This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3611484/E61E0996B9E311EE89052986775412E6/kjv5Ya2DU5g0UNOjPyjMz-CooQY.mft
File:                     kjv5Ya2DU5g0UNOjPyjMz-CooQY.mft (raw, json)
Hash identifier:          Ftu0+75rKHWPXpPRkBQA8QDvYTao3RJoesLfDgSxsxA=
Subject key identifier:   2B:80:46:7A:AB:01:10:A8:C4:25:E1:AA:20:B9:06:61:09:95:8C:DD
Authority key identifier: 92:3B:F9:61:AD:83:53:98:34:50:D3:A3:3F:28:CC:CF:E0:A8:A1:06
Certificate issuer:       /CN=F3611484AF/serialNumber=923BF961AD8353983450D3A33F28CCCFE0A8A106
Certificate serial:       02CC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/kjv5Ya2DU5g0UNOjPyjMz-CooQY.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3611484/E61E0996B9E311EE89052986775412E6/kjv5Ya2DU5g0UNOjPyjMz-CooQY.mft
Manifest number:          02CA
Signing time:             Thu 18 Dec 2025 06:13:14 +0000
Manifest this update:     Thu 18 Dec 2025 06:13:14 +0000
Manifest next update:     Sat 20 Dec 2025 06:13:14 +0000
Files and hashes:         1: kjv5Ya2DU5g0UNOjPyjMz-CooQY.crl (hash: BhhAkeDtFnAQitMx4TgdKifOKogQ1V0PyUZHNDHRb+I=)
                          2: 2908C1DCB9E511EEB9065888775412E6.roa (hash: zUZ7frdCVvRhVt6G1jP6YXP6H0Tz6Q6HJTbMKr0ueno=)
                          3: 60A31C9CB9E411EE910C0687775412E6.roa (hash: k8wj8VzEDiiwJJsRvgprQG7fLZ2kqSdbh1u+v7N4tmY=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3611484/E61E0996B9E311EE89052986775412E6/kjv5Ya2DU5g0UNOjPyjMz-CooQY.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3611484/E61E0996B9E311EE89052986775412E6/kjv5Ya2DU5g0UNOjPyjMz-CooQY.mft
                          rsync://rpki.afrinic.net/repository/afrinic/kjv5Ya2DU5g0UNOjPyjMz-CooQY.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 20 Dec 2025 00:07:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 716 (0x2cc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3611484AF, serialNumber=923BF961AD8353983450D3A33F28CCCFE0A8A106
        Validity
            Not Before: Dec 18 06:13:14 2025 GMT
            Not After : Dec 20 06:13:14 2025 GMT
        Subject: CN=69439b7a-0113
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:f9:38:e6:e0:f6:4b:2f:11:72:4b:27:9d:64:
                    12:d9:7b:91:c2:21:4a:13:a5:0d:d8:a7:29:75:8c:
                    97:c0:f3:e0:be:74:1a:8a:ac:84:d4:c4:fb:6e:48:
                    c4:fc:98:f1:35:e0:3c:74:39:f5:ee:01:a8:38:da:
                    cf:fe:29:ca:c8:94:0f:20:b5:d2:f2:2a:9f:8f:67:
                    e6:25:21:1a:63:2f:e4:59:c5:b2:b7:8c:85:0c:b0:
                    40:9f:f1:36:b1:05:58:fe:57:3c:ce:ed:11:d6:64:
                    5f:93:fc:0d:a1:9d:9a:ff:dd:a1:73:11:f7:f7:78:
                    97:57:05:35:d0:cb:c4:bc:8e:d6:1b:7f:0e:38:e2:
                    46:18:07:e2:20:e7:35:4b:65:14:ff:77:f6:35:ba:
                    32:ee:88:82:6a:26:68:39:d1:2a:68:3f:b2:de:03:
                    6c:2a:ac:36:ab:26:7f:99:bf:79:e7:7d:de:11:eb:
                    17:19:6d:3a:6c:7f:29:08:83:12:71:d4:50:a8:41:
                    9e:11:cd:0e:9e:fa:5f:8d:67:99:52:2d:3a:4d:cf:
                    41:9d:fa:0a:73:e4:06:49:9f:76:de:e5:b7:ed:7e:
                    a4:0e:96:35:87:30:8c:87:e2:93:b5:d1:75:44:9f:
                    92:18:d9:e7:ae:4f:59:a5:e9:24:e8:40:02:5b:24:
