This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3695E06/CAD1973AC49411EB9D712251F8AEA228/2W-R9QKutcIIkeF_EP9ejJ-Gc6c.mft
File:                     2W-R9QKutcIIkeF_EP9ejJ-Gc6c.mft (raw, json)
Hash identifier:          u9FD4oq0ooiHphfW2UdaKbmPwj3QrcyZFoz6xJOUlQo=
Subject key identifier:   A6:54:DA:83:28:F1:D5:49:A1:F7:C4:55:CD:32:A3:DA:B0:F4:2F:77
Authority key identifier: D9:6F:91:F5:02:AE:B5:C2:08:91:E1:7F:10:FF:5E:8C:9F:86:73:A7
Certificate issuer:       /CN=F3695E06AF/serialNumber=D96F91F502AEB5C20891E17F10FF5E8C9F8673A7
Certificate serial:       06AC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/2W-R9QKutcIIkeF_EP9ejJ-Gc6c.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3695E06/CAD1973AC49411EB9D712251F8AEA228/2W-R9QKutcIIkeF_EP9ejJ-Gc6c.mft
Manifest number:          06A9
Signing time:             Mon 08 Dec 2025 02:12:26 +0000
Manifest this update:     Mon 08 Dec 2025 02:12:25 +0000
Manifest next update:     Wed 10 Dec 2025 02:12:25 +0000
Files and hashes:         1: 2W-R9QKutcIIkeF_EP9ejJ-Gc6c.crl (hash: MCLzfiRtlQoStMcgxpfe1iPTmQD59tOMSJDHaSo/0xI=)
                          2: 6B702572C5B611EB874E825FF8AEA228.roa (hash: TuOEHMyp7ZkGMu80eO/vkZfJHkaFNIwGb2ogLtbprVA=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3695E06/CAD1973AC49411EB9D712251F8AEA228/2W-R9QKutcIIkeF_EP9ejJ-Gc6c.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3695E06/CAD1973AC49411EB9D712251F8AEA228/2W-R9QKutcIIkeF_EP9ejJ-Gc6c.mft
                          rsync://rpki.afrinic.net/repository/afrinic/2W-R9QKutcIIkeF_EP9ejJ-Gc6c.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 10 Dec 2025 00:06:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1708 (0x6ac)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3695E06AF, serialNumber=D96F91F502AEB5C20891E17F10FF5E8C9F8673A7
        Validity
            Not Before: Dec  8 02:12:25 2025 GMT
            Not After : Dec 10 02:12:25 2025 GMT
        Subject: CN=6936340a-e025
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:65:27:54:0d:8d:ef:58:92:b8:70:31:80:ad:
                    7c:35:97:b3:ea:3e:d0:46:5b:32:6d:ec:c3:50:d7:
                    12:a9:d1:d7:b4:a0:23:e6:0a:9b:f8:85:34:d9:d3:
                    64:c7:0c:2a:f8:6e:52:f2:06:53:ee:c3:97:05:9d:
                    5e:c9:1a:69:f1:bc:63:a0:50:6e:cc:94:ef:77:7d:
                    e8:63:05:7e:93:0f:06:5f:3c:78:da:90:2b:fd:d5:
                    af:3f:63:47:f0:19:7c:82:ea:c9:bf:dc:6f:b3:ed:
                    af:83:36:0c:6b:4c:8e:df:19:3e:cf:61:2c:68:df:
                    e2:35:cb:7f:39:ed:df:42:e9:ff:e5:63:e4:47:e3:
                    12:7d:67:cf:10:5d:c4:52:44:ec:b5:35:94:92:02:
                    23:25:41:ad:91:ce:83:bf:f3:f8:77:be:c5:a9:e7:
                    5b:04:f0:cf:e7:e0:a4:fb:20:1f:5b:eb:f1:23:c0:
                    c8:32:5e:c9:7c:fe:89:52:3e:07:e9:49:16:2f:5f:
                    98:dd:06:95:e0:b7:99:3c:ab:6b:e5:22:74:2d:fa:
                    52:09:4c:e2:a4:17:b3:90:79:38:a5:ca:42:9e:77:
                    64:32:fd:d6:f8:5c:87:8d:08:0b:52:0b:0a:3c:9a:
                    49:85:41:92:2a:2d:2d:71:d8:0d:e3:02:f8:a4:90:
                    92:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:54:DA:83:28:F1:D5:49:A1:F7:C4:55:CD:32:A3:DA:B0:F4:2F:77
            X509v3 Authority Key Identifier:
                keyid:D9:6F:91:F5:02:AE:B5:C2:08:91:E1:7F:10:FF:5E:8C:9F:86:73:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3695E06/CAD1973AC49411EB9D712251F8AEA228/2W-R9QKutcIIkeF_EP9ejJ-Gc6c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/2W-R9QKutcIIkeF_EP9ejJ-Gc6c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3695E06/CAD1973AC49411EB9D712251F8AEA228/2W-R9QKutcIIkeF_EP9ejJ-Gc6c.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:46:77:a0:0e:45:a7:62:47:fe:91:dc:3e:67:bf:a7:dc:38:
         7e:05:da:ab:16:e8:31:87:48:92:3c:26:4b:4d:a9:65:aa:26:
         e8:22:b3:f6:4c:d6:c0:d0:15:71:33:46:a1:e1:c0:af:9b:12:
         11:8f:b9:11:4a:e8:00:9c:23:6a:bd:68:69:e4:21:5e:72:b6:
         e5:4b:cd:ec:6f:c9:1a:11:22:07:d3:31:da:26:30:55:85:27:
         6e:e3:50:04:c0:ac:61:a2:77:8f:ab:d1:86:00:b7:66:19:9b:
         fb:9b:fd:8f:ed:a5:3e:36:17:ce:a0:e3:ba:05:ef:4c:fb:fc:
         10:4a:bd:79:a5:e5:ea:1a:ef:9c:16:2f:11:af:ad:54:f3:88:
         47:5f:81:ff:ee:d8:dd:19:bc:66:25:e0:03:6c:9e:93:fd:52:
         ef:0f:7e:e4:ce:53:c7:05:1e:29:7c:68:c0:ed:59:0e:e8:e7:
         2a:2b:bf:66:6a:ef:14:e5:ed:63:f3:0b:61:e9:89:f9:69:a3:
         3f:18:7d:9f:65:ed:1a:b2:32:7b:48:fe:81:f4:13:89:7a:b1:
         c6:0d:f7:46:f3:3b:6b:23:c2:4e:0a:74:10:7c:11:26:c6:2a:
         09:ec:57:5d:6d:fe:d9:8a:dd:3f:13:8f:3e:be:f6:d5:da:fe:
         64:de:a4:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 8 17:20:33 2025 by rpki-client