This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3611484/E61E0996B9E311EE89052986775412E6/kjv5Ya2DU5g0UNOjPyjMz-CooQY.mft
File:                     kjv5Ya2DU5g0UNOjPyjMz-CooQY.mft (raw, json)
Hash identifier:          onPId7Kxh/fhs2ztt2UkjV9kOU4VSP0rd9BGJdvSvZQ=
Subject key identifier:   D3:6E:A2:9D:D2:B9:01:E3:DB:A5:4B:11:CC:EE:58:E9:0D:59:6E:4D
Authority key identifier: 92:3B:F9:61:AD:83:53:98:34:50:D3:A3:3F:28:CC:CF:E0:A8:A1:06
Certificate issuer:       /CN=F3611484AF/serialNumber=923BF961AD8353983450D3A33F28CCCFE0A8A106
Certificate serial:       02C1
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/kjv5Ya2DU5g0UNOjPyjMz-CooQY.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3611484/E61E0996B9E311EE89052986775412E6/kjv5Ya2DU5g0UNOjPyjMz-CooQY.mft
Manifest number:          02BF
Signing time:             Sun 07 Dec 2025 03:58:15 +0000
Manifest this update:     Sun 07 Dec 2025 03:58:14 +0000
Manifest next update:     Tue 09 Dec 2025 03:58:14 +0000
Files and hashes:         1: kjv5Ya2DU5g0UNOjPyjMz-CooQY.crl (hash: QVSWBzCbOBUyqlDOMm07S9qcuDMnfTuCA75tqPTeguA=)
                          2: 2908C1DCB9E511EEB9065888775412E6.roa (hash: zUZ7frdCVvRhVt6G1jP6YXP6H0Tz6Q6HJTbMKr0ueno=)
                          3: 60A31C9CB9E411EE910C0687775412E6.roa (hash: k8wj8VzEDiiwJJsRvgprQG7fLZ2kqSdbh1u+v7N4tmY=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3611484/E61E0996B9E311EE89052986775412E6/kjv5Ya2DU5g0UNOjPyjMz-CooQY.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3611484/E61E0996B9E311EE89052986775412E6/kjv5Ya2DU5g0UNOjPyjMz-CooQY.mft
                          rsync://rpki.afrinic.net/repository/afrinic/kjv5Ya2DU5g0UNOjPyjMz-CooQY.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 09 Dec 2025 00:06:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 705 (0x2c1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3611484AF, serialNumber=923BF961AD8353983450D3A33F28CCCFE0A8A106
        Validity
            Not Before: Dec  7 03:58:14 2025 GMT
            Not After : Dec  9 03:58:14 2025 GMT
        Subject: CN=6934fb57-3eb9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:a0:5f:8c:31:45:6d:f7:03:04:98:c5:96:b6:
                    f2:d1:d7:d8:ed:20:b3:8d:ab:73:63:4a:2c:82:c2:
                    ab:a8:7c:f2:aa:1b:2a:49:c6:de:35:0c:70:c3:3f:
                    57:4f:5b:00:bd:20:e1:a7:ca:9d:21:39:48:47:d4:
                    94:87:56:18:01:4a:29:f6:0a:9d:e3:11:20:a6:d8:
                    22:5e:2d:8b:34:0a:95:0e:4b:01:66:e5:03:9f:02:
                    aa:44:02:c3:bb:cd:cf:1f:e9:e8:db:53:5f:db:b3:
                    86:88:9b:db:3d:89:98:c5:23:1b:3b:b3:d8:50:36:
                    9d:90:5a:0f:e5:d3:b5:bc:bb:57:bd:51:23:5c:92:
                    f4:6d:1a:39:dd:6d:bf:c3:f2:52:02:68:79:08:a2:
                    84:a8:c7:7e:d4:1c:a0:c0:81:dd:6f:bc:e8:a6:47:
                    82:75:19:05:a5:0f:a3:23:a8:8c:85:df:fa:01:04:
                    3a:21:2f:81:19:8e:3a:95:d3:6c:c2:25:97:56:c0:
                    6f:13:80:b4:c9:9e:6c:ea:b6:25:83:0b:41:e3:20:
                    b2:65:e3:3d:a7:82:eb:cb:7a:29:38:db:94:41:d5:
                    a6:71:bf:5a:63:a6:70:57:dd:15:fa:38:9b:5f:50:
                    ea:2e:05:fc:83:fa:30:73:59:3a:1f:e5:93:18:08:
                    96:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:6E:A2:9D:D2:B9:01:E3:DB:A5:4B:11:CC:EE:58:E9:0D:59:6E:4D
            X509v3 Authority Key Identifier:
                keyid:92:3B:F9:61:AD:83:53:98:34:50:D3:A3:3F:28:CC:CF:E0:A8:A1:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3611484/E61E0996B9E311EE89052986775412E6/kjv5Ya2DU5g0UNOjPyjMz-CooQY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/kjv5Ya2DU5g0UNOjPyjMz-CooQY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3611484/E61E0996B9E311EE89052986775412E6/kjv5Ya2DU5g0UNOjPyjMz-CooQY.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:1d:99:df:44:f2:91:d9:cd:5a:56:6e:b1:76:b3:c7:78:4b:
         81:48:7b:99:77:62:21:10:75:62:13:5e:eb:dc:b2:68:5d:48:
         2e:a7:87:25:95:9e:a0:29:03:6d:da:24:4f:bc:eb:84:dc:65:
         cb:04:6e:26:96:d8:7f:7f:a6:b4:c8:d3:d2:76:02:9f:1c:02:
         06:bc:9e:32:b5:fd:cd:09:93:32:25:52:b0:c5:db:69:6b:85:
         8e:5d:f4:40:e2:7e:b9:8f:96:0b:dc:ab:00:ef:33:ab:dd:a9:
         2a:35:d6:59:88:21:05:c9:b5:9a:82:0b:de:fa:0e:2f:1a:3b:
         fc:a3:fb:4b:7f:5c:e9:06:7d:1c:85:cc:e5:51:92:0e:a2:04:
         8e:82:38:aa:00:26:07:34:37:66:57:47:f6:93:89:c7:9d:24:
         0b:70:b6:1f:f8:5b:44:e7:da:2e:dc:62:e6:ad:f4:26:45:1b:
         ba:af:42:b2:cd:45:28:95:b1:d8:67:3c:75:2d:47:58:01:f9:
         7d:07:80:a6:a5:b5:71:f8:c0:86:26:4b:d0:37:27:e8:bc:bd:
         f7:4a:fc:f4:4e:86:ac:cf:4c:a2:7a:06:62:5b:8f:bc:d7:20:
         17:3a:52:29:f6:dc:43:bd:9f:a2:df:e1:51:2e:98:30:06:0f:
         40:4d:ba:e8
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICAsEwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
MTE0ODRBRjExMC8GA1UEBRMoOTIzQkY5NjFBRDgzNTM5ODM0NTBEM0EzM0YyOEND
Q0ZFMEE4QTEwNjAeFw0yNTEyMDcwMzU4MTRaFw0yNTEyMDkwMzU4MTRaMBgxFjAU
BgNVBAMTDTY5MzRmYjU3LTNlYjkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDnoF+MMUVt9wMEmMWWtvLR19jtILONq3NjSiyCwquofPKqGypJxt41DHDD
P1dPWwC9IOGnyp0hOUhH1JSHVhgBSin2Cp3jESCm2CJeLYs0CpUOSwFm5QOfAqpE
AsO7zc8f6ejbU1/bs4aIm9s9iZjFIxs7s9hQNp2QWg/l07W8u1e9USNckvRtGjnd
bb/D8lICaHkIooSox37UHKDAgd1vvOimR4J1GQWlD6MjqIyF3/oBBDohL4EZjjqV
02zCJZdWwG8TgLTJnmzqtiWDC0HjILJl4z2nguvLeik425RB1aZxv1pjpnBX3RX6
OJtfUOouBfyD+jBzWTof5ZMYCJZhAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQU026i
ndK5AePbpUsRzO5Y6Q1Zbk0wHwYDVR0jBBgwFoAUkjv5Ya2DU5g0UNOjPyjMz+Co
oQYwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjExNDg0L0U2MUUwOTk2QjlFMzExRUU4OTA1Mjk4Njc3NTQxMkU2L2tqdjVZ
YTJEVTVnMFVOT2pQeWpNei1Db29RWS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2tqdjVZYTJEVTVnMFVOT2pQeWpNei1Db29RWS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2MTE0ODQvRTYxRTA5OTZCOUUzMTFFRTg5MDUyOTg2Nzc1
NDEyRTYva2p2NVlhMkRVNWcwVU5PalB5ak16LUNvb1FZLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCoHZnfRPKR2c1aVm6xdrPHeEuBSHuZ
d2IhEHViE17r3LJoXUgup4cllZ6gKQNt2iRPvOuE3GXLBG4mlth/f6a0yNPSdgKf
HAIGvJ4ytf3NCZMyJVKwxdtpa4WOXfRA4n65j5YL3KsA7zOr3akqNdZZiCEFybWa
ggve+g4vGjv8o/tLf1zpBn0chczlUZIOogSOgjiqACYHNDdmV0f2k4nHnSQLcLYf
+FtE59ou3GLmrfQmRRu6r0KyzUUolbHYZzx1LUdYAfl9B4CmpbVx+MCGJkvQNyfo
vL33Svz0Toasz0yiegZiW4+81yAXOlIp9txDvZ+i3+FRLpgwBg9ATbro
-----END CERTIFICATE-----
Generated at Sun Dec 7 06:20:46 2025 by rpki-client