This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36BD41E/3040E1D6D9B511F0A143A8D7DAE4EC9C/GPDP5J-oAtYH_7cwFFeG05UL0jA.mft
File:                     GPDP5J-oAtYH_7cwFFeG05UL0jA.mft (raw, json)
Hash identifier:          Ty9dVCG8ZCKy/dm4WtKGhdykQfJ88YiWQY6Hrh1CJf4=
Subject key identifier:   91:39:87:4B:D1:C3:11:27:B8:1F:D0:30:BE:75:22:34:DB:E1:43:80
Authority key identifier: 18:F0:CF:E4:9F:A8:02:D6:07:FF:B7:30:14:57:86:D3:95:0B:D2:30
Certificate issuer:       /CN=F36BD41EAF/serialNumber=18F0CFE49FA802D607FFB730145786D3950BD230
Certificate serial:       09
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/GPDP5J-oAtYH_7cwFFeG05UL0jA.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36BD41E/3040E1D6D9B511F0A143A8D7DAE4EC9C/GPDP5J-oAtYH_7cwFFeG05UL0jA.mft
Manifest number:          07
Signing time:             Fri 19 Dec 2025 05:25:20 +0000
Manifest this update:     Fri 19 Dec 2025 05:25:20 +0000
Manifest next update:     Sun 21 Dec 2025 05:25:20 +0000
Files and hashes:         1: GPDP5J-oAtYH_7cwFFeG05UL0jA.crl (hash: cEyUeBPGxyQ7mgGBienqAIju0quAeFJjb9dJGvv4Q08=)
                          2: 0B035958DA7311F0BD9C4B87DAE4EC9C.roa (hash: 1YCwQ08Er0/oJv0rugAKvka/AUZZE4KlC5UipfKoXzE=)
                          3: AF914E0ED9B911F0BC8E84F1DAE4EC9C.roa (hash: dpaLUZ7X2+eBahFfaBRBpZGcldL+iPoSovpQWiyqWHw=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36BD41E/3040E1D6D9B511F0A143A8D7DAE4EC9C/GPDP5J-oAtYH_7cwFFeG05UL0jA.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36BD41E/3040E1D6D9B511F0A143A8D7DAE4EC9C/GPDP5J-oAtYH_7cwFFeG05UL0jA.mft
                          rsync://rpki.afrinic.net/repository/afrinic/GPDP5J-oAtYH_7cwFFeG05UL0jA.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 21 Dec 2025 00:06:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9 (0x9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36BD41EAF, serialNumber=18F0CFE49FA802D607FFB730145786D3950BD230
        Validity
            Not Before: Dec 19 05:25:20 2025 GMT
            Not After : Dec 21 05:25:20 2025 GMT
        Subject: CN=6944e1c0-4e0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:8b:85:a8:36:ff:9f:47:03:7d:cc:b1:a3:5a:
                    fc:ed:90:77:f6:76:6f:63:4d:26:f9:3d:ca:c8:8f:
                    b2:74:b5:a6:9e:0f:b7:a5:d7:34:fd:b0:28:8b:13:
                    a6:1a:bc:42:31:53:0d:b8:da:71:e2:cf:63:20:1f:
                    dc:dd:48:fb:4a:4e:32:91:b0:ca:a3:03:a0:63:30:
                    76:ec:73:45:00:d8:93:ec:3b:c9:a1:34:7c:2f:8f:
                    0b:3e:00:db:e0:c0:8f:5f:92:b9:0f:b0:21:14:1e:
                    19:65:3c:eb:b6:30:4f:57:df:03:2f:65:07:55:aa:
                    8a:08:f8:84:a3:66:e9:8a:71:29:7a:ed:ba:5d:c9:
                    2d:61:20:66:8b:ac:ba:90:fd:cd:3d:52:af:a1:c1:
                    eb:1e:ac:22:4e:68:8e:c1:ed:17:99:45:8d:d8:d2:
                    e8:61:12:ee:c5:26:50:7f:b4:48:00:0e:f7:87:d1:
                    80:17:87:34:0b:e1:c2:ef:13:52:57:4b:b7:b8:63:
                    38:20:1f:dc:03:e3:4a:c6:47:92:35:35:a6:85:16:
                    5d:30:78:ca:65:15:6d:6f:dc:94:d3:8b:eb:ba:5e:
                    58:cb:ee:7a:8b:0d:5d:4c:27:80:8a:46:44:9a:39:
                    65:71:f5:61:e5:57:6d:85:0d:f6:b9:f5:e3:a0:76:
                    4e:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:39:87:4B:D1:C3:11:27:B8:1F:D0:30:BE:75:22:34:DB:E1:43:80
            X509v3 Authority Key Identifier:
                keyid:18:F0:CF:E4:9F:A8:02:D6:07:FF:B7:30:14:57:86:D3:95:0B:D2:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36BD41E/3040E1D6D9B511F0A143A8D7DAE4EC9C/GPDP5J-oAtYH_7cwFFeG05UL0jA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/GPDP5J-oAtYH_7cwFFeG05UL0jA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36BD41E/3040E1D6D9B511F0A143A8D7DAE4EC9C/GPDP5J-oAtYH_7cwFFeG05UL0jA.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:7a:c0:7c:3b:7c:04:80:d6:18:93:fe:dd:63:16:03:f0:81:
         30:19:ad:fc:a6:a7:cd:00:a1:7c:f1:5e:a6:43:66:50:09:3c:
         36:ca:ee:7b:2b:3b:a7:c9:fb:ba:ba:8e:bc:cd:e5:9e:d3:0a:
         1f:9e:d0:b7:96:fd:db:57:5b:26:7e:a4:fb:3e:fe:f2:4a:f5:
         0f:c4:02:ec:f9:a4:05:f7:09:dd:2b:a2:ad:d2:0e:61:7d:80:
         e0:98:bf:f2:bc:d4:2a:a6:f0:f0:55:22:c9:7d:c5:98:b5:ca:
         70:88:dc:df:87:1f:74:d6:53:11:ab:31:a0:34:e8:70:82:a9:
         ed:65:08:77:97:57:18:66:5b:a2:5a:36:a5:bd:98:3f:53:63:
         65:b2:6d:0f:e1:da:fe:5c:ad:3b:e8:4b:e0:17:28:d6:b3:aa:
         76:40:1c:99:1d:ac:4e:e3:76:d2:5c:a8:4a:f3:86:8a:66:18:
         42:0f:4e:d2:8a:8f:27:4e:a4:db:0c:cb:ad:8b:79:0c:c3:8d:
         79:03:dd:ab:6f:91:4a:e7:d5:79:86:54:6a:c5:88:39:99:5c:
         67:6e:c9:66:98:57:84:fa:84:2a:42:9e:a0:75:58:75:e6:8a:
         6f:d2:eb:74:0a:c2:23:95:88:6c:1e:56:7b:c1:6f:9d:5e:e1:
         53:9b:38:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 00:47:58 2025 by rpki-client