This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36997F0/42857F08A8CA11EB877FD07CF8AEA228/jLiroOzpR3OblerbiB6h0NL_09A.mft
File:                     jLiroOzpR3OblerbiB6h0NL_09A.mft (raw, json)
Hash identifier:          0n4WGmSYQJTNnnCceJZZzvmai1d0eUuOgzcUAQMQjKE=
Subject key identifier:   27:B9:19:8C:EE:69:94:7E:65:44:07:3D:CB:9E:2F:56:8B:21:15:40
Authority key identifier: 8C:B8:AB:A0:EC:E9:47:73:9B:95:EA:DB:88:1E:A1:D0:D2:FF:D3:D0
Certificate issuer:       /CN=F36997F0AF/serialNumber=8CB8ABA0ECE947739B95EADB881EA1D0D2FFD3D0
Certificate serial:       06D0
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/jLiroOzpR3OblerbiB6h0NL_09A.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36997F0/42857F08A8CA11EB877FD07CF8AEA228/jLiroOzpR3OblerbiB6h0NL_09A.mft
Manifest number:          06CA
Signing time:             Mon 08 Dec 2025 02:06:55 +0000
Manifest this update:     Mon 08 Dec 2025 02:06:54 +0000
Manifest next update:     Wed 10 Dec 2025 02:06:54 +0000
Files and hashes:         1: jLiroOzpR3OblerbiB6h0NL_09A.crl (hash: nW45u7kOn5KEpO+4Wdzc+G8820O+xEa6+V+OyMysh2k=)
                          2: 06B9D42AF61611ECAF0145A7F1222468.roa (hash: ZkZi5c3qAfrGNQ9aUVW0NJoTh+2Y56khQsoX1Uod1CU=)
                          3: 38F20E1CF61611EC85A7D7A7F1222468.roa (hash: J5ZwYpd8zpJJL+YkWJs1rcfStoOYvR7BeBiXX5uQj5U=)
                          4: C90FF62AA8CA11EBBB067F7DF8AEA228.roa (hash: 7gE3ZmR31Vf8XT8pHiCTn2tBLPm5HPmYasDasMsyy0g=)
                          5: EBABDFC0F61511ECA6D8D2A6F1222468.roa (hash: +w3GhW+G1ceqVePvkDmbwEPcqcRRKwBS3GxP2vD4dHk=)
                          6: B74802AEB6EC11EBA8259758F8AEA228.roa (hash: APjLaXV6AoRKGJ3Woce92XxXLC4ufsyIkSG6DvxDn0M=)
                          7: 21659E62F61611EC8A629FA7F1222468.roa (hash: K3H0Xpb9HfTwe5/8TDcO+IS8XACso1/jjmZZmVkGtBc=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36997F0/42857F08A8CA11EB877FD07CF8AEA228/jLiroOzpR3OblerbiB6h0NL_09A.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36997F0/42857F08A8CA11EB877FD07CF8AEA228/jLiroOzpR3OblerbiB6h0NL_09A.mft
                          rsync://rpki.afrinic.net/repository/afrinic/jLiroOzpR3OblerbiB6h0NL_09A.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 10 Dec 2025 00:06:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1744 (0x6d0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36997F0AF, serialNumber=8CB8ABA0ECE947739B95EADB881EA1D0D2FFD3D0
        Validity
            Not Before: Dec  8 02:06:54 2025 GMT
            Not After : Dec 10 02:06:54 2025 GMT
        Subject: CN=693632bf-da94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:5d:72:f0:e8:18:37:0d:10:7a:61:86:d3:c9:
                    cf:80:ad:cf:ba:07:9b:07:a3:d8:0b:1f:17:6a:3b:
                    26:bd:1f:fc:91:7a:a5:45:b6:cd:bf:ba:13:a1:a6:
                    85:55:0a:ab:4c:a4:ae:ba:5d:7d:6f:db:91:39:8d:
                    b2:f8:5f:30:5b:cc:c4:fc:17:61:62:b7:b1:a3:b3:
                    ce:5b:53:bc:b1:98:7e:5e:34:19:12:69:a2:57:e9:
                    3e:49:cd:04:07:c4:4d:00:17:b5:15:c9:62:34:a5:
                    4e:a8:44:cd:8c:37:d4:81:e8:7c:3b:67:4f:df:46:
                    e7:49:6b:c8:25:71:c7:da:87:72:42:ec:10:a0:b9:
                    50:39:33:d8:6b:e8:48:82:6e:91:35:15:e9:ef:bf:
                    8c:0e:8d:49:c3:3c:39:d1:84:53:5e:5d:24:69:7f:
                    c0:42:70:20:bd:69:48:af:72:c1:79:48:f9:ff:16:
                    41:ae:ff:0b:9a:13:62:25:d8:9c:3f:4d:7d:b0:1f:
