This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36DCAE3/830D63FAF08C11EC92201A8EF1222468/AaNx1Ie11VLkTUu-yVarlsMlge0.mft
File:                     AaNx1Ie11VLkTUu-yVarlsMlge0.mft (raw, json)
Hash identifier:          WERXhwS34HJcTwco/IRTPMDj8tSHabvTUAS60DSKdNI=
Subject key identifier:   30:E0:53:7F:0B:4E:97:34:5B:A1:53:78:80:02:3B:DB:96:F8:7C:A8
Authority key identifier: 01:A3:71:D4:87:B5:D5:52:E4:4D:4B:BE:C9:56:AB:96:C3:25:81:ED
Certificate issuer:       /CN=F36DCAE3AF/serialNumber=01A371D487B5D552E44D4BBEC956AB96C32581ED
Certificate serial:       0534
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/AaNx1Ie11VLkTUu-yVarlsMlge0.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36DCAE3/830D63FAF08C11EC92201A8EF1222468/AaNx1Ie11VLkTUu-yVarlsMlge0.mft
Manifest number:          0532
Signing time:             Mon 29 Dec 2025 02:49:50 +0000
Manifest this update:     Mon 29 Dec 2025 02:49:50 +0000
Manifest next update:     Wed 31 Dec 2025 02:49:50 +0000
Files and hashes:         1: AaNx1Ie11VLkTUu-yVarlsMlge0.crl (hash: aeRP8mZ5vyZnZw1xew8T4TaSQTaGb0FKh3SfLD8BdGA=)
                          2: 91DA0C3CF08F11ECA3387197F1222468.roa (hash: m3NCW8i2F16lSabUpSi4fXD8AQaLmw9scRn5comU59s=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36DCAE3/830D63FAF08C11EC92201A8EF1222468/AaNx1Ie11VLkTUu-yVarlsMlge0.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36DCAE3/830D63FAF08C11EC92201A8EF1222468/AaNx1Ie11VLkTUu-yVarlsMlge0.mft
                          rsync://rpki.afrinic.net/repository/afrinic/AaNx1Ie11VLkTUu-yVarlsMlge0.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 31 Dec 2025 00:06:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1332 (0x534)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36DCAE3AF, serialNumber=01A371D487B5D552E44D4BBEC956AB96C32581ED
        Validity
            Not Before: Dec 29 02:49:50 2025 GMT
            Not After : Dec 31 02:49:50 2025 GMT
        Subject: CN=6951ec4e-7835
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:19:00:1b:80:fb:b9:40:b0:f4:0d:0e:09:1f:
                    b8:00:a9:ff:1e:4a:c3:0b:35:00:7b:25:fe:b7:09:
                    cd:5d:ab:06:32:89:77:23:a0:73:98:c5:c2:0a:59:
                    d5:14:e7:d4:25:14:fe:1a:7b:b8:c0:2c:92:41:e7:
                    4c:58:56:6e:a9:61:c1:0f:5f:ee:37:39:70:da:25:
                    49:0c:09:e6:ec:a7:5b:7b:df:95:7a:aa:15:5b:42:
                    a1:3d:21:4c:1d:d2:6c:20:8e:c8:35:04:da:19:ad:
                    01:b4:28:c7:ff:d3:5f:e5:80:6e:62:0a:1a:12:f3:
                    f9:48:b6:9c:fb:2e:4f:3a:f3:ff:80:1b:73:63:e9:
                    19:6b:8b:ce:23:78:6a:f8:16:2f:ea:87:c6:c1:a4:
                    74:46:11:e1:ff:09:52:99:ad:7a:17:33:b8:26:4c:
                    58:25:d4:80:40:97:07:0c:3c:53:56:b6:04:1c:ad:
                    cf:93:16:9b:12:4a:d6:57:a3:39:e6:12:0e:85:b5:
                    04:96:28:88:28:a8:62:8c:c0:dc:05:7c:7d:c5:62:
                    91:cd:24:05:e9:4b:cd:a3:cc:aa:92:a8:bb:d2:c4:
                    2f:37:b1:aa:2d:f7:89:35:61:f6:18:63:de:18:31:
                    40:7e:0e:49:56:a0:4d:06:c4:b0:fb:a8:3c:48:47:
