This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36628D0/4F501028C73411EEB4A18965775412E6/zz9PkkOmHTvtkzzA81M8or4JO9w.mft
File:                     zz9PkkOmHTvtkzzA81M8or4JO9w.mft (raw, json)
Hash identifier:          T5YDh7rYl6LoRgGHRX8te4XL7lxzTC3IIRQSdOxxfVs=
Subject key identifier:   7B:F6:83:2C:FB:55:38:85:AF:D1:7D:81:D9:51:40:BB:69:C5:0D:44
Authority key identifier: CF:3F:4F:92:43:A6:1D:3B:ED:93:3C:C0:F3:53:3C:A2:BE:09:3B:DC
Certificate issuer:       /CN=F36628D0AF/serialNumber=CF3F4F9243A61D3BED933CC0F3533CA2BE093BDC
Certificate serial:       02BA
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/zz9PkkOmHTvtkzzA81M8or4JO9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36628D0/4F501028C73411EEB4A18965775412E6/zz9PkkOmHTvtkzzA81M8or4JO9w.mft
Manifest number:          02B3
Signing time:             Mon 08 Dec 2025 04:03:53 +0000
Manifest this update:     Mon 08 Dec 2025 04:03:53 +0000
Manifest next update:     Wed 10 Dec 2025 04:03:52 +0000
Files and hashes:         1: zz9PkkOmHTvtkzzA81M8or4JO9w.crl (hash: H5OMeePcq6u+P6U/byITeVKdMgbBFemOcsGMcSOmT6U=)
                          2: FC64D1D48EE011F0B3A4FFD5DAE4EC9C.roa (hash: zY17Hz4jbMGQpgxbaFtO0TqzRfRypKeMCm7nEpXL5dE=)
                          3: 2C041FAC923411F0874B46D6DAE4EC9C.roa (hash: tpKq8PaEgXxqsGmsi4xOkcd5uGMB++pELB/BO/L5apA=)
                          4: 1D9C2C128EE111F0A05232D6DAE4EC9C.roa (hash: 7/mPJegDzNGobxEPvcoOh9hmADeWp/7DZNVsknf5CfY=)
                          5: BDE21C828EE011F09E89A7D5DAE4EC9C.roa (hash: cEX5P0LZESnFW9UZ+j/fDOgJ1NZiXq4fEZ5TJVNJvnU=)
                          6: 22722218325311F0BEE5CBA8DAE4EC9C.roa (hash: 7FOq4iC+f8KGAzh35/6t4/kdL+NWHJr1WwivNfCgRGY=)
                          7: 06029CE8923411F0959B1BD6DAE4EC9C.roa (hash: KM6FaZ3N+6xYLUdr8UC2IJ+8T0cxiZ1kpB+SMdMA704=)
                          8: DE17D8988EE011F09D4FC2D5DAE4EC9C.roa (hash: Zz8H6d1f6QpmD+EtnMHU3iTAeKWNSu5vjH3b+kGHQZI=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36628D0/4F501028C73411EEB4A18965775412E6/zz9PkkOmHTvtkzzA81M8or4JO9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36628D0/4F501028C73411EEB4A18965775412E6/zz9PkkOmHTvtkzzA81M8or4JO9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/zz9PkkOmHTvtkzzA81M8or4JO9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 10 Dec 2025 00:06:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 698 (0x2ba)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36628D0AF, serialNumber=CF3F4F9243A61D3BED933CC0F3533CA2BE093BDC
        Validity
            Not Before: Dec  8 04:03:53 2025 GMT
            Not After : Dec 10 04:03:52 2025 GMT
        Subject: CN=69364e29-2d9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:25:c1:1b:9b:7a:88:15:72:33:0e:32:46:50:
                    55:4b:95:0d:2a:27:a0:0e:fd:b9:d9:35:78:98:2e:
                    29:d7:68:4b:6a:c6:87:46:83:d7:31:be:bc:20:9e:
                    81:9c:0f:55:86:7f:ac:4e:17:17:41:43:cf:b2:0d:
                    e2:9a:3b:80:06:6c:c4:12:6e:ea:61:b7:74:32:31:
                    66:c6:12:2f:0a:71:38:5b:50:8d:ee:35:f1:f1:68:
                    df:a3:cb:4f:86:6d:aa:a8:42:15:32:68:7e:37:76:
                    7e:d0:92:aa:31:f4:ea:b2:18:f5:31:78:52:eb:20:
                    41:44:19:21:c3:44:71:62:0f:78:66:1a:db:7d:49:
                    0a:b1:de:f2:94:38:f8:7b:97:87:27:32:cc:4c:58:
                    2a:ed:11:6c:f7:21:64:36:10:e2:7c:91:9c:a8:3c:
                    25:12:48:a3:f4:82:15:aa:16:86:a1:f5:da:67:b7:
                    e8:71:c3:eb:ca:b3:bb:b1:e9:ed:5f:b7:45:a4:00:
                    98:12:15:78:b4:c0:49:3e:05:ca:cb:02:d6:f8:1b:
                    b4:16:ca:38:7a:78:90:06:c8:9e:e9:1d:2b:26:4f:
                    23:b9:be:f8:c6:96:5c:52:2f:dd:6d:7c:d0:6a:9b:
                    4f:18:9f:c6:99:00:8e:b5:ef:b3:6c:0e:a2:af:fe:
                    47:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:F6:83:2C:FB:55:38:85:AF:D1:7D:81:D9:51:40:BB:69:C5:0D:44
            X509v3 Authority Key Identifier:
                keyid:CF:3F:4F:92:43:A6:1D:3B:ED:93:3C:C0:F3:53:3C:A2:BE:09:3B:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36628D0/4F501028C73411EEB4A18965775412E6/zz9PkkOmHTvtkzzA81M8or4JO9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/zz9PkkOmHTvtkzzA81M8or4JO9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36628D0/4F501028C73411EEB4A18965775412E6/zz9PkkOmHTvtkzzA81M8or4JO9w.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:11:c7:66:e7:9e:a6:18:ea:61:ea:01:65:21:02:06:36:63:
         74:89:b1:d3:64:ef:43:54:48:49:6e:d4:70:91:73:33:92:05:
         6f:59:d7:88:13:eb:62:a6:86:8e:66:17:8d:ce:b0:bd:9f:43:
         bf:3e:78:c6:4b:2b:5c:b3:07:de:60:50:7d:71:5e:6c:7d:32:
         81:4d:db:c5:2d:db:e4:2e:35:d7:f0:fd:be:7e:0b:fa:a0:6d:
         2e:d0:1f:c3:97:4a:16:2f:27:ba:58:68:42:f3:b4:de:73:5e:
         33:d1:6c:5f:ff:ea:2b:26:fc:88:63:c1:d2:bb:ea:69:34:04:
         d5:05:47:9b:a5:a0:b1:9d:05:52:22:c0:53:8e:b7:b0:7c:66:
         1b:26:b0:ac:b7:be:b2:82:fd:21:8a:f4:55:df:5c:a9:a3:cc:
         6a:43:a5:ff:ec:1a:16:ea:57:c7:17:5a:73:59:3e:5a:bb:74:
         e8:1f:5a:6a:a6:04:c4:23:36:ed:28:bf:9a:bd:dc:33:ba:82:
         fe:fd:34:32:53:5a:4b:76:e7:0b:fe:2d:3a:b1:fa:86:79:36:
         d1:b2:fe:61:4e:17:66:9f:5b:da:4b:21:c1:32:5f:2d:d8:fc:
         92:5d:24:0f:bd:ca:db:cc:43:c3:bc:c9:0e:68:de:d6:c7:54:
         f3:14:e4:05
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICArowDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NjI4RDBBRjExMC8GA1UEBRMoQ0YzRjRGOTI0M0E2MUQzQkVEOTMzQ0MwRjM1MzND
QTJCRTA5M0JEQzAeFw0yNTEyMDgwNDAzNTNaFw0yNTEyMTAwNDAzNTJaMBgxFjAU
BgNVBAMTDTY5MzY0ZTI5LTJkOWQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDOJcEbm3qIFXIzDjJGUFVLlQ0qJ6AO/bnZNXiYLinXaEtqxodGg9cxvrwg
noGcD1WGf6xOFxdBQ8+yDeKaO4AGbMQSbupht3QyMWbGEi8KcThbUI3uNfHxaN+j
y0+GbaqoQhUyaH43dn7Qkqox9OqyGPUxeFLrIEFEGSHDRHFiD3hmGtt9SQqx3vKU
OPh7l4cnMsxMWCrtEWz3IWQ2EOJ8kZyoPCUSSKP0ghWqFoah9dpnt+hxw+vKs7ux
6e1ft0WkAJgSFXi0wEk+BcrLAtb4G7QWyjh6eJAGyJ7pHSsmTyO5vvjGllxSL91t
fNBqm08Yn8aZAI6177NsDqKv/kd3AgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUe/aD
LPtVOIWv0X2B2VFAu2nFDUQwHwYDVR0jBBgwFoAUzz9PkkOmHTvtkzzA81M8or4J
O9wwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjYyOEQwLzRGNTAxMDI4QzczNDExRUVCNEExODk2NTc3NTQxMkU2L3p6OVBr
a09tSFR2dGt6ekE4MU04b3I0Sk85dy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL3p6OVBra09tSFR2dGt6ekE4MU04b3I0Sk85dy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2NjI4RDAvNEY1MDEwMjhDNzM0MTFFRUI0QTE4OTY1Nzc1
NDEyRTYveno5UGtrT21IVHZ0a3p6QTgxTThvcjRKTzl3Lm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBsEcdm556mGOph6gFlIQIGNmN0ibHT
ZO9DVEhJbtRwkXMzkgVvWdeIE+tipoaOZheNzrC9n0O/PnjGSytcswfeYFB9cV5s
fTKBTdvFLdvkLjXX8P2+fgv6oG0u0B/Dl0oWLye6WGhC87Tec14z0Wxf/+orJvyI
Y8HSu+ppNATVBUebpaCxnQVSIsBTjrewfGYbJrCst76ygv0hivRV31ypo8xqQ6X/
7BoW6lfHF1pzWT5au3ToH1pqpgTEIzbtKL+avdwzuoL+/TQyU1pLducL/i06sfqG
eTbRsv5hThdmn1vaSyHBMl8t2PySXSQPvcrbzEPDvMkOaN7Wx1TzFOQF
-----END CERTIFICATE-----
Generated at Mon Dec 8 17:17:26 2025 by rpki-client