This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367CC68/527491FCD35D11F085817997DAE4EC9C/kFAlcktjykllnsFAWPqwwTHFDp8.mft
File:                     kFAlcktjykllnsFAWPqwwTHFDp8.mft (raw, json)
Hash identifier:          oTrQ9C6Si+f8M926notaO3qnzcM+3u1YB8k3hMfunaA=
Subject key identifier:   3E:2B:C7:D5:64:47:62:BD:05:24:7C:01:E0:BE:4B:DE:BB:B5:42:A3
Authority key identifier: 90:50:25:72:4B:63:CA:49:65:9E:C1:40:58:FA:B0:C1:31:C5:0E:9F
Certificate issuer:       /CN=F367CC68AF/serialNumber=905025724B63CA49659EC14058FAB0C131C50E9F
Certificate serial:       05
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/kFAlcktjykllnsFAWPqwwTHFDp8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F367CC68/527491FCD35D11F085817997DAE4EC9C/kFAlcktjykllnsFAWPqwwTHFDp8.mft
Manifest number:          04
Signing time:             Mon 08 Dec 2025 13:32:48 +0000
Manifest this update:     Mon 08 Dec 2025 13:32:47 +0000
Manifest next update:     Wed 10 Dec 2025 13:32:47 +0000
Files and hashes:         1: kFAlcktjykllnsFAWPqwwTHFDp8.crl (hash: 625yCv+mIkJBn09VWU23WmuenW+4lecg2xQz+Gx+n2A=)
                          2: 5F36C9FED43A11F087C1DB7BDAE4EC9C.roa (hash: 4Qs9L5d+Awp2J42sO92B4p+sTgRxFXnSs6/Y3boWpeI=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F367CC68/527491FCD35D11F085817997DAE4EC9C/kFAlcktjykllnsFAWPqwwTHFDp8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F367CC68/527491FCD35D11F085817997DAE4EC9C/kFAlcktjykllnsFAWPqwwTHFDp8.mft
                          rsync://rpki.afrinic.net/repository/afrinic/kFAlcktjykllnsFAWPqwwTHFDp8.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 10 Dec 2025 00:06:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5 (0x5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F367CC68AF, serialNumber=905025724B63CA49659EC14058FAB0C131C50E9F
        Validity
            Not Before: Dec  8 13:32:47 2025 GMT
            Not After : Dec 10 13:32:47 2025 GMT
        Subject: CN=6936d380-f490
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:9c:37:39:51:9e:d1:31:aa:12:1d:06:ee:d3:
                    97:c9:2e:48:0c:dd:0f:0a:1e:a6:57:18:f5:2a:49:
                    5b:cd:3f:37:63:9a:11:31:73:8b:12:75:12:f6:79:
                    0b:07:de:fd:2a:e6:73:a1:61:ee:05:b3:9b:ef:13:
                    aa:16:b9:76:7b:2d:88:29:10:2f:56:18:d3:40:3c:
                    39:54:11:46:be:a8:26:0b:73:74:77:11:04:59:a6:
                    50:e5:dd:36:b8:93:32:c8:a9:61:b0:96:52:88:97:
                    c1:be:65:a2:29:f4:8f:77:78:e1:07:ef:14:e1:f6:
                    f6:2a:2d:6a:b2:6c:d5:f3:fa:37:e2:5b:9c:cf:9c:
                    41:86:96:4c:61:27:41:5d:9d:5a:dc:ef:f7:a4:7a:
                    18:66:3c:1a:09:96:2d:bf:df:28:58:70:ba:2d:a5:
                    f4:88:32:ac:d1:fd:41:de:8e:9c:45:a0:3f:7f:b7:
                    de:e2:c0:b8:48:b3:b9:bd:3f:e1:ab:c2:d7:8b:2f:
                    c9:79:07:ee:34:70:c3:24:bc:02:77:5a:79:64:94:
                    f0:e2:26:44:81:2c:3e:8d:1c:b4:61:e0:29:97:7a:
                    61:ff:4b:0f:84:99:4c:d5:a6:76:dc:d5:91:50:2e:
                    05:44:d1:68:cc:f2:55:26:46:92:48:30:fc:dc:6f:
                    8c:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:2B:C7:D5:64:47:62:BD:05:24:7C:01:E0:BE:4B:DE:BB:B5:42:A3
            X509v3 Authority Key Identifier:
