This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FB15E/AF1E2EC2B9C911EEB2D5515A775412E6/yaWcY7cKjhK9HAsVd2lxcaP-4PE.mft
File:                     yaWcY7cKjhK9HAsVd2lxcaP-4PE.mft (raw, json)
Hash identifier:          wL+cx4vhbm1gYTfssK7tyOae8O1xI2qofWnACIbc74E=
Subject key identifier:   1C:A8:22:78:8C:60:66:1F:7C:21:C0:6A:42:A8:1F:F6:73:8E:66:84
Authority key identifier: C9:A5:9C:63:B7:0A:8E:12:BD:1C:0B:15:77:69:71:71:A3:FE:E0:F1
Certificate issuer:       /CN=F36FB15EAF/serialNumber=C9A59C63B70A8E12BD1C0B1577697171A3FEE0F1
Certificate serial:       02D3
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/yaWcY7cKjhK9HAsVd2lxcaP-4PE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36FB15E/AF1E2EC2B9C911EEB2D5515A775412E6/yaWcY7cKjhK9HAsVd2lxcaP-4PE.mft
Manifest number:          02D0
Signing time:             Sat 20 Dec 2025 04:00:09 +0000
Manifest this update:     Sat 20 Dec 2025 04:00:08 +0000
Manifest next update:     Mon 22 Dec 2025 04:00:08 +0000
Files and hashes:         1: yaWcY7cKjhK9HAsVd2lxcaP-4PE.crl (hash: zcjd/fZ3FJCl/iJObQuCZOAXioIq1PO7hFLngwbNa/s=)
                          2: E7E6ED96B5B911F0897D0386DAE4EC9C.roa (hash: USTrTqgafFdAdWVQRnFi5xBXcAuIAY9hmlsS/Lw+jKU=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36FB15E/AF1E2EC2B9C911EEB2D5515A775412E6/yaWcY7cKjhK9HAsVd2lxcaP-4PE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36FB15E/AF1E2EC2B9C911EEB2D5515A775412E6/yaWcY7cKjhK9HAsVd2lxcaP-4PE.mft
                          rsync://rpki.afrinic.net/repository/afrinic/yaWcY7cKjhK9HAsVd2lxcaP-4PE.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 22 Dec 2025 04:00:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 723 (0x2d3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36FB15EAF, serialNumber=C9A59C63B70A8E12BD1C0B1577697171A3FEE0F1
        Validity
            Not Before: Dec 20 04:00:08 2025 GMT
            Not After : Dec 22 04:00:08 2025 GMT
        Subject: CN=69461f48-10b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:13:1a:ee:e1:7b:74:bf:be:9e:b5:e7:4b:bf:
                    81:1f:0d:a3:59:d5:bf:50:fa:0b:32:c6:57:1f:65:
                    90:df:de:9f:28:ca:b3:21:9c:2f:77:d7:b4:a9:5d:
                    f8:3f:ef:7d:82:ab:8e:50:8e:aa:56:cd:44:3b:6a:
                    f1:bb:fe:a4:f0:ad:7a:60:4c:1c:ca:20:25:04:00:
                    c9:e3:29:31:7d:bf:81:11:51:70:e6:a0:29:43:b3:
                    a2:e4:c7:73:81:1b:ad:0a:0e:06:f8:76:15:22:b9:
                    28:e8:64:b6:35:77:eb:7a:89:8e:40:53:7a:a1:52:
                    89:7e:73:d2:0c:76:8c:10:87:ab:27:9b:c8:0e:8d:
                    c0:68:29:f4:e6:4e:ee:9a:49:d2:2b:2c:aa:55:2f:
                    19:c3:85:22:9f:73:b9:ea:0e:64:c4:12:5c:ad:e4:
                    8b:e5:25:71:e5:34:01:5e:eb:71:ac:8c:16:91:9a:
                    52:b4:5a:af:4a:45:b0:6d:b9:4e:b6:0d:bc:a8:de:
                    69:50:d6:f8:5e:6c:97:fe:39:4f:c2:42:be:56:f3:
                    9f:29:78:bb:8f:01:44:5f:d8:bd:5c:61:fb:e1:08:
                    41:34:23:4a:49:6c:aa:49:b6:97:ff:32:a6:c3:19:
                    63:a0:ff:d6:bd:05:22:d3:50:63:cc:ec:be:40:78:
                    17:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:A8:22:78:8C:60:66:1F:7C:21:C0:6A:42:A8:1F:F6:73:8E:66:84
            X509v3 Authority Key Identifier:
                keyid:C9:A5:9C:63:B7:0A:8E:12:BD:1C:0B:15:77:69:71:71:A3:FE:E0:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36FB15E/AF1E2EC2B9C911EEB2D5515A775412E6/yaWcY7cKjhK9HAsVd2lxcaP-4PE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/yaWcY7cKjhK9HAsVd2lxcaP-4PE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FB15E/AF1E2EC2B9C911EEB2D5515A775412E6/yaWcY7cKjhK9HAsVd2lxcaP-4PE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:ef:f1:74:15:de:1e:0f:bd:ef:8c:a8:d8:9c:58:2a:ad:d5:
         68:fc:6c:44:e2:3f:e7:20:10:74:47:95:c7:73:9f:d9:a6:b5:
         88:28:5d:04:c5:6a:02:94:0a:d7:12:a8:67:a1:57:3d:30:b8:
         c8:e8:bb:36:6d:99:5e:ab:73:a1:55:d6:8c:ce:7b:84:be:86:
         3d:0d:86:62:2a:75:8b:bd:b0:8e:c7:bb:4a:dd:6e:f0:47:5a:
         64:38:f8:97:9e:d7:b9:43:36:d7:d1:2a:ec:fa:51:7d:81:54:
         6b:e7:f8:87:4d:29:35:64:4e:0c:e8:83:e3:b3:67:40:22:9d:
         ea:e6:d6:a1:c0:8d:b8:77:18:62:7f:fa:f6:7b:1f:08:12:9c:
         7e:2f:7d:e2:d3:a7:57:f8:eb:95:f7:e3:f0:3d:b6:86:31:b8:
         e8:12:0d:a7:eb:46:54:05:1e:52:c5:d3:fc:c9:f7:ba:55:e0:
         f4:5f:1d:3c:ee:bc:1f:70:c6:06:43:10:1c:2c:f3:6a:07:c8:
         28:e0:28:d9:35:98:78:09:df:ad:e6:d2:aa:40:16:40:3c:4e:
         26:c8:a3:82:ef:5f:88:16:a3:24:c9:a8:33:9e:36:9b:09:26:
         6b:1e:4b:82:0c:f1:6a:dc:44:c4:93:1c:45:b9:8c:c8:f7:5d:
         3c:d6:e0:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 02:57:49 2025 by rpki-client