This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FCE84/A8E1336817F111ED9F98A8C0F1222468/-MJNS9gKXwIabYXN0P8HaD3hcWc.mft
File:                     -MJNS9gKXwIabYXN0P8HaD3hcWc.mft (raw, json)
Hash identifier:          ta+//V8tO2hLsVYsAK7w30Ys+uYzYSrpMH+DFVxlyJg=
Subject key identifier:   55:85:BD:DC:01:69:06:F6:BF:1E:37:F0:1C:FC:83:5B:73:B3:D2:BF
Authority key identifier: F8:C2:4D:4B:D8:0A:5F:02:1A:6D:85:CD:D0:FF:07:68:3D:E1:71:67
Certificate issuer:       /CN=F36FCE84AF/serialNumber=F8C24D4BD80A5F021A6D85CDD0FF07683DE17167
Certificate serial:       04EC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/-MJNS9gKXwIabYXN0P8HaD3hcWc.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36FCE84/A8E1336817F111ED9F98A8C0F1222468/-MJNS9gKXwIabYXN0P8HaD3hcWc.mft
Manifest number:          04EA
Signing time:             Mon 08 Dec 2025 02:54:24 +0000
Manifest this update:     Mon 08 Dec 2025 02:54:24 +0000
Manifest next update:     Wed 10 Dec 2025 02:54:24 +0000
Files and hashes:         1: -MJNS9gKXwIabYXN0P8HaD3hcWc.crl (hash: eCy4WVQf7lfgqDxI5HbQalxHuTM1JMp9sUDvu38xIx0=)
                          2: 6B81950217F211ED90291AC3F1222468.roa (hash: 9rMuozHD63olOv1qL+NCuYVweBLtAzHOnZZr7cPZiqE=)
                          3: D8C3181A903911EDA6ED2F8BF1222468.roa (hash: 9oYuZpgRg7gfP3iqjBXKbTbo2hKXqsEWnWr1xA+1M28=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36FCE84/A8E1336817F111ED9F98A8C0F1222468/-MJNS9gKXwIabYXN0P8HaD3hcWc.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36FCE84/A8E1336817F111ED9F98A8C0F1222468/-MJNS9gKXwIabYXN0P8HaD3hcWc.mft
                          rsync://rpki.afrinic.net/repository/afrinic/-MJNS9gKXwIabYXN0P8HaD3hcWc.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 10 Dec 2025 00:06:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1260 (0x4ec)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36FCE84AF, serialNumber=F8C24D4BD80A5F021A6D85CDD0FF07683DE17167
        Validity
            Not Before: Dec  8 02:54:24 2025 GMT
            Not After : Dec 10 02:54:24 2025 GMT
        Subject: CN=69363de0-b694
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:4b:33:ef:ec:41:8a:b8:e5:c6:c8:72:d6:23:
                    b6:dd:f0:ea:41:d4:3a:39:32:a7:c0:c4:93:5f:c5:
                    4d:3c:12:13:2f:d3:49:cd:d7:fa:20:f9:7c:dc:6b:
                    41:a7:c1:40:33:cb:6f:ef:29:55:38:b2:9c:b1:14:
                    12:40:0d:34:e4:da:82:09:6b:35:a3:16:6f:d3:01:
                    1c:c3:7e:b2:2c:5d:ea:2f:fc:90:16:d0:4c:61:cc:
                    20:8d:28:c0:61:53:62:65:71:8d:9e:6a:3b:76:5e:
                    96:03:52:12:d9:10:de:dc:9d:dc:37:8b:5e:91:a9:
                    6b:14:34:e3:ab:8e:55:9f:0b:dd:c7:1b:b9:dd:33:
                    0e:0a:4d:29:94:f0:ac:31:29:79:a4:08:37:4f:b3:
                    29:83:5d:4d:de:e0:39:c5:11:e9:6d:1e:6b:3b:d4:
                    60:71:fc:53:2e:17:f1:8c:40:49:ec:aa:91:6f:ac:
                    0a:67:5f:b6:df:0c:85:8c:e9:06:d0:d2:87:5d:01:
                    6e:94:38:79:ac:b4:01:7b:de:65:6b:ce:fc:17:92:
                    38:eb:28:e3:14:b2:3c:39:e1:7c:ae:15:f1:71:09:
                    43:d1:72:a5:e2:fb:4d:f8:52:f7:b0:67:d5:ad:f3:
                    ac:e4:7d:50:ee:83:47:2a:c1:e2:b2:c6:f6:c5:ca:
                    b1:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:85:BD:DC:01:69:06:F6:BF:1E:37:F0:1C:FC:83:5B:73:B3:D2:BF
            X509v3 Authority Key Identifier:
                keyid:F8:C2:4D:4B:D8:0A:5F:02:1A:6D:85:CD:D0:FF:07:68:3D:E1:71:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36FCE84/A8E1336817F111ED9F98A8C0F1222468/-MJNS9gKXwIabYXN0P8HaD3hcWc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/-MJNS9gKXwIabYXN0P8HaD3hcWc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FCE84/A8E1336817F111ED9F98A8C0F1222468/-MJNS9gKXwIabYXN0P8HaD3hcWc.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:46:52:28:38:5d:4e:90:f4:b6:f8:14:32:7a:72:50:96:2b:
         88:75:9e:85:cf:59:3b:67:77:11:eb:f7:f4:ba:ad:77:c3:c0:
         f4:23:7f:e0:cb:02:cb:d2:40:d3:d0:f8:3a:ad:2f:69:2e:96:
         25:90:79:1b:45:12:46:3d:5a:28:4a:8c:0f:ad:8b:e7:32:6d:
         a8:fe:e5:f1:14:bd:e3:5d:ba:f1:61:50:f5:07:32:60:96:47:
         90:4c:7f:ae:41:21:de:45:73:de:70:6d:8b:f4:47:32:71:90:
         53:9e:c2:e0:7f:a8:96:92:6f:42:ae:67:fc:b6:f0:59:78:e3:
         79:fa:f9:16:1f:8f:6f:43:94:15:be:5f:87:9b:9b:0b:1c:54:
         c7:d2:69:1d:c4:57:99:e5:b4:28:fb:e6:73:73:09:9d:4c:fd:
         60:46:e6:c4:04:a9:a6:84:26:53:a9:70:65:8d:e8:5a:fd:e1:
         74:96:ad:11:fc:80:f2:c4:d7:67:0c:6c:34:74:f4:77:75:94:
         01:6a:34:7a:b3:42:3e:8d:bf:ee:6d:12:02:96:55:ab:cf:64:
         29:94:88:33:50:a5:43:e4:13:e1:f9:ff:4a:2f:e3:fb:31:db:
         e2:fc:19:c8:70:7b:0a:32:f0:55:bc:c1:d5:53:a6:4e:db:f9:
         16:e1:d6:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 8 17:04:48 2025 by rpki-client