                keyid:90:50:25:72:4B:63:CA:49:65:9E:C1:40:58:FA:B0:C1:31:C5:0E:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F367CC68/527491FCD35D11F085817997DAE4EC9C/kFAlcktjykllnsFAWPqwwTHFDp8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/kFAlcktjykllnsFAWPqwwTHFDp8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367CC68/527491FCD35D11F085817997DAE4EC9C/kFAlcktjykllnsFAWPqwwTHFDp8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:1d:94:e0:5d:4c:13:05:18:75:46:26:92:ab:ba:6a:84:41:
         91:fa:fb:35:75:c6:ea:54:1a:ad:ec:85:0d:45:f1:7f:1a:68:
         0f:bb:24:25:5f:71:3e:b4:dd:a0:6b:8a:ef:93:1e:06:fc:f4:
         ad:c9:46:55:82:3f:5e:a4:e2:45:02:da:7b:ca:b5:6e:c8:c9:
         ad:61:ef:57:9e:21:e4:6d:3c:73:6e:e4:3e:1a:1f:e6:da:80:
         e8:9f:ec:15:f0:5a:ac:38:d6:6c:29:b6:51:2e:dc:aa:64:97:
         2e:86:23:fb:ff:c8:52:0e:7c:0f:7b:95:e9:a8:1e:36:4a:7b:
         8c:5d:bb:86:0c:60:fc:02:d9:c6:6d:61:30:c3:12:c9:13:8a:
         ca:47:bd:d7:65:48:2a:6e:6b:53:86:a1:d7:f9:a5:b5:15:02:
         f0:b0:fb:ac:b2:a9:59:ac:5d:59:32:cb:d1:cb:e3:ed:8e:0e:
         b3:e6:c8:a6:20:eb:10:57:2c:cc:11:d4:5a:5e:ad:4e:34:7e:
         74:b4:54:aa:bb:6a:f8:b9:a1:59:f9:7d:f3:e1:a7:af:a8:b4:
         ef:e9:dc:87:8e:68:6b:97:c9:43:76:aa:bf:d5:4f:9f:6e:39:
         d4:8b:0f:4b:21:cf:4e:10:5d:3d:15:66:88:4a:aa:8d:4f:7c:
         e1:95:4d:b4
-----BEGIN CERTIFICATE-----
MIIFlTCCBH2gAwIBAgIBBTANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDEwpGMzY3
Q0M2OEFGMTEwLwYDVQQFEyg5MDUwMjU3MjRCNjNDQTQ5NjU5RUMxNDA1OEZBQjBD
MTMxQzUwRTlGMB4XDTI1MTIwODEzMzI0N1oXDTI1MTIxMDEzMzI0N1owGDEWMBQG
A1UEAxMNNjkzNmQzODAtZjQ5MDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMucNzlRntExqhIdBu7Tl8kuSAzdDwoeplcY9SpJW80/N2OaETFzixJ1EvZ5
Cwfe/Srmc6Fh7gWzm+8Tqha5dnstiCkQL1YY00A8OVQRRr6oJgtzdHcRBFmmUOXd
NriTMsipYbCWUoiXwb5loin0j3d44QfvFOH29iotarJs1fP6N+JbnM+cQYaWTGEn
QV2dWtzv96R6GGY8GgmWLb/fKFhwui2l9IgyrNH9Qd6OnEWgP3+33uLAuEizub0/
4avC14svyXkH7jRwwyS8AndaeWSU8OImRIEsPo0ctGHgKZd6Yf9LD4SZTNWmdtzV
kVAuBUTRaMzyVSZGkkgw/NxvjAMCAwEAAaOCArgwggK0MB0GA1UdDgQWBBQ+K8fV
ZEdivQUkfAHgvkveu7VCozAfBgNVHSMEGDAWgBSQUCVyS2PKSWWewUBY+rDBMcUO
nzAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2N0NDNjgvNTI3NDkxRkNEMzVEMTFGMDg1ODE3OTk3REFFNEVDOUMva0ZBbGNr
dGp5a2xsbnNGQVdQcXd3VEhGRHA4LmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMva0ZBbGNrdGp5a2xsbnNGQVdQcXd3VEhGRHA4LmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCB1QYIKwYBBQUHAQsEgcgwgcUwgYsGCCsGAQUF
BzALhn9yc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY3Q0M2OC81Mjc0OTFGQ0QzNUQxMUYwODU4MTc5OTdEQUU0
RUM5Qy9rRkFsY2t0anlrbGxuc0ZBV1Bxd3dUSEZEcDgubWZ0MDUGCCsGAQUFBzAN
hilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggr
BgEFBQcBCAEB/wQGMASgAgUAMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE
AgACBQAwDQYJKoZIhvcNAQELBQADggEBAAodlOBdTBMFGHVGJpKrumqEQZH6+zV1
xupUGq3shQ1F8X8aaA+7JCVfcT603aBriu+THgb89K3JRlWCP16k4kUC2nvKtW7I
ya1h71eeIeRtPHNu5D4aH+bagOif7BXwWqw41mwptlEu3Kpkly6GI/v/yFIOfA97
lemoHjZKe4xdu4YMYPwC2cZtYTDDEskTispHvddlSCpua1OGodf5pbUVAvCw+6yy
qVmsXVkyy9HL4+2ODrPmyKYg6xBXLMwR1FperU40fnS0VKq7avi5oVn5ffPhp6+o
tO/p3IeOaGuXyUN2qr/VT59uOdSLD0shz04QXT0VZohKqo1PfOGVTbQ=
-----END CERTIFICATE-----
Generated at Mon Dec 8 17:16:38 2025 by rpki-client