This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C6E7C/2BD3F1B6590111EDA097F2F0F1222468/g90Sbl5YX_qT9fH_Xe72__27_6Y.mft
File:                     g90Sbl5YX_qT9fH_Xe72__27_6Y.mft (raw, json)
Hash identifier:          7tfIQ2W6X1Uu14ztJNLrjCPgyf5BAe/of6PwhO9beEY=
Subject key identifier:   A4:FA:1C:2B:0C:7A:38:5F:67:88:95:B3:E0:53:90:33:1B:B1:42:6C
Authority key identifier: 83:DD:12:6E:5E:58:5F:FA:93:F5:F1:FF:5D:EE:F6:FF:FD:BB:FF:A6
Certificate issuer:       /CN=F36C6E7CAF/serialNumber=83DD126E5E585FFA93F5F1FF5DEEF6FFFDBBFFA6
Certificate serial:       04B3
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/g90Sbl5YX_qT9fH_Xe72__27_6Y.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C6E7C/2BD3F1B6590111EDA097F2F0F1222468/g90Sbl5YX_qT9fH_Xe72__27_6Y.mft
Manifest number:          04AB
Signing time:             Sat 20 Dec 2025 03:06:50 +0000
Manifest this update:     Sat 20 Dec 2025 03:06:49 +0000
Manifest next update:     Mon 22 Dec 2025 03:06:49 +0000
Files and hashes:         1: g90Sbl5YX_qT9fH_Xe72__27_6Y.crl (hash: kPK0XH8JBZhMfKnj0Gm45++eKCsldG5Cb+WeNU6tIKc=)
                          2: 65252E02590211EDBF02C4F3F1222468.roa (hash: 8HArfLxEz3rtchRkhuCmvZh3DtTsygHByrQd6+pFS1Q=)
                          3: 5EFA3278F0CA11EEA9DC16BC775412E6.roa (hash: 3auDBpHpM3kdULnRRSm/mIzDvmza9Nwt6gL4Un18lvA=)
                          4: 90AE430C590111EDB016F6F1F1222468.roa (hash: 3upW7kKfQQB5ccFKPGm0OT2GXHcTu33u7KYhatRBj9E=)
                          5: 44AA2642DD5211EFB4022CA6762E951A.roa (hash: YLlkpcwgvPAJRBxib2dLmg6by1FzGd47JbcV2KYgirg=)
                          6: 356E2178590211EDA91448F3F1222468.roa (hash: D+uxHeQ3C4tsnLo91SN7iKO2k3Kr8nhEm63S02dJLSQ=)
                          7: 55658E129FF011EF840C519B762E951A.roa (hash: SQ6x/8wlXxQQhSUXwwgi7zRj4j3gnNlbtGPHAue35w4=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36C6E7C/2BD3F1B6590111EDA097F2F0F1222468/g90Sbl5YX_qT9fH_Xe72__27_6Y.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36C6E7C/2BD3F1B6590111EDA097F2F0F1222468/g90Sbl5YX_qT9fH_Xe72__27_6Y.mft
                          rsync://rpki.afrinic.net/repository/afrinic/g90Sbl5YX_qT9fH_Xe72__27_6Y.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 22 Dec 2025 03:06:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1203 (0x4b3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C6E7CAF, serialNumber=83DD126E5E585FFA93F5F1FF5DEEF6FFFDBBFFA6
        Validity
            Not Before: Dec 20 03:06:49 2025 GMT
            Not After : Dec 22 03:06:49 2025 GMT
        Subject: CN=694612ca-701f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:a8:e8:27:52:f8:99:b0:cb:6c:fe:87:50:3b:
                    7b:28:26:51:14:11:6e:07:f3:0c:2b:73:8a:e5:57:
                    f1:01:a0:d5:10:33:ea:c7:0f:a9:3c:56:dd:a8:9f:
                    34:3f:2c:45:68:e3:85:25:cc:85:14:98:d7:af:e7:
                    b8:64:61:06:44:3e:63:b7:e9:91:75:a2:34:ce:27:
                    76:56:91:4c:50:1f:14:82:9d:ec:ed:5b:32:54:e6:
                    b7:a3:ee:12:5a:8d:b6:7f:31:8e:59:11:b3:4b:e9:
                    ae:9c:a7:c0:3c:da:06:82:00:c3:f9:1d:e9:00:2d:
                    dd:fa:55:35:10:28:5b:2f:03:12:90:87:d2:24:76:
                    a2:1a:95:b0:09:cf:07:ea:4a:92:11:23:75:27:5d:
                    ae:cd:ae:67:45:6d:9a:a9:00:11:f5:70:0c:0e:23:
                    26:44:b2:b4:99:33:f4:db:77:ad:45:b0:66:ff:14:
                    7e:6d:82:c0:94:01:8f:d8:31:f6:89:9f:30:34:03:
                    5e:5c:93:63:ea:79:89:6b:71:11:01:a2:04:55:64:
                    ad:62:06:0a:11:84:e5:a7:b6:56:c5:47:a5:b6:a4:
                    9d:fe:d3:f8:f3:e2:1a:01:f3:ba:55:ac:d6:83:ef:
                    3a:f9:49:8e:25:de:ae:9e:2c:a0:75:6b:fc:54:f8:
                    c5:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:FA:1C:2B:0C:7A:38:5F:67:88:95:B3:E0:53:90:33:1B:B1:42:6C
            X509v3 Authority Key Identifier:
                keyid:83:DD:12:6E:5E:58:5F:FA:93:F5:F1:FF:5D:EE:F6:FF:FD:BB:FF:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C6E7C/2BD3F1B6590111EDA097F2F0F1222468/g90Sbl5YX_qT9fH_Xe72__27_6Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/g90Sbl5YX_qT9fH_Xe72__27_6Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C6E7C/2BD3F1B6590111EDA097F2F0F1222468/g90Sbl5YX_qT9fH_Xe72__27_6Y.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:e9:6c:41:7c:57:b4:f0:ed:55:9c:93:57:e2:8e:fc:27:a5:
         c4:d1:0f:fa:87:65:78:ff:e6:0c:dc:17:5c:be:1f:07:23:df:
         74:a2:3e:d5:9e:d7:3b:ff:33:a5:66:f7:e5:87:c7:a2:54:4e:
         75:39:98:b2:57:09:4e:47:fd:f3:d9:0b:6a:06:31:a8:14:7d:
         b1:81:fa:3a:ae:d0:2b:51:fe:3a:33:58:bc:5d:ac:d4:c2:68:
         fe:e7:97:d2:83:cc:c4:19:f3:77:40:d7:80:40:6b:f6:d6:b4:
         21:da:91:88:2e:22:60:ae:17:df:91:07:c2:72:b5:8c:bb:a0:
         9c:12:91:24:16:d4:2d:c7:b3:0f:64:3d:8d:54:db:db:fd:4e:
         4d:5a:44:bf:53:05:19:16:56:ea:dd:4e:ff:2f:ae:e5:91:d0:
         e9:45:4a:aa:03:40:20:62:4c:76:dc:34:9b:de:cc:05:3b:57:
         ed:cd:75:1f:c6:69:d1:44:bd:4f:71:84:08:ca:3f:63:29:ff:
         41:7a:2c:05:de:b4:b1:c1:99:97:b7:4b:dd:4b:3b:0f:a5:98:
         cd:93:0b:58:a6:2d:43:87:ac:ff:20:c2:b7:13:2a:33:3b:a1:
         38:f2:49:c5:c3:39:7b:ff:18:b3:ff:63:b8:fd:2e:db:ec:9c:
         51:90:55:87
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICBLMwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QzZFN0NBRjExMC8GA1UEBRMoODNERDEyNkU1RTU4NUZGQTkzRjVGMUZGNURFRUY2
RkZGREJCRkZBNjAeFw0yNTEyMjAwMzA2NDlaFw0yNTEyMjIwMzA2NDlaMBgxFjAU
BgNVBAMTDTY5NDYxMmNhLTcwMWYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDWqOgnUviZsMts/odQO3soJlEUEW4H8wwrc4rlV/EBoNUQM+rHD6k8Vt2o
nzQ/LEVo44UlzIUUmNev57hkYQZEPmO36ZF1ojTOJ3ZWkUxQHxSCneztWzJU5rej
7hJajbZ/MY5ZEbNL6a6cp8A82gaCAMP5HekALd36VTUQKFsvAxKQh9IkdqIalbAJ
zwfqSpIRI3UnXa7NrmdFbZqpABH1cAwOIyZEsrSZM/Tbd61FsGb/FH5tgsCUAY/Y
MfaJnzA0A15ck2PqeYlrcREBogRVZK1iBgoRhOWntlbFR6W2pJ3+0/jz4hoB87pV
rNaD7zr5SY4l3q6eLKB1a/xU+MVtAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUpPoc
Kwx6OF9niJWz4FOQMxuxQmwwHwYDVR0jBBgwFoAUg90Sbl5YX/qT9fH/Xe72//27
/6YwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkM2RTdDLzJCRDNGMUI2NTkwMTExRURBMDk3RjJGMEYxMjIyNDY4L2c5MFNi
bDVZWF9xVDlmSF9YZTcyX18yN182WS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2c5MFNibDVZWF9xVDlmSF9YZTcyX18yN182WS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2QzZFN0MvMkJEM0YxQjY1OTAxMTFFREEwOTdGMkYwRjEy
MjI0NjgvZzkwU2JsNVlYX3FUOWZIX1hlNzJfXzI3XzZZLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAd6WxBfFe08O1VnJNX4o78J6XE0Q/6
h2V4/+YM3Bdcvh8HI990oj7Vntc7/zOlZvflh8eiVE51OZiyVwlOR/3z2QtqBjGo
FH2xgfo6rtArUf46M1i8XazUwmj+55fSg8zEGfN3QNeAQGv21rQh2pGILiJgrhff
kQfCcrWMu6CcEpEkFtQtx7MPZD2NVNvb/U5NWkS/UwUZFlbq3U7/L67lkdDpRUqq
A0AgYkx23DSb3swFO1ftzXUfxmnRRL1PcYQIyj9jKf9BeiwF3rSxwZmXt0vdSzsP
pZjNkwtYpi1Dh6z/IMK3EyozO6E48knFwzl7/xiz/2O4/S7b7JxRkFWH
-----END CERTIFICATE-----
Generated at Sun Dec 21 03:55:06 2025 by rpki-client