This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36DB492/10DA99764A0311ED8F59D89EF1222468/9D4GaO9yvYf6U2i-K2gVwLy0AUk.mft
File:                     9D4GaO9yvYf6U2i-K2gVwLy0AUk.mft (raw, json)
Hash identifier:          daHpbBL0vruO5eB1oWVKr7gORPQuxKJnlKl+9zX4rjc=
Subject key identifier:   87:95:84:55:F0:55:87:55:78:84:B7:13:A3:F6:AB:FF:EF:59:88:F7
Authority key identifier: F4:3E:06:68:EF:72:BD:87:FA:53:68:BE:2B:68:15:C0:BC:B4:01:49
Certificate issuer:       /CN=F36DB492AF/serialNumber=F43E0668EF72BD87FA5368BE2B6815C0BCB40149
Certificate serial:       04E8
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/9D4GaO9yvYf6U2i-K2gVwLy0AUk.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36DB492/10DA99764A0311ED8F59D89EF1222468/9D4GaO9yvYf6U2i-K2gVwLy0AUk.mft
Manifest number:          04CA
Signing time:             Sat 06 Dec 2025 03:04:12 +0000
Manifest this update:     Sat 06 Dec 2025 03:04:11 +0000
Manifest next update:     Mon 08 Dec 2025 03:04:11 +0000
Files and hashes:         1: 9D4GaO9yvYf6U2i-K2gVwLy0AUk.crl (hash: V/6DV1HNn4M2Z8tVBIbTgI6yA1cHWA1eb4lHDGS4Saw=)
                          2: CAB5EB42374D11EE8810A0744AD9E6FC.roa (hash: Rd+cT1WHVj6VPW10DhoJe1VPjes86osECuBqlAPA/jk=)
                          3: 20D8603A3C6311EEBD05616B4AD9E6FC.roa (hash: yn1GI8XUJDZhc/a1VL4Ew8aXczcEtSuNRFvBTlTvah0=)
                          4: 662EC19C3C6311EEA2CE226C4AD9E6FC.roa (hash: qJZA5eX+xbJzCe6D7i9PnOvJU1CqeC3CU+zF75cZcts=)
                          5: F67E4B16374D11EEB5DE38754AD9E6FC.roa (hash: hU4jFk//Gd5275KQZyF78ZmsmvKAmuy74Zm19XPUqO4=)
                          6: 14B6AF743B4011EEADF20A804AD9E6FC.roa (hash: K4yraD6px2otzCCbUQWt+Yh6khumJagXOv/4f3vipmU=)
                          7: 53D289E63CCE11EE935F8A394AD9E6FC.roa (hash: 4HBFVVMsDOfA/xrur5pE2xRwqQtzwcjvpCJfYPdn3co=)
                          8: 5F94B5287E1F11EEB18DE56B4AD9E6FC.roa (hash: NnfOKQOywlCm8MbXuo5ryxtlJJnqWeXUY/Zc4KGtk9o=)
                          9: 03541FA67E1F11EE99591D6B4AD9E6FC.roa (hash: tMNuryIys8bdcGqr2btn+01OsiqNMJcIT+oXA5sB548=)
                          10: 4ED14CDCA6DA11EDAEF82299F1222468.roa (hash: iXehJ8WLWU6cHBFHQ5qsEfloV58oVEhPLmmW3fV/BY4=)
                          11: 4788CE9A3C6311EE9733C66B4AD9E6FC.roa (hash: 0sVxWZVOpyK0cudH1BB1HUmOSWE0Bj2HjfkgAIa158s=)
                          12: 158513F4518011EE8BDBCE164AD9E6FC.roa (hash: sbl6JhnjaIL3BTU2+lQRNeSnxalVE/sMDYPWi7BO8vg=)
                          13: 85435BE23C6311EE9E2BB76C4AD9E6FC.roa (hash: ZIlXxtD8wXr16Udjo8wBxB2atTHwjE6MF56MpocHqts=)
                          14: 4433C912374E11EEBD8F3D764AD9E6FC.roa (hash: lHtBjObTBwNyVhJrHEQ/zHzgJmnlb42wMC73m5Dh7UE=)
                          15: A775C5D83C6311EEA094166D4AD9E6FC.roa (hash: L972nqC78lcXrhC+mjzOc5OXmYgCBGyLNtGIrSD8tWw=)
                          16: 20EEA9507E1F11EEAD686A6B4AD9E6FC.roa (hash: +kuN9/TLBGpI4GFRii8gvKOE9Vh3yGtX4DQwHRmVzSA=)
                          17: 88A2141457EF11F0A48D2AC4DAE4EC9C.roa (hash: jwxUZ7nPgwu7fA4ugBBwspQYrmkSwfz/KGPZiiShxok=)
                          18: 04540B763C6311EE82DB186B4AD9E6FC.roa (hash: 8pLsZ3suwRhldyF5vniTCRO+W8oJo+1mBH+nN66FQ8k=)
                          19: 329D5926A54311EEA7A66B2ED25BE465.roa (hash: 1pPOf7iWBENGk84AGGgfnWlGuOjuG2CHIm2+lZTlGVY=)
                          20: 9369A48A374D11EEBBBCC3734AD9E6FC.roa (hash: LriikUtiyzWDzN+qJjLYRklCy7tVdfyDgc1icmMt3FY=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36DB492/10DA99764A0311ED8F59D89EF1222468/9D4GaO9yvYf6U2i-K2gVwLy0AUk.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36DB492/10DA99764A0311ED8F59D89EF1222468/9D4GaO9yvYf6U2i-K2gVwLy0AUk.mft
