This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36CFBB0/4BB574F4D45211EF9F7859B1762E951A/wuBZxqiBjrGd_aowkraqE5_oOPY.mft
File:                     wuBZxqiBjrGd_aowkraqE5_oOPY.mft (raw, json)
Hash identifier:          NWF5AqXsoYuS1hUHcXFFZc6bECEsfP8M2bRQMyE1laE=
Subject key identifier:   E6:52:BA:3D:BA:42:94:15:B4:D3:38:B5:96:79:E3:03:6A:65:71:B2
Authority key identifier: C2:E0:59:C6:A8:81:8E:B1:9D:FD:AA:30:92:B6:AA:13:9F:E8:38:F6
Certificate issuer:       /CN=F36CFBB0AF/serialNumber=C2E059C6A8818EB19DFDAA3092B6AA139FE838F6
Certificate serial:       0161
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/wuBZxqiBjrGd_aowkraqE5_oOPY.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36CFBB0/4BB574F4D45211EF9F7859B1762E951A/wuBZxqiBjrGd_aowkraqE5_oOPY.mft
Manifest number:          0161
Signing time:             Sun 28 Dec 2025 04:55:14 +0000
Manifest this update:     Sun 28 Dec 2025 04:55:13 +0000
Manifest next update:     Tue 30 Dec 2025 04:55:13 +0000
Files and hashes:         1: wuBZxqiBjrGd_aowkraqE5_oOPY.crl (hash: THL3oP+Q52PZoOxG/qHTCkNT3EwT0uDtEfg1kbpo7SU=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36CFBB0/4BB574F4D45211EF9F7859B1762E951A/wuBZxqiBjrGd_aowkraqE5_oOPY.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36CFBB0/4BB574F4D45211EF9F7859B1762E951A/wuBZxqiBjrGd_aowkraqE5_oOPY.mft
                          rsync://rpki.afrinic.net/repository/afrinic/wuBZxqiBjrGd_aowkraqE5_oOPY.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 30 Dec 2025 04:55:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 353 (0x161)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36CFBB0AF, serialNumber=C2E059C6A8818EB19DFDAA3092B6AA139FE838F6
        Validity
            Not Before: Dec 28 04:55:13 2025 GMT
            Not After : Dec 30 04:55:13 2025 GMT
        Subject: CN=6950b832-d4db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:b2:c4:5e:15:06:12:90:7b:b7:16:f0:d0:cb:
                    64:ef:e1:66:a4:d5:34:ba:19:6a:4b:d2:47:20:eb:
                    1b:07:bb:73:85:c4:21:82:3e:33:88:d8:38:68:b4:
                    d3:16:39:73:2b:0a:f0:c9:d4:4f:b1:cd:15:59:3a:
                    ab:3b:47:a8:58:25:f8:da:64:d3:54:e1:1e:4f:84:
                    d1:41:2c:86:de:ff:ef:f7:25:e5:b9:2a:72:c5:ef:
                    d1:4f:6b:81:63:59:f2:40:7b:72:37:4c:6a:cf:7b:
                    3e:02:fb:a1:af:0f:ad:93:d5:a2:67:71:ce:4d:ab:
                    80:71:ad:3d:9e:72:a1:d4:df:80:b4:99:51:d2:9c:
                    6e:c3:9e:55:18:fd:9a:92:a3:6a:fc:52:55:c7:62:
                    a7:8b:dc:8f:d3:8c:30:84:1c:3b:1c:f9:88:52:f5:
                    8c:d6:5b:1f:98:fd:a0:96:4b:b3:a8:b4:48:92:a2:
                    5f:e0:4e:42:5f:0e:c0:00:18:1a:17:df:1b:5d:22:
                    ec:3a:9b:75:c0:3d:03:46:95:5c:a0:1b:9d:c1:9e:
                    ff:18:81:1c:ab:f0:0a:91:2d:6e:74:9f:17:7e:dd:
                    ef:2d:95:0a:c1:fe:d5:eb:b0:d9:c0:42:ab:7b:cd:
                    e3:b7:ff:a6:55:46:e2:a9:1f:0f:b0:40:48:fc:60:
                    ea:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:52:BA:3D:BA:42:94:15:B4:D3:38:B5:96:79:E3:03:6A:65:71:B2
            X509v3 Authority Key Identifier:
                keyid:C2:E0:59:C6:A8:81:8E:B1:9D:FD:AA:30:92:B6:AA:13:9F:E8:38:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36CFBB0/4BB574F4D45211EF9F7859B1762E951A/wuBZxqiBjrGd_aowkraqE5_oOPY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/wuBZxqiBjrGd_aowkraqE5_oOPY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36CFBB0/4BB574F4D45211EF9F7859B1762E951A/wuBZxqiBjrGd_aowkraqE5_oOPY.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:1f:a1:12:97:77:06:51:b1:80:32:23:5b:35:98:e0:16:bc:
         a6:a6:1d:1d:31:40:7a:da:ef:a9:49:7e:ec:2a:88:34:ac:62:
         2d:10:bd:fa:5f:a8:21:e4:99:46:47:38:86:b3:94:02:b0:32:
         14:a4:08:0b:24:8e:d9:21:9e:b3:08:24:65:68:59:76:00:d1:
         99:bf:34:bd:1e:6d:b5:f9:ee:9e:5c:c3:91:aa:15:fe:a0:d3:
         65:44:cf:f2:cc:55:fa:63:d2:bf:75:a1:19:8d:84:0b:eb:a7:
         9e:e3:92:12:5d:3e:bc:de:58:8a:f5:36:90:aa:94:23:10:c3:
         1b:3e:38:25:87:33:86:22:2f:fc:ab:5f:68:f2:ab:c4:ad:20:
         75:89:6e:35:65:88:31:8f:fa:69:4e:bb:6b:31:82:f0:8f:4f:
         e1:68:ba:ed:4c:ab:9b:7f:f6:2e:b2:ed:cb:d7:36:b8:44:b2:
         85:4b:a4:f7:a4:56:90:db:76:c9:f7:d2:68:7c:aa:71:cc:aa:
         08:90:b0:a5:4c:ae:2d:a8:91:e5:3d:b9:aa:ce:9c:4c:5d:47:
         17:e5:f1:50:b3:25:1f:74:aa:4e:2d:b1:fb:f7:0a:d2:6e:69:
         bc:ae:eb:ab:66:ac:44:f8:55:55:1b:dd:b6:a1:00:0e:19:c0:
         88:5f:24:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 29 05:24:00 2025 by rpki-client