This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36AE219/52BAC3D8231011EF92871F3A7DDC24C2/kcmeRXlnuZKbLt55eXKLD-Jjmtk.mft
File:                     kcmeRXlnuZKbLt55eXKLD-Jjmtk.mft (raw, json)
Hash identifier:          AW3BJcVuV/OQU6IWgnROvUNw3Ju+eLNURn+DUR/ZJR4=
Subject key identifier:   17:86:42:7D:E5:3B:FF:8C:D5:9E:B0:98:2C:32:06:58:C3:DC:7B:CD
Authority key identifier: 91:C9:9E:45:79:67:B9:92:9B:2E:DE:79:79:72:8B:0F:E2:63:9A:D9
Certificate issuer:       /CN=F36AE219AF/serialNumber=91C99E457967B9929B2EDE7979728B0FE2639AD9
Certificate serial:       024E
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/kcmeRXlnuZKbLt55eXKLD-Jjmtk.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36AE219/52BAC3D8231011EF92871F3A7DDC24C2/kcmeRXlnuZKbLt55eXKLD-Jjmtk.mft
Manifest number:          0242
Signing time:             Sat 06 Dec 2025 04:17:04 +0000
Manifest this update:     Sat 06 Dec 2025 04:17:03 +0000
Manifest next update:     Mon 08 Dec 2025 04:17:03 +0000
Files and hashes:         1: kcmeRXlnuZKbLt55eXKLD-Jjmtk.crl (hash: ZUwQblGKuRhKqkZbEaKp2LOZjA6Hgzij/Vlw/mcrtCM=)
                          2: 12F98C3A322C11F09C0E00A8DAE4EC9C.roa (hash: 3/y2xPCMLAqnZ9fL5r4SiXDKczBJPyz466opmOdw+x8=)
                          3: AA49DBAA0BBA11F0ABCF1C53762E951A.roa (hash: 1gTiKBvUuN5Hp+vmaDEDs42+vihpN5KZK723GLEruGs=)
                          4: C21173B24F4811EF8A277884762E951A.roa (hash: Af8VqHnpag7lv/aOf7jeqaTrvvKqqPvGk8sXdY9C8oE=)
                          5: 2BFA32F04F4911EF85B98B88762E951A.roa (hash: VLnmys2y2qLTP9i5IM1gmNfB2WyHqNq5FeIYAdMqXMg=)
                          6: 8F09B9704F4811EF95C0F883762E951A.roa (hash: Jb7IC1uL5aUvVn+T0mFpr5lxOWcWzHI+l9IojCLU5sE=)
                          7: 4691B7064F4811EFB5EC1580762E951A.roa (hash: Y7dEtQLSXLs6SEUJz5C6Rgx6jukPXe2EL/tguL6OuEc=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36AE219/52BAC3D8231011EF92871F3A7DDC24C2/kcmeRXlnuZKbLt55eXKLD-Jjmtk.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36AE219/52BAC3D8231011EF92871F3A7DDC24C2/kcmeRXlnuZKbLt55eXKLD-Jjmtk.mft
                          rsync://rpki.afrinic.net/repository/afrinic/kcmeRXlnuZKbLt55eXKLD-Jjmtk.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 08 Dec 2025 00:06:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 590 (0x24e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36AE219AF, serialNumber=91C99E457967B9929B2EDE7979728B0FE2639AD9
        Validity
            Not Before: Dec  6 04:17:03 2025 GMT
            Not After : Dec  8 04:17:03 2025 GMT
        Subject: CN=6933ae40-b786
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:dd:9f:57:e6:38:3c:ac:41:38:7d:f2:83:5d:
                    e2:5f:66:ee:3a:1c:95:6a:e8:0c:57:f3:38:be:e6:
                    3a:90:07:1c:a3:12:5f:c0:e5:6b:84:eb:77:d3:7b:
                    2c:a7:43:c2:6a:ac:ed:c8:32:15:c2:89:c4:e1:9c:
                    56:62:18:a8:eb:a2:8c:90:a9:6b:0d:68:e6:a5:32:
                    f4:b8:6f:4c:58:5a:f4:ef:a5:f2:c1:46:73:1c:de:
                    3b:81:a9:40:84:0e:99:47:e0:e3:6d:55:60:5b:bb:
                    86:b8:64:ee:19:bb:83:51:c5:dc:d1:4b:23:83:f7:
                    81:8b:5b:2b:5c:a7:86:22:34:62:89:16:0f:bb:c9:
                    27:ee:dd:4c:91:5e:6c:be:b6:a4:8f:57:ed:38:1c:
                    11:f2:3a:9d:de:52:7f:d2:b9:b2:d6:5a:ce:de:ed:
                    1b:28:46:46:f2:f8:ae:5e:19:90:2c:25:05:05:08:
                    a3:d4:3c:8a:b7:1d:6f:54:5f:f6:b4:d7:c9:63:06:
                    f3:ad:bc:5c:e9:e2:a7:70:a9:24:99:e4:e3:17:cb:
                    24:d4:b8:8d:4f:a1:ad:c0:26:76:03:0d:50:2b:ee:
                    ba:3b:b5:79:d0:4b:1b:8e:8f:d8:6f:b6:17:ee:33:
                    5f:4b:6e:e1:09:70:ef:d6:72:f7:de:3f:db:bb:7c:
                    ae:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:86:42:7D:E5:3B:FF:8C:D5:9E:B0:98:2C:32:06:58:C3:DC:7B:CD
            X509v3 Authority Key Identifier:
                keyid:91:C9:9E:45:79:67:B9:92:9B:2E:DE:79:79:72:8B:0F:E2:63:9A:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36AE219/52BAC3D8231011EF92871F3A7DDC24C2/kcmeRXlnuZKbLt55eXKLD-Jjmtk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/kcmeRXlnuZKbLt55eXKLD-Jjmtk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36AE219/52BAC3D8231011EF92871F3A7DDC24C2/kcmeRXlnuZKbLt55eXKLD-Jjmtk.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:5b:88:81:a0:65:df:d0:f6:73:8c:80:8f:5b:07:aa:c0:5a:
         0a:76:d5:fd:1f:55:02:d8:2b:ea:c9:6c:39:bb:9c:fb:97:05:
         03:51:3a:8b:2a:1f:f3:22:3b:81:5e:06:6f:58:2e:ca:91:ee:
         2b:ee:f3:f5:1b:5a:68:f6:73:78:19:30:90:0f:b8:0a:ed:6c:
         52:47:b6:8a:b4:97:b2:ea:3c:da:cb:b9:ac:27:51:89:2e:59:
         cc:b9:fe:d5:16:34:7d:12:ce:33:0a:b1:8d:e5:98:5d:1c:6a:
         74:c6:fe:24:38:94:3a:78:b4:b7:96:63:e6:f0:24:13:75:b8:
         69:36:86:24:70:06:0b:f8:b5:24:67:1c:c3:3f:83:0d:11:6c:
         60:fc:62:fd:9a:68:42:c6:51:36:36:64:cb:e9:c9:72:88:1b:
         6a:64:62:fb:c3:c2:5e:1e:64:06:ef:7c:91:e6:1b:1d:ec:20:
         3d:48:3e:72:0e:ee:e3:f7:e8:67:6f:bb:29:f6:57:6f:4c:4d:
         0e:f6:79:f9:b9:30:d9:a5:87:ca:78:46:71:72:3e:0c:39:68:
         fc:2e:39:e4:d6:6c:78:da:28:68:87:d7:f8:ee:84:9d:17:00:
         a2:8a:b2:14:45:6f:33:20:53:f9:9f:54:f7:75:82:23:f9:ed:
         4d:a8:1e:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 16:45:51 2025 by rpki-client