This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D289C/FB7081DCA87411E9AC77AB45F8AEA228/FUgKw-djfPKntoh6_VGlPwPmrUc.mft
File:                     FUgKw-djfPKntoh6_VGlPwPmrUc.mft (raw, json)
Hash identifier:          BkUrTpxSBmGc4vYtufnqjh0N+OLjwM2gy0b2JhAIS70=
Subject key identifier:   71:16:94:A8:89:51:5D:8B:B9:99:16:BC:00:4D:BB:9A:71:79:1E:7F
Authority key identifier: 15:48:0A:C3:E7:63:7C:F2:A7:B6:88:7A:FD:51:A5:3F:03:E6:AD:47
Certificate issuer:       /CN=F36D289CAF/serialNumber=15480AC3E7637CF2A7B6887AFD51A53F03E6AD47
Certificate serial:       0980
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/FUgKw-djfPKntoh6_VGlPwPmrUc.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36D289C/FB7081DCA87411E9AC77AB45F8AEA228/FUgKw-djfPKntoh6_VGlPwPmrUc.mft
Manifest number:          097C
Signing time:             Thu 25 Dec 2025 01:31:54 +0000
Manifest this update:     Thu 25 Dec 2025 01:31:53 +0000
Manifest next update:     Sat 27 Dec 2025 01:31:53 +0000
Files and hashes:         1: FUgKw-djfPKntoh6_VGlPwPmrUc.crl (hash: cJvxGo1odosJC92EHobIylpHxqBwBPY8uutwayb1sZQ=)
                          2: 967E592CF1E611EFBCF7DD4F762E951A.roa (hash: OyrLKAFW3d4E09yYEW9wskKKqknjSYiMg4ra/6illO4=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36D289C/FB7081DCA87411E9AC77AB45F8AEA228/FUgKw-djfPKntoh6_VGlPwPmrUc.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36D289C/FB7081DCA87411E9AC77AB45F8AEA228/FUgKw-djfPKntoh6_VGlPwPmrUc.mft
                          rsync://rpki.afrinic.net/repository/afrinic/FUgKw-djfPKntoh6_VGlPwPmrUc.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 27 Dec 2025 00:06:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2432 (0x980)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36D289CAF, serialNumber=15480AC3E7637CF2A7B6887AFD51A53F03E6AD47
        Validity
            Not Before: Dec 25 01:31:53 2025 GMT
            Not After : Dec 27 01:31:53 2025 GMT
        Subject: CN=694c940a-b333
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:ae:5e:2e:8e:2f:7a:68:a0:be:dc:73:49:ff:
                    40:fc:9c:13:c8:89:2f:70:8c:07:45:60:c3:82:80:
                    27:61:8e:21:30:42:de:15:1f:f9:9d:0c:4a:03:67:
                    2e:95:ff:b5:2a:20:54:92:9e:b9:04:18:72:be:a2:
                    8d:96:a0:1d:36:1b:ff:39:90:a0:68:c1:00:6a:ea:
                    74:e6:7a:c0:d0:71:ef:1c:12:4c:27:54:5f:09:21:
                    43:fa:06:c0:cb:0e:0a:65:f6:cc:59:92:70:69:2d:
                    6e:2f:fc:3d:88:da:e7:83:5f:38:61:9e:86:d6:35:
                    38:0e:25:8d:bb:92:8d:f7:79:7c:70:78:65:9c:0d:
                    75:1e:f5:b6:8e:98:6d:f7:a9:01:45:06:2e:ed:27:
                    82:c0:3a:8f:09:cf:e2:24:35:eb:c7:32:c0:d6:9d:
                    02:09:c8:4f:41:1a:c4:5d:d2:8f:14:fb:77:23:89:
                    39:b1:eb:4e:ce:63:38:c5:c7:1d:8b:da:73:e2:81:
                    86:3d:94:ab:5e:95:c1:02:41:57:8d:9e:c8:b2:04:
                    96:81:8d:bc:e1:73:0a:78:c7:9f:25:ff:8e:04:ce:
                    96:fe:37:5d:10:fb:b2:82:ce:d5:1b:94:b6:aa:2f:
                    20:39:b7:2e:35:c7:4b:97:4f:19:66:3f:55:29:b1:
                    a4:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:16:94:A8:89:51:5D:8B:B9:99:16:BC:00:4D:BB:9A:71:79:1E:7F
            X509v3 Authority Key Identifier:
                keyid:15:48:0A:C3:E7:63:7C:F2:A7:B6:88:7A:FD:51:A5:3F:03:E6:AD:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36D289C/FB7081DCA87411E9AC77AB45F8AEA228/FUgKw-djfPKntoh6_VGlPwPmrUc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/FUgKw-djfPKntoh6_VGlPwPmrUc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D289C/FB7081DCA87411E9AC77AB45F8AEA228/FUgKw-djfPKntoh6_VGlPwPmrUc.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:3c:13:51:12:40:83:81:35:08:4c:13:74:a0:7a:76:f5:a8:
         dd:15:f4:dc:cf:6a:3a:f7:b1:5f:be:d3:18:c1:ae:2e:f3:60:
         da:a9:1a:62:3e:06:09:82:e8:ae:a2:3b:b8:9a:d4:aa:69:a8:
         01:8c:d6:dc:cc:17:cb:94:f1:16:d6:65:26:cb:9d:2b:64:c6:
         67:92:76:32:37:3a:2b:c6:e8:5e:77:f3:79:52:9f:e3:74:27:
         84:20:ef:e8:33:93:0c:eb:20:06:fd:b1:11:50:db:ed:19:a9:
         e3:b5:b2:98:ab:3a:49:74:86:25:dd:2b:5e:99:5c:9c:bf:5e:
         5b:4a:22:01:19:91:05:a0:84:96:b4:e4:aa:97:c0:3f:3d:d1:
         09:b1:71:3e:64:70:a8:d6:0f:60:f9:9c:75:b0:11:18:ee:56:
         fe:1a:4a:94:8a:5e:71:9a:18:4e:c9:79:fe:32:b7:9d:e0:44:
         36:49:f0:7a:b3:c8:37:64:30:8b:a4:e1:24:97:bf:f8:a3:bb:
         c2:f0:b9:27:f9:c4:b9:e7:df:37:04:9a:e5:98:a0:b4:37:a5:
         2a:20:91:53:51:5e:9d:e9:d3:d5:61:36:f3:40:11:6f:88:fe:
         58:7c:f6:a2:73:61:e0:8e:14:49:a4:f9:6a:1c:b7:f9:ea:67:
         f2:b8:50:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 25 17:12:02 2025 by rpki-client