This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36DBC4B/2336786EF8A911EEBCB49C0F017001B1/_n_6ewbTc1Hbkta507CtEDB7WiE.mft
File:                     _n_6ewbTc1Hbkta507CtEDB7WiE.mft (raw, json)
Hash identifier:          NKmnk8AaH7P54hQWpfLLm3/r56wMMfgOkJbmFIMMG3o=
Subject key identifier:   18:55:53:71:42:51:4A:AF:34:22:68:F0:67:D2:54:28:2B:E3:62:45
Authority key identifier: FE:7F:FA:7B:06:D3:73:51:DB:92:D6:B9:D3:B0:AD:10:30:7B:5A:21
Certificate issuer:       /CN=F36DBC4BAF/serialNumber=FE7FFA7B06D37351DB92D6B9D3B0AD10307B5A21
Certificate serial:       0288
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/_n_6ewbTc1Hbkta507CtEDB7WiE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36DBC4B/2336786EF8A911EEBCB49C0F017001B1/_n_6ewbTc1Hbkta507CtEDB7WiE.mft
Manifest number:          0284
Signing time:             Thu 25 Dec 2025 04:10:16 +0000
Manifest this update:     Thu 25 Dec 2025 04:10:15 +0000
Manifest next update:     Sat 27 Dec 2025 04:10:15 +0000
Files and hashes:         1: _n_6ewbTc1Hbkta507CtEDB7WiE.crl (hash: xXNB2c51kV7BZRXbL04YhY0+NF+pdIRjmQrFk3FW7A0=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36DBC4B/2336786EF8A911EEBCB49C0F017001B1/_n_6ewbTc1Hbkta507CtEDB7WiE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36DBC4B/2336786EF8A911EEBCB49C0F017001B1/_n_6ewbTc1Hbkta507CtEDB7WiE.mft
                          rsync://rpki.afrinic.net/repository/afrinic/_n_6ewbTc1Hbkta507CtEDB7WiE.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 27 Dec 2025 00:06:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 648 (0x288)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36DBC4BAF, serialNumber=FE7FFA7B06D37351DB92D6B9D3B0AD10307B5A21
        Validity
            Not Before: Dec 25 04:10:15 2025 GMT
            Not After : Dec 27 04:10:15 2025 GMT
        Subject: CN=694cb928-2243
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:89:68:09:2a:4f:c4:c1:58:4d:32:43:4c:ea:
                    a0:47:97:56:d5:3f:de:3b:b0:c1:d1:77:42:f9:ea:
                    85:6f:8b:50:f4:ab:e7:bb:4a:5e:13:bf:b1:4e:25:
                    02:d9:e2:5e:96:6c:65:8c:fb:0e:e6:8d:36:37:80:
                    d0:1c:ba:65:28:81:32:57:1e:df:32:af:9c:c6:19:
                    1e:ae:fc:a1:71:5d:9d:2f:ca:8d:c5:f3:91:32:87:
                    65:23:a0:f9:57:05:11:3f:19:c2:af:c0:94:50:61:
                    80:71:e7:09:95:b1:42:ce:47:ac:e2:ad:3e:8e:32:
                    3a:5a:cb:2d:ee:a8:f5:c5:2f:46:7f:da:dd:8c:e5:
                    14:95:7b:75:cd:52:f9:23:9b:55:7e:c6:09:5d:41:
                    31:c5:36:7d:98:16:ee:18:09:ea:5c:fe:ec:8e:27:
                    21:c4:2b:19:0a:e3:dc:27:b6:43:63:e0:d1:be:ba:
                    11:b1:5c:33:9c:33:17:f6:c5:79:27:81:88:b7:b8:
                    30:7b:ab:4b:d5:c4:1b:1f:2c:86:6d:72:0c:4a:49:
                    3d:31:8d:ae:e7:f8:52:c0:8b:91:ae:ee:a7:42:59:
                    a6:2a:4a:73:3a:f3:bc:3c:88:0f:55:56:ea:f0:54:
                    99:96:4f:bc:0b:72:e5:83:7a:cd:d4:ee:9e:99:6d:
                    7b:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:55:53:71:42:51:4A:AF:34:22:68:F0:67:D2:54:28:2B:E3:62:45
