This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F366CE6F/D9A4676C699A11EEBCC5FB674AD9E6FC/KnzueRgruFkbsTXdv7vulMHfQIc.mft
File:                     KnzueRgruFkbsTXdv7vulMHfQIc.mft (raw, json)
Hash identifier:          wvO1q59nRU1QnxpWYgE75GEXBXPaaNtnNv2GXJDnQsE=
Subject key identifier:   53:79:FF:22:73:54:36:D5:7B:1A:C1:6C:2B:A6:65:35:94:70:63:64
Authority key identifier: 2A:7C:EE:79:18:2B:B8:59:1B:B1:35:DD:BF:BB:EE:94:C1:DF:40:87
Certificate issuer:       /CN=F366CE6FAF/serialNumber=2A7CEE79182BB8591BB135DDBFBBEE94C1DF4087
Certificate serial:       033F
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/KnzueRgruFkbsTXdv7vulMHfQIc.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F366CE6F/D9A4676C699A11EEBCC5FB674AD9E6FC/KnzueRgruFkbsTXdv7vulMHfQIc.mft
Manifest number:          0336
Signing time:             Mon 08 Dec 2025 03:47:34 +0000
Manifest this update:     Mon 08 Dec 2025 03:47:33 +0000
Manifest next update:     Wed 10 Dec 2025 03:47:33 +0000
Files and hashes:         1: KnzueRgruFkbsTXdv7vulMHfQIc.crl (hash: K/ETnd3jRK/QZVnqmKvrS+3aHdUSJT09SirCJ9HMWuY=)
                          2: 1A85425E69BB11EEBF5E904C4AD9E6FC.roa (hash: Kx/Y8dEbUYeqoToY5LpNSdsXIlBKib23+2DqdNa43/Y=)
                          3: FD189F0E69BA11EEBE81314C4AD9E6FC.roa (hash: UK6i2dFbIWYL9h4T/dpZ4yF8qA519gysmxncwqhjDNc=)
                          4: E44337C869BA11EE88CB094C4AD9E6FC.roa (hash: 1d8FtYAZsHDPTXDngJ49htpRva8POmc7nirQyWgiDXo=)
                          5: 3BB28D0269BA11EEABA4ED494AD9E6FC.roa (hash: Q1XgZ9ZmDeVtE4gxia+GOYWXfxLUPO9DALH0Nrtl+eg=)
                          6: B8B5DACA69BA11EEBD303C4B4AD9E6FC.roa (hash: uoqftiTs2TQ3rEVnLUYDWPuBL54Tw5Qh6vFz0fe7JV4=)
                          7: 98FDCD4669BA11EE95130C4B4AD9E6FC.roa (hash: V8tXop4xNSLK7NTMuObTNFw9mcHKdpwbwIJqeSi9teo=)
                          8: 6399788A69BA11EE9D71534A4AD9E6FC.roa (hash: kaAHuzndBPzeMjc2nNN3ZcTB7Ew41AHipGqkh1wKLvg=)
                          9: C7D92E1869B911EE953F70484AD9E6FC.roa (hash: SdAbuipwR7EHxw/Hbwbw2PDVH2wv4MuQ83A/IxBI9GQ=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F366CE6F/D9A4676C699A11EEBCC5FB674AD9E6FC/KnzueRgruFkbsTXdv7vulMHfQIc.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F366CE6F/D9A4676C699A11EEBCC5FB674AD9E6FC/KnzueRgruFkbsTXdv7vulMHfQIc.mft
                          rsync://rpki.afrinic.net/repository/afrinic/KnzueRgruFkbsTXdv7vulMHfQIc.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 10 Dec 2025 00:06:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 831 (0x33f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F366CE6FAF, serialNumber=2A7CEE79182BB8591BB135DDBFBBEE94C1DF4087
        Validity
            Not Before: Dec  8 03:47:33 2025 GMT
            Not After : Dec 10 03:47:33 2025 GMT
