This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D8C86/5682F6524A7211ED90B9E0B8F1222468/n1zGQpNoeQW6tHWMmF3HaD8QWv8.mft
File:                     n1zGQpNoeQW6tHWMmF3HaD8QWv8.mft (raw, json)
Hash identifier:          WqQpV+n0zMAI/FMqwwXIvFw5HWODzOR5J3yfHFaGYzA=
Subject key identifier:   10:25:FF:55:7C:AD:7F:71:C1:54:E5:D2:76:1E:8C:B9:D0:EF:AB:09
Authority key identifier: 9F:5C:C6:42:93:68:79:05:BA:B4:75:8C:98:5D:C7:68:3F:10:5A:FF
Certificate issuer:       /CN=F36D8C86AF/serialNumber=9F5CC64293687905BAB4758C985DC7683F105AFF
Certificate serial:       04BD
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/n1zGQpNoeQW6tHWMmF3HaD8QWv8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36D8C86/5682F6524A7211ED90B9E0B8F1222468/n1zGQpNoeQW6tHWMmF3HaD8QWv8.mft
Manifest number:          04BC
Signing time:             Mon 29 Dec 2025 03:04:54 +0000
Manifest this update:     Mon 29 Dec 2025 03:04:53 +0000
Manifest next update:     Wed 31 Dec 2025 03:04:53 +0000
Files and hashes:         1: n1zGQpNoeQW6tHWMmF3HaD8QWv8.crl (hash: CkcuvEGQrdVT8Xz0DjMKzoqcVEBJVjTvq1pF7c7Z+2s=)
                          2: 98ECE8F44F7C11EDBAAD30BFF1222468.roa (hash: mB6ofAxn8aoJV2HyFdBef2cwvwi5tpjNfUdI4fOOdg8=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36D8C86/5682F6524A7211ED90B9E0B8F1222468/n1zGQpNoeQW6tHWMmF3HaD8QWv8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36D8C86/5682F6524A7211ED90B9E0B8F1222468/n1zGQpNoeQW6tHWMmF3HaD8QWv8.mft
                          rsync://rpki.afrinic.net/repository/afrinic/n1zGQpNoeQW6tHWMmF3HaD8QWv8.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 31 Dec 2025 00:06:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1213 (0x4bd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36D8C86AF, serialNumber=9F5CC64293687905BAB4758C985DC7683F105AFF
        Validity
            Not Before: Dec 29 03:04:53 2025 GMT
            Not After : Dec 31 03:04:53 2025 GMT
        Subject: CN=6951efd6-fccb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:75:2f:40:90:11:3a:13:26:9f:ab:36:49:2e:
                    40:d4:bc:65:1f:da:06:c6:89:96:ab:01:5b:0a:28:
                    2c:54:14:aa:f0:d4:cf:3a:d2:48:29:ab:49:3f:9b:
                    ba:37:fa:7e:72:84:38:11:78:96:f7:e7:cc:76:28:
                    79:61:23:c3:55:0f:5c:0f:9f:17:5f:4d:46:25:19:
                    3a:e5:68:ef:4c:59:dc:da:03:02:e9:52:0f:fe:62:
                    2a:b8:60:f2:44:d0:a1:be:e8:a0:42:d0:3e:ff:b4:
                    4d:3a:2c:0f:f3:29:6f:1a:6c:5f:be:1f:09:f1:6b:
                    27:62:5c:58:06:c8:22:65:fe:a5:a2:ba:07:1a:16:
                    7c:58:cd:12:dc:b9:cf:8c:bc:d8:d1:b2:ee:2f:57:
                    9e:3f:7c:91:9e:b3:81:aa:45:f0:ac:48:46:f8:b1:
                    d5:75:b9:1d:7c:71:f4:4e:1a:34:e7:a2:f1:b6:65:
                    53:21:fe:d3:cf:2a:dd:aa:e9:3c:3e:88:d7:50:ce:
                    44:00:4a:a0:8c:16:0d:11:97:18:88:22:5c:4f:5d:
                    ef:d8:d0:cd:f5:0c:6e:bc:31:2e:67:48:6c:7a:dd:
                    c6:e1:a5:69:ae:d2:34:43:1b:c3:43:13:ab:e6:51:
                    a1:db:1a:65:5d:2f:eb:b3:4a:2a:ac:ab:76:aa:c4:
                    e1:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:25:FF:55:7C:AD:7F:71:C1:54:E5:D2:76:1E:8C:B9:D0:EF:AB:09
            X509v3 Authority Key Identifier:
                keyid:9F:5C:C6:42:93:68:79:05:BA:B4:75:8C:98:5D:C7:68:3F:10:5A:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36D8C86/5682F6524A7211ED90B9E0B8F1222468/n1zGQpNoeQW6tHWMmF3HaD8QWv8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/n1zGQpNoeQW6tHWMmF3HaD8QWv8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D8C86/5682F6524A7211ED90B9E0B8F1222468/n1zGQpNoeQW6tHWMmF3HaD8QWv8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:52:6a:50:9f:d3:4b:b4:bb:ab:8e:78:f2:61:4b:6d:9e:ef:
         e8:6c:f1:26:8f:75:ec:9f:0d:cb:14:e1:97:99:01:69:91:67:
         b1:dd:e9:16:e8:f8:5d:0b:ef:3e:3c:ff:76:7d:f1:28:9c:a7:
         30:ff:5c:23:91:09:be:58:d6:49:b8:c9:62:23:46:3c:5f:7e:
         bd:70:7b:56:21:71:63:99:a7:38:28:d1:cc:f4:89:95:13:f5:
         fe:fe:3c:f2:5e:38:87:44:a6:d4:44:52:fd:a0:df:ec:16:cf:
         61:8f:e9:02:0d:70:2c:35:5d:87:41:9f:6b:35:77:02:c0:e9:
         58:67:76:4f:32:c4:88:e2:c6:0a:9e:4b:6f:ce:8e:ef:70:83:
         6e:a8:13:21:b1:ba:ae:ef:fa:1f:28:35:7d:d1:d1:30:b4:2d:
         d0:3e:c8:e0:72:36:80:7c:53:60:d4:d9:44:9f:13:3e:c0:cf:
         68:98:79:e4:8a:60:d2:82:2b:f6:2c:c6:a7:d3:58:02:70:f8:
         df:2b:b1:d0:3a:99:56:be:4d:8b:26:7a:3b:06:46:3a:c7:db:
         0b:1a:b4:46:b5:76:dc:cd:74:88:9e:ac:03:81:b8:c2:87:f9:
         15:56:95:9f:55:17:2b:b4:21:f0:0b:ad:d2:76:91:ab:ed:66:
         67:67:a4:f4
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICBL0wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
RDhDODZBRjExMC8GA1UEBRMoOUY1Q0M2NDI5MzY4NzkwNUJBQjQ3NThDOTg1REM3
NjgzRjEwNUFGRjAeFw0yNTEyMjkwMzA0NTNaFw0yNTEyMzEwMzA0NTNaMBgxFjAU
BgNVBAMTDTY5NTFlZmQ2LWZjY2IwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDOdS9AkBE6EyafqzZJLkDUvGUf2gbGiZarAVsKKCxUFKrw1M860kgpq0k/
m7o3+n5yhDgReJb358x2KHlhI8NVD1wPnxdfTUYlGTrlaO9MWdzaAwLpUg/+Yiq4
YPJE0KG+6KBC0D7/tE06LA/zKW8abF++HwnxaydiXFgGyCJl/qWiugcaFnxYzRLc
uc+MvNjRsu4vV54/fJGes4GqRfCsSEb4sdV1uR18cfROGjTnovG2ZVMh/tPPKt2q
6Tw+iNdQzkQASqCMFg0RlxiIIlxPXe/Y0M31DG68MS5nSGx63cbhpWmu0jRDG8ND
E6vmUaHbGmVdL+uzSiqsq3aqxOGrAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUECX/
VXytf3HBVOXSdh6MudDvqwkwHwYDVR0jBBgwFoAUn1zGQpNoeQW6tHWMmF3HaD8Q
Wv8wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkQ4Qzg2LzU2ODJGNjUyNEE3MjExRUQ5MEI5RTBCOEYxMjIyNDY4L24xekdR
cE5vZVFXNnRIV01tRjNIYUQ4UVd2OC5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL24xekdRcE5vZVFXNnRIV01tRjNIYUQ4UVd2OC5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2RDhDODYvNTY4MkY2NTI0QTcyMTFFRDkwQjlFMEI4RjEy
MjI0NjgvbjF6R1FwTm9lUVc2dEhXTW1GM0hhRDhRV3Y4Lm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQALUmpQn9NLtLurjnjyYUttnu/obPEm
j3Xsnw3LFOGXmQFpkWex3ekW6PhdC+8+PP92ffEonKcw/1wjkQm+WNZJuMliI0Y8
X369cHtWIXFjmac4KNHM9ImVE/X+/jzyXjiHRKbURFL9oN/sFs9hj+kCDXAsNV2H
QZ9rNXcCwOlYZ3ZPMsSI4sYKnktvzo7vcINuqBMhsbqu7/ofKDV90dEwtC3QPsjg
cjaAfFNg1NlEnxM+wM9omHnkimDSgiv2LMan01gCcPjfK7HQOplWvk2LJno7BkY6
x9sLGrRGtXbczXSInqwDgbjCh/kVVpWfVRcrtCHwC63SdpGr7WZnZ6T0
-----END CERTIFICATE-----
Generated at Mon Dec 29 13:25:22 2025 by rpki-client