                    76:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:E0:53:7F:0B:4E:97:34:5B:A1:53:78:80:02:3B:DB:96:F8:7C:A8
            X509v3 Authority Key Identifier:
                keyid:01:A3:71:D4:87:B5:D5:52:E4:4D:4B:BE:C9:56:AB:96:C3:25:81:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36DCAE3/830D63FAF08C11EC92201A8EF1222468/AaNx1Ie11VLkTUu-yVarlsMlge0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/AaNx1Ie11VLkTUu-yVarlsMlge0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36DCAE3/830D63FAF08C11EC92201A8EF1222468/AaNx1Ie11VLkTUu-yVarlsMlge0.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:6b:77:f7:2d:a0:1f:ea:95:18:33:b0:19:41:15:ba:2a:8b:
         10:03:d4:aa:28:dc:4a:47:ad:12:29:f5:5c:4d:df:ed:70:c2:
         82:6e:69:8d:c6:a5:17:97:d5:2f:10:37:e4:ce:68:56:c0:82:
         04:d6:10:77:da:03:ca:3e:c4:ff:b1:a8:81:d8:f2:5f:53:dc:
         bb:dc:b5:5f:5e:47:f5:48:86:d1:4a:26:18:33:bb:c0:42:2f:
         da:9c:77:5b:ce:72:5d:03:97:62:75:cc:07:fc:e9:23:af:90:
         d6:6c:b2:02:dc:3c:b4:e5:69:02:ca:b0:4b:42:78:68:0e:9a:
         de:51:e8:e3:83:e7:a6:fa:ed:5b:7d:06:a5:a9:31:20:7c:3c:
         dc:de:ec:f5:5f:ed:53:4a:ba:37:1e:ec:01:1d:0e:fe:45:d0:
         b2:1e:00:2b:a4:e4:8a:ff:13:93:ea:03:a8:de:b9:c9:ac:67:
         75:57:cc:e1:00:5d:c0:32:1c:90:2d:36:f4:dd:a9:69:47:f6:
         5d:0c:7a:d0:05:f8:af:ef:c3:86:1c:3f:3b:fa:b9:12:f3:fd:
         c9:ee:a6:97:29:9c:b7:92:cf:e1:d7:52:d8:cd:77:ed:9a:e7:
         d9:69:3e:85:ab:bb:17:cb:36:a0:b7:ee:4a:79:21:4a:e8:4f:
         bb:02:fc:dc
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICBTQwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
RENBRTNBRjExMC8GA1UEBRMoMDFBMzcxRDQ4N0I1RDU1MkU0NEQ0QkJFQzk1NkFC
OTZDMzI1ODFFRDAeFw0yNTEyMjkwMjQ5NTBaFw0yNTEyMzEwMjQ5NTBaMBgxFjAU
BgNVBAMTDTY5NTFlYzRlLTc4MzUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDGGQAbgPu5QLD0DQ4JH7gAqf8eSsMLNQB7Jf63Cc1dqwYyiXcjoHOYxcIK
WdUU59QlFP4ae7jALJJB50xYVm6pYcEPX+43OXDaJUkMCebsp1t735V6qhVbQqE9
IUwd0mwgjsg1BNoZrQG0KMf/01/lgG5iChoS8/lItpz7Lk868/+AG3Nj6Rlri84j
eGr4Fi/qh8bBpHRGEeH/CVKZrXoXM7gmTFgl1IBAlwcMPFNWtgQcrc+TFpsSStZX
oznmEg6FtQSWKIgoqGKMwNwFfH3FYpHNJAXpS82jzKqSqLvSxC83saot94k1YfYY
Y94YMUB+DklWoE0GxLD7qDxIR3bZAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUMOBT
fwtOlzRboVN4gAI725b4fKgwHwYDVR0jBBgwFoAUAaNx1Ie11VLkTUu+yVarlsMl
ge0wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkRDQUUzLzgzMEQ2M0ZBRjA4QzExRUM5MjIwMUE4RUYxMjIyNDY4L0FhTngx
SWUxMVZMa1RVdS15VmFybHNNbGdlMC5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0FhTngxSWUxMVZMa1RVdS15VmFybHNNbGdlMC5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2RENBRTMvODMwRDYzRkFGMDhDMTFFQzkyMjAxQThFRjEy
MjI0NjgvQWFOeDFJZTExVkxrVFV1LXlWYXJsc01sZ2UwLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAra3f3LaAf6pUYM7AZQRW6KosQA9Sq
KNxKR60SKfVcTd/tcMKCbmmNxqUXl9UvEDfkzmhWwIIE1hB32gPKPsT/saiB2PJf
U9y73LVfXkf1SIbRSiYYM7vAQi/anHdbznJdA5didcwH/Okjr5DWbLIC3Dy05WkC
yrBLQnhoDpreUejjg+em+u1bfQalqTEgfDzc3uz1X+1TSro3HuwBHQ7+RdCyHgAr
pOSK/xOT6gOo3rnJrGd1V8zhAF3AMhyQLTb03alpR/ZdDHrQBfiv78OGHD87+rkS
8/3J7qaXKZy3ks/h11LYzXftmufZaT6Fq7sXyzagt+5KeSFK6E+7Avzc
-----END CERTIFICATE-----
Generated at Mon Dec 29 16:28:13 2025 by rpki-client