This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/PVXHhOoXkS8OlgolxsqSDhACMAo.mft
File:                     PVXHhOoXkS8OlgolxsqSDhACMAo.mft (raw, json)
Hash identifier:          xqk+gnvYkGg5AVLuGGlh8Q2oWQqFRPcVWig6ZP4JztA=
Subject key identifier:   8D:42:2A:0F:63:E4:29:2F:A2:DF:B1:DE:11:97:CD:95:DF:9A:B0:24
Authority key identifier: 3D:55:C7:84:EA:17:91:2F:0E:96:0A:25:C6:CA:92:0E:10:02:30:0A
Certificate issuer:       /CN=F364712FAF/serialNumber=3D55C784EA17912F0E960A25C6CA920E1002300A
Certificate serial:       0701
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/PVXHhOoXkS8OlgolxsqSDhACMAo.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/PVXHhOoXkS8OlgolxsqSDhACMAo.mft
Manifest number:          06EC
Signing time:             Tue 09 Dec 2025 02:06:33 +0000
Manifest this update:     Tue 09 Dec 2025 02:06:32 +0000
Manifest next update:     Thu 11 Dec 2025 02:06:32 +0000
Files and hashes:         1: PVXHhOoXkS8OlgolxsqSDhACMAo.crl (hash: eHDLc+daEVuVNkReigHfCBXVpKmlo2efYujFgwOYPD8=)
                          2: 4F98057C463A11EC8FC05E15D8A014CE.roa (hash: xBs6Vj/OeiFnzOXPhSwdSucFxUDsg3Mh5ATS3BYbuQQ=)
                          3: A081D0764BB711EC90B9B946D8A014CE.roa (hash: gyJOxBOesIDsoX+F0wCqdrw9sX0TpvZI+h6iVzCHXus=)
                          4: 8665119A463911EC88B22A14D8A014CE.roa (hash: 9v5B2xaH3Bc4zwDA3exaH6jQCediAk11PcOAPXe7o5k=)
                          5: D6EDC7E0517E11EEB8E0E4124AD9E6FC.roa (hash: FEIMhfmeS/WDUY9eK4oDCHAUgtEzM8qgwjxj7XmdiaM=)
                          6: 5A777F624BB811EC988AD647D8A014CE.roa (hash: 1YHFKzIw60VPhLGMqgaM8DC3X+uEENoWlpBODyIvx+8=)
                          7: 88C7F19A463A11EC8A6DCA15D8A014CE.roa (hash: anrHJdrDwUVVxzqA0H5Lv7h5BhwjhCFTP0rDmIVAs5g=)
                          8: 2D81E60CD70411EFA4774B68762E951A.roa (hash: WMzMow+21CqdCgojBhlWOGoOTPRBXGbF6iL94Q4Dv5A=)
                          9: D955A76630FE11ECB753D321D8A014CE.roa (hash: xjCeaYd+LKJvUwcXfMZMX504OiVLskv9I2sBgX5AZDo=)
                          10: 44276DB4463911EC8EA8D613D8A014CE.roa (hash: 4eP0uQUhgh8UojN9cwAJrEyBjLKtzCe+6TB80lYgykw=)
                          11: 29A1C4C4463B11ECBE2BB116D8A014CE.roa (hash: O5Px9+yMxD3h4TaIj58cVZ2T/wrbePoVvt5KjLdgZMg=)
                          12: C25BF862463911EC9C659114D8A014CE.roa (hash: TAmKKzQBDoLwr1xj5R0Z1MOOtgdIjMvjgf/j1EH6WSQ=)
                          13: 05AE8E624BB811ECB8B77047D8A014CE.roa (hash: IqZdrn6PDd5tCiFmENh9gtBL/vqPbtxvIIhISM2npRA=)
                          14: 5B28A01A463811ECB5776C12D8A014CE.roa (hash: sw9X0bgyaC8iP6hm/pS3038w/pYcaM83WRGaPy6yt0M=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/PVXHhOoXkS8OlgolxsqSDhACMAo.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/PVXHhOoXkS8OlgolxsqSDhACMAo.mft
                          rsync://rpki.afrinic.net/repository/afrinic/PVXHhOoXkS8OlgolxsqSDhACMAo.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 11 Dec 2025 02:06:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1793 (0x701)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F364712FAF, serialNumber=3D55C784EA17912F0E960A25C6CA920E1002300A
