E09CDAE4EC9C.roa (hash: pBnI8YYRnn+y8iTW/+yYOAZgWLOb00S+9jpxjry2ifU=)
                          3: 7510A490FBDA11EFA602538E762E951A.roa (hash: K8eoOxbyDzKOVr27RbOhGjO0ujSDpgusioRxfBEGdeg=)
                          4: 802F17ACB5D011F0A862F28FDAE4EC9C.roa (hash: cEa5rc+b8uoRQm6lEKjcwEO4AN3MwGfJNjZVLfnNXsQ=)
                          5: 6C4F7098FFA911EF80A256B8762E951A.roa (hash: nLVSz/e6y8EyahDhz46G+ddHGy6xFQEmZ+lSlLJOj1k=)
                          6: 14D0DD48FCAC11EF8F606291762E951A.roa (hash: We9A0b1twQQd49MjYQiHevJV7RGbH0zGgiiv0BmjU4w=)
                          7: 924A5592B5CF11F083499A8BDAE4EC9C.roa (hash: vI5//pHlGWHAgoJjpRzv1Mv4Rju5P+7W+b9IA6ocMm8=)
                          8: 34F044FE336D11F0A6FE177FDAE4EC9C.roa (hash: yhXToE/ivhLm4HgJKr6OrdpT7iNJJtMwXlhtqU/6qu4=)
                          9: 332A33CAFFA911EF84F40CB6762E951A.roa (hash: nAe7SVEbrFBsJsSB2QjjEXejvC3k+OkB22lneTxOJs4=)
                          10: A3F519ECB5D111F099E55E98DAE4EC9C.roa (hash: N2S0kcv9ynYD8ccz/SB7pJXYn4dSI1K0kSCmPaGO2N4=)
                          11: BEB0D28EFCAA11EF97EC4A88762E951A.roa (hash: jZflyQkEOdvyH7cORlNM6RzxEc6T6GfFgEfB6W779Ik=)
                          12: E67C4F66FD2A11EFAFF97E57762E951A.roa (hash: 0KEac1L9NXZHhaATxDUbvggLHQuqEfxaMAc1BKGdXv0=)
                          13: 6C20E300FCAB11EFA301CF8C762E951A.roa (hash: OvsUXNSmfjEutAwyrB9JnPffvmOpMIjkA04wcKDLKRY=)
                          14: F0DCA42CFCAA11EF9CB0AF88762E951A.roa (hash: BzJmdF2Js2FoOGSwDan1wfPrzdWX29V5MPNuA8XkzBM=)
                          15: 731820EAFD6B11EFA5FAAE9C762E951A.roa (hash: WBg3iidspfXKbYNsCa9+4QR22QeQEUUkOPouJHSY0gU=)
                          16: 84D63AD4FCAC11EFBDC66892762E951A.roa (hash: eiarFVPH9xcpuLJ9GJbS6IkBNStXLIhNVgC/u2KChdQ=)
                          17: 0B36502EB5CF11F09E324387DAE4EC9C.roa (hash: FuUSeKXmdp59eIJUnwXj15oz80rdM1YNse2hoVng0XE=)
                          18: 5B20E2CAB5CF11F09368898BDAE4EC9C.roa (hash: 8lx8POTXnxQ/rETcudf+Tn5nhHis5M15ESoQBVa0Mz4=)
                          19: 115DB472B5D111F0A1AC2194DAE4EC9C.roa (hash: zLkLQwxPLh5BBWNzGvRyOityfiR56S+KxQLYKxeld8U=)
                          20: D6A36628B5D111F099116B98DAE4EC9C.roa (hash: Qb7brFTW1SmyM6hCIpLR/WnpCM+Gnw0eopnrES6lJs4=)
                          21: 5673440CFCAC11EF9614E491762E951A.roa (hash: 6r9fkhk67fd1QL6JR1kRn7YKpBT/BIiBUWKwgxbcGDI=)
                          22: 43255EBEB5D211F09330919CDAE4EC9C.roa (hash: WP/J10zandfKZR2eaHtY6wCS0JXLuclaCdl/D//TPkU=)
                          23: 84C45A96B5D211F098A59F9CDAE4EC9C.roa (hash: ZdT4oas310Raqs+Gms+VBmMixtSzPUmOs/XEA15Oe3k=)
                          24: 5FFD958AB6C011F0A433F7F3DAE4EC9C.roa (hash: lwAlG/Cp9JYBv5HsI1r0REKGcAMN2vMOXvb01TEL3gk=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36BC80A/472EF5B2E75C11EC9D7F90D8F1222468/jI-M4q1VuTZr7G7fSSzZwUmOBmQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36BC80A/472EF5B2E75C11EC9D7F90D8F1222468/jI-M4q1VuTZr7G7fSSzZwUmOBmQ.mft
