This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3656BB8/D79EEB94891C11EEAF65C7604AD9E6FC/9nBmQ5rNnq_UiZ_GjGB1xwzjmtU.mft
File:                     9nBmQ5rNnq_UiZ_GjGB1xwzjmtU.mft (raw, json)
Hash identifier:          4CbH09Wdcc3DEw1rDIq8FlF8tZIMVnDRCBz5/Vn6PoQ=
Subject key identifier:   DE:9F:CD:DC:2D:8F:4D:2C:CA:30:18:FE:83:18:BC:E6:D5:82:43:D4
Authority key identifier: F6:70:66:43:9A:CD:9E:AF:D4:89:9F:C6:8C:60:75:C7:0C:E3:9A:D5
Certificate issuer:       /CN=F3656BB8AF/serialNumber=F67066439ACD9EAFD4899FC68C6075C70CE39AD5
Certificate serial:       0319
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/9nBmQ5rNnq_UiZ_GjGB1xwzjmtU.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3656BB8/D79EEB94891C11EEAF65C7604AD9E6FC/9nBmQ5rNnq_UiZ_GjGB1xwzjmtU.mft
Manifest number:          030E
Signing time:             Sat 06 Dec 2025 03:54:59 +0000
Manifest this update:     Sat 06 Dec 2025 03:54:58 +0000
Manifest next update:     Mon 08 Dec 2025 03:54:58 +0000
Files and hashes:         1: 9nBmQ5rNnq_UiZ_GjGB1xwzjmtU.crl (hash: SXSHG+t7PG6BCGi+ocrI29QQ82p0vBc5PMV8L72iaIU=)
                          2: 771608343F6511EFB9F4EABA762E951A.roa (hash: 9Q+GZAt0BfDQgU00GMZWd99zLhXCbOr7gAEaYiC7Dyo=)
                          3: 5A705AB83F6511EFB113C3BA762E951A.roa (hash: 46y6LOxfLG2hpzs8KqldDqb+T4CZAqoGN7kv9ge6l2Q=)
                          4: C37677449B4211EE97C01A0BD25BE465.roa (hash: BAmmlnMHUybbiPHqjjkYtKpac8mib54JfOVw/2b2OnA=)
                          5: 9C2FB4D49B4211EE82B8CF0AD25BE465.roa (hash: RKm1ONyaKM8MZ2trCs9RLFoAoaY0CDYQpfQjdSvu7io=)
                          6: D91B9FD2905311EF97DBC8B6762E951A.roa (hash: //pQLXl186UK+YngQ4Oqc4YBM5xFv+Ww/aM3Yp8J0R4=)
                          7: ACB50F14905311EF9F4DCCB4762E951A.roa (hash: 57inawtVdw1IaHCvXR36yukcxfO3Teh83tMpkhTAd4M=)
                          8: 5AA6ED769BE611EE88684334D25BE465.roa (hash: J9soXt+A2SzJz6ium1VPFEErWV44KnKWZA3DTIrB3Z8=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3656BB8/D79EEB94891C11EEAF65C7604AD9E6FC/9nBmQ5rNnq_UiZ_GjGB1xwzjmtU.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3656BB8/D79EEB94891C11EEAF65C7604AD9E6FC/9nBmQ5rNnq_UiZ_GjGB1xwzjmtU.mft
                          rsync://rpki.afrinic.net/repository/afrinic/9nBmQ5rNnq_UiZ_GjGB1xwzjmtU.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 08 Dec 2025 00:06:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 793 (0x319)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3656BB8AF, serialNumber=F67066439ACD9EAFD4899FC68C6075C70CE39AD5
        Validity
            Not Before: Dec  6 03:54:58 2025 GMT
            Not After : Dec  8 03:54:58 2025 GMT
        Subject: CN=6933a913-2ce1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:f5:76:d8:09:8d:57:58:65:7d:85:53:2c:b3:
                    f2:d1:60:5a:ac:ff:09:57:1d:59:4c:2e:cf:e3:4d:
                    5a:5c:c4:ab:cb:0b:e2:f2:6c:fe:81:0d:e4:66:dd:
                    f2:10:a6:35:a5:d7:f4:b1:eb:c8:99:e4:bf:12:49:
                    9a:53:66:0c:4b:e3:0f:29:51:d1:c1:57:58:19:a7:
                    9e:1f:9f:69:4a:a4:e0:2b:73:79:ae:a7:c6:53:32:
                    e8:ee:9f:e8:88:33:a4:32:81:01:e2:63:c8:9a:b0:
                    71:e7:c5:26:b0:80:4c:cb:d2:e0:ba:d2:33:a3:aa:
                    4d:43:b5:62:bb:2e:5c:d0:10:be:46:a8:8d:b7:80:
                    a1:86:76:36:d8:6f:52:94:99:0f:e3:a7:46:1f:53:
                    ec:74:d6:54:8b:90:30:16:7d:4d:ba:96:c1:c7:2a:
                    78:24:a3:29:46:7c:3a:fd:6f:1f:31:f1:f3:ba:8b:
