This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F3412/E82C776A177E11EA9CA7BC0EF8AEA228/k4vok1GoGkLfhHvzkxNy0JgwREY.mft
File:                     k4vok1GoGkLfhHvzkxNy0JgwREY.mft (raw, json)
Hash identifier:          GTlouzChu5kjg1GVzSHG7rOHEgTTwH6xAQmbkvAsNyg=
Subject key identifier:   2F:10:C2:DB:B0:80:86:DC:10:6D:6B:7E:6E:8D:D9:3C:42:87:6F:AF
Authority key identifier: 93:8B:E8:93:51:A8:1A:42:DF:84:7B:F3:93:13:72:D0:98:30:44:46
Certificate issuer:       /CN=F36F3412AF/serialNumber=938BE89351A81A42DF847BF3931372D098304446
Certificate serial:       08DF
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/k4vok1GoGkLfhHvzkxNy0JgwREY.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36F3412/E82C776A177E11EA9CA7BC0EF8AEA228/k4vok1GoGkLfhHvzkxNy0JgwREY.mft
Manifest number:          08D7
Signing time:             Mon 08 Dec 2025 01:40:17 +0000
Manifest this update:     Mon 08 Dec 2025 01:40:17 +0000
Manifest next update:     Wed 10 Dec 2025 01:40:17 +0000
Files and hashes:         1: k4vok1GoGkLfhHvzkxNy0JgwREY.crl (hash: MmLt+pA6EsbBpE4TzsZV7Jf7krK/rKmGK94xa1ddNjU=)
                          2: F9B24804FDF611EDB9858F624AD9E6FC.roa (hash: XgiYHOYx4wcOXrZza9zqvfH5aFmrwXDAfxqyTM9D+GI=)
                          3: 3455CE3C6B3911ED8B33D1C3F1222468.roa (hash: toOai8ZBR3vTvdHeg3LaLL6gpVJazukKbGn3v/cuk0k=)
                          4: 4C042A44496311ED9930A0F9F1222468.roa (hash: e9ujQQYc0OEqAyhghA9cLn0dfJy3UKXs4mNrpCrPXck=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36F3412/E82C776A177E11EA9CA7BC0EF8AEA228/k4vok1GoGkLfhHvzkxNy0JgwREY.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36F3412/E82C776A177E11EA9CA7BC0EF8AEA228/k4vok1GoGkLfhHvzkxNy0JgwREY.mft
                          rsync://rpki.afrinic.net/repository/afrinic/k4vok1GoGkLfhHvzkxNy0JgwREY.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 10 Dec 2025 00:06:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2271 (0x8df)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36F3412AF, serialNumber=938BE89351A81A42DF847BF3931372D098304446
        Validity
            Not Before: Dec  8 01:40:17 2025 GMT
            Not After : Dec 10 01:40:17 2025 GMT
        Subject: CN=69362c81-c924
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:c3:3b:f5:9c:f7:89:49:bf:ce:cc:0a:41:10:
                    14:67:0e:7f:b0:9b:c4:79:58:3c:75:39:86:da:9e:
                    ea:4e:8b:f2:2e:6a:a9:4d:13:dc:d2:4a:e1:b4:52:
                    0c:43:28:ac:a8:75:2d:2e:f0:3a:59:1e:17:02:28:
                    d7:3c:75:1e:52:7a:d2:e3:d1:d3:eb:5e:43:a4:77:
                    95:c0:78:37:d5:d5:67:85:43:b5:15:4c:48:f1:e3:
                    db:16:39:05:ce:06:d8:ea:09:c5:3d:39:d9:0d:e8:
                    16:8f:39:93:30:76:04:aa:8d:c7:69:6f:92:89:53:
                    bf:4f:3a:54:3b:4f:09:81:ee:91:79:27:23:f9:bf:
                    f9:68:58:ed:23:7b:93:42:00:30:1a:03:d5:98:3a:
                    75:30:39:3f:11:83:bf:e1:ca:8d:81:4f:44:e0:aa:
                    fd:8f:0a:9c:94:38:93:2b:57:f4:a1:76:98:c3:6a:
                    c8:bc:6a:49:4c:c8:0a:e1:c4:33:6f:40:cc:01:c8:
                    71:98:17:92:6b:ce:de:c5:6a:61:ed:e2:ee:30:b9:
                    f5:40:fe:fb:af:e5:08:c6:45:ab:65:40:b6:15:0b:
                    01:60:bd:5e:e5:72:1f:f7:28:e9:0f:c4:37:24:24:
                    18:4f:92:07:d3:30:e4:5f:85:9e:8e:2e:a0:11:f8:
                    f3:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:10:C2:DB:B0:80:86:DC:10:6D:6B:7E:6E:8D:D9:3C:42:87:6F:AF
            X509v3 Authority Key Identifier:
                keyid:93:8B:E8:93:51:A8:1A:42:DF:84:7B:F3:93:13:72:D0:98:30:44:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36F3412/E82C776A177E11EA9CA7BC0EF8AEA228/k4vok1GoGkLfhHvzkxNy0JgwREY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/k4vok1GoGkLfhHvzkxNy0JgwREY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F3412/E82C776A177E11EA9CA7BC0EF8AEA228/k4vok1GoGkLfhHvzkxNy0JgwREY.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:2d:1a:06:2b:f6:e5:54:67:99:1d:84:67:af:07:39:ff:ca:
         3e:f8:d1:78:d8:ed:bc:8e:7d:52:38:b7:4d:46:e4:4b:17:c7:
         fb:0c:5f:e2:e2:9d:23:b1:8f:3a:eb:d4:8a:91:f4:1e:8f:81:
         d7:2f:08:df:c1:cc:60:e6:d1:7c:68:1b:6e:17:14:48:be:7d:
         e2:6f:9d:83:15:d5:d3:9c:11:e6:2d:8c:fd:2c:8c:a1:e7:8e:
         90:41:f5:e2:f8:9a:b0:0b:3a:be:d5:8b:a7:5e:2d:b4:bb:8e:
         b6:fb:8f:cf:1e:0a:bb:29:4f:0b:5a:b0:72:0b:a6:7e:a0:8c:
         1f:a5:14:69:2a:2a:64:93:b4:8b:f1:81:f0:fa:74:24:38:43:
         70:fb:c4:eb:0f:38:20:58:28:e5:32:80:e0:11:a5:3a:ce:99:
         b5:b4:27:f7:aa:46:71:a7:08:e5:bf:e0:f1:bb:2d:c8:3e:70:
         14:1e:ce:99:60:67:0b:66:c8:a5:d3:f4:7e:8a:5a:ef:d5:53:
         92:cf:a1:f5:a7:b2:30:8a:34:64:0f:10:37:0d:19:ab:f9:14:
         f9:ec:c2:b2:5a:ba:0a:be:4e:6c:41:25:fb:7e:d6:75:2c:ee:
         28:5f:4c:eb:9b:cc:82:bd:55:3f:fe:20:55:af:92:18:2b:6c:
         ef:8e:50:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 8 17:07:04 2025 by rpki-client