                          rsync://rpki.afrinic.net/repository/afrinic/jI-M4q1VuTZr7G7fSSzZwUmOBmQ.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 22 Dec 2025 00:06:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1435 (0x59b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36BC80AAF, serialNumber=8C8F8CE2AD55B9366BEC6EDF492CD9C1498E0664
        Validity
            Not Before: Dec 20 02:48:05 2025 GMT
            Not After : Dec 22 02:48:05 2025 GMT
        Subject: CN=69460e65-b6aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:5d:57:60:cc:57:33:6c:f2:49:cf:f2:9b:80:
                    e3:77:63:88:86:50:4f:ed:55:1d:c5:a6:d8:a7:77:
                    83:d2:85:81:8b:27:49:66:1b:e3:09:51:a8:78:97:
                    93:95:a3:17:cd:3e:64:a7:0b:57:bd:19:56:dc:a2:
                    d4:95:6e:14:f4:9f:3e:fb:a2:74:0d:c6:7d:bd:87:
                    0f:ae:e0:69:8f:5c:9a:6d:c4:21:b9:bb:ba:b2:d6:
                    54:11:2b:8b:89:63:08:6b:87:b1:91:59:b4:cc:8c:
                    46:c4:96:53:60:62:d3:44:78:b8:fd:85:43:f5:0a:
                    0f:f1:69:31:f1:52:56:77:a8:a7:e7:af:9f:b9:1f:
                    c1:7d:81:ed:d9:0a:57:7f:9f:98:44:ef:f8:72:b2:
                    44:6c:5f:a8:a7:c6:8c:bb:02:53:53:77:f5:1f:8d:
                    35:4e:94:b3:f5:80:00:09:50:f1:ca:2e:4c:2f:e3:
                    49:c1:b7:b9:ac:38:9b:3c:33:e1:be:13:cb:de:67:
                    09:bf:92:d2:17:11:7c:11:38:d4:e2:e5:60:19:0f:
                    a4:7e:99:16:f0:2d:fb:f4:55:52:83:13:fe:af:32:
                    87:69:13:b2:6a:ee:df:2d:69:10:40:84:20:80:6b:
                    f3:72:87:7a:60:31:1c:5b:35:54:93:7d:f8:a9:5f:
                    40:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:06:0D:43:C4:E0:3A:1A:CC:6B:38:6E:BE:44:49:0B:E2:A6:7D:36
            X509v3 Authority Key Identifier:
                keyid:8C:8F:8C:E2:AD:55:B9:36:6B:EC:6E:DF:49:2C:D9:C1:49:8E:06:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36BC80A/472EF5B2E75C11EC9D7F90D8F1222468/jI-M4q1VuTZr7G7fSSzZwUmOBmQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/jI-M4q1VuTZr7G7fSSzZwUmOBmQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36BC80A/472EF5B2E75C11EC9D7F90D8F1222468/jI-M4q1VuTZr7G7fSSzZwUmOBmQ.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:17:97:e1:bd:97:87:02:7c:e8:50:54:5f:ee:63:df:6b:ff:
         27:48:3c:ca:20:c4:e0:1f:1e:f3:e4:9b:3a:e8:d7:91:a1:1c:
         95:9a:83:67:ce:7f:36:ee:71:85:3a:b3:9e:ed:74:3a:46:8d:
         f0:e3:70:99:7c:17:28:0c:1d:02:1e:4d:f8:b7:ad:7d:c0:fa:
         86:a7:62:57:14:43:1e:34:3b:21:d7:86:05:dc:ac:bd:e7:14:
         dd:c6:91:58:24:0c:3e:e6:cd:2f:4a:71:47:bf:64:e4:3b:7f:
         bb:04:3f:87:6c:68:ed:65:6f:f6:d1:e2:b8:15:0d:b3:77:df:
         b5:1a:08:ea:c0:79:a6:cf:e1:7f:fb:fd:01:02:78:f2:dc:98:
         4b:f6:30:32:cf:52:e2:d2:2e:07:fc:d5:25:96:0b:7d:6c:b0:
         8b:e3:e2:04:18:43:b8:3b:19:bc:67:1f:87:b3:7f:65:a5:07:
         1e:73:35:52:50:1c:0b:62:ec:7e:bc:0f:2f:59:18:b0:a7:ef:
         9c:39:57:62:6b:64:91:b2:99:f5:96:ad:b0:fa:d7:88:26:74:
         b1:96:c0:a5:5f:55:8a:74:9e:af:db:c1:ff:f0:e4:2e:b4:a3:
         83:52:80:f4:78:e8:37:d4:fb:05:1e:be:31:6e:a1:9a:0d:e4:
         a3:c6:75:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 01:37:15 2025 by rpki-client