This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3611484/E61E0996B9E311EE89052986775412E6/kjv5Ya2DU5g0UNOjPyjMz-CooQY.mft
File:                     kjv5Ya2DU5g0UNOjPyjMz-CooQY.mft (raw, json)
Hash identifier:          iXjpbNZboqIPLIeT29r/nbuMQhrsGT1cH3wgUMG4Nl4=
Subject key identifier:   F6:8C:56:78:EA:37:65:EA:9E:D2:B2:76:2C:DB:90:C4:34:43:09:62
Authority key identifier: 92:3B:F9:61:AD:83:53:98:34:50:D3:A3:3F:28:CC:CF:E0:A8:A1:06
Certificate issuer:       /CN=F3611484AF/serialNumber=923BF961AD8353983450D3A33F28CCCFE0A8A106
Certificate serial:       02BE
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/kjv5Ya2DU5g0UNOjPyjMz-CooQY.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3611484/E61E0996B9E311EE89052986775412E6/kjv5Ya2DU5g0UNOjPyjMz-CooQY.mft
Manifest number:          02BC
Signing time:             Thu 04 Dec 2025 04:01:13 +0000
Manifest this update:     Thu 04 Dec 2025 04:01:13 +0000
Manifest next update:     Sat 06 Dec 2025 04:01:13 +0000
Files and hashes:         1: kjv5Ya2DU5g0UNOjPyjMz-CooQY.crl (hash: e7lebZn4eazttIsx4NnXIS8R4qhrC/ehiJYyXzB5mcc=)
                          2: 2908C1DCB9E511EEB9065888775412E6.roa (hash: zUZ7frdCVvRhVt6G1jP6YXP6H0Tz6Q6HJTbMKr0ueno=)
                          3: 60A31C9CB9E411EE910C0687775412E6.roa (hash: k8wj8VzEDiiwJJsRvgprQG7fLZ2kqSdbh1u+v7N4tmY=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3611484/E61E0996B9E311EE89052986775412E6/kjv5Ya2DU5g0UNOjPyjMz-CooQY.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3611484/E61E0996B9E311EE89052986775412E6/kjv5Ya2DU5g0UNOjPyjMz-CooQY.mft
                          rsync://rpki.afrinic.net/repository/afrinic/kjv5Ya2DU5g0UNOjPyjMz-CooQY.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 06 Dec 2025 00:06:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 702 (0x2be)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3611484AF, serialNumber=923BF961AD8353983450D3A33F28CCCFE0A8A106
        Validity
            Not Before: Dec  4 04:01:13 2025 GMT
            Not After : Dec  6 04:01:13 2025 GMT
        Subject: CN=69310789-00e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:18:fe:0e:c1:4e:a2:0a:6b:3f:4a:e0:b1:85:
                    68:01:8b:07:cc:fb:a7:1d:d2:98:1b:68:e5:17:3b:
                    1d:a8:b7:ea:c7:b0:2f:6c:28:0b:f4:aa:0d:f3:a5:
                    ed:21:98:3f:8c:49:2a:64:2e:46:d3:3a:0d:f2:19:
                    cd:23:af:72:6a:49:22:25:5b:c4:8f:ef:98:a1:4f:
                    22:2f:10:22:8c:88:68:a5:61:88:3c:9f:02:c2:25:
                    36:a7:f8:26:bb:95:88:7b:ea:53:ae:09:be:8a:a8:
                    f3:31:e2:1c:e1:09:53:16:15:0e:91:f0:46:dc:f9:
                    32:97:3e:37:10:68:9c:67:8c:99:96:87:48:08:ae:
                    94:62:78:4c:ca:1f:d9:66:89:05:1f:11:0e:51:46:
                    82:f4:82:1c:20:e8:2d:d1:e2:8b:ea:6a:37:91:c2:
                    6c:f4:31:da:1f:ee:2c:a9:b7:c2:62:47:25:6c:b1:
                    0d:a8:be:a9:74:ab:40:88:e8:82:06:a8:18:51:4c:
                    8f:a2:32:21:18:e7:de:2c:c3:1d:ec:0d:e1:8c:a9:
                    d5:33:99:c1:e5:44:c8:72:11:d8:45:1d:bb:6c:3c:
                    12:3f:2e:4f:8f:fb:10:c8:03:9f:9e:10:94:cc:56:
                    d4:67:e5:82:f6:6d:57:0f:19:0f:14:96:cd:66:8f:
                    3e:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:8C:56:78:EA:37:65:EA:9E:D2:B2:76:2C:DB:90:C4:34:43:09:62
            X509v3 Authority Key Identifier:
                keyid:92:3B:F9:61:AD:83:53:98:34:50:D3:A3:3F:28:CC:CF:E0:A8:A1:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3611484/E61E0996B9E311EE89052986775412E6/kjv5Ya2DU5g0UNOjPyjMz-CooQY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/kjv5Ya2DU5g0UNOjPyjMz-CooQY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3611484/E61E0996B9E311EE89052986775412E6/kjv5Ya2DU5g0UNOjPyjMz-CooQY.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c6:73:ff:8f:75:09:20:1b:00:ef:e9:64:57:fc:59:e0:be:f1:
         54:ea:dd:5f:de:31:d3:02:0a:9c:9a:e6:72:1f:99:c8:ef:6d:
         b3:28:6e:bd:c2:4c:46:96:56:fa:f5:8b:37:95:d6:84:aa:8a:
         39:58:3d:53:c4:bd:cd:e1:7a:ba:8e:0b:25:47:a1:1f:4d:ce:
         bc:e2:c7:9f:38:5a:3b:07:07:5c:e7:6f:49:e0:45:eb:f3:d2:
         33:03:71:8f:48:94:ff:31:41:3e:c4:47:4d:17:0b:f5:5a:d7:
         74:08:13:3e:4f:5f:dc:c2:8c:a6:ba:83:38:74:9a:29:5e:80:
         dc:b4:57:f2:e1:5f:40:90:de:39:25:23:97:4a:29:9c:41:0a:
         1d:0e:2f:9f:e3:68:59:1d:46:9b:93:90:2b:1d:24:66:09:c6:
         c7:38:a6:9d:e6:d0:63:3d:e8:b6:6c:00:c8:81:17:cf:ce:d5:
         1d:4d:6a:32:cf:b8:01:f2:33:ce:f5:39:8d:73:53:7d:5b:66:
         70:ec:97:81:98:f8:03:e6:69:8e:f0:8c:64:ca:de:37:17:5b:
         00:3c:11:4c:fa:dd:78:c5:d6:98:72:3b:5f:82:f1:43:cd:88:
         c8:a5:fe:ba:50:bc:64:8a:fa:9c:e6:56:22:fb:12:ab:85:09:
         11:28:1a:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 4 08:25:17 2025 by rpki-client