This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C8371/EC0AE8747AFA11E988A3C33CF8AEA228/e5ZbZMPnJLk_wAsYbhXjXO1TXcc.mft
File:                     e5ZbZMPnJLk_wAsYbhXjXO1TXcc.mft (raw, json)
Hash identifier:          zTScYMcGfDcftehV1eovhTEXx6VsPZ1TjEEqnEjOlJM=
Subject key identifier:   06:72:F3:12:92:61:46:07:70:68:E1:F5:3B:EC:B0:FA:75:FC:EA:2C
Authority key identifier: 7B:96:5B:64:C3:E7:24:B9:3F:C0:0B:18:6E:15:E3:5C:ED:53:5D:C7
Certificate issuer:       /CN=F36C8371AF/serialNumber=7B965B64C3E724B93FC00B186E15E35CED535DC7
Certificate serial:       09E8
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/e5ZbZMPnJLk_wAsYbhXjXO1TXcc.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C8371/EC0AE8747AFA11E988A3C33CF8AEA228/e5ZbZMPnJLk_wAsYbhXjXO1TXcc.mft
Manifest number:          09C9
Signing time:             Thu 25 Dec 2025 01:21:06 +0000
Manifest this update:     Thu 25 Dec 2025 01:21:05 +0000
Manifest next update:     Sat 27 Dec 2025 01:21:05 +0000
Files and hashes:         1: e5ZbZMPnJLk_wAsYbhXjXO1TXcc.crl (hash: YoEPOeV0YXr71bfFx3htLdzAXtgE+j36MbqX3L0MHJw=)
                          2: 83DE5F6A846D11EFA57E969F762E951A.roa (hash: IHDNSoDz6NaLFKQMla3bz7pkaWMQeK4uJ2veJcSe6Bo=)
                          3: 034D2B64846E11EF9FCBBFA3762E951A.roa (hash: MyH4BxPN5oQf/ANUALV0gIzKpengDwYp7tXNj92dOUA=)
                          4: 234C0456853311EFBF75427C762E951A.roa (hash: uuNRG2eR48PpA2s/qJek6gIiTSySHcCAlVVVdllLteQ=)
                          5: 03C4F3DE847211EFA62717BC762E951A.roa (hash: DqzPe8h8VGO/3zmxtNnExqcXOxGel0PuulNOoKoDgfw=)
                          6: 6A1E070A846E11EF95C3ECA5762E951A.roa (hash: qXYZkDeWWR0u4xjdfmy4wQ/7TN06VLsNt66GOFiNZ4M=)
                          7: D93E38CC846D11EFB9E4AEA1762E951A.roa (hash: l368pZGbrsHe3aKYVyLgSeJ6hE8hbIVXQuNLEe/h0d0=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36C8371/EC0AE8747AFA11E988A3C33CF8AEA228/e5ZbZMPnJLk_wAsYbhXjXO1TXcc.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36C8371/EC0AE8747AFA11E988A3C33CF8AEA228/e5ZbZMPnJLk_wAsYbhXjXO1TXcc.mft
                          rsync://rpki.afrinic.net/repository/afrinic/e5ZbZMPnJLk_wAsYbhXjXO1TXcc.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 27 Dec 2025 00:06:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2536 (0x9e8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C8371AF, serialNumber=7B965B64C3E724B93FC00B186E15E35CED535DC7
        Validity
            Not Before: Dec 25 01:21:05 2025 GMT
            Not After : Dec 27 01:21:05 2025 GMT
        Subject: CN=694c9182-c0d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:43:98:b4:78:5d:ba:da:c2:98:b3:2e:e3:18:
                    82:ab:a2:bd:17:0e:0f:f8:45:45:06:9b:7d:63:3e:
                    eb:54:f5:0a:8c:65:5d:41:4d:31:be:74:90:c3:54:
                    74:ce:47:e6:5b:f7:7a:04:0a:4b:8d:a3:1b:fb:9b:
                    e6:d5:90:a9:29:18:f2:20:90:96:eb:0f:ca:a6:d2:
                    2e:a0:c1:12:70:ca:ad:59:d7:5b:64:ba:59:1f:29:
                    da:8c:21:68:70:48:1c:f6:34:17:00:54:ca:09:0b:
                    63:1b:30:5e:06:e7:7b:80:8e:58:f9:20:3f:44:da:
                    07:69:be:d9:71:ae:14:c6:cf:0d:96:89:2c:7f:72:
                    80:9e:1c:cf:2e:99:3f:fd:12:3e:77:b7:ed:28:ee:
                    76:89:9a:10:86:7c:02:55:7d:3e:db:82:97:be:ed:
                    6e:f0:37:d3:5e:49:34:7f:7f:cc:d1:0f:22:6c:a5:
                    30:1e:36:aa:33:65:91:e2:df:2c:1f:6d:64:c8:f0:
                    8a:30:4a:b3:a3:d7:40:6e:e6:d3:48:fd:e3:bd:8b:
                    a2:7a:68:e2:92:4f:f4:ec:93:d0:20:c0:c1:09:b6:
                    ae:bb:8b:c2:55:0a:2c:19:ff:e7:2f:6a:fa:ad:20:
                    5c:bc:28:cd:8c:c9:34:42:fe:bc:3b:12:cf:33:85:
                    da:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:72:F3:12:92:61:46:07:70:68:E1:F5:3B:EC:B0:FA:75:FC:EA:2C
            X509v3 Authority Key Identifier:
                keyid:7B:96:5B:64:C3:E7:24:B9:3F:C0:0B:18:6E:15:E3:5C:ED:53:5D:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C8371/EC0AE8747AFA11E988A3C33CF8AEA228/e5ZbZMPnJLk_wAsYbhXjXO1TXcc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/e5ZbZMPnJLk_wAsYbhXjXO1TXcc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C8371/EC0AE8747AFA11E988A3C33CF8AEA228/e5ZbZMPnJLk_wAsYbhXjXO1TXcc.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:3a:0a:eb:88:6f:65:7d:3a:bc:ae:3d:d8:b7:80:7b:1a:65:
         dd:31:4c:6c:1d:5a:8a:23:44:c8:85:5c:d2:a0:62:bb:27:6f:
         83:db:07:e2:4e:81:07:a6:e3:ad:f1:bd:ea:f5:f9:35:6e:5a:
         f9:1e:0a:3c:54:6a:21:8b:88:c0:8b:67:c5:67:61:7d:4e:2b:
         a8:e7:54:2d:cf:4e:a7:56:1b:ae:26:66:57:4e:42:97:f8:14:
         cd:9c:f9:01:87:6a:c6:98:c0:73:a5:5b:d5:00:c0:4a:58:d8:
         84:e5:16:12:f9:68:40:f9:7b:64:cd:20:40:ff:85:fb:ad:01:
         8d:6f:a5:ca:13:b5:18:c4:01:5c:d9:de:30:90:42:1d:9f:9a:
         bc:51:88:86:7b:77:14:e8:34:57:62:a0:4e:fe:ba:6f:33:69:
         dc:b6:10:7a:1f:9c:eb:84:96:2d:02:8a:28:32:27:29:2c:b9:
         8d:a4:aa:02:f1:d0:2d:97:ed:e8:3c:b4:f9:c5:77:c2:80:a9:
         6c:4d:fe:4e:d6:d7:3d:93:9a:fa:61:c0:00:12:24:2f:27:c1:
         90:75:88:db:90:0c:8c:bf:30:9a:c5:96:fe:03:72:2a:2a:48:
         40:a5:f7:04:03:c8:a1:c9:06:65:e8:8f:08:8c:93:a7:3d:39:
         00:72:f7:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 25 14:20:02 2025 by rpki-client