This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FAE49/A7AE1658BFDE11F080720F79DAE4EC9C/MjlPmgUImlFA6Eyv6J4tGcG1IyA.mft
File:                     MjlPmgUImlFA6Eyv6J4tGcG1IyA.mft (raw, json)
Hash identifier:          L3PTcZpv8e0cO32LD0OM3Ns4BrJr2AW2+tzchS8pKHo=
Subject key identifier:   66:9E:6B:49:1F:3A:A2:1D:F0:7D:43:44:6E:CC:9F:7D:00:E7:BC:3C
Authority key identifier: 32:39:4F:9A:05:08:9A:51:40:E8:4C:AF:E8:9E:2D:19:C1:B5:23:20
Certificate issuer:       /CN=F36FAE49AF/serialNumber=32394F9A05089A5140E84CAFE89E2D19C1B52320
Certificate serial:       3E
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/MjlPmgUImlFA6Eyv6J4tGcG1IyA.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36FAE49/A7AE1658BFDE11F080720F79DAE4EC9C/MjlPmgUImlFA6Eyv6J4tGcG1IyA.mft
Manifest number:          37
Signing time:             Fri 19 Dec 2025 05:20:21 +0000
Manifest this update:     Fri 19 Dec 2025 05:20:20 +0000
Manifest next update:     Sun 21 Dec 2025 05:20:20 +0000
Files and hashes:         1: MjlPmgUImlFA6Eyv6J4tGcG1IyA.crl (hash: /kgWMZcSSkJNrtadkygq+DH0X2ud0Oc+Pq+LkIbpo7Q=)
                          2: 1A11F9A6C43711F08C008AEFDAE4EC9C.roa (hash: PrDHrRVwFxmq9wa+36gsz1hsGADjZsCN6pmTpGbWs7s=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36FAE49/A7AE1658BFDE11F080720F79DAE4EC9C/MjlPmgUImlFA6Eyv6J4tGcG1IyA.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36FAE49/A7AE1658BFDE11F080720F79DAE4EC9C/MjlPmgUImlFA6Eyv6J4tGcG1IyA.mft
                          rsync://rpki.afrinic.net/repository/afrinic/MjlPmgUImlFA6Eyv6J4tGcG1IyA.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 21 Dec 2025 00:06:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 62 (0x3e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36FAE49AF, serialNumber=32394F9A05089A5140E84CAFE89E2D19C1B52320
        Validity
            Not Before: Dec 19 05:20:20 2025 GMT
            Not After : Dec 21 05:20:20 2025 GMT
        Subject: CN=6944e095-61ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:25:1e:3b:55:27:d9:db:59:70:f0:e5:b8:5f:
                    cf:7e:a5:ca:32:d6:f8:49:ab:77:95:eb:fb:a6:28:
                    ce:eb:de:c7:81:21:fb:7d:5d:2d:08:22:df:61:7d:
                    1b:fa:70:50:7e:eb:0f:d4:22:b6:8a:80:75:e2:4a:
                    9d:bf:b7:7c:2e:6e:98:32:94:03:7b:74:13:44:c5:
                    ee:99:61:e4:a8:5f:25:71:df:d7:f1:32:05:48:3e:
                    c7:8a:c8:79:a7:ea:75:ac:83:23:47:1d:ec:1e:15:
                    54:fc:8e:ff:5a:ec:7e:b8:15:98:de:4d:9c:1a:c8:
                    af:bb:af:b4:2e:43:77:a5:f5:68:f7:1e:7a:91:80:
                    49:86:c0:33:7d:99:f7:21:7a:2c:b0:bf:07:06:6f:
                    29:23:6e:61:1e:1b:fb:d9:69:e6:47:98:23:74:3e:
                    ae:85:db:06:0d:e2:97:99:39:ec:cc:84:ac:a7:cf:
                    a4:a2:64:c7:80:63:2e:f1:ab:4b:3b:09:2e:f9:2b:
                    4f:02:38:a0:8c:85:1c:4e:03:f9:8c:e1:37:92:db:
                    1d:70:b3:fd:d5:75:3f:ad:ce:7f:5c:c7:a7:3c:30:
                    fb:3c:5f:91:f4:cd:6a:bb:77:4f:1d:f8:fc:b5:ae:
                    b7:49:c4:83:08:95:38:6a:47:fd:d3:d6:75:e5:0e:
                    1a:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:9E:6B:49:1F:3A:A2:1D:F0:7D:43:44:6E:CC:9F:7D:00:E7:BC:3C
            X509v3 Authority Key Identifier:
                keyid:32:39:4F:9A:05:08:9A:51:40:E8:4C:AF:E8:9E:2D:19:C1:B5:23:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36FAE49/A7AE1658BFDE11F080720F79DAE4EC9C/MjlPmgUImlFA6Eyv6J4tGcG1IyA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/MjlPmgUImlFA6Eyv6J4tGcG1IyA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FAE49/A7AE1658BFDE11F080720F79DAE4EC9C/MjlPmgUImlFA6Eyv6J4tGcG1IyA.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:5d:54:13:8a:33:7e:b0:32:b0:db:a4:10:fc:f6:d1:17:c8:
         7c:13:27:3a:66:5a:be:05:99:9a:85:1c:d7:92:60:f6:e1:2f:
         05:65:80:d2:47:fb:36:79:81:e4:25:5d:4c:06:1f:d8:5f:9a:
         d6:7a:be:9e:74:7a:07:5d:95:7d:d0:a1:d7:19:c8:aa:0e:93:
         98:5f:28:d9:fe:7e:e2:aa:13:48:85:a3:b0:b4:02:ad:f6:a7:
         b5:78:05:fb:79:1c:a0:a5:6e:69:67:a6:ce:d3:09:71:03:b5:
         e9:50:91:5c:22:87:46:65:8c:32:ad:c8:82:d1:60:25:0f:70:
         df:52:06:4c:a8:d7:9e:c3:1c:11:f8:74:e6:8f:15:cc:2b:48:
         95:63:38:c6:46:da:b5:1a:ea:d9:8c:c7:b5:87:15:08:0c:4d:
         97:ed:30:40:9d:d6:39:79:eb:6e:92:29:7c:83:21:b1:5d:b2:
         23:97:70:c2:39:78:da:06:50:4d:e2:65:00:b3:82:f9:bf:b6:
         e1:a2:5b:58:ca:a1:b4:bb:04:e0:ad:b7:15:4b:c9:5a:89:f0:
         ed:8f:f6:d0:f6:30:8d:8d:20:a1:84:2b:22:6f:01:b1:20:74:
         bd:80:63:c0:fd:d9:70:28:f3:08:c6:38:03:3a:bc:90:02:f9:
         44:05:58:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 00:49:48 2025 by rpki-client