            X509v3 Authority Key Identifier:
                keyid:FE:7F:FA:7B:06:D3:73:51:DB:92:D6:B9:D3:B0:AD:10:30:7B:5A:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36DBC4B/2336786EF8A911EEBCB49C0F017001B1/_n_6ewbTc1Hbkta507CtEDB7WiE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/_n_6ewbTc1Hbkta507CtEDB7WiE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36DBC4B/2336786EF8A911EEBCB49C0F017001B1/_n_6ewbTc1Hbkta507CtEDB7WiE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bc:d1:6b:fe:00:46:06:eb:5f:3e:44:bc:25:5d:f0:98:9d:e0:
         8f:59:45:a1:d2:44:78:c1:d7:2a:3a:58:5d:13:af:28:0a:02:
         87:e7:32:69:3c:80:7b:ed:92:37:23:bf:2d:97:4f:11:ea:82:
         9a:39:0c:7f:87:42:5d:67:43:0a:31:71:0d:e8:63:3f:03:a2:
         b6:7a:58:bd:51:60:c4:24:36:9e:32:72:d4:f1:a4:9d:09:86:
         6e:36:99:d3:61:24:6f:ec:9d:43:9e:2a:67:3c:9b:4c:c1:2d:
         7b:ce:f9:5c:3c:08:ab:09:b2:f2:42:66:0c:5c:80:a2:38:8f:
         93:97:60:ac:4c:ca:fe:db:f8:99:76:fd:d1:98:03:0e:41:63:
         58:c6:e0:07:eb:61:45:a0:25:0d:e1:a6:4b:ce:7a:4a:32:89:
         23:44:a6:81:2d:df:00:d1:72:17:dc:6d:3a:89:47:4c:26:5a:
         c2:0b:61:65:2d:c6:92:da:d2:aa:fe:69:cd:b6:d7:cd:62:71:
         e0:27:1f:46:67:95:a9:7f:44:82:9b:aa:e1:5f:64:fe:8b:50:
         e9:ff:bd:c2:97:8f:98:46:5b:ed:62:2b:25:45:67:93:6c:b3:
         ab:fb:4a:79:e0:ca:0a:94:50:ec:3d:3a:cd:8a:29:cd:94:5f:
         4b:d5:6b:29
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICAogwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
REJDNEJBRjExMC8GA1UEBRMoRkU3RkZBN0IwNkQzNzM1MURCOTJENkI5RDNCMEFE
MTAzMDdCNUEyMTAeFw0yNTEyMjUwNDEwMTVaFw0yNTEyMjcwNDEwMTVaMBgxFjAU
BgNVBAMTDTY5NGNiOTI4LTIyNDMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDliWgJKk/EwVhNMkNM6qBHl1bVP947sMHRd0L56oVvi1D0q+e7Sl4Tv7FO
JQLZ4l6WbGWM+w7mjTY3gNAcumUogTJXHt8yr5zGGR6u/KFxXZ0vyo3F85Eyh2Uj
oPlXBRE/GcKvwJRQYYBx5wmVsULOR6zirT6OMjpayy3uqPXFL0Z/2t2M5RSVe3XN
Uvkjm1V+xgldQTHFNn2YFu4YCepc/uyOJyHEKxkK49wntkNj4NG+uhGxXDOcMxf2
xXkngYi3uDB7q0vVxBsfLIZtcgxKST0xja7n+FLAi5Gu7qdCWaYqSnM687w8iA9V
VurwVJmWT7wLcuWDes3U7p6ZbXu1AgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUGFVT
cUJRSq80ImjwZ9JUKCvjYkUwHwYDVR0jBBgwFoAU/n/6ewbTc1Hbkta507CtEDB7
WiEwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkRCQzRCLzIzMzY3ODZFRjhBOTExRUVCQ0I0OUMwRjAxNzAwMUIxL19uXzZl
d2JUYzFIYmt0YTUwN0N0RURCN1dpRS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL19uXzZld2JUYzFIYmt0YTUwN0N0RURCN1dpRS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2REJDNEIvMjMzNjc4NkVGOEE5MTFFRUJDQjQ5QzBGMDE3
MDAxQjEvX25fNmV3YlRjMUhia3RhNTA3Q3RFREI3V2lFLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQC80Wv+AEYG618+RLwlXfCYneCPWUWh
0kR4wdcqOlhdE68oCgKH5zJpPIB77ZI3I78tl08R6oKaOQx/h0JdZ0MKMXEN6GM/
A6K2eli9UWDEJDaeMnLU8aSdCYZuNpnTYSRv7J1DnipnPJtMwS17zvlcPAirCbLy
QmYMXICiOI+Tl2CsTMr+2/iZdv3RmAMOQWNYxuAH62FFoCUN4aZLznpKMokjRKaB
Ld8A0XIX3G06iUdMJlrCC2FlLcaS2tKq/mnNttfNYnHgJx9GZ5Wpf0SCm6rhX2T+
i1Dp/73Cl4+YRlvtYislRWeTbLOr+0p54MoKlFDsPTrNiinNlF9L1Wsp
-----END CERTIFICATE-----
Generated at Thu Dec 25 07:14:14 2025 by rpki-client