                    47:55:30:9e:f2:32:5c:9a:a2:6a:fe:b0:3b:3d:9a:
                    1e:e8:c2:e5:c2:76:5d:89:b9:43:f2:4d:6b:d9:ad:
                    67:7e:88:a2:8b:db:d5:a8:9d:bb:19:b4:f1:be:85:
                    24:af:70:28:70:26:b6:f5:b9:1f:b6:3e:c2:0d:a9:
                    84:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:B9:19:8C:EE:69:94:7E:65:44:07:3D:CB:9E:2F:56:8B:21:15:40
            X509v3 Authority Key Identifier:
                keyid:8C:B8:AB:A0:EC:E9:47:73:9B:95:EA:DB:88:1E:A1:D0:D2:FF:D3:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36997F0/42857F08A8CA11EB877FD07CF8AEA228/jLiroOzpR3OblerbiB6h0NL_09A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/jLiroOzpR3OblerbiB6h0NL_09A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36997F0/42857F08A8CA11EB877FD07CF8AEA228/jLiroOzpR3OblerbiB6h0NL_09A.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:83:74:b1:47:55:4a:c9:59:7a:78:7c:f0:27:9c:f0:55:af:
         0c:25:29:63:96:8d:5c:a7:af:09:e8:fc:08:dd:db:9a:e6:01:
         d3:df:6b:b2:0b:4f:b9:e9:90:a0:f1:f6:b0:3b:1a:fc:86:94:
         98:3d:17:4f:ec:27:61:c8:37:97:de:d9:4d:d0:bc:75:4c:60:
         ce:d0:60:d9:8d:5b:08:c3:1d:74:09:59:c8:f7:1a:e7:81:04:
         6f:24:8d:ac:67:92:66:29:81:44:50:a8:20:28:b7:81:8a:1a:
         5b:ea:54:2c:12:27:65:71:d9:34:0b:24:79:83:5d:ef:eb:bc:
         aa:f1:cf:bf:f5:c5:c7:ab:da:1b:26:23:59:e5:f5:d1:4a:c9:
         50:cb:b5:75:a1:3c:28:d3:9d:ca:b0:9f:95:7d:fc:bd:30:10:
         e8:ed:be:8d:0d:9d:da:45:68:ff:f2:a5:9a:23:79:25:8a:64:
         c2:6b:e6:d1:94:9d:47:1c:77:14:04:b9:5e:28:c4:ab:63:4b:
         72:aa:d4:cd:11:bd:f5:de:aa:95:d4:73:e9:44:dc:ac:57:ee:
         e9:d4:f8:3e:04:28:b8:6c:d0:e5:fe:5f:a9:8d:08:6c:20:ea:
         01:27:ac:ed:c8:35:8c:f1:5e:59:d3:09:e1:04:1c:e2:e7:e4:
         9a:dd:65:d9
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICBtAwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
OTk3RjBBRjExMC8GA1UEBRMoOENCOEFCQTBFQ0U5NDc3MzlCOTVFQURCODgxRUEx
RDBEMkZGRDNEMDAeFw0yNTEyMDgwMjA2NTRaFw0yNTEyMTAwMjA2NTRaMBgxFjAU
BgNVBAMTDTY5MzYzMmJmLWRhOTQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDeXXLw6Bg3DRB6YYbTyc+Arc+6B5sHo9gLHxdqOya9H/yReqVFts2/uhOh
poVVCqtMpK66XX1v25E5jbL4XzBbzMT8F2Fit7Gjs85bU7yxmH5eNBkSaaJX6T5J
zQQHxE0AF7UVyWI0pU6oRM2MN9SB6Hw7Z0/fRudJa8glccfah3JC7BCguVA5M9hr
6EiCbpE1Fenvv4wOjUnDPDnRhFNeXSRpf8BCcCC9aUivcsF5SPn/FkGu/wuaE2Il
2Jw/TX2wH0dVMJ7yMlyaomr+sDs9mh7owuXCdl2JuUPyTWvZrWd+iKKL29WonbsZ
tPG+hSSvcChwJrb1uR+2PsINqYTdAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUJ7kZ
jO5plH5lRAc9y54vVoshFUAwHwYDVR0jBBgwFoAUjLiroOzpR3OblerbiB6h0NL/
09AwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjk5N0YwLzQyODU3RjA4QThDQTExRUI4NzdGRDA3Q0Y4QUVBMjI4L2pMaXJv
T3pwUjNPYmxlcmJpQjZoME5MXzA5QS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2pMaXJvT3pwUjNPYmxlcmJpQjZoME5MXzA5QS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2OTk3RjAvNDI4NTdGMDhBOENBMTFFQjg3N0ZEMDdDRjhB
RUEyMjgvakxpcm9PenBSM09ibGVyYmlCNmgwTkxfMDlBLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQB1g3SxR1VKyVl6eHzwJ5zwVa8MJSlj
lo1cp68J6PwI3dua5gHT32uyC0+56ZCg8fawOxr8hpSYPRdP7CdhyDeX3tlN0Lx1
TGDO0GDZjVsIwx10CVnI9xrngQRvJI2sZ5JmKYFEUKggKLeBihpb6lQsEidlcdk0
CyR5g13v67yq8c+/9cXHq9obJiNZ5fXRSslQy7V1oTwo053KsJ+Vffy9MBDo7b6N
DZ3aRWj/8qWaI3klimTCa+bRlJ1HHHcUBLleKMSrY0tyqtTNEb313qqV1HPpRNys
V+7p1Pg+BCi4bNDl/l+pjQhsIOoBJ6ztyDWM8V5Z0wnhBBzi5+Sa3WXZ
-----END CERTIFICATE-----
Generated at Mon Dec 8 17:12:40 2025 by rpki-client