This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D5F5A/2173E83ADAA611ED8227D4C42F6D8C1D/KCk0NtTW2jqTpg7KP77HfY3Dj2E.mft
File:                     KCk0NtTW2jqTpg7KP77HfY3Dj2E.mft (raw, json)
Hash identifier:          q0MXd3oN+RNHDTN7BHLQQHpQA8asBkDuFuM3DKwJQr4=
Subject key identifier:   77:DA:40:96:68:CD:CB:9B:A2:95:4B:F0:FD:48:1E:4A:3C:C4:18:1E
Authority key identifier: 28:29:34:36:D4:D6:DA:3A:93:A6:0E:CA:3F:BE:C7:7D:8D:C3:8F:61
Certificate issuer:       /CN=F36D5F5AAF/serialNumber=28293436D4D6DA3A93A60ECA3FBEC77D8DC38F61
Certificate serial:       03FC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/KCk0NtTW2jqTpg7KP77HfY3Dj2E.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36D5F5A/2173E83ADAA611ED8227D4C42F6D8C1D/KCk0NtTW2jqTpg7KP77HfY3Dj2E.mft
Manifest number:          03F2
Signing time:             Sun 07 Dec 2025 03:23:10 +0000
Manifest this update:     Sun 07 Dec 2025 03:23:09 +0000
Manifest next update:     Tue 09 Dec 2025 03:23:09 +0000
Files and hashes:         1: KCk0NtTW2jqTpg7KP77HfY3Dj2E.crl (hash: eSdltQh1peeNKVCtYEJeQtz7c4dpPy286crcLo6sHdY=)
                          2: 3BE81A3892FF11F088E51979DAE4EC9C.roa (hash: Yzg3xjGIsu/ulsgWMNyoDewqrKHbp+zn1cyoVl3O9Yg=)
                          3: FDA533F092FE11F0BA755DF5DAE4EC9C.roa (hash: pQCV7Xh0G5jeTLV72a/weSIz6eXJKOWd6gDgzxScmXg=)
                          4: 74B5C16292FF11F0BA81327BDAE4EC9C.roa (hash: X3y3ETyNfJkv+gNamJ5YAN6Cv+s3LQHP84dm6Z/93XY=)
                          5: 5B36715A92FF11F084841C7BDAE4EC9C.roa (hash: Y8PSOzjedh9cWf7Fh5eBNpi+rFoGWqu8tq9b4nzoOjg=)
                          6: C65FE1F692FE11F0BC8418F5DAE4EC9C.roa (hash: 36hjpJHDjwEXOIEOe0bkLRIciGsDO/S0H+3g2hxaodo=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36D5F5A/2173E83ADAA611ED8227D4C42F6D8C1D/KCk0NtTW2jqTpg7KP77HfY3Dj2E.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36D5F5A/2173E83ADAA611ED8227D4C42F6D8C1D/KCk0NtTW2jqTpg7KP77HfY3Dj2E.mft
                          rsync://rpki.afrinic.net/repository/afrinic/KCk0NtTW2jqTpg7KP77HfY3Dj2E.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 09 Dec 2025 00:06:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1020 (0x3fc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36D5F5AAF, serialNumber=28293436D4D6DA3A93A60ECA3FBEC77D8DC38F61
        Validity
            Not Before: Dec  7 03:23:09 2025 GMT
            Not After : Dec  9 03:23:09 2025 GMT
        Subject: CN=6934f31e-4114
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:01:bd:40:9d:9a:97:12:f3:ee:87:88:4b:34:
                    0c:60:dd:87:c6:1d:84:76:15:b5:03:3f:5b:34:61:
                    fe:bd:35:c5:1c:32:14:4c:71:e7:11:24:3a:00:6d:
                    70:08:2a:57:90:a2:68:03:a9:69:e7:5f:aa:66:91:
                    a5:90:07:1c:70:a4:0b:cc:d6:c1:e0:cd:80:95:b3:
                    97:78:10:cc:ac:a9:88:dc:c4:b8:2e:5b:36:47:b8:
                    f6:9b:56:d2:02:d0:3a:1e:0a:c7:1e:2a:ea:7e:0a:
                    3b:9f:ff:68:9d:3c:30:ac:c3:77:f5:42:c1:e7:4d:
                    f2:da:1c:15:ac:4a:86:35:f0:e4:4e:cb:22:91:ee:
                    af:0e:66:d0:21:a3:ca:cd:c5:bf:18:83:3d:ef:e9:
                    5f:2b:20:ce:a5:14:04:48:47:09:12:1f:13:3d:64:
                    7c:fc:7d:7b:4f:0e:1b:a8:ea:f6:1b:3d:cf:d0:22:
                    eb:d7:cf:23:32:1d:03:54:cb:d0:dd:17:9e:bd:56:
                    e0:b7:e7:93:6c:4f:7c:7e:14:61:e5:d2:bb:e8:bf:
                    58:25:2e:6b:5b:98:84:86:ba:b0:15:95:e4:9e:ed:
                    3a:48:c3:b3:53:ab:80:41:99:12:17:f2:2a:1a:dd:
                    d6:9d:55:61:e0:7c:5e:c0:e4:dc:fa:11:1c:b2:b0:
                    66:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:DA:40:96:68:CD:CB:9B:A2:95:4B:F0:FD:48:1E:4A:3C:C4:18:1E
            X509v3 Authority Key Identifier:
                keyid:28:29:34:36:D4:D6:DA:3A:93:A6:0E:CA:3F:BE:C7:7D:8D:C3:8F:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36D5F5A/2173E83ADAA611ED8227D4C42F6D8C1D/KCk0NtTW2jqTpg7KP77HfY3Dj2E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/KCk0NtTW2jqTpg7KP77HfY3Dj2E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D5F5A/2173E83ADAA611ED8227D4C42F6D8C1D/KCk0NtTW2jqTpg7KP77HfY3Dj2E.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:4c:80:f0:30:33:61:fe:a9:58:e0:7f:07:8b:db:93:12:3e:
         54:41:06:ed:06:85:5e:77:5a:42:ea:ff:87:47:64:1f:b0:a8:
         a5:3e:ae:43:48:f5:84:81:e8:3f:84:03:17:05:fe:20:4d:1b:
         b1:b3:d0:80:50:e5:2e:8c:74:65:24:c8:e8:6a:1c:68:a7:15:
         57:f1:79:a3:aa:f2:3b:d9:79:0e:aa:4c:f8:a7:63:49:6b:51:
         50:66:77:6e:d8:e9:11:53:10:40:a0:24:d1:9d:04:2a:24:28:
         82:26:23:24:ee:4f:1f:71:6a:3e:2e:ab:77:9e:13:b7:be:35:
         9f:d0:3b:9c:aa:d6:f1:bf:0b:e7:87:85:7f:d6:4a:57:e4:f4:
         67:db:cf:f8:e8:dd:21:37:62:bc:88:27:9e:9d:c2:d5:58:fb:
         0c:52:bf:cc:0f:16:1a:28:fc:ac:bd:56:33:ee:9a:18:af:0a:
         61:8b:74:c0:73:ec:81:9b:c8:a4:9c:9f:90:ad:69:0e:1d:34:
         1d:f7:1a:5f:b4:40:32:42:31:a4:b6:e1:90:6d:07:d8:e9:ca:
         8e:ee:33:a2:ee:cf:f8:d5:04:5a:aa:cc:2a:6d:17:02:bc:d0:
         68:0e:04:93:c3:c3:ed:83:00:ec:b5:1a:77:31:4a:f6:01:75:
         8c:ac:a6:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 10:57:04 2025 by rpki-client