This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D3DBF/063FE546361B11F0A5A10E7CDAE4EC9C/GowOsmMfWAdEOXlYTg1NL6iFp2A.mft
File:                     GowOsmMfWAdEOXlYTg1NL6iFp2A.mft (raw, json)
Hash identifier:          0KsPig7aYaYf0uZSLZ2+mk6ZMe0gPSkkTbDzqODm/Jw=
Subject key identifier:   16:FE:71:75:76:ED:C0:C5:93:3C:A4:5D:AC:65:56:19:B7:4C:8E:4B
Authority key identifier: 1A:8C:0E:B2:63:1F:58:07:44:39:79:58:4E:0D:4D:2F:A8:85:A7:60
Certificate issuer:       /CN=F36D3DBFAF/serialNumber=1A8C0EB2631F5807443979584E0D4D2FA885A760
Certificate serial:       E2
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/GowOsmMfWAdEOXlYTg1NL6iFp2A.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36D3DBF/063FE546361B11F0A5A10E7CDAE4EC9C/GowOsmMfWAdEOXlYTg1NL6iFp2A.mft
Manifest number:          E1
Signing time:             Sat 27 Dec 2025 05:00:32 +0000
Manifest this update:     Sat 27 Dec 2025 05:00:31 +0000
Manifest next update:     Mon 29 Dec 2025 05:00:31 +0000
Files and hashes:         1: GowOsmMfWAdEOXlYTg1NL6iFp2A.crl (hash: WFMD25IcRD60lTFn6ZPuOJVsnNVeNkYlxyJiQPk4bI4=)
                          2: B9050D40361C11F093254187DAE4EC9C.roa (hash: ykB61aa7osAic1a6NuVWCNXOxA9WGDqvh0GJYCwmQc8=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36D3DBF/063FE546361B11F0A5A10E7CDAE4EC9C/GowOsmMfWAdEOXlYTg1NL6iFp2A.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36D3DBF/063FE546361B11F0A5A10E7CDAE4EC9C/GowOsmMfWAdEOXlYTg1NL6iFp2A.mft
                          rsync://rpki.afrinic.net/repository/afrinic/GowOsmMfWAdEOXlYTg1NL6iFp2A.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 29 Dec 2025 05:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 226 (0xe2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36D3DBFAF, serialNumber=1A8C0EB2631F5807443979584E0D4D2FA885A760
        Validity
            Not Before: Dec 27 05:00:31 2025 GMT
            Not After : Dec 29 05:00:31 2025 GMT
        Subject: CN=694f67f0-e165
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:e3:75:30:0b:f9:14:f3:b9:c6:be:62:27:fa:
                    b1:22:4e:5a:bd:bb:bb:09:ce:26:f6:73:38:68:b5:
                    f3:c0:50:ad:0f:5e:ae:6c:19:84:48:83:56:09:73:
                    10:ea:bb:97:fc:15:38:c5:54:27:15:d0:ea:87:69:
                    03:0e:a0:80:16:e4:06:1f:91:80:c6:f7:fa:6a:18:
                    04:62:03:3f:aa:79:01:d1:25:5a:e9:77:a9:92:d3:
                    59:71:92:03:11:ff:e0:49:c3:7d:c1:12:27:54:32:
                    59:1f:ad:67:a1:32:3e:81:06:9f:88:95:4b:3c:b7:
                    41:2d:e9:83:fc:a1:44:a3:72:95:97:c9:0c:bc:2b:
                    d6:93:94:17:a5:e8:2d:5d:f3:86:b4:fb:cf:b9:1e:
                    d1:a2:77:5b:69:93:19:c7:d9:06:79:76:01:f0:5d:
                    f1:c8:0c:b7:c5:29:05:e0:b2:e4:64:cf:ae:af:8c:
                    1f:4e:a0:d5:08:29:b2:60:f2:1f:f3:94:ca:1c:ef:
                    aa:33:2e:fe:06:6a:3c:2e:8f:bf:41:c4:e9:2b:b0:
                    37:f2:50:a0:48:8b:6c:b7:5a:5c:5f:36:5e:06:f9:
                    9e:7f:25:f1:87:ea:c5:c3:4b:63:56:9f:78:f1:2a:
                    8f:96:40:59:00:12:f9:e7:88:ab:89:0e:5b:45:c6:
                    32:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:FE:71:75:76:ED:C0:C5:93:3C:A4:5D:AC:65:56:19:B7:4C:8E:4B
            X509v3 Authority Key Identifier:
                keyid:1A:8C:0E:B2:63:1F:58:07:44:39:79:58:4E:0D:4D:2F:A8:85:A7:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36D3DBF/063FE546361B11F0A5A10E7CDAE4EC9C/GowOsmMfWAdEOXlYTg1NL6iFp2A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/GowOsmMfWAdEOXlYTg1NL6iFp2A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D3DBF/063FE546361B11F0A5A10E7CDAE4EC9C/GowOsmMfWAdEOXlYTg1NL6iFp2A.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:d8:b2:be:ed:dc:41:38:6f:cf:37:68:fb:b2:43:dd:0d:a8:
         21:4e:fe:12:47:d6:f0:8f:77:4c:89:ce:10:c4:e6:64:94:fc:
         b2:5f:bf:aa:56:4f:01:f0:f2:64:ff:75:9a:68:dc:46:f1:17:
         14:3f:8b:4e:32:b8:95:38:78:e6:78:54:b4:40:90:dd:42:fc:
         11:b3:20:da:46:1d:2e:05:df:8b:92:ba:8a:4f:00:0f:a8:9c:
         48:2c:78:af:59:ea:37:b7:e7:96:61:0f:fe:78:4a:c5:16:6d:
         23:16:42:29:b1:43:ab:6c:07:39:9b:d6:68:ff:0d:40:14:b3:
         77:dc:19:17:b8:7d:2b:56:9f:ca:e2:90:4e:c5:2f:1c:ba:79:
         0d:ba:06:f6:0e:92:4f:68:d6:71:ee:f9:f9:ec:f3:a1:78:22:
         fc:86:01:6f:a4:97:3d:17:88:06:d8:f1:2b:46:16:0d:b5:70:
         05:92:80:3b:13:76:07:3c:87:ac:b7:5f:aa:2e:67:ed:85:fa:
         d6:34:ad:82:13:a5:65:38:ed:08:76:d8:ae:cf:30:f5:a8:50:
         08:1f:81:c2:79:8c:9c:41:62:45:4c:d8:cd:76:e3:c0:8b:eb:
         ce:1b:3a:6c:8b:6f:11:c8:bd:79:de:23:d6:39:f4:7f:71:66:
         50:b6:0a:6a
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICAOIwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
RDNEQkZBRjExMC8GA1UEBRMoMUE4QzBFQjI2MzFGNTgwNzQ0Mzk3OTU4NEUwRDRE
MkZBODg1QTc2MDAeFw0yNTEyMjcwNTAwMzFaFw0yNTEyMjkwNTAwMzFaMBgxFjAU
BgNVBAMTDTY5NGY2N2YwLWUxNjUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC743UwC/kU87nGvmIn+rEiTlq9u7sJzib2czhotfPAUK0PXq5sGYRIg1YJ
cxDqu5f8FTjFVCcV0OqHaQMOoIAW5AYfkYDG9/pqGARiAz+qeQHRJVrpd6mS01lx
kgMR/+BJw33BEidUMlkfrWehMj6BBp+IlUs8t0Et6YP8oUSjcpWXyQy8K9aTlBel
6C1d84a0+8+5HtGid1tpkxnH2QZ5dgHwXfHIDLfFKQXgsuRkz66vjB9OoNUIKbJg
8h/zlMoc76ozLv4Gajwuj79BxOkrsDfyUKBIi2y3WlxfNl4G+Z5/JfGH6sXDS2NW
n3jxKo+WQFkAEvnniKuJDltFxjJDAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUFv5x
dXbtwMWTPKRdrGVWGbdMjkswHwYDVR0jBBgwFoAUGowOsmMfWAdEOXlYTg1NL6iF
p2AwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkQzREJGLzA2M0ZFNTQ2MzYxQjExRjBBNUExMEU3Q0RBRTRFQzlDL0dvd09z
bU1mV0FkRU9YbFlUZzFOTDZpRnAyQS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0dvd09zbU1mV0FkRU9YbFlUZzFOTDZpRnAyQS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2RDNEQkYvMDYzRkU1NDYzNjFCMTFGMEE1QTEwRTdDREFF
NEVDOUMvR293T3NtTWZXQWRFT1hsWVRnMU5MNmlGcDJBLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBo2LK+7dxBOG/PN2j7skPdDaghTv4S
R9bwj3dMic4QxOZklPyyX7+qVk8B8PJk/3WaaNxG8RcUP4tOMriVOHjmeFS0QJDd
QvwRsyDaRh0uBd+LkrqKTwAPqJxILHivWeo3t+eWYQ/+eErFFm0jFkIpsUOrbAc5
m9Zo/w1AFLN33BkXuH0rVp/K4pBOxS8cunkNugb2DpJPaNZx7vn57POheCL8hgFv
pJc9F4gG2PErRhYNtXAFkoA7E3YHPIest1+qLmfthfrWNK2CE6VlOO0IdtiuzzD1
qFAIH4HCeYycQWJFTNjNduPAi+vOGzpsi28RyL153iPWOfR/cWZQtgpq
-----END CERTIFICATE-----
Generated at Sun Dec 28 06:24:13 2025 by rpki-client