This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C6CA3/473DAE7E758D11EFAA2FD17B762E951A/pyLYSL7lGk0XK5yvr6SRkrkdjGI.mft
File:                     pyLYSL7lGk0XK5yvr6SRkrkdjGI.mft (raw, json)
Hash identifier:          //rf3OS9fVHjAqT8KnB+WyUAQn3f+UwwA3DHLW7ZHzg=
Subject key identifier:   2B:F8:5E:66:66:22:7D:23:07:50:B4:2A:5B:8D:C9:9C:80:04:82:C2
Authority key identifier: A7:22:D8:48:BE:E5:1A:4D:17:2B:9C:AF:AF:A4:91:92:B9:1D:8C:62
Certificate issuer:       /CN=F36C6CA3AF/serialNumber=A722D848BEE51A4D172B9CAFAFA49192B91D8C62
Certificate serial:       01DD
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/pyLYSL7lGk0XK5yvr6SRkrkdjGI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C6CA3/473DAE7E758D11EFAA2FD17B762E951A/pyLYSL7lGk0XK5yvr6SRkrkdjGI.mft
Manifest number:          01DA
Signing time:             Wed 17 Dec 2025 04:35:10 +0000
Manifest this update:     Wed 17 Dec 2025 04:35:09 +0000
Manifest next update:     Fri 19 Dec 2025 04:35:09 +0000
Files and hashes:         1: pyLYSL7lGk0XK5yvr6SRkrkdjGI.crl (hash: DT1r0SiksFYVGZS/pJVss1HsLSe9TH0w5bFzcSWYYRg=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36C6CA3/473DAE7E758D11EFAA2FD17B762E951A/pyLYSL7lGk0XK5yvr6SRkrkdjGI.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36C6CA3/473DAE7E758D11EFAA2FD17B762E951A/pyLYSL7lGk0XK5yvr6SRkrkdjGI.mft
                          rsync://rpki.afrinic.net/repository/afrinic/pyLYSL7lGk0XK5yvr6SRkrkdjGI.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 19 Dec 2025 00:06:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 477 (0x1dd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C6CA3AF, serialNumber=A722D848BEE51A4D172B9CAFAFA49192B91D8C62
        Validity
            Not Before: Dec 17 04:35:09 2025 GMT
            Not After : Dec 19 04:35:09 2025 GMT
        Subject: CN=694232fe-e420
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:c7:e7:a9:b4:cd:8b:b6:89:28:1c:e2:de:c3:
                    5c:6c:7d:e2:91:9a:4b:cc:e4:1c:6e:82:27:1b:ff:
                    e5:5d:fe:1b:76:0b:88:e7:94:dd:3b:23:47:74:cd:
                    43:fb:ec:1e:d9:91:fe:c1:6e:0d:af:8b:bc:5d:23:
                    23:f7:81:e3:6c:39:44:81:3b:02:a4:a1:b1:c3:97:
                    60:44:95:76:00:b5:bc:20:94:43:9f:1f:f3:46:56:
                    b1:e5:be:07:d5:16:66:a9:09:ae:be:54:c6:5d:85:
                    62:e8:9c:5f:d5:09:f9:a2:fd:df:8c:ae:2e:44:e7:
                    c0:02:9a:e2:0e:f3:db:ae:a2:de:05:a7:e6:a0:fc:
                    c0:e3:80:b3:a8:df:db:b7:e5:e1:86:06:69:11:e2:
                    3d:24:fa:87:f6:c4:ad:23:f4:40:a8:4c:29:ca:62:
                    68:5e:f6:a1:dd:de:cd:53:58:da:f1:fb:d3:68:a3:
                    3d:aa:f8:85:b5:55:1a:99:f2:a4:a0:ed:4c:da:f1:
                    a4:ee:c2:be:8a:d6:c8:17:ff:f5:8b:72:81:9b:57:
                    42:43:de:e3:16:8d:c1:85:06:b6:16:e1:43:80:5c:
                    da:0c:a2:96:09:14:36:6c:ce:d2:10:1c:82:ff:f0:
                    4e:5a:82:ff:5e:3d:27:55:22:51:77:32:77:ab:aa:
                    20:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:F8:5E:66:66:22:7D:23:07:50:B4:2A:5B:8D:C9:9C:80:04:82:C2
            X509v3 Authority Key Identifier:
                keyid:A7:22:D8:48:BE:E5:1A:4D:17:2B:9C:AF:AF:A4:91:92:B9:1D:8C:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C6CA3/473DAE7E758D11EFAA2FD17B762E951A/pyLYSL7lGk0XK5yvr6SRkrkdjGI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/pyLYSL7lGk0XK5yvr6SRkrkdjGI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C6CA3/473DAE7E758D11EFAA2FD17B762E951A/pyLYSL7lGk0XK5yvr6SRkrkdjGI.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:b4:23:ee:9b:da:7e:a9:72:20:91:64:2a:9b:b8:c5:cb:ed:
         9d:36:37:a8:70:be:6f:d2:65:0a:f6:54:e4:db:72:af:2d:61:
         60:12:c9:c2:93:3b:ab:2d:86:b7:e0:97:7f:d8:cb:28:0a:30:
         f1:c9:78:43:4d:2b:4a:e0:ca:40:08:01:89:47:25:e7:59:f3:
         48:d6:f5:d1:19:1f:42:96:24:5f:a9:f4:b8:54:97:5d:15:13:
         27:23:c5:46:5a:66:92:19:33:ed:14:7d:77:40:ae:1e:7b:78:
         14:b7:b0:82:90:61:2a:67:d4:2a:a5:dd:2f:5f:dd:ea:7e:fa:
         2b:27:60:54:3c:75:83:8c:eb:ce:e4:5c:06:3f:46:35:d5:b4:
         93:1c:10:b8:e9:c6:98:35:e2:27:cf:b2:85:95:af:e2:a8:07:
         d3:ac:6a:b4:61:03:bc:d2:94:5f:94:32:09:b2:4e:c8:56:b9:
         3d:b4:6b:15:60:f7:4c:b0:03:53:26:cc:98:a8:f8:e2:59:6a:
         96:37:59:5b:1f:73:7e:4c:ac:a4:eb:93:53:6f:b0:8a:95:85:
         55:db:d7:06:c0:4d:bb:26:78:e5:18:91:32:1e:dc:0b:1e:9f:
         c3:b2:4c:da:ce:e0:91:76:7f:d6:c6:ce:9f:26:07:a7:8c:ad:
         f3:23:6e:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 17 09:44:14 2025 by rpki-client