This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36EF78E/993956C85BC111EF8A43554E762E951A/_06CSYXcD-nm1S0VaP27Fw73EEs.mft
File:                     _06CSYXcD-nm1S0VaP27Fw73EEs.mft (raw, json)
Hash identifier:          5BuNPYQhoQpKVABMGhbzNayYktq9/DIQK75jnMOMtko=
Subject key identifier:   DA:DB:1B:2C:96:6A:BB:0C:EC:9E:9D:5B:DA:79:2C:73:F6:99:DA:DB
Authority key identifier: FF:4E:82:49:85:DC:0F:E9:E6:D5:2D:15:68:FD:BB:17:0E:F7:10:4B
Certificate issuer:       /CN=F36EF78EAF/serialNumber=FF4E824985DC0FE9E6D52D1568FDBB170EF7104B
Certificate serial:       0203
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/_06CSYXcD-nm1S0VaP27Fw73EEs.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36EF78E/993956C85BC111EF8A43554E762E951A/_06CSYXcD-nm1S0VaP27Fw73EEs.mft
Manifest number:          0200
Signing time:             Wed 24 Dec 2025 04:33:50 +0000
Manifest this update:     Wed 24 Dec 2025 04:33:49 +0000
Manifest next update:     Fri 26 Dec 2025 04:33:49 +0000
Files and hashes:         1: _06CSYXcD-nm1S0VaP27Fw73EEs.crl (hash: speXzdgovw4W2okETaalzryF7lfzElAzzGdmtS2MP+8=)
                          2: 67C1E6C25BC211EFB69DE054762E951A.roa (hash: YBb6s7P/xe4Rp31Y1/0OCerKUAL44djIVtQBiEpnlME=)
                          3: D1925D2E8CC311F083C2CFE1DAE4EC9C.roa (hash: zU8Q70WrJt2SK0TaQnBuuJzUDch8WRt6KzfF4KFZg1U=)
                          4: F663696AE24411EF9066AA7A762E951A.roa (hash: rlVcPbXsu5EET/bBWkW4TnApiJ0p61Q+bM4Ie8pECxI=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36EF78E/993956C85BC111EF8A43554E762E951A/_06CSYXcD-nm1S0VaP27Fw73EEs.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36EF78E/993956C85BC111EF8A43554E762E951A/_06CSYXcD-nm1S0VaP27Fw73EEs.mft
                          rsync://rpki.afrinic.net/repository/afrinic/_06CSYXcD-nm1S0VaP27Fw73EEs.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 26 Dec 2025 04:33:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 515 (0x203)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36EF78EAF, serialNumber=FF4E824985DC0FE9E6D52D1568FDBB170EF7104B
        Validity
            Not Before: Dec 24 04:33:49 2025 GMT
            Not After : Dec 26 04:33:49 2025 GMT
        Subject: CN=694b6d2e-9438
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:5f:1e:83:14:77:37:1b:2e:a3:b6:a8:cc:d6:
                    a3:54:c2:d9:3c:4d:f0:d0:b9:51:72:35:b7:b1:2b:
                    02:7c:da:af:ac:ec:69:55:9b:1a:dc:53:d5:04:0f:
                    0d:9e:f4:01:70:6f:d9:2a:9a:03:6a:a9:f6:9d:91:
                    21:b6:ca:24:b1:48:e0:3e:cf:9c:5b:e5:dc:33:ef:
                    3e:d7:ad:e6:fb:5c:11:2b:76:d1:82:d6:6f:31:73:
                    34:ef:d7:45:a5:da:83:18:e2:11:21:fe:05:66:0e:
                    fc:5e:11:d5:4e:f5:bf:b2:9e:bf:84:a1:f7:cc:e5:
                    43:f2:87:bf:b4:d9:f8:5a:50:a8:3d:05:19:39:75:
                    f0:85:15:4e:b5:b3:f5:51:a5:ca:38:1a:42:69:24:
                    dd:15:74:e5:3b:f3:47:b4:67:db:8e:07:20:ae:7f:
                    0f:c6:85:89:5e:4c:0d:f2:43:fd:78:34:7c:bb:2f:
                    9c:20:3a:b5:37:b4:e2:31:4e:40:7d:a7:1b:4d:18:
                    c8:6b:5f:7d:05:83:ee:bb:a5:9e:22:d4:5a:9d:75:
                    07:3f:12:f7:ee:f4:5d:15:54:b1:31:5e:8e:6f:2c:
                    fb:43:c1:77:fc:f2:d8:37:78:de:9f:26:43:36:dd:
                    9b:83:7a:86:73:75:c0:3d:ee:94:79:8e:bc:c7:47:
                    1f:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:DB:1B:2C:96:6A:BB:0C:EC:9E:9D:5B:DA:79:2C:73:F6:99:DA:DB
            X509v3 Authority Key Identifier:
                keyid:FF:4E:82:49:85:DC:0F:E9:E6:D5:2D:15:68:FD:BB:17:0E:F7:10:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36EF78E/993956C85BC111EF8A43554E762E951A/_06CSYXcD-nm1S0VaP27Fw73EEs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/_06CSYXcD-nm1S0VaP27Fw73EEs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36EF78E/993956C85BC111EF8A43554E762E951A/_06CSYXcD-nm1S0VaP27Fw73EEs.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:ad:ea:01:2e:4f:10:15:21:3d:5b:d2:ed:dc:40:c7:9a:04:
         83:63:f6:a9:4f:35:bd:5f:1e:08:c8:4e:af:31:92:6f:22:2f:
         80:b9:37:3e:0f:b4:b0:db:7e:af:42:19:db:9e:fe:8f:cd:ce:
         38:7e:4c:07:84:5c:8b:17:be:9c:c0:7d:f5:f4:64:62:ee:03:
         f3:5f:08:39:f6:99:94:12:19:25:3d:6f:da:2c:d6:07:3b:8f:
         f0:7e:2c:ec:74:40:de:ed:bb:98:e3:a6:7a:6d:c5:9e:3e:41:
         5d:51:b5:a2:22:5b:95:cc:ee:38:0f:bd:e3:de:6f:9a:8f:ab:
         dc:ed:42:c2:02:bb:a1:f8:7e:a9:09:c3:30:25:4b:47:5c:7e:
         72:68:84:59:5a:56:1a:dd:97:44:68:e0:bd:cd:b0:5e:29:fc:
         50:b3:02:eb:d2:15:02:04:da:68:22:da:52:79:91:38:66:24:
         36:6c:df:ee:c9:ea:41:38:82:96:5f:51:1e:07:b8:f6:2c:e3:
         c7:b9:d0:c5:ba:65:a9:40:69:b4:2a:29:38:b1:64:93:9a:da:
         66:3e:bf:7e:f4:bd:b9:01:fa:27:17:da:7f:6c:a4:a1:b6:27:
         17:5f:3f:05:c6:7b:20:5d:8d:0d:f5:4a:20:68:9a:58:03:e0:
         62:49:ca:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 15:47:31 2025 by rpki-client