This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36DE46F/EB4934CCD5FE11E99528193BF8AEA228/aMXkutXc1WSiVidTyay2Mr0ky1A.mft
File:                     aMXkutXc1WSiVidTyay2Mr0ky1A.mft (raw, json)
Hash identifier:          ySiij6UIwUm9SFKy6EW+jOthRs4B/dbjvulZMTIFFEE=
Subject key identifier:   12:A9:F6:5C:A0:44:8E:31:8A:E1:D3:0B:36:40:D5:DC:35:7B:01:4D
Authority key identifier: 68:C5:E4:BA:D5:DC:D5:64:A2:56:27:53:C9:AC:B6:32:BD:24:CB:50
Certificate issuer:       /CN=F36DE46FAF/serialNumber=68C5E4BAD5DCD564A2562753C9ACB632BD24CB50
Certificate serial:       0950
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/aMXkutXc1WSiVidTyay2Mr0ky1A.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36DE46F/EB4934CCD5FE11E99528193BF8AEA228/aMXkutXc1WSiVidTyay2Mr0ky1A.mft
Manifest number:          093F
Signing time:             Mon 08 Dec 2025 01:35:44 +0000
Manifest this update:     Mon 08 Dec 2025 01:35:43 +0000
Manifest next update:     Wed 10 Dec 2025 01:35:43 +0000
Files and hashes:         1: aMXkutXc1WSiVidTyay2Mr0ky1A.crl (hash: C83E1A3QiDZZt3vYTvBvwRvw2ecugkvD5G8wSGfBojQ=)
                          2: 67CF4D4AC47A11EBAC1DCB2EF8AEA228.roa (hash: itFkoyhCFbkxoKe/6GZZJKhOYtJVGG20wDDeoMWtUpQ=)
                          3: 51DD5CFA362311EC86345D40D8A014CE.roa (hash: ZOjl1c6p5MEg7MhRsQboW+KWuk6lGFrNRsr8eT5zSuA=)
                          4: 2E3A1228F14211EB95363E26D8A014CE.roa (hash: vD5KpjCW2oLjrazeJW7vuUKZt8XTsZHweUUc6bDl3m8=)
                          5: 0668CDBA8ECF11EA92325F27F8AEA228.roa (hash: obmP99ZP4gHqQi9QCtzWh7Wc0rtLRTLbw4IjE5aS9HE=)
                          6: 7F90265C003411EC9AEFCB7BD8A014CE.roa (hash: Us9bdbPalZ+yx1ibe5L/RTGvBCGXXo3x0b9dZX+Z/FM=)
                          7: 2A0AF02ED8D711EB93E56C7BF8AEA228.roa (hash: ZQ6oLNCOYoaY+3u19bx5mMnPdr11GM9m4rQK5cGUyGQ=)
                          8: 5E0FF05A1C8811EC996FCB76D8A014CE.roa (hash: Vk5ASQFgQjjsZEjyJ+X43+pLR30VafAKoJRgMFTM8vk=)
                          9: 59AB9F46ACB311EA94FB7A5CF8AEA228.roa (hash: M7zBdV0WcI6PFd9tLd94yJGWhV8lnlP02DcFXSG5pCM=)
                          10: 77F17762ACB511EAB011A45EF8AEA228.roa (hash: 1/STozfAIpnz6GETEBd4lb3u077CE2WkxWA/E9NUlaI=)
                          11: 83CC39468F0011EA98508558F8AEA228.roa (hash: L5ieRjYiG1OFGX8hr9WtcOwJsazJ2sf4i+jmqBumzYY=)
                          12: 4D5B7DFA9A9911EAB460C75DF8AEA228.roa (hash: 08HHiOipKJGcq74gZtGxaBA7hKxLZk9ttDnVaGPnEtA=)
                          13: DA956AF2E91F11EB8EE78B08D8A014CE.roa (hash: yi/kGe9K7bgzzNjuJJ9WkvYPrz9NLiez9H+X0/yDZ1o=)
                          14: 4F75903E8F9B11EAB3F92A79F8AEA228.roa (hash: 4DXiHxGSCbsyOMNhnwXSRwIzqtdpPeRGAU+Vq8d2Sbo=)
                          15: BC497164BFC211EB9C90B47DF8AEA228.roa (hash: vShLouUDMlMysq5av2KQKsWgiT2JaBcuHkhVOPxBIWk=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36DE46F/EB4934CCD5FE11E99528193BF8AEA228/aMXkutXc1WSiVidTyay2Mr0ky1A.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36DE46F/EB4934CCD5FE11E99528193BF8AEA228/aMXkutXc1WSiVidTyay2Mr0ky1A.mft
