This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F361C3A1/2D96772EE0D011E88AE6071CF8AEA228/kOmId5HPLZYFAfiu3iSiM0q6VAM.mft
File:                     kOmId5HPLZYFAfiu3iSiM0q6VAM.mft (raw, json)
Hash identifier:          okenLzvz3NKeJrFGMdLvkew+ye3Tar/DwKzEeCFB50s=
Subject key identifier:   FD:D6:AA:83:75:B1:DB:2A:4D:14:7F:6C:2A:86:B3:5D:D5:6E:C3:AC
Authority key identifier: 90:E9:88:77:91:CF:2D:96:05:01:F8:AE:DE:24:A2:33:4A:BA:54:03
Certificate issuer:       /CN=F361C3A1AF/serialNumber=90E9887791CF2D960501F8AEDE24A2334ABA5403
Certificate serial:       0A77
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/kOmId5HPLZYFAfiu3iSiM0q6VAM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F361C3A1/2D96772EE0D011E88AE6071CF8AEA228/kOmId5HPLZYFAfiu3iSiM0q6VAM.mft
Manifest number:          0A6C
Signing time:             Tue 09 Dec 2025 01:15:44 +0000
Manifest this update:     Tue 09 Dec 2025 01:15:44 +0000
Manifest next update:     Thu 11 Dec 2025 01:15:44 +0000
Files and hashes:         1: kOmId5HPLZYFAfiu3iSiM0q6VAM.crl (hash: SI6Ho9YcgBB3r1t6u+Lh3BF+XQJga7ONljSkEg47WFI=)
                          2: 93B50CB27C2811ED81D30EDDF1222468.roa (hash: gp/99soeditLcJO0T5hekMas/YIo6afkCzb5ekN/BCo=)
                          3: BF2A74367C2811EDA828B1DDF1222468.roa (hash: 8Vz8jskWPkYysMtex35shbS5v1VNGyIr6NmUyZ7bv2c=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F361C3A1/2D96772EE0D011E88AE6071CF8AEA228/kOmId5HPLZYFAfiu3iSiM0q6VAM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F361C3A1/2D96772EE0D011E88AE6071CF8AEA228/kOmId5HPLZYFAfiu3iSiM0q6VAM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/kOmId5HPLZYFAfiu3iSiM0q6VAM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 11 Dec 2025 01:15:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2679 (0xa77)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F361C3A1AF, serialNumber=90E9887791CF2D960501F8AEDE24A2334ABA5403
        Validity
            Not Before: Dec  9 01:15:44 2025 GMT
            Not After : Dec 11 01:15:44 2025 GMT
        Subject: CN=69377840-cf3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:d5:d4:8a:66:ba:7b:85:bd:6a:a9:c7:07:5f:
                    de:13:2e:fc:a2:0d:a7:db:f8:3a:6c:93:8e:e1:ea:
                    1b:83:c9:f3:27:35:44:8d:c2:eb:f1:cc:d9:06:f8:
                    72:34:3f:29:ec:b3:63:4e:86:58:a3:08:65:84:82:
                    05:aa:d1:cb:18:04:0b:71:42:49:2e:c0:d4:1a:46:
                    cd:8d:40:bf:4e:9a:6e:87:52:92:0a:c0:4a:1c:7b:
                    b8:82:89:bd:23:1d:51:72:32:c6:42:b8:b8:14:f2:
                    f6:68:d1:88:0d:b4:5a:1d:50:28:ba:f7:4f:67:e3:
                    70:69:36:09:f6:14:0d:d3:b4:49:71:2c:f5:3a:e9:
                    ed:e1:19:b2:43:1d:e3:02:00:35:9d:28:46:c9:16:
                    41:99:01:c0:f1:1b:79:c0:11:7a:3f:54:a7:5d:0a:
                    18:a8:2f:e6:50:36:7b:73:8d:50:f2:72:20:19:80:
                    29:bc:5c:e2:bf:cf:74:64:c6:50:e2:c3:1a:07:4f:
                    1b:a1:e9:52:50:35:19:06:cd:58:0b:c8:74:d8:47:
                    2a:e2:5b:5b:e2:a7:9a:f4:cd:60:2b:51:25:1d:2e:
                    d9:4f:94:ca:6a:68:00:55:40:92:df:cb:57:eb:5e:
                    5c:bf:a7:13:97:1c:05:aa:5b:55:1b:f9:33:06:b6:
                    b8:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:D6:AA:83:75:B1:DB:2A:4D:14:7F:6C:2A:86:B3:5D:D5:6E:C3:AC
            X509v3 Authority Key Identifier:
                keyid:90:E9:88:77:91:CF:2D:96:05:01:F8:AE:DE:24:A2:33:4A:BA:54:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F361C3A1/2D96772EE0D011E88AE6071CF8AEA228/kOmId5HPLZYFAfiu3iSiM0q6VAM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/kOmId5HPLZYFAfiu3iSiM0q6VAM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F361C3A1/2D96772EE0D011E88AE6071CF8AEA228/kOmId5HPLZYFAfiu3iSiM0q6VAM.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:1e:35:5d:46:52:02:b1:72:44:61:ce:d6:d3:6a:86:07:be:
         8b:19:da:31:14:af:eb:46:cf:74:51:22:eb:28:32:19:6b:a3:
         95:f6:22:c3:61:e3:85:d6:0a:52:da:1f:d4:4e:4c:87:e0:ef:
         cc:50:42:3c:1d:c3:35:cb:28:97:21:04:02:5b:85:35:cb:af:
         8b:41:44:fb:44:7e:81:1d:4f:0f:34:cc:4b:6c:e1:de:fc:cf:
         0a:b8:3a:73:72:2c:b1:4a:76:58:c0:c0:0a:25:56:f4:f8:50:
         0a:d3:a9:40:3d:d1:67:8f:f1:97:59:f7:ab:d1:2c:8b:1d:79:
         5d:f9:fd:7f:42:d6:16:1d:25:b2:3f:65:fa:01:1b:8e:03:a7:
         c6:ec:33:ac:bb:ea:18:78:77:9a:e5:78:f2:44:26:f3:0f:08:
         cc:44:80:5d:31:17:f0:f5:74:aa:68:0a:3e:a8:30:b0:bb:61:
         cf:2d:28:c9:1c:e8:ab:4d:39:d8:4a:b7:3a:3a:f4:9f:ed:12:
         68:b8:a0:e4:04:6a:4b:d0:32:06:48:9d:fe:e7:7d:cf:00:2e:
         92:a0:76:d1:b7:56:fe:c7:d1:0b:a3:59:ff:0c:74:58:91:af:
         04:5c:95:a6:46:e1:d6:ba:35:14:26:9a:19:49:40:26:9e:24:
         34:4d:17:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 9 12:03:42 2025 by rpki-client