This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D6E6D/324E8CBC814711E98C0F4E24F8AEA228/5MLmv0RjyOw0LEVfP-AW5c5TiH8.mft
File:                     5MLmv0RjyOw0LEVfP-AW5c5TiH8.mft (raw, json)
Hash identifier:          Z1izt9UR6exFWmtjeCF2kRuUujOVsxBG4xszAecdUDQ=
Subject key identifier:   06:AE:99:D2:15:62:B4:DB:94:3B:28:C6:C8:16:25:63:E6:DB:91:6A
Authority key identifier: E4:C2:E6:BF:44:63:C8:EC:34:2C:45:5F:3F:E0:16:E5:CE:53:88:7F
Certificate issuer:       /CN=F36D6E6DAF/serialNumber=E4C2E6BF4463C8EC342C455F3FE016E5CE53887F
Certificate serial:       09B1
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/5MLmv0RjyOw0LEVfP-AW5c5TiH8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36D6E6D/324E8CBC814711E98C0F4E24F8AEA228/5MLmv0RjyOw0LEVfP-AW5c5TiH8.mft
Manifest number:          09A8
Signing time:             Sat 20 Dec 2025 01:23:27 +0000
Manifest this update:     Sat 20 Dec 2025 01:23:26 +0000
Manifest next update:     Mon 22 Dec 2025 01:23:26 +0000
Files and hashes:         1: 5MLmv0RjyOw0LEVfP-AW5c5TiH8.crl (hash: YH5nCxhnzjj6iGIoemfKJENrqWtHFHGg+U22iG0IvF8=)
                          2: A70D973E035811EB8CD6BB2EF8AEA228.roa (hash: xD1TsSOLzb9zgs5taA+QevFCLmTa0OLA9qXS/G/GWVw=)
                          3: 6FCCF99E035911EBA2969D2FF8AEA228.roa (hash: Brj3mGjB3Yf03eWIJCSVbmDY44O5T8140En+VTMw/XM=)
                          4: 4AAB98F0035911EB9D53632FF8AEA228.roa (hash: u6MKKtyNGkyNHWMBVkyzfCJjg2ohp3vSDpNE9KtffTs=)
                          5: 08E422B6035911EBB3240F2FF8AEA228.roa (hash: /Zi4DjYvbwyH8lralhYmtbRDBTQdUunZaejcHcESqgQ=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36D6E6D/324E8CBC814711E98C0F4E24F8AEA228/5MLmv0RjyOw0LEVfP-AW5c5TiH8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36D6E6D/324E8CBC814711E98C0F4E24F8AEA228/5MLmv0RjyOw0LEVfP-AW5c5TiH8.mft
                          rsync://rpki.afrinic.net/repository/afrinic/5MLmv0RjyOw0LEVfP-AW5c5TiH8.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 22 Dec 2025 00:06:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2481 (0x9b1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36D6E6DAF, serialNumber=E4C2E6BF4463C8EC342C455F3FE016E5CE53887F
        Validity
            Not Before: Dec 20 01:23:26 2025 GMT
            Not After : Dec 22 01:23:26 2025 GMT
        Subject: CN=6945fa8f-22a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:e3:ab:7e:ed:0a:a5:3d:2e:4f:2f:82:98:27:
                    e7:f4:d8:51:07:55:a3:59:01:07:26:11:4a:d6:02:
                    0b:39:b2:f7:4f:26:27:b3:24:f0:f1:d7:2d:e4:7d:
                    5d:5b:67:e8:22:64:5e:b7:f5:5b:55:4c:61:67:30:
                    a2:17:32:51:7a:e7:8d:a4:e5:1f:e3:37:21:5f:22:
                    50:47:84:57:5e:a0:19:44:6b:66:b9:b1:92:5c:c8:
                    a4:a9:58:c9:77:0a:63:98:4c:ad:1a:7d:9e:2f:11:
                    c7:47:8b:a4:c5:06:b4:06:cb:24:9c:54:66:82:11:
                    a5:fd:b1:14:f3:e6:3d:f2:fe:8c:b2:53:1a:35:05:
                    c2:16:f9:f9:22:21:41:7b:a5:14:75:85:53:ee:71:
                    9a:8c:d5:d1:fb:7c:e7:d0:eb:a8:1e:35:3d:c9:3c:
                    5c:7e:06:4c:38:3b:56:f0:56:1a:70:3c:0a:8e:8c:
                    ce:72:c9:57:d8:95:7f:3f:b0:fe:a9:33:72:67:a2:
                    9b:ae:f5:8d:47:c2:14:92:c4:0d:85:46:53:78:7c:
                    d7:8c:cb:fd:78:35:fc:0d:5d:b2:0a:d5:fc:fb:2f:
                    fe:6e:be:82:48:11:e6:72:26:cc:ea:bf:9b:80:d9:
                    c6:55:64:f3:db:2d:22:8b:f8:c6:da:c2:29:10:77:
                    2a:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:AE:99:D2:15:62:B4:DB:94:3B:28:C6:C8:16:25:63:E6:DB:91:6A
            X509v3 Authority Key Identifier:
                keyid:E4:C2:E6:BF:44:63:C8:EC:34:2C:45:5F:3F:E0:16:E5:CE:53:88:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36D6E6D/324E8CBC814711E98C0F4E24F8AEA228/5MLmv0RjyOw0LEVfP-AW5c5TiH8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/5MLmv0RjyOw0LEVfP-AW5c5TiH8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D6E6D/324E8CBC814711E98C0F4E24F8AEA228/5MLmv0RjyOw0LEVfP-AW5c5TiH8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:5c:ee:9a:84:8b:23:cb:ec:07:85:10:3f:9a:c6:c0:49:6f:
         df:a6:6d:dc:76:77:a3:37:f0:62:15:c7:8e:2a:45:91:94:43:
         22:16:0c:97:5a:04:41:26:92:26:d0:8a:5b:5d:6f:35:2a:90:
         cf:86:b3:84:19:93:07:44:aa:3d:21:b4:f2:44:85:45:30:ab:
         51:3a:08:ca:96:77:1d:57:db:c7:d4:5b:14:0b:a9:09:a5:be:
         1e:25:70:e4:a9:7b:cd:42:8c:a9:37:ae:86:69:1c:d3:80:fc:
         b5:85:b9:e0:5a:3d:a6:56:aa:d1:72:10:bd:d2:6c:95:81:d8:
         b7:40:cc:d2:5d:08:03:12:4c:3d:a7:c5:55:10:80:53:d4:ca:
         b3:cf:94:df:04:04:23:7d:64:d4:e8:62:c1:ae:05:44:70:b6:
         9c:e0:1f:13:9f:f0:a2:de:da:ea:25:d6:09:18:c4:29:43:89:
         a3:97:d5:aa:ba:c9:6f:1c:f3:3c:9d:f5:98:8d:a1:95:48:e5:
         27:8d:da:19:f1:82:bc:3b:d9:86:5a:76:18:63:14:3e:f5:c6:
         81:77:5d:0f:11:b0:3b:c2:d8:70:95:d7:16:ed:6b:e2:c0:09:
         9f:cd:01:22:e0:fe:23:7e:98:69:9f:64:59:17:72:fa:59:18:
         80:36:c5:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 20:53:21 2025 by rpki-client