This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367BA6A/0F4A37F4ECD911EE9F732C67775412E6/T0jn6jDJibFdNjk3djVToH4WzY4.mft
File:                     T0jn6jDJibFdNjk3djVToH4WzY4.mft (raw, json)
Hash identifier:          7UmbB+Va+BbTgpPAlQFCKo9mWFfmMoGcuieJfCvAQgU=
Subject key identifier:   0A:17:84:A3:83:EB:E9:58:C4:F8:C3:81:6D:08:13:FE:E8:2A:1B:CA
Authority key identifier: 4F:48:E7:EA:30:C9:89:B1:5D:36:39:37:76:35:53:A0:7E:16:CD:8E
Certificate issuer:       /CN=F367BA6AAF/serialNumber=4F48E7EA30C989B15D363937763553A07E16CD8E
Certificate serial:       02AF
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/T0jn6jDJibFdNjk3djVToH4WzY4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F367BA6A/0F4A37F4ECD911EE9F732C67775412E6/T0jn6jDJibFdNjk3djVToH4WzY4.mft
Manifest number:          0299
Signing time:             Sat 06 Dec 2025 04:09:36 +0000
Manifest this update:     Sat 06 Dec 2025 04:09:35 +0000
Manifest next update:     Mon 08 Dec 2025 04:09:35 +0000
Files and hashes:         1: T0jn6jDJibFdNjk3djVToH4WzY4.crl (hash: zxLkruIDKSZmLUsnxCxBtz3oCxd0Yy1PXcT5E5NjJDY=)
                          2: 01FFB238325511EFBB9C746F762E951A.roa (hash: HwB4zPJU9kPQhOWUZlM6j0iw2tO8p/LDrcqvDUSUml8=)
                          3: E3677BF4325311EF8E43A166762E951A.roa (hash: /yOVgWKNONmcMcmqu8GnU0BKllh0LGM51U9XQ2bz01g=)
                          4: A66EC216ECDA11EE9EC08472775412E6.roa (hash: f71Fay/DESTXOMYTj0DRv2PY2902rnleTuR/D0d4cTA=)
                          5: 5A1BE094EB6511EF853965AB762E951A.roa (hash: m2DS77Vz7boH9o3knUuqENRMtVGaoDlo5YdpHFrrc4w=)
                          6: B302C860325311EF8EF04166762E951A.roa (hash: PaTtuEHFKauPFcvBG7F1Vb+HR7eUcOBrKqbBlq0OM3o=)
                          7: C4815F54D81E11EFB891499E762E951A.roa (hash: wuzVVrhPQApx6Smw2Hs9Pgr/IoLeBCq0Aedko2SwUlE=)
                          8: 880847F2325311EFAA2C1666762E951A.roa (hash: Wluds4MwrpwwEfBvwaxH1Q9uLDWNvfUcuMAqtTfYhng=)
                          9: B163A47EEA6411EFB0192A8F762E951A.roa (hash: gd0V9wGbms8dangRjTs1B1syY6Co0GN21dzbunIC3Oo=)
                          10: 8FBDDA88024311EF8F71D755017001B1.roa (hash: U5+3ihpDeTDN/QaTSJ0S4ji0OUYXEbqAt0B5DT/fsvo=)
                          11: ABC9643AED2B11EFB63252B0762E951A.roa (hash: rYe+cPZkMHhDG2GzW8uh3+g2G04Hmp44xW61bCXWx/Y=)
                          12: FBD09FE6387411EF80E58557762E951A.roa (hash: gpW090sQ3gSntI8ZuxHiEJc42Mhxrl4srlTmd4Q5n+I=)
                          13: 0139A80E1C2511EFB46BB8E77CDC24C2.roa (hash: QmuJlGJat+l8+ngZcwk1G2cycsf7YIyKE+PvKaaYwKw=)
                          14: 01B62ACEF64F11EEA7BF4372775412E6.roa (hash: JFeLgbzAfmQPQNmjnlZv5H8jcPctU6ppJiDbWstuUUU=)
                          15: 7ECDEEE6387311EF9CCF594A762E951A.roa (hash: 2ZeihCUzI0W9JMOxurwJNNO7X97D4kJnt3ZQCqSXzLk=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F367BA6A/0F4A37F4ECD911EE9F732C67775412E6/T0jn6jDJibFdNjk3djVToH4WzY4.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F367BA6A/0F4A37F4ECD911EE9F732C67775412E6/T0jn6jDJibFdNjk3djVToH4WzY4.mft