                    b1:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:80:46:7A:AB:01:10:A8:C4:25:E1:AA:20:B9:06:61:09:95:8C:DD
            X509v3 Authority Key Identifier:
                keyid:92:3B:F9:61:AD:83:53:98:34:50:D3:A3:3F:28:CC:CF:E0:A8:A1:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3611484/E61E0996B9E311EE89052986775412E6/kjv5Ya2DU5g0UNOjPyjMz-CooQY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/kjv5Ya2DU5g0UNOjPyjMz-CooQY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3611484/E61E0996B9E311EE89052986775412E6/kjv5Ya2DU5g0UNOjPyjMz-CooQY.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:0f:2c:ad:73:05:47:fd:b1:51:ca:49:95:0a:4a:dc:a4:75:
         48:88:2c:c3:2a:99:46:2a:da:cc:7e:81:a6:e9:b5:98:fb:f0:
         24:a0:db:34:67:56:e8:34:62:10:d6:a4:31:f9:b4:8b:8e:68:
         78:4d:1e:9d:1a:d8:e9:3a:b1:6e:36:6c:e7:76:f4:fa:1e:76:
         b2:05:49:81:d7:0d:50:66:8a:2e:26:c6:ff:0c:85:1f:95:57:
         10:62:e7:f1:6e:6d:45:f6:b3:7a:10:91:0a:a8:7e:06:d6:2e:
         9f:5b:cb:56:7e:0b:92:aa:a1:b7:a2:c1:fe:20:15:4d:7e:a8:
         c0:bc:18:bd:21:c1:94:ac:1c:9a:a7:3f:17:11:61:cd:9c:ea:
         15:ac:40:c3:04:a3:99:c4:47:83:42:1c:4b:94:1d:f1:c6:ab:
         1d:2a:f9:93:8e:d7:4c:df:3f:7d:a2:87:33:1d:d9:d2:5f:fb:
         68:9f:31:26:4b:3e:81:fd:e1:f4:0c:9f:be:33:38:7e:26:49:
         40:d3:af:95:c1:5e:08:b7:f0:7e:00:29:e0:40:26:d2:e1:99:
         b7:8d:55:99:7d:46:07:32:b6:94:e5:57:a5:f7:cc:ae:e9:bb:
         ac:1e:ff:df:fa:7e:7f:c0:88:ae:92:a3:11:85:7b:5f:29:0e:
         a8:d9:df:1b
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICAswwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
MTE0ODRBRjExMC8GA1UEBRMoOTIzQkY5NjFBRDgzNTM5ODM0NTBEM0EzM0YyOEND
Q0ZFMEE4QTEwNjAeFw0yNTEyMTgwNjEzMTRaFw0yNTEyMjAwNjEzMTRaMBgxFjAU
BgNVBAMTDTY5NDM5YjdhLTAxMTMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC7+Tjm4PZLLxFySyedZBLZe5HCIUoTpQ3Ypyl1jJfA8+C+dBqKrITUxPtu
SMT8mPE14Dx0OfXuAag42s/+KcrIlA8gtdLyKp+PZ+YlIRpjL+RZxbK3jIUMsECf
8TaxBVj+VzzO7RHWZF+T/A2hnZr/3aFzEff3eJdXBTXQy8S8jtYbfw444kYYB+Ig
5zVLZRT/d/Y1ujLuiIJqJmg50SpoP7LeA2wqrDarJn+Zv3nnfd4R6xcZbTpsfykI
gxJx1FCoQZ4RzQ6e+l+NZ5lSLTpNz0Gd+gpz5AZJn3be5bftfqQOljWHMIyH4pO1
0XVEn5IY2eeuT1ml6SToQAJbJLH1AgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUK4BG
eqsBEKjEJeGqILkGYQmVjN0wHwYDVR0jBBgwFoAUkjv5Ya2DU5g0UNOjPyjMz+Co
oQYwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjExNDg0L0U2MUUwOTk2QjlFMzExRUU4OTA1Mjk4Njc3NTQxMkU2L2tqdjVZ
YTJEVTVnMFVOT2pQeWpNei1Db29RWS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2tqdjVZYTJEVTVnMFVOT2pQeWpNei1Db29RWS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2MTE0ODQvRTYxRTA5OTZCOUUzMTFFRTg5MDUyOTg2Nzc1
NDEyRTYva2p2NVlhMkRVNWcwVU5PalB5ak16LUNvb1FZLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQA5DyytcwVH/bFRykmVCkrcpHVIiCzD
KplGKtrMfoGm6bWY+/AkoNs0Z1boNGIQ1qQx+bSLjmh4TR6dGtjpOrFuNmzndvT6
HnayBUmB1w1QZoouJsb/DIUflVcQYufxbm1F9rN6EJEKqH4G1i6fW8tWfguSqqG3
osH+IBVNfqjAvBi9IcGUrByapz8XEWHNnOoVrEDDBKOZxEeDQhxLlB3xxqsdKvmT
jtdM3z99ooczHdnSX/tonzEmSz6B/eH0DJ++Mzh+JklA06+VwV4It/B+ACngQCbS
4Zm3jVWZfUYHMraU5Vel98yu6busHv/f+n5/wIiukqMRhXtfKQ6o2d8b
-----END CERTIFICATE-----
Generated at Thu Dec 18 14:22:52 2025 by rpki-client