This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C04EA/32396F8EC49E11F087F92A78DAE4EC9C/0dnDKIjyz6bSCgEYk0QuSI-rEy4.mft
File:                     0dnDKIjyz6bSCgEYk0QuSI-rEy4.mft (raw, json)
Hash identifier:          JaEEQsEnkOp92M/BlSPuwAH+vrZZSfkd7AhaVALBevo=
Subject key identifier:   AD:E1:BD:0C:59:77:7A:A3:E1:86:94:F1:9C:FF:33:DF:60:1D:FE:3C
Authority key identifier: D1:D9:C3:28:88:F2:CF:A6:D2:0A:01:18:93:44:2E:48:8F:AB:13:2E
Certificate issuer:       /CN=F36C04EAAF/serialNumber=D1D9C32888F2CFA6D20A011893442E488FAB132E
Certificate serial:       23
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/0dnDKIjyz6bSCgEYk0QuSI-rEy4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C04EA/32396F8EC49E11F087F92A78DAE4EC9C/0dnDKIjyz6bSCgEYk0QuSI-rEy4.mft
Manifest number:          22
Signing time:             Fri 19 Dec 2025 05:22:00 +0000
Manifest this update:     Fri 19 Dec 2025 05:21:59 +0000
Manifest next update:     Sun 21 Dec 2025 05:21:59 +0000
Files and hashes:         1: 0dnDKIjyz6bSCgEYk0QuSI-rEy4.crl (hash: e5TqdU+gyciRbFnhwkfsn186E7YQSAWQ1GoNFPUvMDU=)
                          2: B44DBBD6C4A011F0BB1FE885DAE4EC9C.roa (hash: 22n46w2qwRYfa/D7JhUZRieOUn/D6egNiKVqvc6gQks=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36C04EA/32396F8EC49E11F087F92A78DAE4EC9C/0dnDKIjyz6bSCgEYk0QuSI-rEy4.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36C04EA/32396F8EC49E11F087F92A78DAE4EC9C/0dnDKIjyz6bSCgEYk0QuSI-rEy4.mft
                          rsync://rpki.afrinic.net/repository/afrinic/0dnDKIjyz6bSCgEYk0QuSI-rEy4.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 21 Dec 2025 00:06:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 35 (0x23)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C04EAAF, serialNumber=D1D9C32888F2CFA6D20A011893442E488FAB132E
        Validity
            Not Before: Dec 19 05:21:59 2025 GMT
            Not After : Dec 21 05:21:59 2025 GMT
        Subject: CN=6944e0f8-208f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:87:d1:9b:9f:1c:b5:b0:7d:37:47:40:83:49:
                    29:44:a8:86:42:46:ee:f6:d3:dd:6b:ec:22:68:83:
                    3a:02:3a:c6:59:55:39:e6:7a:b4:25:71:fa:2e:bb:
                    75:68:85:56:56:68:d7:9c:51:5e:81:2f:73:fb:d3:
                    3b:03:7a:f5:0a:3e:74:cb:c0:c5:e2:e6:bf:02:c3:
                    99:c4:63:a7:3b:0c:ae:58:b2:0f:d5:10:ed:c6:16:
                    0b:b2:27:e5:87:b8:56:52:c9:9d:58:ff:76:9b:2e:
                    e9:e8:e3:46:dc:f9:c1:5d:63:f2:24:14:6b:a4:8f:
                    cc:c8:4a:a6:ca:40:26:b3:b9:55:df:dd:fb:7f:c9:
                    0b:aa:fb:46:3f:98:92:4f:f3:8a:4a:eb:dd:4a:c2:
                    44:21:f0:e5:2f:4f:9a:66:d6:79:d8:d2:07:6b:74:
                    1e:3f:2e:42:09:2f:90:23:f6:ee:60:b9:80:0b:33:
                    27:21:4f:bf:c2:d9:cd:55:f7:ae:b4:00:30:aa:cc:
                    12:aa:85:7e:61:2c:14:e6:7c:55:83:c9:99:ae:34:
                    64:d8:79:c2:d1:0f:08:f9:03:3f:ac:84:5b:13:3a:
                    54:f3:d2:83:5e:79:c6:4d:9f:cf:9b:93:29:47:77:
                    8b:9d:f1:f3:bf:10:e9:c4:4e:6b:e9:0a:69:6f:93:
                    bd:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:E1:BD:0C:59:77:7A:A3:E1:86:94:F1:9C:FF:33:DF:60:1D:FE:3C
            X509v3 Authority Key Identifier:
                keyid:D1:D9:C3:28:88:F2:CF:A6:D2:0A:01:18:93:44:2E:48:8F:AB:13:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C04EA/32396F8EC49E11F087F92A78DAE4EC9C/0dnDKIjyz6bSCgEYk0QuSI-rEy4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/0dnDKIjyz6bSCgEYk0QuSI-rEy4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C04EA/32396F8EC49E11F087F92A78DAE4EC9C/0dnDKIjyz6bSCgEYk0QuSI-rEy4.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:fc:e3:d6:6e:88:e7:13:4d:ae:b5:4b:45:9f:73:7b:33:39:
         d4:9f:d7:bb:13:fc:d1:0f:25:40:37:22:a1:58:09:5e:be:0c:
         d6:9e:6d:01:da:59:f9:22:6a:62:eb:4f:c6:1f:6a:89:20:af:
         c7:f6:18:3b:39:be:47:b6:a5:fb:86:8f:92:37:26:86:e5:e5:
         35:1e:c5:cb:d5:30:fb:c9:55:19:9a:63:55:60:95:58:f7:2d:
         dd:94:a3:34:ee:95:ad:7c:32:d5:5e:a8:97:d7:51:d1:e3:71:
         f1:a7:56:d1:99:9c:41:1c:fa:18:d2:2b:85:93:1a:3c:97:20:
         b6:db:e5:d7:52:54:3b:93:c6:23:5d:60:3a:0f:98:3d:35:3f:
         1a:70:86:4b:4c:73:9e:1d:a3:d5:28:36:83:64:95:5c:a7:bd:
         92:18:b8:c2:96:ce:dc:ec:68:7d:33:65:b7:48:cd:07:03:59:
         05:29:00:9b:76:4a:84:68:77:0c:33:f1:00:04:9e:c9:27:8e:
         74:76:a9:39:f5:3d:72:e2:75:02:83:cc:0a:15:ca:e6:1c:65:
         e3:32:d4:c7:fd:90:b4:2d:c4:81:d3:f0:46:28:d4:3b:bf:f7:
         aa:24:b1:b3:cd:ea:7d:c8:8a:fd:69:12:ac:5c:27:9a:19:92:
         8a:90:0b:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 00:49:52 2025 by rpki-client