                          rsync://rpki.afrinic.net/repository/afrinic/T0jn6jDJibFdNjk3djVToH4WzY4.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 08 Dec 2025 00:06:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 687 (0x2af)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F367BA6AAF, serialNumber=4F48E7EA30C989B15D363937763553A07E16CD8E
        Validity
            Not Before: Dec  6 04:09:35 2025 GMT
            Not After : Dec  8 04:09:35 2025 GMT
        Subject: CN=6933ac80-4d9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:36:30:a2:1a:a8:8a:56:bb:3c:1d:40:13:34:
                    97:d4:da:0e:40:1d:6d:f9:6b:1d:26:1b:9a:fe:04:
                    b8:b9:09:95:36:2d:c4:91:2d:b7:61:aa:18:a9:39:
                    22:c8:80:b1:03:03:2f:e0:08:bf:40:22:c0:2e:e6:
                    43:60:dc:fd:fc:1c:3d:c4:d6:4c:3f:ac:86:4c:17:
                    40:20:e0:22:45:2d:49:76:5f:26:c4:f2:d7:f9:fb:
                    ff:bb:ac:92:d2:27:18:53:4d:72:81:39:d7:f1:f7:
                    12:57:12:eb:73:c8:af:d8:8d:b7:f6:d3:36:00:c6:
                    23:88:ee:04:52:ee:0d:9d:b3:49:85:c0:bc:46:50:
                    74:34:ae:eb:76:a8:ba:55:72:6e:e5:df:bd:dc:16:
                    2b:22:7d:c5:34:0e:6a:59:1c:a0:af:4d:9b:81:7c:
                    4b:41:2e:dc:61:b1:1e:45:d1:57:c7:c7:d3:76:05:
                    3e:b9:fb:91:27:ad:56:d2:c1:42:68:0a:08:ea:96:
                    cf:7a:8f:4b:dc:e0:0f:e3:57:98:ce:68:b9:4f:9c:
                    13:b5:da:42:b6:3d:ff:ba:af:0a:2b:d3:08:0f:4c:
                    a5:f2:56:98:a8:51:ec:f9:4e:3b:de:58:98:9f:b7:
                    df:a8:21:c1:da:3c:f8:10:23:63:96:7f:83:36:b7:
                    d1:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:17:84:A3:83:EB:E9:58:C4:F8:C3:81:6D:08:13:FE:E8:2A:1B:CA
            X509v3 Authority Key Identifier:
                keyid:4F:48:E7:EA:30:C9:89:B1:5D:36:39:37:76:35:53:A0:7E:16:CD:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F367BA6A/0F4A37F4ECD911EE9F732C67775412E6/T0jn6jDJibFdNjk3djVToH4WzY4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/T0jn6jDJibFdNjk3djVToH4WzY4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367BA6A/0F4A37F4ECD911EE9F732C67775412E6/T0jn6jDJibFdNjk3djVToH4WzY4.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:0f:d2:dd:65:90:7b:00:55:86:87:e0:c3:bd:20:e8:1b:0f:
         74:9b:33:c9:3e:d3:7d:dc:f2:8f:e0:c3:f6:83:af:36:00:2e:
         10:c9:ef:cd:96:66:af:49:31:0d:4a:76:99:50:da:46:c5:25:
         29:44:91:c8:3d:5d:f6:83:2e:c1:43:b3:d9:7d:76:25:58:75:
         bf:87:cf:60:d8:b0:b8:76:4c:e7:85:1f:66:cd:d3:71:e7:e4:
         e1:b5:0b:4b:5b:49:05:b4:af:1d:61:85:7d:0f:4e:1a:f8:56:
         a3:f1:4d:57:87:60:06:29:9d:fe:26:50:9c:57:d9:2a:25:4e:
         5a:04:a5:8f:d9:f4:56:74:aa:78:cf:fc:8f:a0:17:ac:20:68:
         21:59:28:0d:84:be:0f:68:cc:7e:de:8c:0b:de:4c:f6:7b:8c:
         11:fc:d5:ae:7e:0c:90:f9:30:90:fb:40:af:d6:d7:b4:e8:fc:
         5e:a3:ba:1c:0f:11:30:9a:9b:d3:eb:84:1e:93:7c:78:40:31:
         07:ef:b9:b6:ad:24:58:21:12:4c:e0:3e:ee:ca:da:90:ba:ff:
         13:7c:5d:5b:ee:9b:5d:04:bb:a5:2d:23:1e:37:05:b7:01:30:
         b0:c7:8d:8c:1d:8f:d9:29:54:fb:7c:d5:d9:db:66:3e:a7:c6:
         13:ba:37:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 20:05:12 2025 by rpki-client