This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367972F/6110705C901011ED9475399BF1222468/ki0mxmsPTvhSNY472eGm8bVde4c.mft
File:                     ki0mxmsPTvhSNY472eGm8bVde4c.mft (raw, json)
Hash identifier:          Fwut9J6WKSjUnnBdwVe9G6AI/0soM4C1YlXl41gwC7k=
Subject key identifier:   EB:0A:0E:66:39:23:94:87:76:DA:AD:33:4A:2B:86:50:02:8D:A6:E2
Authority key identifier: 92:2D:26:C6:6B:0F:4E:F8:52:35:8E:3B:D9:E1:A6:F1:B5:5D:7B:87
Certificate issuer:       /CN=F367972FAF/serialNumber=922D26C66B0F4EF852358E3BD9E1A6F1B55D7B87
Certificate serial:       045F
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/ki0mxmsPTvhSNY472eGm8bVde4c.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F367972F/6110705C901011ED9475399BF1222468/ki0mxmsPTvhSNY472eGm8bVde4c.mft
Manifest number:          0458
Signing time:             Sun 07 Dec 2025 03:08:36 +0000
Manifest this update:     Sun 07 Dec 2025 03:08:35 +0000
Manifest next update:     Tue 09 Dec 2025 03:08:35 +0000
Files and hashes:         1: ki0mxmsPTvhSNY472eGm8bVde4c.crl (hash: nuROOH9aE8w0Pd8u9Z0DPyY1VkCNi9zjXOcETRVXbMw=)
                          2: 938ED3E8902411ED9A86A0D1F1222468.roa (hash: GgjrB1MRowvieagE2XuEoecTYc9snCOj4iPepN1usqs=)
                          3: B4757670902411EDA810FAD1F1222468.roa (hash: LcXk9bYeZ53prK+LBi8a4OcZBsCqMeTNkhzE/nnjIPs=)
                          4: 6CF9C04E902411EDAA6A30D1F1222468.roa (hash: RCJ3vAgRCxwx9M4Vjn0jNM+D+vokpMLIZ09HERtg3jU=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F367972F/6110705C901011ED9475399BF1222468/ki0mxmsPTvhSNY472eGm8bVde4c.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F367972F/6110705C901011ED9475399BF1222468/ki0mxmsPTvhSNY472eGm8bVde4c.mft
                          rsync://rpki.afrinic.net/repository/afrinic/ki0mxmsPTvhSNY472eGm8bVde4c.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 09 Dec 2025 03:08:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1119 (0x45f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F367972FAF, serialNumber=922D26C66B0F4EF852358E3BD9E1A6F1B55D7B87
        Validity
            Not Before: Dec  7 03:08:35 2025 GMT
            Not After : Dec  9 03:08:35 2025 GMT
        Subject: CN=6934efb4-8ab8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:cc:8a:67:70:3f:97:61:cf:4e:9f:f8:1e:ad:
                    7f:74:07:e7:50:df:85:8a:bb:f8:48:a4:12:b4:aa:
                    07:ea:7d:c3:05:6c:05:cb:5c:44:ba:4a:47:60:32:
                    c0:15:99:62:69:d1:49:8d:da:9e:ab:2c:46:eb:20:
                    71:0c:30:3e:42:7f:a1:fc:0a:34:a9:74:b0:a3:81:
                    9e:f8:4d:a9:63:02:ab:cc:59:ef:80:06:2d:2a:6a:
                    e8:ce:43:0d:3b:6f:ce:de:00:6b:cd:2f:91:12:aa:
                    92:f7:79:73:b5:bd:3e:f9:05:29:9f:5b:c2:c3:f8:
                    07:24:d8:fe:3f:79:24:22:c3:9b:59:cf:fc:b2:f5:
                    de:ca:f0:06:82:87:87:22:39:38:34:df:8c:79:29:
                    1e:2a:66:09:c5:dd:26:6d:51:f5:29:b9:8d:76:50:
                    bc:2e:cd:95:99:ef:95:34:ee:b3:b8:f0:8e:97:b2:
                    47:46:f0:a1:6b:4a:1a:38:a3:8d:63:8f:2b:5e:43:
                    e4:8a:e1:9a:51:4a:5c:b9:d2:14:9a:d9:d8:fd:ab:
                    55:16:34:79:1a:74:6e:26:41:f0:5a:5c:2e:41:92:
                    b0:f3:4d:33:8c:d3:c3:2c:9b:99:8a:86:49:79:76:
                    41:18:7f:fb:55:6f:97:59:5d:b2:47:38:76:5d:e9:
                    e0:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:0A:0E:66:39:23:94:87:76:DA:AD:33:4A:2B:86:50:02:8D:A6:E2
            X509v3 Authority Key Identifier:
                keyid:92:2D:26:C6:6B:0F:4E:F8:52:35:8E:3B:D9:E1:A6:F1:B5:5D:7B:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F367972F/6110705C901011ED9475399BF1222468/ki0mxmsPTvhSNY472eGm8bVde4c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/ki0mxmsPTvhSNY472eGm8bVde4c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367972F/6110705C901011ED9475399BF1222468/ki0mxmsPTvhSNY472eGm8bVde4c.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:6e:ad:a8:11:73:06:dd:fc:a3:9e:ed:25:d7:9e:e0:64:27:
         c7:af:db:17:f3:a3:f5:6d:a9:7b:48:c1:1e:db:89:e4:e2:14:
         30:40:86:b5:71:e0:40:6d:3f:d2:a1:22:63:72:c0:68:25:29:
         c6:bd:43:8a:fc:13:c9:86:b7:d6:60:84:e3:d8:4e:24:23:86:
         d9:20:41:9b:4d:c4:1b:dc:6e:aa:7b:a0:15:9a:d6:25:08:2e:
         01:0a:a9:31:47:c8:99:4a:46:52:4b:d5:a8:7c:c8:30:93:f4:
         98:87:63:36:ee:4b:27:c0:1a:11:a5:75:6a:68:b9:39:3f:7d:
         86:c6:fc:1e:e3:f0:76:a1:d7:b1:a2:bd:85:6a:43:d0:5b:53:
         ee:56:a2:5a:65:82:c0:7d:55:ac:3f:9f:a2:91:cb:c5:fd:46:
         38:a6:da:6d:70:89:aa:6d:d4:1b:32:46:53:59:5d:b8:4a:df:
         27:3c:10:99:74:24:ef:9b:b3:1c:f4:91:ba:a4:7b:94:a6:df:
         1f:24:6e:b1:e0:dc:8f:30:00:58:cb:2a:5f:79:a9:49:97:fb:
         78:62:aa:54:5c:c4:07:3c:7c:38:0f:ac:33:2b:57:af:17:ef:
         f3:e0:df:89:3b:a4:e9:e5:c0:9f:33:4a:d4:32:62:ba:f7:b6:
         5c:71:4a:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 12:42:15 2025 by rpki-client