This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36BD97C/C43845CC2D9411ECA2AA6345D8A014CE/sbPdzlUwcgAQqZ4U8lK5dDCKtxQ.mft
File:                     sbPdzlUwcgAQqZ4U8lK5dDCKtxQ.mft (raw, json)
Hash identifier:          bEARxr4EMXH1kfFATQnT1I5mrayBEc6TX1TQIuvKO1M=
Subject key identifier:   F8:33:C3:FE:01:23:53:1E:20:BD:06:9C:92:BC:12:56:8F:49:51:BA
Authority key identifier: B1:B3:DD:CE:55:30:72:00:10:A9:9E:14:F2:52:B9:74:30:8A:B7:14
Certificate issuer:       /CN=F36BD97CAF/serialNumber=B1B3DDCE5530720010A99E14F252B974308AB714
Certificate serial:       0627
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/sbPdzlUwcgAQqZ4U8lK5dDCKtxQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36BD97C/C43845CC2D9411ECA2AA6345D8A014CE/sbPdzlUwcgAQqZ4U8lK5dDCKtxQ.mft
Manifest number:          0627
Signing time:             Sat 27 Dec 2025 02:30:55 +0000
Manifest this update:     Sat 27 Dec 2025 02:30:54 +0000
Manifest next update:     Mon 29 Dec 2025 02:30:54 +0000
Files and hashes:         1: sbPdzlUwcgAQqZ4U8lK5dDCKtxQ.crl (hash: F3kaWYWIvHrDjAg2KSiiA9J2lxU2uVTjeZgBNNGpkQU=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36BD97C/C43845CC2D9411ECA2AA6345D8A014CE/sbPdzlUwcgAQqZ4U8lK5dDCKtxQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36BD97C/C43845CC2D9411ECA2AA6345D8A014CE/sbPdzlUwcgAQqZ4U8lK5dDCKtxQ.mft
                          rsync://rpki.afrinic.net/repository/afrinic/sbPdzlUwcgAQqZ4U8lK5dDCKtxQ.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 29 Dec 2025 00:06:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1575 (0x627)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36BD97CAF, serialNumber=B1B3DDCE5530720010A99E14F252B974308AB714
        Validity
            Not Before: Dec 27 02:30:54 2025 GMT
            Not After : Dec 29 02:30:54 2025 GMT
        Subject: CN=694f44df-df0b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:02:da:d8:39:21:84:15:42:ee:12:d0:2d:fb:
                    da:52:a4:a1:64:3a:d0:1b:7d:6c:be:d3:cd:df:f9:
                    0e:18:46:0e:a0:f3:6b:f4:bc:57:7b:9e:51:7d:08:
                    76:22:66:df:13:96:c5:02:19:a9:26:21:1b:d4:2c:
                    22:26:6f:80:c2:7f:0f:d6:19:3f:2b:8b:02:0a:41:
                    23:d7:bb:a4:e4:b5:4b:3e:9d:40:a0:3f:f2:cf:7a:
                    3f:59:52:f5:5d:63:9b:79:bb:b2:4e:39:dd:b8:5f:
                    94:f3:24:fe:2c:cb:67:db:82:0f:af:8d:28:33:c7:
                    65:2a:d7:aa:a7:00:6e:32:81:80:2d:86:d5:be:ac:
                    52:98:b2:37:20:7a:00:80:62:be:97:b0:b7:46:0e:
                    82:44:e6:db:de:30:74:2d:9a:bf:d0:5c:cf:e9:b6:
                    16:ed:7c:d6:13:39:9f:5b:a9:fa:2f:8c:a4:9c:8e:
                    c2:6d:91:ac:a3:bd:83:1d:a5:c0:e1:05:40:05:ba:
                    82:16:d5:0e:8b:48:1c:4a:73:40:9a:37:fa:84:a6:
                    96:4d:e8:a8:77:84:2c:7b:b2:aa:78:d3:a5:5f:02:
                    b6:d8:20:5a:03:fb:6a:93:54:17:ab:04:04:3e:cb:
                    19:c9:44:be:fa:6f:d1:0f:54:2a:76:68:9e:25:51:
                    51:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:33:C3:FE:01:23:53:1E:20:BD:06:9C:92:BC:12:56:8F:49:51:BA
            X509v3 Authority Key Identifier:
                keyid:B1:B3:DD:CE:55:30:72:00:10:A9:9E:14:F2:52:B9:74:30:8A:B7:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36BD97C/C43845CC2D9411ECA2AA6345D8A014CE/sbPdzlUwcgAQqZ4U8lK5dDCKtxQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/sbPdzlUwcgAQqZ4U8lK5dDCKtxQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36BD97C/C43845CC2D9411ECA2AA6345D8A014CE/sbPdzlUwcgAQqZ4U8lK5dDCKtxQ.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:57:47:1f:11:77:a6:76:1c:81:4c:bd:13:21:d7:50:e9:dc:
         de:c3:be:01:aa:e0:4f:70:36:f2:a5:58:80:08:81:7d:0e:99:
         26:13:69:d2:86:52:30:a1:18:b1:cd:49:63:60:84:38:38:6e:
         9a:fc:48:4c:7d:aa:51:d9:48:49:cb:0f:6e:99:a5:64:c5:04:
         4a:65:2e:b7:61:77:04:2f:d2:cc:a1:58:1b:ef:63:a5:5c:c0:
         e2:e8:25:ac:9c:ea:ae:1c:2a:75:d8:52:46:e7:e3:a1:c7:26:
         9a:8c:98:5b:5e:fa:e4:b7:13:71:a1:e2:1b:f3:0b:aa:75:75:
         98:a3:57:35:a8:15:dd:9d:ad:d8:21:dd:f5:d9:8c:1d:e0:ae:
         0a:0c:28:af:36:e5:44:8c:6b:b5:be:26:5f:70:f6:a7:0c:f9:
         29:11:61:f0:1c:86:51:bb:e4:cc:f9:67:cd:90:15:90:fe:31:
         bf:61:a8:5c:9c:aa:d2:80:de:a0:1f:91:2a:48:5c:b8:45:6e:
         7c:ba:fc:20:2b:fb:51:e4:bb:29:15:e4:ff:d2:e7:80:94:5a:
         a3:98:64:8c:80:70:f9:a9:6b:7f:af:03:18:08:2f:22:33:0f:
         2a:68:44:00:3c:b5:bb:7e:c2:2a:4f:b8:9d:80:1c:c6:87:8e:
         f5:82:c9:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 27 06:17:18 2025 by rpki-client