        Validity
            Not Before: Dec  9 02:06:32 2025 GMT
            Not After : Dec 11 02:06:32 2025 GMT
        Subject: CN=69378428-fd7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:9b:ea:63:f0:4a:99:96:6b:2e:8e:03:35:b3:
                    b0:93:f4:4d:88:9c:65:ec:73:78:9a:2e:6c:ef:f2:
                    8a:56:07:b6:5f:d7:3a:34:c7:5a:ae:ed:19:bd:10:
                    ce:fe:ab:2a:73:da:43:aa:c8:61:71:5a:88:ac:b1:
                    15:45:22:07:ec:16:63:e4:09:8a:80:82:fc:19:65:
                    ee:a2:8a:c9:1e:24:9a:da:d2:ee:ff:10:c6:f8:f9:
                    ef:0d:8c:4a:a5:2f:21:c6:6f:b3:64:28:5c:e3:4d:
                    6f:88:da:c1:52:3e:6f:8e:c0:0f:ee:2f:e7:df:66:
                    17:f4:3b:f2:b7:3f:ca:f8:90:0c:d5:05:0b:d4:7f:
                    70:e5:e5:7c:1c:73:35:ee:98:2c:af:3c:8a:d8:1f:
                    92:2d:17:0c:4b:c7:ae:77:7f:22:26:b5:52:56:4e:
                    14:c9:95:1f:86:d2:be:61:79:1b:c2:68:bf:7b:1d:
                    05:99:85:08:5e:0c:4e:e4:2b:d8:7e:ab:fa:fb:4c:
                    58:48:a1:0f:9e:c2:4a:37:9a:99:a1:ef:0f:45:c5:
                    73:ce:a3:6b:ab:6c:58:d6:c3:4b:e9:cb:51:eb:2d:
                    fc:21:f8:68:0c:af:d5:17:b0:bf:cb:09:7d:05:91:
                    91:d4:7a:7a:1e:f1:ec:e7:6c:db:2b:29:65:ba:b3:
                    a3:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:42:2A:0F:63:E4:29:2F:A2:DF:B1:DE:11:97:CD:95:DF:9A:B0:24
            X509v3 Authority Key Identifier:
                keyid:3D:55:C7:84:EA:17:91:2F:0E:96:0A:25:C6:CA:92:0E:10:02:30:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/PVXHhOoXkS8OlgolxsqSDhACMAo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/PVXHhOoXkS8OlgolxsqSDhACMAo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/PVXHhOoXkS8OlgolxsqSDhACMAo.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:10:3a:bc:66:ea:19:28:ed:17:68:3a:67:46:c0:77:73:88:
         b2:8c:b8:b5:7d:98:c2:ce:dd:f6:f9:67:ec:20:d9:8a:59:96:
         42:c2:26:58:da:b9:ba:81:b0:22:65:35:da:01:2b:ce:78:e2:
         19:00:51:33:f6:c8:ab:4a:7d:3f:20:c5:34:e7:c6:8e:fe:fb:
         e3:5d:3e:f9:6e:4c:8f:ad:ff:0e:d2:4e:67:2c:24:45:89:b2:
         b7:09:d8:0c:1e:3c:50:44:26:3c:37:f0:ec:54:78:73:ea:a4:
         6b:e5:30:6d:10:c1:fc:87:86:d2:7f:22:71:e0:04:a1:60:03:
         d2:45:6f:0b:c3:71:b4:de:1f:aa:9d:5e:f3:b4:12:cb:99:9a:
         f6:eb:10:62:bd:43:e9:e1:5f:f5:1c:ff:e2:17:c9:18:a4:cb:
         15:13:39:0c:c5:57:e4:92:cb:a5:bb:65:95:de:a8:2d:64:a9:
         25:92:8e:c8:c3:26:b6:54:82:07:d2:4b:23:4e:9f:d8:22:89:
         64:f2:69:fe:d7:21:a8:52:0d:c9:7d:5b:5d:c7:d4:00:e4:56:
         81:d8:ec:b2:09:58:20:fe:00:a6:3a:9b:ed:f9:01:89:2d:76:
         a3:f4:b8:6f:8c:72:24:b1:6f:ba:f0:be:2c:7a:92:91:00:02:
         29:1d:6c:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 9 12:19:13 2025 by rpki-client