This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367EEA2/908F26B42EB411EE82869D784AD9E6FC/ktFZJCMJCfKcAkuNX2LWWJdKKMY.mft
File:                     ktFZJCMJCfKcAkuNX2LWWJdKKMY.mft (raw, json)
Hash identifier:          h3jtBe6wgthhEdiEXnA9zHlixxSPlnMHifZDgeP5EV0=
Subject key identifier:   CA:87:BD:E9:93:37:AC:D0:B6:60:B5:1E:30:36:C3:4A:64:1C:89:4F
Authority key identifier: 92:D1:59:24:23:09:09:F2:9C:02:4B:8D:5F:62:D6:58:97:4A:28:C6
Certificate issuer:       /CN=F367EEA2AF/serialNumber=92D15924230909F29C024B8D5F62D658974A28C6
Certificate serial:       037F
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/ktFZJCMJCfKcAkuNX2LWWJdKKMY.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F367EEA2/908F26B42EB411EE82869D784AD9E6FC/ktFZJCMJCfKcAkuNX2LWWJdKKMY.mft
Manifest number:          037C
Signing time:             Sun 07 Dec 2025 03:36:15 +0000
Manifest this update:     Sun 07 Dec 2025 03:36:15 +0000
Manifest next update:     Tue 09 Dec 2025 03:36:15 +0000
Files and hashes:         1: ktFZJCMJCfKcAkuNX2LWWJdKKMY.crl (hash: U7f5QgylM+vt4CIItAy/PrPjHixcdWLM7K1tpc5EOFY=)
                          2: F59C135AD57111EE98F3334E775412E6.roa (hash: DlLkA76T6/DZ7xEc77ZbObEHLYWet3TzWSKSqOWWlnU=)
                          3: 43172C202F6711EEBE578C1B4AD9E6FC.roa (hash: olt87M5UNUaEOcxzcw5wRYVy43osgJdjsy53S5VrdrA=)
                          4: EA6262822EB411EEA85FC5794AD9E6FC.roa (hash: k3VP3qw0EwdYjKV3iUtgdfKB+KXoIlF7qnyQ2hPvZY8=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F367EEA2/908F26B42EB411EE82869D784AD9E6FC/ktFZJCMJCfKcAkuNX2LWWJdKKMY.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F367EEA2/908F26B42EB411EE82869D784AD9E6FC/ktFZJCMJCfKcAkuNX2LWWJdKKMY.mft
                          rsync://rpki.afrinic.net/repository/afrinic/ktFZJCMJCfKcAkuNX2LWWJdKKMY.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 09 Dec 2025 03:36:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 895 (0x37f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F367EEA2AF, serialNumber=92D15924230909F29C024B8D5F62D658974A28C6
        Validity
            Not Before: Dec  7 03:36:15 2025 GMT
            Not After : Dec  9 03:36:15 2025 GMT
        Subject: CN=6934f62f-b0cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:43:9c:75:5a:f5:68:d4:ad:47:02:77:6f:eb:
                    61:d5:02:e8:4a:8c:1c:65:dd:d3:79:f2:be:e8:d6:
                    3b:04:bc:d1:32:71:65:59:11:86:e5:be:7c:84:ef:
                    2e:b0:3e:29:0b:2b:08:05:f5:9b:13:69:64:59:60:
                    1b:55:74:80:12:1a:0f:07:ff:aa:4a:f0:ff:77:40:
                    ac:cc:0c:b5:c0:d6:b9:f3:c0:a0:0a:c8:cb:4e:40:
                    c2:90:78:db:55:8d:5a:d0:43:b7:8c:3d:39:b0:15:
                    68:a7:e1:f8:42:f3:48:c5:eb:ae:b7:76:d2:da:2a:
                    9a:f8:d9:3a:6b:7e:da:f4:e4:ff:8c:6d:68:5d:b9:
                    fa:1e:e1:94:8d:c3:34:f2:54:ca:34:30:a6:8f:e4:
                    4d:30:2a:eb:3a:59:b9:85:32:a9:d9:45:6c:c3:0f:
                    a5:74:89:e1:9c:0b:b1:f2:d6:41:68:6c:eb:5f:69:
                    ca:bf:6e:ae:68:51:4f:54:ab:0c:8f:5c:f5:68:a7:
                    0e:dc:5d:26:c9:3a:ce:bf:26:ae:5f:c1:81:cf:b5:
                    e7:65:a4:bd:33:56:a3:5a:7f:96:74:d5:9e:7f:38:
                    77:42:0f:4b:c3:e1:ee:03:14:30:ee:e2:8c:20:ea:
                    27:13:36:4a:af:82:71:ce:c8:e1:20:2d:08:1f:ee:
                    f7:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:87:BD:E9:93:37:AC:D0:B6:60:B5:1E:30:36:C3:4A:64:1C:89:4F
            X509v3 Authority Key Identifier:
                keyid:92:D1:59:24:23:09:09:F2:9C:02:4B:8D:5F:62:D6:58:97:4A:28:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F367EEA2/908F26B42EB411EE82869D784AD9E6FC/ktFZJCMJCfKcAkuNX2LWWJdKKMY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/ktFZJCMJCfKcAkuNX2LWWJdKKMY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367EEA2/908F26B42EB411EE82869D784AD9E6FC/ktFZJCMJCfKcAkuNX2LWWJdKKMY.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:ab:9e:1d:61:46:83:6e:3f:95:8a:52:34:21:3d:09:a9:69:
         5c:be:da:38:1d:63:7c:74:66:a2:f8:e1:84:75:96:65:8a:1e:
         d5:44:31:c9:49:67:cb:34:63:57:43:86:4d:0c:71:21:ac:dd:
         4c:9b:63:4c:16:89:f5:46:22:61:9a:5b:7d:3b:df:68:45:93:
         45:ab:f3:c1:95:e5:6a:4a:8c:b8:e4:0d:fe:ba:e5:0d:8f:cb:
         4d:f0:c6:32:60:b8:a4:48:da:b8:c2:77:e9:71:10:3f:be:3a:
         ea:41:7d:ff:1d:73:56:b5:d8:11:7a:ae:ba:9f:6d:3a:db:4e:
         45:f0:ad:d0:75:2d:b8:9a:2a:a0:f3:9d:93:f3:3e:75:20:62:
         1b:50:28:90:f2:70:02:93:31:3a:de:e8:ac:9c:bd:a5:55:19:
         02:26:fb:73:47:09:c9:96:2c:57:ca:0d:d1:42:d5:ef:3d:6e:
         07:2d:91:b4:85:00:dd:13:47:42:81:43:b5:2e:33:a9:aa:aa:
         86:21:da:bd:8d:64:ae:63:58:dd:f5:96:87:d0:ac:c7:2c:ef:
         dc:95:96:af:90:19:dd:4b:eb:e8:6d:3d:dc:96:4d:dc:f7:7b:
         7a:1d:9c:ce:5f:c1:15:97:b1:9b:f5:8c:48:4c:7f:cd:cf:74:
         f9:b9:8b:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 8 04:37:44 2025 by rpki-client