This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36CC8EB/B8DAD9A6B0ED11EC8494D0815A40D577/htX2BC5GaJ_lpQPn0t-J8OP8khQ.mft
File:                     htX2BC5GaJ_lpQPn0t-J8OP8khQ.mft (raw, json)
Hash identifier:          Q8qtzDYr0xRKBqhW3fZ0u3BXOHk3Reafz/woMRCVbVE=
Subject key identifier:   A1:81:53:D6:59:A0:43:5B:62:2B:77:BE:43:E6:B1:FE:04:8E:17:44
Authority key identifier: 86:D5:F6:04:2E:46:68:9F:E5:A5:03:E7:D2:DF:89:F0:E3:FC:92:14
Certificate issuer:       /CN=F36CC8EBAF/serialNumber=86D5F6042E46689FE5A503E7D2DF89F0E3FC9214
Certificate serial:       0576
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/htX2BC5GaJ_lpQPn0t-J8OP8khQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36CC8EB/B8DAD9A6B0ED11EC8494D0815A40D577/htX2BC5GaJ_lpQPn0t-J8OP8khQ.mft
Manifest number:          0575
Signing time:             Sat 20 Dec 2025 02:41:43 +0000
Manifest this update:     Sat 20 Dec 2025 02:41:42 +0000
Manifest next update:     Mon 22 Dec 2025 02:41:42 +0000
Files and hashes:         1: htX2BC5GaJ_lpQPn0t-J8OP8khQ.crl (hash: 8n7TA+9SMGM7ouSXOQ5xn5Yr7Tq8KBBiFxJJ4U+iFzY=)
                          2: 79EE3F02B0EE11ECBF890E845A40D577.roa (hash: Ubonh4WupVYX7KDVzMvxh6Y6MxDnvCg7ttFECjnjgfI=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36CC8EB/B8DAD9A6B0ED11EC8494D0815A40D577/htX2BC5GaJ_lpQPn0t-J8OP8khQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36CC8EB/B8DAD9A6B0ED11EC8494D0815A40D577/htX2BC5GaJ_lpQPn0t-J8OP8khQ.mft
                          rsync://rpki.afrinic.net/repository/afrinic/htX2BC5GaJ_lpQPn0t-J8OP8khQ.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 22 Dec 2025 00:06:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1398 (0x576)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36CC8EBAF, serialNumber=86D5F6042E46689FE5A503E7D2DF89F0E3FC9214
        Validity
            Not Before: Dec 20 02:41:42 2025 GMT
            Not After : Dec 22 02:41:42 2025 GMT
        Subject: CN=69460ce6-bd76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:27:1d:99:87:f2:f8:7d:b3:5f:11:14:85:f0:
                    fa:74:10:c4:a1:21:35:26:59:51:09:91:d5:f9:d8:
                    b1:85:68:02:9e:fe:c5:ef:93:92:ef:cf:59:69:bd:
                    c0:a3:4e:37:2e:96:d9:99:76:9a:13:fd:45:32:97:
                    11:e4:c9:ba:f4:50:33:81:ef:3b:a4:8a:6f:eb:e1:
                    18:16:f6:e8:98:db:c5:c3:82:99:a9:6c:06:c8:40:
                    c9:cf:8e:98:e9:fe:1b:f4:cb:36:0f:84:1e:9a:5a:
                    e7:57:d4:72:5a:7c:d9:fe:19:34:0c:88:80:53:0b:
                    df:da:61:aa:c0:da:7b:27:4a:9d:02:91:ac:19:6c:
                    5d:9e:28:f7:43:f6:3a:ba:d8:08:90:31:ad:f3:96:
                    08:6d:86:09:d7:eb:5e:9d:39:2c:59:f3:06:73:b3:
                    8f:52:45:ee:f4:54:52:d9:8a:b1:1e:ba:ea:67:9d:
                    4a:da:2b:09:44:37:46:28:14:56:a9:fb:9d:26:d3:
                    cd:7a:71:b5:19:bf:e4:a7:56:32:47:61:de:86:4b:
                    18:ff:91:d3:39:3f:fb:c8:80:ad:91:0a:57:0f:10:
                    26:4b:c5:90:51:d5:ab:d8:79:36:a2:86:12:cf:ed:
                    84:23:8d:dd:6a:4d:6a:9f:09:d6:6c:64:2c:26:5e:
                    04:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:81:53:D6:59:A0:43:5B:62:2B:77:BE:43:E6:B1:FE:04:8E:17:44
            X509v3 Authority Key Identifier:
                keyid:86:D5:F6:04:2E:46:68:9F:E5:A5:03:E7:D2:DF:89:F0:E3:FC:92:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36CC8EB/B8DAD9A6B0ED11EC8494D0815A40D577/htX2BC5GaJ_lpQPn0t-J8OP8khQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/htX2BC5GaJ_lpQPn0t-J8OP8khQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36CC8EB/B8DAD9A6B0ED11EC8494D0815A40D577/htX2BC5GaJ_lpQPn0t-J8OP8khQ.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         e2:70:7d:09:08:a7:e6:11:d5:20:3c:5e:8f:a6:ba:01:b2:c7:
         e1:c2:1b:6d:0d:f7:d5:7f:eb:94:d8:0c:30:75:84:13:b3:5f:
         56:43:0b:a2:93:2b:0d:03:6f:e6:ef:f2:60:8e:de:53:1b:37:
         8c:e5:7d:ee:54:dd:22:35:55:ec:cc:2d:ed:c5:0b:6b:1e:fa:
         4b:34:4e:05:44:bd:7d:81:1d:58:7d:df:4a:c5:ee:e7:7d:b1:
         c0:2d:03:0a:f1:a8:75:72:39:84:fc:6b:76:67:11:8a:c5:43:
         82:12:ca:42:8d:a1:e8:87:68:6b:01:34:b0:11:9e:80:c3:97:
         52:21:19:50:2e:73:5d:7f:6f:23:35:07:32:58:7e:27:52:5b:
         2b:b9:3e:13:4e:3b:46:18:e0:8f:99:20:0f:d1:be:24:0e:ad:
         7d:72:65:27:ff:51:86:62:21:94:49:27:fc:5b:2b:94:cc:2b:
         fa:f2:ed:9b:b9:dd:50:d3:6f:34:79:5c:8d:5a:b5:2a:43:a7:
         84:af:e5:aa:05:c5:01:81:5b:c3:90:6c:d9:a7:db:3f:5f:ab:
         a0:40:6c:06:73:b2:9c:98:1c:fe:87:a0:04:ae:7a:b2:0f:4e:
         0c:47:01:13:4f:17:48:26:e0:94:36:e0:43:d8:20:fc:3e:aa:
         ea:e8:00:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 11:23:01 2025 by rpki-client