This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D7B70/311539A0AD6111ED8C82DB9DF1222468/1dvrzXwb7_KENX_wZHrIt0liD9Q.mft
File:                     1dvrzXwb7_KENX_wZHrIt0liD9Q.mft (raw, json)
Hash identifier:          q/4v2Vo2HVhrT4LA+rBHdBzHvaVw/AWRMmEsHNuGKKc=
Subject key identifier:   FC:65:96:95:6F:5E:D0:AA:66:6D:53:D6:C2:59:4F:CC:25:54:D6:62
Authority key identifier: D5:DB:EB:CD:7C:1B:EF:F2:84:35:7F:F0:64:7A:C8:B7:49:62:0F:D4
Certificate issuer:       /CN=F36D7B70AF/serialNumber=D5DBEBCD7C1BEFF284357FF0647AC8B749620FD4
Certificate serial:       0438
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/1dvrzXwb7_KENX_wZHrIt0liD9Q.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36D7B70/311539A0AD6111ED8C82DB9DF1222468/1dvrzXwb7_KENX_wZHrIt0liD9Q.mft
Manifest number:          0436
Signing time:             Tue 23 Dec 2025 03:16:59 +0000
Manifest this update:     Tue 23 Dec 2025 03:16:58 +0000
Manifest next update:     Thu 25 Dec 2025 03:16:57 +0000
Files and hashes:         1: 1dvrzXwb7_KENX_wZHrIt0liD9Q.crl (hash: 0PA1gY/Wmn/q1eJzD4FqZmNk1pi9vXD5QgZkC10orq8=)
                          2: BE9F0310ADB511ED9BFAA497F1222468.roa (hash: QYIDCJXoNqvHg1YdgKjgPsS1L4uv/2EzjaMHwhM8yjk=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36D7B70/311539A0AD6111ED8C82DB9DF1222468/1dvrzXwb7_KENX_wZHrIt0liD9Q.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36D7B70/311539A0AD6111ED8C82DB9DF1222468/1dvrzXwb7_KENX_wZHrIt0liD9Q.mft
                          rsync://rpki.afrinic.net/repository/afrinic/1dvrzXwb7_KENX_wZHrIt0liD9Q.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 25 Dec 2025 03:16:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1080 (0x438)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36D7B70AF, serialNumber=D5DBEBCD7C1BEFF284357FF0647AC8B749620FD4
        Validity
            Not Before: Dec 23 03:16:58 2025 GMT
            Not After : Dec 25 03:16:57 2025 GMT
        Subject: CN=694a09ab-3345
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:80:8e:f7:e7:09:fd:c7:22:07:89:a6:df:6c:
                    be:7f:e8:87:47:df:4e:f0:67:43:28:7d:14:6f:f0:
                    fe:ec:9d:7e:f1:61:6a:8f:98:91:20:b8:d0:d9:d7:
                    c4:f5:e6:0d:b7:d4:b3:fc:07:54:0f:36:2c:1e:5c:
                    60:9d:61:e5:30:38:76:3b:e6:88:8b:7d:32:a8:5b:
                    de:61:4b:97:25:9a:c2:43:bf:1e:5f:e7:93:69:ef:
                    46:3c:ab:db:f8:b0:10:8a:a7:6f:8a:e6:50:b1:67:
                    35:e5:e2:a2:ea:92:25:b5:d2:5d:2c:58:57:39:0f:
                    63:06:2c:71:d9:66:75:0d:f4:bc:cd:61:d7:63:60:
                    4b:0e:72:b9:d7:39:a0:d4:d8:c6:30:56:07:99:4e:
                    04:fb:d5:86:08:f6:6e:a0:a4:b2:b3:52:3c:00:c8:
                    5e:a7:38:46:58:f4:d5:e5:e2:43:70:0e:a9:85:35:
                    c4:7f:af:7f:7b:2a:bd:1a:a6:42:8d:be:a9:09:d9:
                    69:e0:6e:f2:79:34:d0:d4:d1:c9:ff:ec:fd:6c:21:
                    ec:45:04:cd:13:1e:3c:37:1d:ab:9c:c4:f4:10:88:
                    36:5e:be:9c:99:ee:ec:00:e0:4e:a9:9a:08:60:26:
                    99:ca:35:09:43:40:75:41:3f:3b:fb:8c:7c:bc:29:
                    19:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:65:96:95:6F:5E:D0:AA:66:6D:53:D6:C2:59:4F:CC:25:54:D6:62
            X509v3 Authority Key Identifier:
                keyid:D5:DB:EB:CD:7C:1B:EF:F2:84:35:7F:F0:64:7A:C8:B7:49:62:0F:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36D7B70/311539A0AD6111ED8C82DB9DF1222468/1dvrzXwb7_KENX_wZHrIt0liD9Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/1dvrzXwb7_KENX_wZHrIt0liD9Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D7B70/311539A0AD6111ED8C82DB9DF1222468/1dvrzXwb7_KENX_wZHrIt0liD9Q.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:5d:a3:e4:35:69:98:5f:ed:fe:c2:cf:85:c0:19:f7:fc:96:
         2f:aa:97:13:70:55:a4:86:9c:5f:3d:36:21:3f:d9:87:41:91:
         d2:02:f7:4c:81:99:d0:70:fa:19:07:c7:06:bc:ea:c9:86:a0:
         95:75:02:b4:d2:b4:cd:fc:6c:3d:2f:1e:03:5e:87:ff:0f:5c:
         12:b4:31:0f:89:7b:30:38:d2:5c:5f:c9:48:f6:50:32:9f:01:
         55:10:72:c8:92:bb:ba:10:72:f4:22:cf:25:57:fc:dc:3f:6c:
         86:dd:43:4b:c1:59:8a:65:4d:fd:eb:bb:28:db:fc:a5:02:38:
         d7:de:64:ba:ea:c4:95:f3:e5:02:10:a7:9d:29:29:f9:5b:83:
         b9:53:5f:75:23:9e:31:3a:02:3a:bc:ff:03:28:5f:06:5a:03:
         b3:ad:4b:3b:b2:74:4f:f9:03:2c:17:fb:3e:74:61:71:f8:f7:
         6c:1b:26:99:71:46:3a:ee:45:d4:ca:9f:7d:cf:09:a1:cf:eb:
         b6:33:d9:09:b0:bb:38:3a:6e:65:5a:8d:ae:8f:ca:4e:02:26:
         86:83:ea:bd:2d:a7:94:bb:ad:55:dd:46:f8:ef:a7:4d:48:3d:
         09:77:df:f4:e4:f9:18:e4:73:f0:9c:cc:85:e3:bb:c5:7d:6e:
         93:9a:37:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 11:06:30 2025 by rpki-client