This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36EC7CE/82014A10989911E9B7396A33F8AEA228/DgQKv0-UXzDXfaKLvwKLasSdBCw.mft
File:                     DgQKv0-UXzDXfaKLvwKLasSdBCw.mft (raw, json)
Hash identifier:          veY2cx//C+TJDn/HZxU4jNUyHsKg9lU6RcAECA1qgl0=
Subject key identifier:   E6:CA:EF:9E:25:3D:7A:2D:93:1C:CB:39:44:38:C4:93:CD:12:D1:A6
Authority key identifier: 0E:04:0A:BF:4F:94:5F:30:D7:7D:A2:8B:BF:02:8B:6A:C4:9D:04:2C
Certificate issuer:       /CN=F36EC7CEAF/serialNumber=0E040ABF4F945F30D77DA28BBF028B6AC49D042C
Certificate serial:       099A
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/DgQKv0-UXzDXfaKLvwKLasSdBCw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36EC7CE/82014A10989911E9B7396A33F8AEA228/DgQKv0-UXzDXfaKLvwKLasSdBCw.mft
Manifest number:          0990
Signing time:             Thu 25 Dec 2025 01:31:06 +0000
Manifest this update:     Thu 25 Dec 2025 01:31:05 +0000
Manifest next update:     Sat 27 Dec 2025 01:31:05 +0000
Files and hashes:         1: DgQKv0-UXzDXfaKLvwKLasSdBCw.crl (hash: WAD4ooC72kIKfMHTnyofNXt+WOfti/ucX9OwnCLzVNo=)
                          2: 82A311068E9D11EA936A3D74F8AEA228.roa (hash: 2fJIX7cXKI9q+Xtr5M7y3JF2k9yaJVXpVCcsMHvm1sY=)
                          3: 25FEFCBCDF7011E997CFF03AF8AEA228.roa (hash: NtIZQtczAvdXKaNMIz0m1Q59Z9nMLMNC/p7wM9puv2w=)
                          4: EAE45BCCDF6F11E9826AA83AF8AEA228.roa (hash: pbv4p9icCN4O4WG3leeCL1EpjVjH0clUw2cLgw9t0TQ=)
                          5: 9F906EFADF6E11E99541B739F8AEA228.roa (hash: hCPkplK+hVP9DlTjTX9JwAshQG3hKSM8ZsAigNstAOM=)
                          6: 57B1CD5CDF7011E994C8153BF8AEA228.roa (hash: zjnpjvYJ2wSjAd/hAZmaBFc5QxQdM4l8os6iExNvOEE=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36EC7CE/82014A10989911E9B7396A33F8AEA228/DgQKv0-UXzDXfaKLvwKLasSdBCw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36EC7CE/82014A10989911E9B7396A33F8AEA228/DgQKv0-UXzDXfaKLvwKLasSdBCw.mft
                          rsync://rpki.afrinic.net/repository/afrinic/DgQKv0-UXzDXfaKLvwKLasSdBCw.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 27 Dec 2025 00:06:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2458 (0x99a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36EC7CEAF, serialNumber=0E040ABF4F945F30D77DA28BBF028B6AC49D042C
        Validity
            Not Before: Dec 25 01:31:05 2025 GMT
            Not After : Dec 27 01:31:05 2025 GMT
        Subject: CN=694c93da-74ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:cd:50:35:68:f7:cb:32:40:8d:16:8d:50:f8:
                    80:ff:70:41:37:0b:74:c6:67:03:41:3d:9f:1c:c2:
                    33:fe:57:b4:92:5f:f2:10:1a:02:95:97:22:2b:e6:
                    b2:b0:dd:81:61:60:00:54:eb:e3:b9:d2:c4:6b:02:
                    c3:89:6c:be:34:d3:21:6f:49:97:ef:5e:74:ae:1e:
                    c6:c8:58:8f:2b:6f:2c:16:24:45:2a:35:cb:f6:29:
                    02:94:57:58:e5:30:18:a0:e1:95:a5:fe:e9:4e:6d:
                    24:51:c7:36:db:93:9e:02:8f:4a:87:e0:ec:33:55:
                    ee:09:3b:d1:db:1c:48:84:b0:c2:0a:cc:85:26:8b:
                    f4:d5:64:d2:71:43:43:1d:66:1d:69:77:3b:1b:96:
                    74:87:90:d2:33:72:4a:1c:49:ae:e6:91:53:ed:78:
                    4b:a1:8b:13:88:d6:4b:92:eb:48:d9:0b:d3:ba:8c:
                    d9:e1:4b:57:c2:2e:83:f5:09:e7:ba:11:78:95:fc:
                    1f:10:a8:38:ae:4d:34:75:f1:01:29:1f:75:49:41:
                    33:c3:72:29:e7:5c:75:a0:9a:be:af:a0:37:74:06:
                    75:a6:ce:ee:3f:67:15:20:de:20:84:5f:f3:40:de:
                    1c:2b:40:b0:9c:87:9d:6b:a2:b8:9e:90:9f:00:db:
                    44:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:CA:EF:9E:25:3D:7A:2D:93:1C:CB:39:44:38:C4:93:CD:12:D1:A6
            X509v3 Authority Key Identifier:
                keyid:0E:04:0A:BF:4F:94:5F:30:D7:7D:A2:8B:BF:02:8B:6A:C4:9D:04:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36EC7CE/82014A10989911E9B7396A33F8AEA228/DgQKv0-UXzDXfaKLvwKLasSdBCw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/DgQKv0-UXzDXfaKLvwKLasSdBCw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36EC7CE/82014A10989911E9B7396A33F8AEA228/DgQKv0-UXzDXfaKLvwKLasSdBCw.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:50:e5:95:58:cf:ad:ac:51:ec:80:4c:52:cd:36:81:a1:fb:
         48:a3:e4:83:6f:c1:68:a7:59:44:e0:d2:f0:ee:51:84:ae:5e:
         91:e4:b7:1a:3b:a7:c1:df:d9:a6:b6:a3:9e:e5:3e:d0:f8:f2:
         d0:df:06:5b:1d:82:17:b0:fa:a7:98:95:78:58:c7:8c:b1:44:
         f3:d3:71:04:27:3d:c4:e6:da:a6:09:ba:ba:c6:e5:f1:50:d9:
         f9:e0:40:29:44:01:56:ea:5c:54:2f:19:75:59:4b:66:8e:c5:
         21:97:9e:e2:9a:7f:af:c0:91:75:40:5a:80:bf:4d:6e:04:b7:
         88:4c:5a:6a:c2:97:b8:55:4d:47:16:7f:d2:56:c1:e5:27:63:
         4f:89:cd:4b:f9:31:38:9e:ed:36:46:3b:d1:a2:d0:d0:98:b6:
         df:12:2b:02:95:35:66:87:7e:6d:db:e7:f8:23:0a:3e:0c:ed:
         a8:e1:3f:37:a2:15:f6:23:10:81:b5:bc:46:dd:64:02:20:01:
         a1:8a:4d:89:71:d9:80:88:f5:e2:50:f2:65:34:ee:53:b8:f5:
         85:23:06:a2:5c:67:f3:71:e8:4a:13:e4:61:44:c1:4f:91:e9:
         fe:74:50:50:f4:bb:15:a3:6c:18:fb:b8:31:cc:d7:12:0e:9d:
         f9:7b:03:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 25 03:32:53 2025 by rpki-client