This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369E9B3/EE40A58A558C11EFAFCCFBA0762E951A/9XSxa6hq2W4A3trNY0H5qCTqR6c.mft
File:                     9XSxa6hq2W4A3trNY0H5qCTqR6c.mft (raw, json)
Hash identifier:          YR3w6cX8GxGG3ELkosA/gun6XQyXrgw6qcQr7qx+EbI=
Subject key identifier:   38:53:1E:3B:3E:D4:2A:4E:73:F0:88:22:34:70:97:68:88:6E:D8:D1
Authority key identifier: F5:74:B1:6B:A8:6A:D9:6E:00:DE:DA:CD:63:41:F9:A8:24:EA:47:A7
Certificate issuer:       /CN=F369E9B3AF/serialNumber=F574B16BA86AD96E00DEDACD6341F9A824EA47A7
Certificate serial:       0207
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/9XSxa6hq2W4A3trNY0H5qCTqR6c.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F369E9B3/EE40A58A558C11EFAFCCFBA0762E951A/9XSxa6hq2W4A3trNY0H5qCTqR6c.mft
Manifest number:          0203
Signing time:             Mon 08 Dec 2025 04:26:21 +0000
Manifest this update:     Mon 08 Dec 2025 04:26:21 +0000
Manifest next update:     Wed 10 Dec 2025 04:26:21 +0000
Files and hashes:         1: 9XSxa6hq2W4A3trNY0H5qCTqR6c.crl (hash: ni/4APaldxnOuM7V/jB6+39aUVFRsCleE+Vvjzojv/I=)
                          2: A43C41D4120011F09D92528F762E951A.roa (hash: +C2vaGXsFk0vULg3LSJ6J09JaHsN+iiW87QQdSsPSN8=)
                          3: CF1798702D2311F0B44678ECDAE4EC9C.roa (hash: 5LtiI+kpHrtx1PW0UuMcO5zsttEu1oGZjrXgXm+py4Y=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F369E9B3/EE40A58A558C11EFAFCCFBA0762E951A/9XSxa6hq2W4A3trNY0H5qCTqR6c.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F369E9B3/EE40A58A558C11EFAFCCFBA0762E951A/9XSxa6hq2W4A3trNY0H5qCTqR6c.mft
                          rsync://rpki.afrinic.net/repository/afrinic/9XSxa6hq2W4A3trNY0H5qCTqR6c.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 10 Dec 2025 00:06:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 519 (0x207)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F369E9B3AF, serialNumber=F574B16BA86AD96E00DEDACD6341F9A824EA47A7
        Validity
            Not Before: Dec  8 04:26:21 2025 GMT
            Not After : Dec 10 04:26:21 2025 GMT
        Subject: CN=6936536d-0f91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:13:4e:e0:86:32:79:b2:8e:0d:6b:96:e0:ed:
                    5a:98:31:57:5c:6b:9f:6d:e4:14:ae:0c:ea:c3:f0:
                    86:d5:ce:07:52:73:d6:58:2a:57:df:fb:dc:ff:37:
                    53:c1:d2:49:42:fb:d2:3c:ba:85:e5:20:d0:5a:17:
                    43:c0:ef:1d:c5:b7:51:98:be:77:b9:e3:3e:45:fc:
                    ae:e3:2b:82:7b:a9:da:03:04:27:c5:a6:1f:81:82:
                    7c:e0:6b:2c:6b:3f:7c:96:ca:e1:8b:d4:56:d8:87:
                    59:a7:1f:d8:15:f0:73:d6:15:8c:97:7e:25:17:60:
                    e1:b1:18:40:8e:f1:e7:47:e3:ed:7b:e0:cd:27:c5:
                    b6:c9:c6:75:5e:58:fe:c1:97:35:c0:4c:8b:bf:81:
                    38:a3:1c:81:4c:79:86:8f:eb:eb:b9:be:fc:15:fc:
                    6e:52:d7:78:66:b9:85:31:51:27:8e:50:83:94:d7:
                    e2:6e:91:47:9a:66:b5:0a:61:59:af:44:9d:5a:85:
                    8b:0c:eb:59:09:16:c5:7f:13:fd:3a:23:40:85:84:
                    32:b4:f6:c4:2f:6d:f2:a9:98:2d:b5:98:6a:55:55:
                    cb:e2:8d:48:55:27:c1:6f:fe:e9:f6:39:e4:5c:c2:
                    66:46:32:60:e9:71:d5:40:82:13:78:8f:47:55:55:
                    59:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:53:1E:3B:3E:D4:2A:4E:73:F0:88:22:34:70:97:68:88:6E:D8:D1
            X509v3 Authority Key Identifier:
                keyid:F5:74:B1:6B:A8:6A:D9:6E:00:DE:DA:CD:63:41:F9:A8:24:EA:47:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F369E9B3/EE40A58A558C11EFAFCCFBA0762E951A/9XSxa6hq2W4A3trNY0H5qCTqR6c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/9XSxa6hq2W4A3trNY0H5qCTqR6c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369E9B3/EE40A58A558C11EFAFCCFBA0762E951A/9XSxa6hq2W4A3trNY0H5qCTqR6c.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:8c:56:b2:5c:16:34:ae:0d:6e:e8:40:af:7f:cc:df:f1:60:
         87:9b:ec:9b:01:dd:30:cb:34:4a:11:3d:ca:93:fc:4c:a3:a1:
         d9:80:21:75:cb:9d:40:c7:4d:d3:02:76:46:99:0a:0b:82:8a:
         31:87:a9:ad:d6:f9:31:a0:c9:85:81:61:3e:40:5f:be:fa:11:
         9c:19:a3:21:70:34:06:9a:4f:62:8a:e8:82:3b:53:2d:be:7e:
         0f:3e:c3:d3:67:f9:54:ae:8f:cd:4e:1a:81:e3:46:14:3b:29:
         08:87:4a:ee:98:e2:0c:3a:55:8d:41:ba:15:b6:34:cb:66:a1:
         be:62:33:ce:fb:16:2a:58:c2:21:4e:ab:28:c0:94:6e:3b:02:
         e6:b4:59:ab:7e:42:0c:8b:70:fe:cc:96:02:77:2e:cb:98:83:
         05:4d:ad:b2:29:fe:3d:1b:88:0c:f1:02:50:9b:6f:c7:75:9e:
         d1:27:42:92:83:6d:3b:74:a0:50:73:70:16:68:9b:f1:33:48:
         d4:6a:c3:a4:98:2a:62:89:9b:31:89:72:d9:54:57:54:85:af:
         a5:ed:4c:75:16:a3:85:6c:65:98:78:0d:81:63:f9:29:fb:04:
         68:18:3c:06:5a:46:d0:38:9c:b7:15:8c:90:9e:fc:e5:75:bf:
         aa:59:0e:bb
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICAgcwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
OUU5QjNBRjExMC8GA1UEBRMoRjU3NEIxNkJBODZBRDk2RTAwREVEQUNENjM0MUY5
QTgyNEVBNDdBNzAeFw0yNTEyMDgwNDI2MjFaFw0yNTEyMTAwNDI2MjFaMBgxFjAU
BgNVBAMTDTY5MzY1MzZkLTBmOTEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCqE07ghjJ5so4Na5bg7VqYMVdca59t5BSuDOrD8IbVzgdSc9ZYKlff+9z/
N1PB0klC+9I8uoXlINBaF0PA7x3Ft1GYvne54z5F/K7jK4J7qdoDBCfFph+Bgnzg
ayxrP3yWyuGL1FbYh1mnH9gV8HPWFYyXfiUXYOGxGECO8edH4+174M0nxbbJxnVe
WP7BlzXATIu/gTijHIFMeYaP6+u5vvwV/G5S13hmuYUxUSeOUIOU1+JukUeaZrUK
YVmvRJ1ahYsM61kJFsV/E/06I0CFhDK09sQvbfKpmC21mGpVVcvijUhVJ8Fv/un2
OeRcwmZGMmDpcdVAghN4j0dVVVk3AgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUOFMe
Oz7UKk5z8IgiNHCXaIhu2NEwHwYDVR0jBBgwFoAU9XSxa6hq2W4A3trNY0H5qCTq
R6cwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjlFOUIzL0VFNDBBNThBNTU4QzExRUZBRkNDRkJBMDc2MkU5NTFBLzlYU3hh
NmhxMlc0QTN0ck5ZMEg1cUNUcVI2Yy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljLzlYU3hhNmhxMlc0QTN0ck5ZMEg1cUNUcVI2Yy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2OUU5QjMvRUU0MEE1OEE1NThDMTFFRkFGQ0NGQkEwNzYy
RTk1MUEvOVhTeGE2aHEyVzRBM3RyTlkwSDVxQ1RxUjZjLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCnjFayXBY0rg1u6ECvf8zf8WCHm+yb
Ad0wyzRKET3Kk/xMo6HZgCF1y51Ax03TAnZGmQoLgooxh6mt1vkxoMmFgWE+QF++
+hGcGaMhcDQGmk9iiuiCO1Mtvn4PPsPTZ/lUro/NThqB40YUOykIh0rumOIMOlWN
QboVtjTLZqG+YjPO+xYqWMIhTqsowJRuOwLmtFmrfkIMi3D+zJYCdy7LmIMFTa2y
Kf49G4gM8QJQm2/HdZ7RJ0KSg207dKBQc3AWaJvxM0jUasOkmCpiiZsxiXLZVFdU
ha+l7Ux1FqOFbGWYeA2BY/kp+wRoGDwGWkbQOJy3FYyQnvzldb+qWQ67
-----END CERTIFICATE-----
Generated at Mon Dec 8 18:12:34 2025 by rpki-client