                    d4:6e:63:99:90:2f:1e:6b:7d:88:02:f3:58:01:26:
                    33:3b:34:ab:82:8c:24:64:35:65:b7:7c:ea:f1:eb:
                    71:a3:bc:0f:d8:22:44:ae:ea:19:bf:ad:75:ae:8d:
                    b0:36:e3:de:5e:61:35:34:11:92:d9:b8:70:21:7a:
                    13:9d:5d:3f:c4:ff:27:17:16:0e:8d:b6:6d:89:41:
                    96:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:9F:CD:DC:2D:8F:4D:2C:CA:30:18:FE:83:18:BC:E6:D5:82:43:D4
            X509v3 Authority Key Identifier:
                keyid:F6:70:66:43:9A:CD:9E:AF:D4:89:9F:C6:8C:60:75:C7:0C:E3:9A:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3656BB8/D79EEB94891C11EEAF65C7604AD9E6FC/9nBmQ5rNnq_UiZ_GjGB1xwzjmtU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/9nBmQ5rNnq_UiZ_GjGB1xwzjmtU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3656BB8/D79EEB94891C11EEAF65C7604AD9E6FC/9nBmQ5rNnq_UiZ_GjGB1xwzjmtU.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:d2:47:21:db:6d:a2:7c:16:f2:d6:46:07:13:44:92:64:f0:
         d0:aa:50:25:13:b7:73:47:4e:2c:3e:c3:41:15:9b:12:26:1f:
         33:b7:db:6b:f3:d3:82:14:45:dd:6b:6c:41:7c:d7:15:1b:35:
         bc:fb:fc:5e:5c:d4:71:b9:78:16:d8:96:5b:27:de:1e:ae:19:
         e4:e6:4e:c5:3b:04:55:46:be:d5:3b:86:c8:c4:2c:77:35:5a:
         73:c4:0f:e0:7d:12:25:21:a0:52:cb:2c:4d:66:35:d9:2d:a1:
         87:e0:e0:78:33:93:6a:04:7f:f7:e8:54:ce:89:88:a9:d4:e9:
         1c:56:12:3f:2a:63:1c:18:e8:20:70:6f:ee:ec:48:e9:95:aa:
         65:f1:e9:c6:fa:c0:7a:91:47:8f:61:05:73:35:9d:db:5d:c9:
         04:92:a2:3d:0b:91:e7:d8:f0:10:49:8b:ce:5e:c7:b3:f4:53:
         05:63:d6:32:81:fe:cf:a9:ba:ed:21:3c:78:ac:42:99:f1:a9:
         c7:01:86:cf:24:82:03:6e:1e:30:e0:7a:d9:fe:71:2b:06:3f:
         e0:41:43:8d:9f:bf:21:fb:b1:29:54:7d:e4:5b:00:5c:a5:76:
         7b:8a:ca:de:d1:52:3e:50:ab:28:d2:ff:b5:f7:c2:35:56:6a:
         c8:69:1c:15
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICAxkwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NTZCQjhBRjExMC8GA1UEBRMoRjY3MDY2NDM5QUNEOUVBRkQ0ODk5RkM2OEM2MDc1
QzcwQ0UzOUFENTAeFw0yNTEyMDYwMzU0NThaFw0yNTEyMDgwMzU0NThaMBgxFjAU
BgNVBAMTDTY5MzNhOTEzLTJjZTEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDV9XbYCY1XWGV9hVMss/LRYFqs/wlXHVlMLs/jTVpcxKvLC+LybP6BDeRm
3fIQpjWl1/Sx68iZ5L8SSZpTZgxL4w8pUdHBV1gZp54fn2lKpOArc3mup8ZTMuju
n+iIM6QygQHiY8iasHHnxSawgEzL0uC60jOjqk1DtWK7LlzQEL5GqI23gKGGdjbY
b1KUmQ/jp0YfU+x01lSLkDAWfU26lsHHKngkoylGfDr9bx8x8fO6i9RuY5mQLx5r
fYgC81gBJjM7NKuCjCRkNWW3fOrx63GjvA/YIkSu6hm/rXWujbA2495eYTU0EZLZ
uHAhehOdXT/E/ycXFg6Ntm2JQZY7AgMBAAGjggK4MIICtDAdBgNVHQ4EFgQU3p/N
3C2PTSzKMBj+gxi85tWCQ9QwHwYDVR0jBBgwFoAU9nBmQ5rNnq/UiZ/GjGB1xwzj
mtUwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjU2QkI4L0Q3OUVFQjk0ODkxQzExRUVBRjY1Qzc2MDRBRDlFNkZDLzluQm1R
NXJObnFfVWlaX0dqR0IxeHd6am10VS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljLzluQm1RNXJObnFfVWlaX0dqR0IxeHd6am10VS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2NTZCQjgvRDc5RUVCOTQ4OTFDMTFFRUFGNjVDNzYwNEFE
OUU2RkMvOW5CbVE1ck5ucV9VaVpfR2pHQjF4d3pqbXRVLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBX0kch222ifBby1kYHE0SSZPDQqlAl
E7dzR04sPsNBFZsSJh8zt9tr89OCFEXda2xBfNcVGzW8+/xeXNRxuXgW2JZbJ94e
rhnk5k7FOwRVRr7VO4bIxCx3NVpzxA/gfRIlIaBSyyxNZjXZLaGH4OB4M5NqBH/3
6FTOiYip1OkcVhI/KmMcGOggcG/u7Ejplapl8enG+sB6kUePYQVzNZ3bXckEkqI9
C5Hn2PAQSYvOXsez9FMFY9Yygf7PqbrtITx4rEKZ8anHAYbPJIIDbh4w4HrZ/nEr
Bj/gQUONn78h+7EpVH3kWwBcpXZ7isre0VI+UKso0v+198I1VmrIaRwV
-----END CERTIFICATE-----
Generated at Sat Dec 6 14:43:42 2025 by rpki-client