This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F366FAD3/666F962464DF11E8AFE47627F8AEA228/a5D-NKhmmog4_SOMxloRUsRBZQU.mft
File:                     a5D-NKhmmog4_SOMxloRUsRBZQU.mft (raw, json)
Hash identifier:          r1uSdsHBhMPlFoWKQ3l8oEfs3vz+JL8cA5Ue6zbtBSo=
Subject key identifier:   8D:9C:8D:2D:B8:C0:9C:92:B6:16:77:42:BD:C5:C6:94:D5:E5:3E:9D
Authority key identifier: 6B:90:FE:34:A8:66:9A:88:38:FD:23:8C:C6:5A:11:52:C4:41:65:05
Certificate issuer:       /CN=F366FAD3AF/serialNumber=6B90FE34A8669A8838FD238CC65A1152C4416505
Certificate serial:       0B11
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/a5D-NKhmmog4_SOMxloRUsRBZQU.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F366FAD3/666F962464DF11E8AFE47627F8AEA228/a5D-NKhmmog4_SOMxloRUsRBZQU.mft
Manifest number:          0B0A
Signing time:             Mon 08 Dec 2025 01:11:11 +0000
Manifest this update:     Mon 08 Dec 2025 01:11:10 +0000
Manifest next update:     Wed 10 Dec 2025 01:11:10 +0000
Files and hashes:         1: a5D-NKhmmog4_SOMxloRUsRBZQU.crl (hash: mOZf7iGgrVaa9GOGhj4sUZZLUsCvjAoIQF+KvkgqzMs=)
                          2: 053A807256FF11E996D74E7BF8AEA228.roa (hash: hO2TDaSMWg20HoMHgfojmos9nkNQYyH0a66GXivwXhY=)
                          3: 8F2CFCDE56E511E98093C968F8AEA228.roa (hash: 9+KvA5vBTldHkBa01AwWhEOmwfdSKfq79Dv4LMRkqU8=)
                          4: 2B44E2DA56FF11E98AB1737BF8AEA228.roa (hash: KthwQ1M/ZZ2vEvLYbI5jDmjg5aaJSRqGQpQ+loYoav8=)
                          5: 5CDDF2D65F8411E9A487E246F8AEA228.roa (hash: W5D3/ionOUfSBEwoAu8Mc+CDPfPuMjEyhVg8cxMPW1Y=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F366FAD3/666F962464DF11E8AFE47627F8AEA228/a5D-NKhmmog4_SOMxloRUsRBZQU.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F366FAD3/666F962464DF11E8AFE47627F8AEA228/a5D-NKhmmog4_SOMxloRUsRBZQU.mft
                          rsync://rpki.afrinic.net/repository/afrinic/a5D-NKhmmog4_SOMxloRUsRBZQU.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 10 Dec 2025 00:06:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2833 (0xb11)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F366FAD3AF, serialNumber=6B90FE34A8669A8838FD238CC65A1152C4416505
        Validity
            Not Before: Dec  8 01:11:10 2025 GMT
            Not After : Dec 10 01:11:10 2025 GMT
        Subject: CN=693625af-dd75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:ca:b7:a2:3f:04:25:5c:9b:8e:e0:38:f6:eb:
                    5c:92:15:be:ff:b5:b5:f4:1f:67:a9:8b:91:c1:d4:
                    e2:4e:30:a1:2c:66:2a:76:a5:7a:39:bd:3c:e1:86:
                    dd:51:e2:56:d5:4d:11:7d:8d:e7:f4:c9:8a:c2:e8:
                    f8:b0:f9:f6:cc:08:24:20:bd:fd:97:7e:69:ba:c0:
                    3a:1f:90:d3:11:0e:91:94:3e:32:b7:82:eb:88:a7:
                    8c:a8:32:71:5c:90:6b:02:db:b0:ec:31:46:c1:b9:
                    33:b3:e2:3e:34:bf:32:2c:7e:61:ad:92:db:0d:50:
                    2e:b5:21:d7:fb:78:ac:1e:5e:44:e5:69:86:d1:36:
                    3b:52:e8:b9:e0:f3:8b:1a:1e:18:8b:35:4b:c1:0c:
                    25:9c:78:0d:fe:b0:3e:b6:ab:2e:6c:82:d3:4e:ba:
                    0c:ab:bf:58:1f:79:54:b5:f8:b3:4d:83:9d:f9:49:
                    74:02:78:b3:58:55:29:2d:b6:66:11:dd:e2:95:f4:
                    b7:c1:d7:db:35:6d:a9:04:49:22:35:99:58:39:e3:
                    ef:b5:95:c9:63:6e:df:a2:7f:67:51:82:66:a6:8e:
                    cb:51:bf:83:34:16:cc:5f:3c:d4:63:e1:b1:30:72:
                    8a:29:3f:85:93:9a:27:25:15:3d:f3:72:b6:03:50:
                    18:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:9C:8D:2D:B8:C0:9C:92:B6:16:77:42:BD:C5:C6:94:D5:E5:3E:9D
            X509v3 Authority Key Identifier:
                keyid:6B:90:FE:34:A8:66:9A:88:38:FD:23:8C:C6:5A:11:52:C4:41:65:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F366FAD3/666F962464DF11E8AFE47627F8AEA228/a5D-NKhmmog4_SOMxloRUsRBZQU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/a5D-NKhmmog4_SOMxloRUsRBZQU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F366FAD3/666F962464DF11E8AFE47627F8AEA228/a5D-NKhmmog4_SOMxloRUsRBZQU.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:3b:9b:3d:1a:03:7f:5a:92:23:e5:6d:ab:b5:4e:6b:e5:9e:
         0d:45:2b:c9:39:4c:c2:b2:50:8b:41:78:bc:e5:c2:b9:8d:2a:
         09:95:ae:51:db:f7:d1:e6:f9:56:d0:16:3d:41:d4:ef:7f:ed:
         3b:5f:b4:29:10:54:6c:87:5a:2d:f1:72:68:5f:30:92:b9:3e:
         89:32:50:12:50:84:ef:64:c8:ba:fb:5f:0e:4c:ea:42:58:17:
         5a:d6:1b:52:6a:c7:ab:6f:59:58:e3:e6:2a:82:e3:d3:a4:e0:
         83:2d:b6:65:53:05:29:f2:8c:4c:93:8a:7b:9b:10:b2:ae:dd:
         3b:13:cb:21:20:5e:75:cd:f0:24:99:6a:97:94:9e:7c:8b:d0:
         94:cd:51:53:98:e8:ef:17:f8:31:37:68:bc:d8:80:06:27:0a:
         93:0b:70:61:62:66:f2:d2:72:59:e2:b9:d6:7f:52:0d:e1:3d:
         54:b9:53:3f:db:2a:d7:91:ea:c2:a5:ef:60:cf:94:e0:26:54:
         cb:8b:22:f7:50:6d:ff:c1:af:04:c8:63:96:c3:ac:94:78:d3:
         bc:ba:d1:86:59:45:a5:02:d1:a9:e7:0c:cd:02:a8:7f:ae:ca:
         bf:08:5a:7b:45:7f:cd:40:84:63:00:15:f2:cf:ff:af:93:91:
         07:de:fe:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 8 18:12:41 2025 by rpki-client