This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36E68C0/3ECE895E48EF11EFBAB935BF762E951A/jE53-jIjScCyfwF2MjOuR7DcmvM.mft
File:                     jE53-jIjScCyfwF2MjOuR7DcmvM.mft (raw, json)
Hash identifier:          P28icgLvk1o+Mv9sLu6z5hb0lwA5nwy5TGzca0Ziocc=
Subject key identifier:   87:5C:E3:3A:D4:76:2D:A4:E6:74:33:37:D5:4F:73:CD:CE:6D:CC:2C
Authority key identifier: 8C:4E:77:FA:32:23:49:C0:B2:7F:01:76:32:33:AE:47:B0:DC:9A:F3
Certificate issuer:       /CN=F36E68C0AF/serialNumber=8C4E77FA322349C0B27F01763233AE47B0DC9AF3
Certificate serial:       021D
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/jE53-jIjScCyfwF2MjOuR7DcmvM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36E68C0/3ECE895E48EF11EFBAB935BF762E951A/jE53-jIjScCyfwF2MjOuR7DcmvM.mft
Manifest number:          021A
Signing time:             Thu 25 Dec 2025 04:23:33 +0000
Manifest this update:     Thu 25 Dec 2025 04:23:32 +0000
Manifest next update:     Sat 27 Dec 2025 04:23:32 +0000
Files and hashes:         1: jE53-jIjScCyfwF2MjOuR7DcmvM.crl (hash: esip/av2WHB3u0pw2NcL238N6ZSBbmy6Hi+ic6ji/k8=)
                          2: 163B806EBEFF11F09AD7A978DAE4EC9C.roa (hash: /RRdqAjpsv8m7r2GyY/BKUpRLM+07+N7E0oDvFGiBQ8=)
                          3: A30290B4490311EFAD6D6848762E951A.roa (hash: 9DJDNrHzZVxc5zuNzgDbveKnN6iPIU3B9BicWnmYCZQ=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36E68C0/3ECE895E48EF11EFBAB935BF762E951A/jE53-jIjScCyfwF2MjOuR7DcmvM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36E68C0/3ECE895E48EF11EFBAB935BF762E951A/jE53-jIjScCyfwF2MjOuR7DcmvM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/jE53-jIjScCyfwF2MjOuR7DcmvM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 27 Dec 2025 00:06:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 541 (0x21d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36E68C0AF, serialNumber=8C4E77FA322349C0B27F01763233AE47B0DC9AF3
        Validity
            Not Before: Dec 25 04:23:32 2025 GMT
            Not After : Dec 27 04:23:32 2025 GMT
        Subject: CN=694cbc45-a8e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:1d:2d:81:45:21:b9:8c:55:ed:8b:b5:f4:1d:
                    2f:75:b9:4c:3f:5b:3b:9a:b1:4f:84:d9:bc:b6:a2:
                    57:ba:c1:5c:45:f4:5c:d0:4b:2a:50:b2:7c:e7:f9:
                    a2:b0:e3:9e:d6:3d:18:1a:31:7b:cd:11:63:9c:3b:
                    5d:f9:1f:ea:c1:2a:52:9b:33:6b:44:1a:3d:70:eb:
                    e4:a4:6e:28:04:00:a6:df:ae:71:ba:9e:1a:29:c3:
                    24:51:54:74:3e:b7:d1:42:4b:80:23:23:53:38:24:
                    55:a6:17:51:6a:cd:4c:a6:a4:d0:93:07:6d:bd:dc:
                    8a:82:88:b7:27:06:68:23:6c:4a:b7:2b:90:a7:ff:
                    30:fd:0a:da:2e:1f:64:e5:bd:4b:06:e6:9c:31:2f:
                    4a:53:1b:eb:22:8a:0f:35:d9:fc:93:85:05:8f:7b:
                    7b:7a:e4:ed:1c:50:95:b6:1e:07:ef:5b:00:bb:a4:
                    27:4b:96:c4:ec:d4:a2:4a:51:f0:08:ab:e5:23:f4:
                    7d:f7:cf:c9:bd:3d:8f:cb:13:22:8a:e9:23:54:c7:
                    0a:a6:e8:ae:db:8a:91:36:3b:22:67:2b:3a:46:00:
                    5a:a6:12:32:81:ad:5e:30:d4:1c:90:4c:f0:3c:88:
                    2a:4b:95:bc:57:9e:95:9c:37:f0:66:be:a3:eb:00:
                    ae:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:5C:E3:3A:D4:76:2D:A4:E6:74:33:37:D5:4F:73:CD:CE:6D:CC:2C
            X509v3 Authority Key Identifier:
                keyid:8C:4E:77:FA:32:23:49:C0:B2:7F:01:76:32:33:AE:47:B0:DC:9A:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36E68C0/3ECE895E48EF11EFBAB935BF762E951A/jE53-jIjScCyfwF2MjOuR7DcmvM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/jE53-jIjScCyfwF2MjOuR7DcmvM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E68C0/3ECE895E48EF11EFBAB935BF762E951A/jE53-jIjScCyfwF2MjOuR7DcmvM.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:48:b3:aa:ea:b8:63:5a:13:2b:fa:54:62:42:41:a5:f7:d8:
         87:14:b9:86:3e:7e:07:ce:8c:2b:41:ec:72:3e:f5:d8:c9:21:
         da:ee:df:0c:a1:67:f9:fa:38:78:70:77:5b:08:b7:4e:b5:a8:
         1d:a4:17:24:03:e1:70:5f:71:02:75:92:8b:88:6c:ee:fc:19:
         21:ee:84:5c:41:d1:a4:70:eb:9d:59:18:65:cf:23:a3:6c:d7:
         dc:65:95:d8:60:3b:a9:54:85:e8:5d:43:11:41:70:fd:b6:a0:
         51:8b:88:66:2e:0c:c1:64:e3:a4:57:1e:ce:94:86:75:4e:78:
         ed:7c:b2:bb:19:35:85:92:fe:ea:29:37:b6:76:0f:8b:3e:aa:
         72:82:92:40:03:ed:10:58:1e:ee:45:5e:46:18:54:1e:e6:cf:
         a4:06:fe:78:b7:30:2c:79:14:6f:9d:b5:12:8d:4b:16:22:79:
         df:a8:9d:4b:6d:97:98:65:11:eb:b8:27:56:83:27:12:e1:02:
         38:17:35:b1:a1:c3:ba:3e:f2:db:a5:61:dc:bf:bf:87:37:59:
         d0:67:23:67:9e:73:8d:31:4a:31:5c:d6:73:d1:16:2b:dd:72:
         3e:6f:2f:cd:d7:d9:ba:f4:e2:2f:77:97:27:9e:21:9d:e6:d2:
         ab:b4:71:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 25 11:19:53 2025 by rpki-client