This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FB1A3/3C789C6ED12611ECB70663DDF1222468/xfjkPM0fcvciuyN0u3q9C4iwVz8.mft
File:                     xfjkPM0fcvciuyN0u3q9C4iwVz8.mft (raw, json)
Hash identifier:          /deaYZhzKHGJfFhhD3LiE3B6hzkPU8woCWIO7VMa268=
Subject key identifier:   94:E3:CC:7D:82:E5:35:89:29:C2:07:7A:E1:96:04:E9:4E:3A:EB:46
Authority key identifier: C5:F8:E4:3C:CD:1F:72:F7:22:BB:23:74:BB:7A:BD:0B:88:B0:57:3F
Certificate issuer:       /CN=F36FB1A3AF/serialNumber=C5F8E43CCD1F72F722BB2374BB7ABD0B88B0573F
Certificate serial:       0555
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/xfjkPM0fcvciuyN0u3q9C4iwVz8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36FB1A3/3C789C6ED12611ECB70663DDF1222468/xfjkPM0fcvciuyN0u3q9C4iwVz8.mft
Manifest number:          0555
Signing time:             Sun 28 Dec 2025 02:50:36 +0000
Manifest this update:     Sun 28 Dec 2025 02:50:35 +0000
Manifest next update:     Tue 30 Dec 2025 02:50:35 +0000
Files and hashes:         1: xfjkPM0fcvciuyN0u3q9C4iwVz8.crl (hash: QQX/tT/kP39rKamXcwJUkEMGd9HIvqhyTIrjWpWraBI=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36FB1A3/3C789C6ED12611ECB70663DDF1222468/xfjkPM0fcvciuyN0u3q9C4iwVz8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36FB1A3/3C789C6ED12611ECB70663DDF1222468/xfjkPM0fcvciuyN0u3q9C4iwVz8.mft
                          rsync://rpki.afrinic.net/repository/afrinic/xfjkPM0fcvciuyN0u3q9C4iwVz8.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 30 Dec 2025 02:50:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1365 (0x555)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36FB1A3AF, serialNumber=C5F8E43CCD1F72F722BB2374BB7ABD0B88B0573F
        Validity
            Not Before: Dec 28 02:50:35 2025 GMT
            Not After : Dec 30 02:50:35 2025 GMT
        Subject: CN=69509afc-b246
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:8a:09:1f:5a:cb:af:03:53:42:12:33:87:89:
                    cb:17:b6:72:06:f6:6c:4e:93:50:31:e6:e9:49:2f:
                    0e:55:9b:35:a8:ea:cd:72:3d:b2:c5:77:1a:e8:3b:
                    30:07:87:ef:3b:d7:68:7f:87:6d:c0:9d:d1:3f:55:
                    ca:a4:d7:2f:4c:19:5f:54:8a:77:e8:5e:18:52:6f:
                    64:e7:6e:8a:9a:fb:85:f1:76:6f:5b:8d:5d:ca:db:
                    98:96:58:77:1b:c6:11:73:ae:65:43:d6:6e:8a:3d:
                    29:f8:eb:60:b1:81:ee:be:f8:fb:49:f3:89:ef:45:
                    ca:07:f6:07:a0:1f:04:3a:ae:34:55:7e:ae:81:db:
                    94:84:13:07:97:01:e2:8b:9f:d5:de:18:ce:c4:d4:
                    12:39:27:2a:28:f8:5b:11:5e:35:3c:3e:8c:83:dd:
                    e9:2a:59:00:05:cc:ff:19:8e:e2:95:94:c6:25:9b:
                    b0:cc:10:0c:7b:36:26:e0:b8:e4:ff:23:87:7f:ff:
                    90:b9:c6:aa:9f:91:a9:c2:05:1f:22:12:24:8e:c2:
                    57:38:57:46:fb:67:6f:70:f6:da:58:86:57:31:60:
                    a4:06:23:45:f6:31:0c:4d:42:b7:d3:79:65:75:59:
                    fb:01:61:64:a1:6d:92:65:25:b8:c0:7a:c4:41:07:
                    40:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:E3:CC:7D:82:E5:35:89:29:C2:07:7A:E1:96:04:E9:4E:3A:EB:46
            X509v3 Authority Key Identifier:
                keyid:C5:F8:E4:3C:CD:1F:72:F7:22:BB:23:74:BB:7A:BD:0B:88:B0:57:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36FB1A3/3C789C6ED12611ECB70663DDF1222468/xfjkPM0fcvciuyN0u3q9C4iwVz8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/xfjkPM0fcvciuyN0u3q9C4iwVz8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FB1A3/3C789C6ED12611ECB70663DDF1222468/xfjkPM0fcvciuyN0u3q9C4iwVz8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c1:79:14:e3:20:99:7d:04:89:c5:54:41:3d:aa:d0:95:a5:9e:
         d3:d4:ee:bd:ed:ad:8c:75:60:3f:f4:be:db:14:2c:b6:7a:d5:
         d3:d5:17:0d:68:cd:f6:d5:f3:3f:5b:fe:6d:71:14:dc:1d:6d:
         4a:a0:a4:29:fa:0e:f9:fc:40:9f:2f:24:1d:a0:93:37:f1:16:
         ff:dc:c9:30:64:cd:18:44:c9:79:ae:03:8d:69:7f:63:2d:6e:
         f6:5f:ec:9d:2c:da:dc:3b:44:e4:0d:43:54:c2:c7:81:a8:77:
         41:e9:25:12:4b:b3:df:be:e4:64:e4:99:03:86:81:37:07:8d:
         94:b3:cb:89:c9:ae:62:be:4b:6b:88:b9:b3:7e:24:94:f0:8f:
         2a:0c:8c:6b:58:bc:92:a3:35:82:78:79:9b:ee:58:3b:22:a2:
         a3:7f:c4:39:ec:00:e4:a6:cd:ac:1f:c5:14:53:53:93:e9:92:
         33:5a:ed:9d:ef:87:73:29:a0:b1:2e:c5:e7:3c:a5:c7:c7:a7:
         f1:51:c7:1e:64:c2:ae:5e:d5:f8:4c:df:a3:a5:3f:12:7f:fd:
         25:7d:a3:c5:64:44:15:df:c0:89:1e:f6:3b:67:4f:c5:d3:bd:
         6b:95:27:03:fd:48:2b:03:b3:b5:c0:ba:ce:a5:1f:a0:45:8b:
         8e:d7:fc:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 29 02:27:27 2025 by rpki-client