This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36E6854/385FBE92230D11EFA27C81277DDC24C2/e5q4nC36bjo-yHXuV_4sDZpxQcA.mft
File:                     e5q4nC36bjo-yHXuV_4sDZpxQcA.mft (raw, json)
Hash identifier:          2VndbRqwvcr3g3I1+Ifa5SrOb+8GWndxA3hNVJ42wy8=
Subject key identifier:   91:F5:3F:B5:43:51:B4:FD:25:00:26:53:A3:51:5A:D2:ED:6E:AA:E6
Authority key identifier: 7B:9A:B8:9C:2D:FA:6E:3A:3E:C8:75:EE:57:FE:2C:0D:9A:71:41:C0
Certificate issuer:       /CN=F36E6854AF/serialNumber=7B9AB89C2DFA6E3A3EC875EE57FE2C0D9A7141C0
Certificate serial:       0256
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/e5q4nC36bjo-yHXuV_4sDZpxQcA.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36E6854/385FBE92230D11EFA27C81277DDC24C2/e5q4nC36bjo-yHXuV_4sDZpxQcA.mft
Manifest number:          0252
Signing time:             Mon 29 Dec 2025 04:18:36 +0000
Manifest this update:     Mon 29 Dec 2025 04:18:36 +0000
Manifest next update:     Wed 31 Dec 2025 04:18:35 +0000
Files and hashes:         1: e5q4nC36bjo-yHXuV_4sDZpxQcA.crl (hash: jnIF+gvV/h3kynwmv64G0mLIFFscuX4stPkvWe2TF8I=)
                          2: E9537D34D68E11F0804EF19CDAE4EC9C.roa (hash: Yi7WlpDmrDcsEUphgJQV/qjToEbUEGi7uC9aoYVJh9s=)
                          3: 3E1DF6B4D68F11F0A85E0F9FDAE4EC9C.roa (hash: 7mBMpJhGiYcULHhIUFAn1tr0Xgd9cXpIwxF3yIIhjfE=)
                          4: 41B9BD06230F11EF89072D357DDC24C2.roa (hash: Vju6CP63vk7sWntfujwYKbfkTEsNT3KYrBm9nMWtFv8=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36E6854/385FBE92230D11EFA27C81277DDC24C2/e5q4nC36bjo-yHXuV_4sDZpxQcA.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36E6854/385FBE92230D11EFA27C81277DDC24C2/e5q4nC36bjo-yHXuV_4sDZpxQcA.mft
                          rsync://rpki.afrinic.net/repository/afrinic/e5q4nC36bjo-yHXuV_4sDZpxQcA.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 31 Dec 2025 04:18:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 598 (0x256)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36E6854AF, serialNumber=7B9AB89C2DFA6E3A3EC875EE57FE2C0D9A7141C0
        Validity
            Not Before: Dec 29 04:18:36 2025 GMT
            Not After : Dec 31 04:18:35 2025 GMT
        Subject: CN=6952011c-ad15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:76:82:b1:b7:a4:89:24:1e:c3:72:57:9d:06:
                    c8:73:9d:1c:b0:ea:ac:7c:58:e2:3d:1d:88:10:1e:
                    4b:13:5f:47:8d:a4:fe:46:63:01:91:d9:8f:df:43:
                    4a:21:af:02:00:20:d4:79:85:16:f0:07:4a:f6:d5:
                    4a:66:2c:fb:04:0a:bb:11:fd:97:39:54:38:33:d9:
                    ec:88:3c:52:ce:24:77:72:b6:5d:6f:82:3c:59:af:
                    cf:43:b8:d2:88:c6:62:3a:4a:0e:1e:45:43:d5:f3:
                    28:20:c5:5d:ff:68:fd:45:ed:30:d9:c1:3c:8a:1c:
                    b9:b7:19:a8:03:ed:f3:a8:b6:4d:c5:dd:89:9b:be:
                    df:bf:79:38:0e:25:ac:ab:f0:d5:9c:3e:6b:26:2e:
                    2b:e1:96:70:77:70:8b:6d:c1:96:b0:90:cf:6a:79:
                    1b:1f:3a:38:a4:f9:12:ec:45:15:a3:16:75:da:02:
                    dc:3c:ff:94:70:d6:dd:d0:cf:67:16:70:0e:08:a5:
                    a6:3c:27:21:d1:93:9c:a6:d1:55:6b:04:b0:c5:34:
                    7f:7b:50:8c:d0:ba:0d:fc:4b:55:25:54:b4:82:32:
                    39:91:e8:37:1d:6a:a3:f3:b2:da:ef:02:a4:01:0c:
                    76:8b:b4:1d:3a:3b:8e:6d:03:64:28:94:ff:3c:81:
                    fc:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:F5:3F:B5:43:51:B4:FD:25:00:26:53:A3:51:5A:D2:ED:6E:AA:E6
            X509v3 Authority Key Identifier:
                keyid:7B:9A:B8:9C:2D:FA:6E:3A:3E:C8:75:EE:57:FE:2C:0D:9A:71:41:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36E6854/385FBE92230D11EFA27C81277DDC24C2/e5q4nC36bjo-yHXuV_4sDZpxQcA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/e5q4nC36bjo-yHXuV_4sDZpxQcA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E6854/385FBE92230D11EFA27C81277DDC24C2/e5q4nC36bjo-yHXuV_4sDZpxQcA.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:d3:e7:66:12:26:c9:a0:67:89:fb:7c:80:71:86:26:d3:c6:
         0f:9e:26:cd:65:7d:b5:77:4d:e4:5b:5c:1a:5e:f2:de:1c:df:
         99:31:be:71:ca:f3:96:86:f6:da:7b:0a:2d:2c:ba:ae:d2:ee:
         13:2d:8a:68:ef:d3:92:5e:82:9e:4e:b9:7f:72:f0:5d:29:bb:
         a5:b6:06:50:94:09:8c:d0:69:9d:69:00:c4:8e:cd:ee:e0:24:
         c2:71:11:fb:5c:f7:5a:a8:5f:e8:77:6b:ca:92:dd:5d:47:37:
         d7:61:3d:49:92:dd:a8:3c:4c:7e:95:11:b2:5d:32:23:42:21:
         ea:0b:8a:3d:41:a5:72:32:f0:6e:cb:20:cf:a2:84:f1:6f:c1:
         0f:0e:eb:52:a2:fe:b3:fb:d3:30:22:87:95:d2:86:fc:b3:77:
         8f:ba:e7:4a:74:c7:50:35:86:6d:b6:a6:ca:77:7b:9c:c8:f9:
         29:fb:9d:4d:36:10:c2:fb:13:4e:b4:aa:9a:b3:ad:34:6e:a0:
         5c:0f:0d:b8:b5:c7:04:7e:62:df:11:b7:20:5a:20:b4:bf:e9:
         b4:28:54:18:3e:cf:1c:fe:e0:85:f1:1e:af:a2:ff:05:8a:fb:
         1c:25:6a:73:f4:b6:b2:56:23:42:2d:18:a9:80:ff:46:b3:78:
         9a:a6:85:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 30 01:33:31 2025 by rpki-client