        Subject: CN=69364a56-b7f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:53:a9:6a:9d:06:c7:9f:65:d2:fe:40:df:08:
                    2f:e1:61:0e:19:97:43:b8:89:25:85:9c:64:b4:aa:
                    0a:11:4b:35:cc:d3:7e:0b:1d:95:ac:ba:fa:93:c8:
                    fb:97:c9:2d:95:6f:f5:bb:4e:2b:35:06:00:f1:42:
                    0e:b1:3d:1d:c5:0a:16:0d:97:fe:52:fe:41:ff:68:
                    ee:03:4f:f3:10:82:57:0c:b3:7d:73:56:56:01:48:
                    a9:81:d9:a1:05:9e:7c:3a:77:b6:10:4c:15:e2:b5:
                    47:d1:d0:d5:a8:2d:38:48:a7:03:06:ea:ea:a5:52:
                    59:47:38:4d:ae:3e:fe:08:55:81:2a:33:69:e0:b3:
                    2e:72:96:0f:3b:02:e9:ba:80:38:d9:4b:cf:89:15:
                    cb:67:5d:f9:d0:91:5e:38:de:92:63:f1:61:a9:fd:
                    2f:df:89:43:04:6c:3f:c0:db:58:87:1e:02:b9:3e:
                    f8:84:b7:5f:b7:86:c6:85:58:eb:2b:b3:a3:5e:c8:
                    42:98:6b:4f:00:23:e4:20:e3:7b:c5:47:06:f2:45:
                    7e:70:38:ea:2e:0c:84:93:78:03:90:c4:7d:af:46:
                    5a:00:66:16:17:5f:2b:7d:43:d5:50:aa:be:82:16:
                    91:e8:e5:e4:6a:33:ab:22:09:c0:f3:27:3b:e9:0c:
                    eb:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:79:FF:22:73:54:36:D5:7B:1A:C1:6C:2B:A6:65:35:94:70:63:64
            X509v3 Authority Key Identifier:
                keyid:2A:7C:EE:79:18:2B:B8:59:1B:B1:35:DD:BF:BB:EE:94:C1:DF:40:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F366CE6F/D9A4676C699A11EEBCC5FB674AD9E6FC/KnzueRgruFkbsTXdv7vulMHfQIc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/KnzueRgruFkbsTXdv7vulMHfQIc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F366CE6F/D9A4676C699A11EEBCC5FB674AD9E6FC/KnzueRgruFkbsTXdv7vulMHfQIc.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:96:bc:f7:7a:cc:ef:21:ff:9e:82:7a:e0:d6:03:11:70:8b:
         a5:c4:05:b2:bc:1d:67:28:75:2c:58:8c:88:1f:5f:b1:e3:f7:
         cb:56:6b:1e:7b:d3:54:c5:55:f8:c0:d7:05:20:d5:97:d3:9f:
         73:85:c3:58:34:c0:56:e7:06:0e:6f:92:e3:91:02:05:78:9d:
         e0:42:f1:2c:e5:31:87:d0:be:cb:a8:87:8e:31:32:a6:71:67:
         fa:8a:e8:c9:57:b4:0f:0f:6f:8d:27:d4:67:a9:54:97:45:bf:
         92:43:5f:df:ba:b3:0b:68:35:90:73:60:30:a1:fd:01:5e:f4:
         24:25:f9:bf:ea:ef:2f:1c:fc:21:82:66:bd:53:75:46:00:1f:
         a2:24:64:2a:17:98:9b:f1:40:21:ed:05:c8:ba:38:5f:e7:a6:
         21:76:07:0e:a1:f2:48:b4:64:dc:5d:d4:eb:4c:36:ad:fe:e8:
         c4:63:15:ac:9c:4a:68:70:03:c7:dc:f1:7c:08:f6:fd:28:a0:
         1e:97:4f:c4:dd:d5:ce:84:53:96:27:c1:04:64:a1:c5:7f:ce:
         af:6a:2f:97:77:d2:88:e1:59:ea:db:d4:b7:b6:53:28:0e:18:
         53:e4:5d:a3:9d:16:61:f4:1b:3b:d5:66:e1:5d:f4:7c:97:1a:
         8e:d2:c5:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 8 17:18:30 2025 by rpki-client