                          rsync://rpki.afrinic.net/repository/afrinic/aMXkutXc1WSiVidTyay2Mr0ky1A.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 10 Dec 2025 00:06:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2384 (0x950)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36DE46FAF, serialNumber=68C5E4BAD5DCD564A2562753C9ACB632BD24CB50
        Validity
            Not Before: Dec  8 01:35:43 2025 GMT
            Not After : Dec 10 01:35:43 2025 GMT
        Subject: CN=69362b6f-9659
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:2d:64:f0:d2:79:06:18:63:3f:d8:c7:9a:cf:
                    a6:24:38:aa:fe:e7:4f:1a:94:d8:71:82:6a:bb:6f:
                    66:f9:85:64:b9:e8:d6:79:8a:eb:f0:a5:df:b1:f3:
                    a0:2f:99:b1:c2:73:34:94:08:4e:74:f7:cd:91:06:
                    83:3e:43:02:84:0c:97:82:bf:f6:d3:ec:dd:b0:76:
                    32:e6:0d:a2:49:6e:7f:41:20:a2:a7:5a:ea:14:3b:
                    9b:fe:d6:6f:52:08:f2:3f:8a:67:52:8d:e4:a7:a0:
                    62:ec:1f:1d:0a:2e:77:0a:fc:75:5c:51:b4:34:15:
                    d2:a4:0e:a9:f5:16:b4:e0:85:3d:e2:d9:97:3c:28:
                    f9:ea:60:1d:e2:2f:cb:b9:99:5d:1e:d7:07:11:d5:
                    da:18:15:72:e5:5a:65:4f:7f:36:2e:a9:86:b4:f6:
                    37:25:00:5d:8c:6d:d8:a8:20:8c:75:25:a8:46:8b:
                    e9:9a:25:b3:87:ed:ac:cf:b6:c6:4c:a2:27:ca:47:
                    33:51:6c:48:43:ba:d6:13:51:c9:25:47:de:fc:51:
                    50:92:2d:2e:0a:ec:cd:99:bc:f4:b2:0d:22:a7:68:
                    b4:23:3e:29:f7:0a:0a:d2:fc:1b:2a:82:d7:76:01:
                    a4:07:fc:fb:dd:e2:77:2a:d4:52:82:51:66:86:96:
                    01:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:A9:F6:5C:A0:44:8E:31:8A:E1:D3:0B:36:40:D5:DC:35:7B:01:4D
            X509v3 Authority Key Identifier:
                keyid:68:C5:E4:BA:D5:DC:D5:64:A2:56:27:53:C9:AC:B6:32:BD:24:CB:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36DE46F/EB4934CCD5FE11E99528193BF8AEA228/aMXkutXc1WSiVidTyay2Mr0ky1A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/aMXkutXc1WSiVidTyay2Mr0ky1A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36DE46F/EB4934CCD5FE11E99528193BF8AEA228/aMXkutXc1WSiVidTyay2Mr0ky1A.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:86:68:87:a8:04:1d:ff:93:c0:8b:43:6d:cf:9f:b4:13:38:
         b6:76:d9:43:2f:8f:4f:b3:d5:fb:5d:ee:ad:4c:01:24:76:cd:
         a1:f4:f9:df:22:da:44:68:b4:25:d1:b5:96:5e:3b:fe:d7:26:
         50:1d:73:e0:d2:7c:cc:ae:98:5d:9e:4b:4c:6e:9f:79:c1:7f:
         d1:a9:a5:19:9c:56:a4:a7:27:29:b3:67:f0:b5:e9:3a:1f:50:
         28:c1:ac:76:b5:10:8b:5f:f5:fb:27:99:49:e7:bc:30:6b:4b:
         df:07:07:23:51:f6:ed:2a:90:57:43:09:c3:4b:66:f5:5c:0d:
         6d:8f:b6:ae:d5:3a:4d:46:ee:36:36:21:ca:3c:ac:27:00:b2:
         4a:28:f8:90:60:ff:94:23:e6:ee:69:b3:09:9a:53:be:77:97:
         f3:86:63:ae:12:f4:36:31:2b:86:00:9f:a4:f7:44:5b:03:fd:
         30:64:e6:f8:47:4e:45:f6:72:31:5b:0b:a1:ce:06:12:91:77:
         69:83:06:9e:85:26:d3:4f:bd:e3:46:8b:59:9a:2f:3e:57:61:
         9a:ce:ec:3d:b5:d0:61:a8:74:13:c5:53:00:2a:b8:a0:6f:c4:
         01:9c:75:37:1d:f9:42:c6:2d:41:5e:d9:d8:7e:37:b3:50:d9:
         24:2d:57:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 8 17:24:45 2025 by rpki-client