This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36ECAA2/3C5E0A62A60911EDA2E792B9F1222468/kkLGCS_iI5rNMMSPNawbxN313L4.mft
File:                     kkLGCS_iI5rNMMSPNawbxN313L4.mft (raw, json)
Hash identifier:          WCjakqEpulUzU/v8bMHmBZ1y2YSsjsRQQSpmyDYApq0=
Subject key identifier:   0D:51:8A:E8:10:A2:CD:F7:3A:62:40:02:35:2F:75:E5:26:EC:60:46
Authority key identifier: 92:42:C6:09:2F:E2:23:9A:CD:30:C4:8F:35:AC:1B:C4:DD:F5:DC:BE
Certificate issuer:       /CN=F36ECAA2AR/serialNumber=9242C6092FE2239ACD30C48F35AC1BC4DDF5DCBE
Certificate serial:       042E
Authority info access:    rsync://rpki.afrinic.net/repository/arin/kkLGCS_iI5rNMMSPNawbxN313L4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36ECAA2/3C5E0A62A60911EDA2E792B9F1222468/kkLGCS_iI5rNMMSPNawbxN313L4.mft
Manifest number:          042D
Signing time:             Sat 06 Dec 2025 03:15:47 +0000
Manifest this update:     Sat 06 Dec 2025 03:15:46 +0000
Manifest next update:     Mon 08 Dec 2025 03:15:46 +0000
Files and hashes:         1: kkLGCS_iI5rNMMSPNawbxN313L4.crl (hash: mOu4VGFm3HhI0+S4ewbDxRV2CLzsm531AEPcUdfdfFE=)
                          2: 77776CF68DDF11EE9554951A4AD9E6FC.roa (hash: P/s62KTUxEoG/rgkYrfYli6201mLv2NV6jxtdASDzgE=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36ECAA2/3C5E0A62A60911EDA2E792B9F1222468/kkLGCS_iI5rNMMSPNawbxN313L4.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36ECAA2/3C5E0A62A60911EDA2E792B9F1222468/kkLGCS_iI5rNMMSPNawbxN313L4.mft
                          rsync://rpki.afrinic.net/repository/arin/kkLGCS_iI5rNMMSPNawbxN313L4.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 08 Dec 2025 00:26:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1070 (0x42e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36ECAA2AR, serialNumber=9242C6092FE2239ACD30C48F35AC1BC4DDF5DCBE
        Validity
            Not Before: Dec  6 03:15:46 2025 GMT
            Not After : Dec  8 03:15:46 2025 GMT
        Subject: CN=69339fe3-052a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:30:78:7f:e1:5f:d2:5b:8c:b4:85:67:0f:ab:
                    50:71:20:aa:f0:f3:d1:1c:18:c9:88:82:9b:ba:39:
                    44:b9:bd:36:15:d8:67:29:02:c0:21:10:aa:ba:b1:
                    8b:32:a7:2b:96:1b:8c:69:f7:ab:10:9b:43:c0:b1:
                    11:13:a9:88:d9:b3:ed:7e:3e:05:d8:42:43:ea:cf:
                    db:91:21:6f:cb:09:90:7e:df:be:7d:8c:8b:71:2a:
                    8f:b9:3e:7f:b2:4d:f1:ba:76:e7:a1:be:dc:15:a6:
                    67:b2:99:b9:7a:9c:28:ce:b9:74:73:96:06:f4:f7:
                    6c:b4:e4:be:d0:2a:d1:5e:90:66:62:38:b4:ea:06:
                    f9:25:d9:b3:a1:0a:20:61:85:21:ca:40:a5:6c:7e:
                    b9:24:80:22:a0:48:58:d5:79:2e:a1:27:e0:4e:9a:
                    cf:64:7a:6d:b6:9c:31:a3:8f:46:ee:96:64:ca:a1:
                    cf:8b:0d:6c:d5:c3:77:4a:48:a3:d6:5f:0b:9c:08:
                    0b:e8:e1:f7:bb:66:3f:b2:23:f2:60:62:98:b7:b3:
                    5e:06:90:65:22:c3:bb:29:86:1d:64:c8:41:6e:07:
                    0f:60:07:02:d3:90:90:b1:58:64:43:d5:47:92:54:
                    38:9b:32:b1:eb:15:55:fb:6b:7d:25:7e:ca:a5:be:
                    8d:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:51:8A:E8:10:A2:CD:F7:3A:62:40:02:35:2F:75:E5:26:EC:60:46
            X509v3 Authority Key Identifier:
                keyid:92:42:C6:09:2F:E2:23:9A:CD:30:C4:8F:35:AC:1B:C4:DD:F5:DC:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36ECAA2/3C5E0A62A60911EDA2E792B9F1222468/kkLGCS_iI5rNMMSPNawbxN313L4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/kkLGCS_iI5rNMMSPNawbxN313L4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36ECAA2/3C5E0A62A60911EDA2E792B9F1222468/kkLGCS_iI5rNMMSPNawbxN313L4.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:d5:3d:b6:9b:71:ec:8e:90:b2:bb:9b:50:ee:b1:b7:34:c5:
         0a:46:32:15:35:fd:54:ed:81:1a:31:0c:c0:ed:59:12:e7:f0:
         f0:65:40:a6:49:b7:2e:8c:69:f4:1f:c1:34:79:b3:fe:b4:0e:
         27:b7:47:3f:e4:7b:60:eb:a6:2e:39:e8:75:ca:83:e6:34:1b:
         88:c9:64:63:96:46:4d:ab:45:ca:c0:70:67:00:10:73:d6:89:
         a1:17:f8:03:1c:41:07:37:15:35:43:7f:bb:c3:40:a7:f7:b5:
         1d:75:d4:37:54:ae:17:4f:4a:26:3f:2b:78:42:c4:5e:e5:fa:
         d3:32:16:55:1d:7f:9b:61:3b:e4:4a:f0:36:d3:3d:8f:3b:75:
         6a:a4:f1:b8:ca:d4:b9:72:94:7a:7c:60:f5:8a:49:02:2c:5d:
         47:b3:d5:6e:33:53:50:77:87:08:0b:4b:69:02:a7:9c:3d:e0:
         03:ca:2a:b8:46:c9:86:23:59:35:74:ac:2b:55:4b:72:37:96:
         09:9f:47:74:ad:8d:d4:49:63:1a:53:d4:0f:c9:fa:c3:f0:41:
         1e:a2:7f:6b:48:c4:ec:d8:85:22:13:39:07:99:9f:20:5e:e4:
         2b:fe:c8:4b:17:33:b8:06:55:72:8e:da:c5:b9:24:87:8b:b5:
         ef:f9:0b:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 15:18:04 2025 by rpki-client