This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C10D8/8720E3EAA61211ED8D3EBED2F1222468/wNOq-2PTPw9nNdyZ_02QGo4iUOs.mft
File:                     wNOq-2PTPw9nNdyZ_02QGo4iUOs.mft (raw, json)
Hash identifier:          ijU0CCHw78JsCAmCLeMT8VDLxOKeBa5uyxq/BETSMuE=
Subject key identifier:   D8:76:9A:E1:6D:A7:3B:4A:92:CB:89:CC:FE:2C:84:29:E4:DA:B0:A0
Authority key identifier: C0:D3:AA:FB:63:D3:3F:0F:67:35:DC:99:FF:4D:90:1A:8E:22:50:EB
Certificate issuer:       /CN=F36C10D8AF/serialNumber=C0D3AAFB63D33F0F6735DC99FF4D901A8E2250EB
Certificate serial:       0440
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/wNOq-2PTPw9nNdyZ_02QGo4iUOs.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C10D8/8720E3EAA61211ED8D3EBED2F1222468/wNOq-2PTPw9nNdyZ_02QGo4iUOs.mft
Manifest number:          043D
Signing time:             Sat 20 Dec 2025 03:15:59 +0000
Manifest this update:     Sat 20 Dec 2025 03:15:59 +0000
Manifest next update:     Mon 22 Dec 2025 03:15:59 +0000
Files and hashes:         1: wNOq-2PTPw9nNdyZ_02QGo4iUOs.crl (hash: Z7Oz4Ga6Nw9la7HeM9TuSin2tl+V1YhZONllyJRhAgU=)
                          2: 3F8E935AA61311EDBFCFB3D4F1222468.roa (hash: 33rmpZ6jAdIVqLdS11HAE3Yq5xllMzQt+c6T/OCJsiA=)
                          3: 81387E54007811EF99B9F139017001B1.roa (hash: 5WAmHZAoZlINNKx4PNswtykKpm0E6nuOZQfU//JL8dM=)
                          4: 0391042A007911EFAE93753B017001B1.roa (hash: ROy7IXIOSH9P9duj13zOuIMfsAHkd1TqIfObC5Gq/2c=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36C10D8/8720E3EAA61211ED8D3EBED2F1222468/wNOq-2PTPw9nNdyZ_02QGo4iUOs.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36C10D8/8720E3EAA61211ED8D3EBED2F1222468/wNOq-2PTPw9nNdyZ_02QGo4iUOs.mft
                          rsync://rpki.afrinic.net/repository/afrinic/wNOq-2PTPw9nNdyZ_02QGo4iUOs.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 22 Dec 2025 00:06:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1088 (0x440)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C10D8AF, serialNumber=C0D3AAFB63D33F0F6735DC99FF4D901A8E2250EB
        Validity
            Not Before: Dec 20 03:15:59 2025 GMT
            Not After : Dec 22 03:15:59 2025 GMT
        Subject: CN=694614ef-050a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:b3:da:bf:64:7a:bc:1c:fc:1f:8b:94:0a:85:
                    02:f3:22:a9:76:11:dd:1d:f6:9f:90:14:23:a3:6b:
                    29:7a:41:71:20:a8:c3:b0:c0:14:ec:fd:ed:6d:5e:
                    7f:39:d9:1c:fe:38:20:94:89:05:1f:c4:97:8d:73:
                    c2:08:a8:f2:62:07:19:00:93:39:b3:87:5a:56:82:
                    5b:ce:82:9a:2f:58:3d:d9:04:9b:6f:70:29:a3:d6:
                    89:0f:95:44:fb:30:23:36:1c:93:35:56:0c:c1:15:
                    6d:41:9e:d7:22:dc:af:11:f9:89:dc:f9:53:ca:16:
                    3b:e2:dc:f5:1a:a0:31:dc:e3:73:57:be:db:c9:2e:
                    18:f3:0f:72:28:23:8b:fd:ae:b2:b9:5c:2a:e3:ac:
                    ac:79:74:aa:bb:99:1d:8e:d5:43:2d:d4:8e:35:18:
                    c4:83:33:07:eb:5b:76:e0:2c:69:86:30:5d:62:6e:
                    d5:4a:8a:f8:36:f3:8f:7d:0e:cd:d9:39:6d:3b:ab:
                    fd:91:47:a5:97:f5:bd:87:df:87:d6:84:30:24:fa:
                    d8:56:56:7d:3f:d1:58:eb:c5:ec:aa:7e:0c:ea:62:
                    a2:58:6a:4e:65:c5:2b:d7:79:74:07:39:ba:89:65:
                    3a:f8:00:d0:f5:34:2b:60:4c:4e:c4:75:3c:e2:75:
                    bd:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:76:9A:E1:6D:A7:3B:4A:92:CB:89:CC:FE:2C:84:29:E4:DA:B0:A0
            X509v3 Authority Key Identifier:
                keyid:C0:D3:AA:FB:63:D3:3F:0F:67:35:DC:99:FF:4D:90:1A:8E:22:50:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C10D8/8720E3EAA61211ED8D3EBED2F1222468/wNOq-2PTPw9nNdyZ_02QGo4iUOs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/wNOq-2PTPw9nNdyZ_02QGo4iUOs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C10D8/8720E3EAA61211ED8D3EBED2F1222468/wNOq-2PTPw9nNdyZ_02QGo4iUOs.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:02:06:ea:31:ae:13:61:b4:86:7f:91:a1:01:cd:c4:a4:94:
         6f:d6:48:ac:bc:44:bf:c7:70:88:e0:ec:35:cb:82:c9:70:11:
         1b:d1:6a:5d:ca:80:e5:ea:4e:8a:d5:d5:89:6c:c0:98:aa:a4:
         47:91:ed:29:68:4e:40:59:b1:c5:e8:a4:69:5d:5d:b2:3c:97:
         03:23:c3:25:5e:85:52:e3:cb:f6:01:f1:57:ac:0c:93:ad:7b:
         e6:4f:46:e8:3e:a4:1d:6e:37:5a:99:06:50:d3:9f:3b:54:16:
         45:9f:af:a3:80:a8:45:ff:29:10:f8:e7:c6:ef:54:69:b5:fb:
         db:75:03:66:28:0c:e7:1d:e8:42:f9:0b:08:8b:6b:c4:0d:a3:
         d3:1c:43:af:a6:08:40:e9:e7:4b:b2:a3:0a:10:4f:1b:cf:98:
         9f:ae:c5:23:b7:2f:2a:1a:2a:73:5d:f9:67:62:c3:75:2f:1b:
         33:c4:d8:0b:2f:a0:42:ff:fc:17:41:19:68:89:4d:ed:92:39:
         52:cc:a7:7b:6d:9a:63:54:e0:b1:e2:48:1d:9c:e3:c2:ed:d9:
         4b:e4:df:4d:f6:56:93:aa:bb:b1:a4:3b:e6:16:90:68:cd:11:
         dd:6f:e7:9c:ce:8f:9e:b7:b2:bf:05:d4:48:41:71:0c:41:8c:
         57:ce:2c:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 18:07:13 2025 by rpki-client