This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36406D3/FB643C36876F11E994958B32F8AEA228/KvCNgqXIimbwBbMcgOhymuKM11U.mft
File:                     KvCNgqXIimbwBbMcgOhymuKM11U.mft (raw, json)
Hash identifier:          ZeVmgvpBAO18aTDvaq8lB+ZkzUP8PHP8wd7l1qJpxh8=
Subject key identifier:   03:26:09:DD:B4:1E:FD:1B:54:7F:AA:B0:2C:E1:79:1C:47:51:FB:43
Authority key identifier: 2A:F0:8D:82:A5:C8:8A:66:F0:05:B3:1C:80:E8:72:9A:E2:8C:D7:55
Certificate issuer:       /CN=F36406D3AF/serialNumber=2AF08D82A5C88A66F005B31C80E8729AE28CD755
Certificate serial:       098C
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/KvCNgqXIimbwBbMcgOhymuKM11U.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36406D3/FB643C36876F11E994958B32F8AEA228/KvCNgqXIimbwBbMcgOhymuKM11U.mft
Manifest number:          098A
Signing time:             Mon 08 Dec 2025 01:25:46 +0000
Manifest this update:     Mon 08 Dec 2025 01:25:45 +0000
Manifest next update:     Wed 10 Dec 2025 01:25:45 +0000
Files and hashes:         1: KvCNgqXIimbwBbMcgOhymuKM11U.crl (hash: n6E4xYYD62VZMZ8OEuqqQIZkX4n79c2ixxEK9cY0JcI=)
                          2: E0B7E5C6AE2111E98F04DF3CF8AEA228.roa (hash: DsX+R5lwZz5IbPxYwdbT3HKP4x8lgrMkS5VZBHtyCkQ=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36406D3/FB643C36876F11E994958B32F8AEA228/KvCNgqXIimbwBbMcgOhymuKM11U.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36406D3/FB643C36876F11E994958B32F8AEA228/KvCNgqXIimbwBbMcgOhymuKM11U.mft
                          rsync://rpki.afrinic.net/repository/afrinic/KvCNgqXIimbwBbMcgOhymuKM11U.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 10 Dec 2025 00:06:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2444 (0x98c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36406D3AF, serialNumber=2AF08D82A5C88A66F005B31C80E8729AE28CD755
        Validity
            Not Before: Dec  8 01:25:45 2025 GMT
            Not After : Dec 10 01:25:45 2025 GMT
        Subject: CN=6936291a-a6b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:a9:87:a2:3d:19:b2:6f:97:a7:af:ae:20:b3:
                    9a:18:4e:cb:1e:d4:81:fd:4c:f5:ae:79:4c:d4:0a:
                    14:33:70:be:b6:0d:3e:12:44:15:3f:28:59:e9:64:
                    f1:85:9f:93:a0:e6:fe:a2:6b:b7:78:13:8a:38:b0:
                    b2:84:27:9e:c3:a5:7b:f8:63:90:ca:e1:b8:6d:3a:
                    31:50:a7:0c:9e:36:88:07:67:ea:37:9f:80:9b:b4:
                    63:7f:76:fa:2d:1f:03:01:6e:4a:a8:7c:b1:4e:0e:
                    9a:9c:8c:0e:6e:65:05:47:c9:40:6b:00:41:d3:9f:
                    1f:78:7a:80:16:20:dc:fd:25:8f:ea:b2:6d:18:ae:
                    51:bc:e3:fd:6e:c5:5a:21:3a:82:90:42:60:cf:2d:
                    9b:3c:41:07:22:c4:de:0e:84:f1:57:d8:ae:99:23:
                    a3:4c:35:bc:9b:e5:82:6c:78:95:12:05:5d:21:39:
                    92:ea:44:f0:70:2e:d6:4f:02:d0:49:a5:87:23:34:
                    eb:08:86:a3:8c:82:5c:11:9b:a3:af:8f:52:81:57:
                    1a:ce:a2:59:cd:94:10:28:b9:ea:d9:d3:a4:99:df:
                    7b:b8:47:8b:d0:f2:2c:f2:d6:41:c8:1c:f5:1a:4c:
                    90:bf:b2:b4:cc:34:de:98:5c:03:0f:9b:ff:b9:06:
                    53:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:26:09:DD:B4:1E:FD:1B:54:7F:AA:B0:2C:E1:79:1C:47:51:FB:43
            X509v3 Authority Key Identifier:
                keyid:2A:F0:8D:82:A5:C8:8A:66:F0:05:B3:1C:80:E8:72:9A:E2:8C:D7:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36406D3/FB643C36876F11E994958B32F8AEA228/KvCNgqXIimbwBbMcgOhymuKM11U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/KvCNgqXIimbwBbMcgOhymuKM11U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36406D3/FB643C36876F11E994958B32F8AEA228/KvCNgqXIimbwBbMcgOhymuKM11U.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:00:c8:3a:eb:25:72:11:6b:08:70:ef:76:4a:06:c2:4e:e8:
         15:89:d7:32:bf:0b:f6:79:1d:00:0b:af:b5:10:ca:4e:a3:e6:
         23:9c:24:43:08:aa:ce:6b:e9:a2:b2:10:dd:5e:f8:97:b3:97:
         f6:23:29:2f:87:de:72:f4:c7:f8:be:38:ed:00:0c:c2:8e:45:
         d6:10:de:6a:33:7c:3e:6f:5d:86:d9:60:8d:ab:75:6d:ff:64:
         1a:b4:8f:79:23:c4:87:a9:97:2f:d7:6c:49:f0:84:52:ca:bb:
         d5:9e:a2:5e:b5:fa:05:b5:96:fd:9b:1c:9f:fd:85:74:ea:9c:
         7a:da:82:bb:06:08:08:94:30:88:37:b3:68:73:1d:af:74:2d:
         a8:e0:0c:22:ca:e9:26:9d:76:38:f3:5c:7e:ec:2e:bd:66:6b:
         e2:49:46:9b:d7:b3:35:00:2c:a4:e5:45:65:a5:01:11:15:3a:
         39:49:09:34:92:d6:05:22:b4:22:54:c9:db:17:d9:f7:e8:58:
         0a:63:96:6d:0e:de:cd:cc:4b:0e:92:80:4b:a6:be:96:dc:d6:
         fb:f8:8c:d2:1a:91:36:8b:a0:6c:96:3a:cf:54:8b:81:8b:22:
         0d:89:61:02:a2:00:b0:c9:65:de:30:c3:6e:e5:e1:cb:c9:2a:
         78:90:21:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 8 17:09:15 2025 by rpki-client