This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36EE687/16FB6D9AFA5411EFA5C65CBE762E951A/eJra0zjCDXJE3Hvm0PRKklP8jxM.mft
File:                     eJra0zjCDXJE3Hvm0PRKklP8jxM.mft (raw, json)
Hash identifier:          fujNl3Kvtl/5tKBQ6b1EMmA20voILlU+23vO69LKMlA=
Subject key identifier:   EF:E5:CB:EF:E7:AB:F4:26:A6:FF:3E:C5:01:46:B4:DE:E2:B3:61:54
Authority key identifier: 78:9A:DA:D3:38:C2:0D:72:44:DC:7B:E6:D0:F4:4A:92:53:FC:8F:13
Certificate issuer:       /CN=F36EE687AF/serialNumber=789ADAD338C20D7244DC7BE6D0F44A9253FC8F13
Certificate serial:       012C
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/eJra0zjCDXJE3Hvm0PRKklP8jxM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36EE687/16FB6D9AFA5411EFA5C65CBE762E951A/eJra0zjCDXJE3Hvm0PRKklP8jxM.mft
Manifest number:          012A
Signing time:             Mon 22 Dec 2025 04:54:30 +0000
Manifest this update:     Mon 22 Dec 2025 04:54:29 +0000
Manifest next update:     Wed 24 Dec 2025 04:54:29 +0000
Files and hashes:         1: eJra0zjCDXJE3Hvm0PRKklP8jxM.crl (hash: ow8F7HmPVms06Xlg1mBu+kM/+lDNphCvocY5ojSs6YA=)
                          2: 3F9659F6FA5711EFA9433954762E951A.roa (hash: qKiDyS4k3Pb0vrru4mPYqluJ2Rx/UxF8Iobn+ms5BiI=)
                          3: DC0411CAFA5711EFA0C15158762E951A.roa (hash: 3eW9DvSOVij5SdKc0NclAvUK7jyKsaBWMt4dydb1suk=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36EE687/16FB6D9AFA5411EFA5C65CBE762E951A/eJra0zjCDXJE3Hvm0PRKklP8jxM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36EE687/16FB6D9AFA5411EFA5C65CBE762E951A/eJra0zjCDXJE3Hvm0PRKklP8jxM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/eJra0zjCDXJE3Hvm0PRKklP8jxM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 24 Dec 2025 04:54:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 300 (0x12c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36EE687AF, serialNumber=789ADAD338C20D7244DC7BE6D0F44A9253FC8F13
        Validity
            Not Before: Dec 22 04:54:29 2025 GMT
            Not After : Dec 24 04:54:29 2025 GMT
        Subject: CN=6948cf05-2c55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:7b:ed:9b:08:e8:38:63:e8:3c:9a:8f:7a:8a:
                    74:2d:55:97:10:75:26:e1:0c:1e:5e:41:89:bf:8f:
                    a7:ed:a3:17:27:1a:08:20:d9:f2:0c:fe:79:4f:07:
                    8a:be:ff:be:a2:48:fd:b6:89:ff:bf:b9:ba:a3:95:
                    ff:49:45:75:21:c3:08:26:77:21:71:49:dd:0b:89:
                    a1:2a:5f:54:58:a1:19:fb:05:80:70:d8:f6:b1:db:
                    80:ed:a6:06:73:d4:5c:bc:20:64:85:ef:6c:1e:c9:
                    58:2e:1e:92:4e:8d:33:66:b3:70:cc:19:88:2f:bf:
                    65:b2:59:f5:83:a1:20:df:d9:50:b1:90:89:c2:9c:
                    91:4e:a9:b0:03:f3:01:fb:ae:56:b9:0f:13:05:bf:
                    f2:44:38:13:9e:bf:7c:77:8d:8e:f4:3b:75:52:61:
                    b0:39:8a:83:12:ea:25:e2:2a:38:d1:27:18:b4:16:
                    45:1b:e1:5b:17:0c:39:17:9c:98:46:ad:6b:b2:20:
                    1d:a8:71:2f:6c:fa:f9:c8:09:bb:18:ae:54:58:c6:
                    ee:03:f2:f9:8c:6d:f5:57:52:81:f9:f5:bc:ea:e3:
                    b1:f3:0b:bc:37:2b:a1:04:f4:eb:d2:45:db:08:20:
                    18:e2:f8:13:ad:6b:20:69:dc:4f:d2:4b:2d:8b:9b:
                    26:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:E5:CB:EF:E7:AB:F4:26:A6:FF:3E:C5:01:46:B4:DE:E2:B3:61:54
            X509v3 Authority Key Identifier:
                keyid:78:9A:DA:D3:38:C2:0D:72:44:DC:7B:E6:D0:F4:4A:92:53:FC:8F:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36EE687/16FB6D9AFA5411EFA5C65CBE762E951A/eJra0zjCDXJE3Hvm0PRKklP8jxM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/eJra0zjCDXJE3Hvm0PRKklP8jxM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36EE687/16FB6D9AFA5411EFA5C65CBE762E951A/eJra0zjCDXJE3Hvm0PRKklP8jxM.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:94:eb:6d:52:b4:86:04:23:a0:0d:f4:e8:72:a2:b3:51:68:
         81:d9:dc:1d:b0:ae:90:cc:5a:cd:31:75:4c:df:72:88:1a:cb:
         7c:4c:2f:e4:59:dd:f9:b5:b6:9b:d7:ed:75:b6:1c:cf:88:89:
         83:bf:3c:d5:e5:7e:9b:5a:67:2f:b3:12:60:e9:85:32:83:5d:
         0a:e6:34:fb:f5:ac:4a:91:ac:a3:77:21:56:9c:5f:77:9c:e2:
         ed:21:ea:c5:0a:5a:3d:c5:8f:6f:9a:ac:6e:47:14:95:97:eb:
         4a:e6:19:74:fb:86:2a:02:e0:f9:3b:85:a5:f7:bc:37:0e:07:
         a1:4f:17:e0:2b:b4:3a:e6:db:ad:30:0a:46:28:53:7e:de:0a:
         68:27:73:8e:ad:e3:1e:cd:22:5c:98:fa:08:50:0e:75:a4:e2:
         4b:8a:ef:a3:60:6a:19:bd:55:ab:7b:56:f5:09:51:ba:71:8a:
         1f:0a:b3:28:bf:76:a0:e0:19:a8:b6:9b:3a:f3:e8:c1:fe:0c:
         7e:13:d9:bd:cf:07:2d:2a:91:f9:cc:ae:40:f0:d6:d1:78:97:
         3d:f3:4d:22:f9:55:5f:d7:ac:5b:66:6e:10:4b:59:f2:a7:89:
         ac:b3:e7:e7:e1:3b:09:77:81:5e:d6:a8:72:66:03:8a:18:85:
         d3:9e:85:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 02:47:22 2025 by rpki-client