This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36DE5F0/05A7CBCC892D11EE938A0A154AD9E6FC/ui9ZJEOHKcXHuoCAc3Yc7DR-PLo.mft
File:                     ui9ZJEOHKcXHuoCAc3Yc7DR-PLo.mft (raw, json)
Hash identifier:          A09CTwZok8f8xBs8j/bLJRtmEQvlsi44aW1BHUJZWts=
Subject key identifier:   0B:3F:0C:D2:10:2B:09:BF:77:34:38:11:B9:63:05:A1:A4:29:10:94
Authority key identifier: BA:2F:59:24:43:87:29:C5:C7:BA:80:80:73:76:1C:EC:34:7E:3C:BA
Certificate issuer:       /CN=F36DE5F0AF/serialNumber=BA2F5924438729C5C7BA808073761CEC347E3CBA
Certificate serial:       031A
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/ui9ZJEOHKcXHuoCAc3Yc7DR-PLo.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36DE5F0/05A7CBCC892D11EE938A0A154AD9E6FC/ui9ZJEOHKcXHuoCAc3Yc7DR-PLo.mft
Manifest number:          0315
Signing time:             Sun 21 Dec 2025 03:53:15 +0000
Manifest this update:     Sun 21 Dec 2025 03:53:15 +0000
Manifest next update:     Tue 23 Dec 2025 03:53:15 +0000
Files and hashes:         1: ui9ZJEOHKcXHuoCAc3Yc7DR-PLo.crl (hash: Fi5l48YVCOwGpLWS85JAUeopZMrBu+Wo3qOXCv7eooc=)
                          2: ACBC7B985EE711EFA0CEB651762E951A.roa (hash: Lm7KJ7SFgJLbSpFAPyUvvIcKQ0yWjLdyzLN+7Alu3nM=)
                          3: 5A355A62893511EE97A33A2E4AD9E6FC.roa (hash: kPbY6+n82PzSuYMNz5etY7+wyw41vKBIiDkHhSXp1iU=)
                          4: 5D0CA6DA8B4C11F0B2436DDDDAE4EC9C.roa (hash: Ra9ioWH8m0JON7faI4MqWl7L3OBqBQaOD8Z/MCluy1M=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36DE5F0/05A7CBCC892D11EE938A0A154AD9E6FC/ui9ZJEOHKcXHuoCAc3Yc7DR-PLo.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36DE5F0/05A7CBCC892D11EE938A0A154AD9E6FC/ui9ZJEOHKcXHuoCAc3Yc7DR-PLo.mft
                          rsync://rpki.afrinic.net/repository/afrinic/ui9ZJEOHKcXHuoCAc3Yc7DR-PLo.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 23 Dec 2025 00:06:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 794 (0x31a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36DE5F0AF, serialNumber=BA2F5924438729C5C7BA808073761CEC347E3CBA
        Validity
            Not Before: Dec 21 03:53:15 2025 GMT
            Not After : Dec 23 03:53:15 2025 GMT
        Subject: CN=69476f2b-4ffe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:02:68:4f:e5:fc:2e:f0:70:20:fa:a6:60:b7:
                    8a:53:1d:10:8d:cf:70:8d:cd:15:84:2e:29:7e:5e:
                    10:ae:67:56:80:cc:fe:4a:75:cc:f1:58:e9:f4:9b:
                    8c:e9:c0:6e:c2:11:01:99:cf:c1:36:51:34:f4:c7:
                    90:19:ce:4f:52:72:44:78:28:dc:a8:a6:3a:9e:9c:
                    44:6f:d0:42:ab:ab:a4:77:17:83:0f:43:d1:36:e5:
                    a9:e1:5f:65:2c:43:1b:4e:6c:4a:0c:7c:e2:b2:ba:
                    32:b9:94:a9:03:1f:58:2a:33:6d:fe:20:66:13:83:
                    9d:bc:7c:96:7f:61:3a:c8:3c:1d:e1:8b:e9:99:f2:
                    05:ce:d2:3e:69:58:c9:7f:03:11:43:28:06:0c:99:
                    fd:4e:b7:d4:d9:84:46:fa:36:97:80:0f:6a:99:13:
                    9e:94:ae:d1:53:55:9d:44:e8:bf:54:5c:01:44:5d:
                    da:60:07:59:cd:98:50:f4:4e:cf:d8:30:3e:df:f7:
                    08:f5:2d:0e:3b:ac:42:4d:6c:0c:7a:b8:08:68:50:
                    3a:6d:ec:b8:32:8d:f4:28:2b:2b:05:c3:c3:ab:9d:
                    59:3f:f1:9b:b7:a0:27:82:a2:f5:6d:44:ee:81:d6:
                    23:e6:35:ab:ed:ce:2b:89:1a:ec:37:8d:a6:54:31:
                    c0:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:3F:0C:D2:10:2B:09:BF:77:34:38:11:B9:63:05:A1:A4:29:10:94
            X509v3 Authority Key Identifier:
                keyid:BA:2F:59:24:43:87:29:C5:C7:BA:80:80:73:76:1C:EC:34:7E:3C:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36DE5F0/05A7CBCC892D11EE938A0A154AD9E6FC/ui9ZJEOHKcXHuoCAc3Yc7DR-PLo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/ui9ZJEOHKcXHuoCAc3Yc7DR-PLo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36DE5F0/05A7CBCC892D11EE938A0A154AD9E6FC/ui9ZJEOHKcXHuoCAc3Yc7DR-PLo.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:de:e3:78:36:97:0a:84:4d:b8:e4:58:03:09:6c:a3:e4:c7:
         08:ca:bb:cb:9f:1a:05:f5:cc:6d:09:57:60:0b:27:5d:54:22:
         82:77:38:13:be:18:71:51:30:df:e5:a5:bf:2d:1c:c9:28:18:
         6e:46:cc:ed:76:ea:32:8a:0e:e1:3e:a8:e5:3a:ff:ae:16:81:
         c1:40:16:66:33:02:76:14:37:6e:62:f4:aa:13:23:a9:54:d8:
         89:ad:83:d8:2e:46:0a:5a:b4:ed:41:88:7d:f8:90:e1:0b:fe:
         c4:fd:5a:4a:b8:f1:26:72:77:dd:11:0e:7d:0f:43:53:60:ca:
         38:5b:91:f7:39:54:1d:e4:19:a0:09:60:5a:7f:07:40:e8:30:
         a4:1a:c4:67:09:ad:27:c4:45:9d:d0:3d:a2:7b:29:a6:eb:25:
         bc:a4:3e:09:d3:30:7c:4a:b3:3a:03:db:24:43:da:d4:c3:63:
         3f:c8:6a:21:6b:33:97:5a:27:b5:b9:0a:8d:d4:38:f2:7d:3d:
         2f:6e:2e:62:98:c5:7e:fc:ad:ad:82:dc:7a:72:05:47:b4:4e:
         09:56:0e:e5:19:53:d5:3c:a4:50:59:4b:16:58:28:c1:dc:35:
         8d:11:53:0f:c7:9d:ce:b1:7d:73:c3:4c:80:0f:1a:d5:f3:17:
         75:32:d8:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 08:15:27 2025 by rpki-client