                          rsync://rpki.afrinic.net/repository/afrinic/9D4GaO9yvYf6U2i-K2gVwLy0AUk.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 08 Dec 2025 00:06:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1256 (0x4e8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36DB492AF, serialNumber=F43E0668EF72BD87FA5368BE2B6815C0BCB40149
        Validity
            Not Before: Dec  6 03:04:11 2025 GMT
            Not After : Dec  8 03:04:11 2025 GMT
        Subject: CN=69339d2c-96d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:c1:39:86:c9:f5:75:01:f8:1e:80:ec:6e:32:
                    47:2a:9b:2d:66:3f:80:02:55:81:41:37:c4:ba:ae:
                    a8:b6:5c:36:54:1a:f8:40:fe:40:77:de:3f:44:88:
                    99:8f:9f:52:8f:73:8d:90:2f:ed:b3:cb:ac:15:d0:
                    d9:4f:20:25:53:1a:e8:ae:90:b2:1f:b5:59:34:e1:
                    51:b2:27:70:4b:52:23:b3:a1:c7:5d:cd:aa:6b:44:
                    88:01:6c:fb:d6:d1:22:32:79:e7:b4:ff:b3:62:a1:
                    fa:ff:c3:79:88:79:7c:16:61:a4:7b:e2:fa:40:f3:
                    b3:b8:8d:a9:20:8f:4a:e2:13:48:e4:44:3d:17:2c:
                    8e:0f:f0:4b:ed:44:6a:ec:fd:a7:af:4f:fa:fc:85:
                    07:81:5f:33:23:7b:b8:eb:ae:95:7c:62:20:2d:31:
                    0f:e5:b0:e8:4a:40:2e:db:d5:8f:28:c2:62:cf:bb:
                    a9:38:e3:8e:20:2d:9b:d4:28:06:4f:ff:95:d6:df:
                    5e:b1:b4:4d:78:e0:bc:10:2f:4b:93:82:d3:ad:33:
                    83:6e:87:a3:87:13:f2:7a:66:f0:f8:7d:1a:b7:12:
                    5e:c0:a0:0d:c9:60:be:ba:dd:d5:30:1e:74:c4:5c:
                    f0:9c:a3:6c:70:a3:f3:98:ea:81:87:5e:be:87:4b:
                    b4:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:95:84:55:F0:55:87:55:78:84:B7:13:A3:F6:AB:FF:EF:59:88:F7
            X509v3 Authority Key Identifier:
                keyid:F4:3E:06:68:EF:72:BD:87:FA:53:68:BE:2B:68:15:C0:BC:B4:01:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36DB492/10DA99764A0311ED8F59D89EF1222468/9D4GaO9yvYf6U2i-K2gVwLy0AUk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/9D4GaO9yvYf6U2i-K2gVwLy0AUk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36DB492/10DA99764A0311ED8F59D89EF1222468/9D4GaO9yvYf6U2i-K2gVwLy0AUk.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:bf:3a:86:24:e3:ae:85:ab:52:34:cf:19:97:ac:e4:d6:cc:
         57:63:c0:9f:d9:64:31:dc:61:80:36:a4:36:a6:0f:68:b1:73:
         70:73:e1:03:bd:4e:cb:5a:ec:47:36:89:da:5b:a0:6b:b5:d4:
         7c:8c:ba:57:7b:e9:d4:37:00:e6:49:e5:1c:59:38:02:1b:80:
         e8:3c:2d:3e:a7:c8:d5:67:0c:45:cd:22:41:98:8a:71:78:89:
         c3:51:b4:8a:a7:45:68:77:32:05:87:2e:ff:6c:ff:cf:66:b2:
         f4:03:10:08:98:b1:05:0b:44:0a:3a:01:d2:0a:45:22:24:47:
         7d:09:75:2f:ba:09:73:b6:3b:8e:ef:25:a4:38:28:e9:ea:90:
         e5:b4:af:14:6c:fe:72:31:03:e7:e8:36:00:1d:40:f5:57:fe:
         8c:11:00:61:57:d2:46:c4:bf:35:c4:6f:7c:59:22:a6:0e:6d:
         6b:36:4f:b0:d9:35:e1:12:08:b6:34:00:a4:26:67:f5:98:37:
         b9:2a:2f:d4:d9:b8:cf:c5:ed:e6:0e:db:2e:b0:3b:aa:0d:c4:
         60:33:f4:9d:f5:59:66:b2:21:65:fe:d0:f5:0f:20:ab:5d:2c:
         43:82:a0:9d:40:87:01:fd:6d:10:7e:e1:0b:dd:4b:e6:12:26:
         55:59:2a:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 19:14:59 2025 by rpki-client