This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/PVXHhOoXkS8OlgolxsqSDhACMAo.mft
File:                     PVXHhOoXkS8OlgolxsqSDhACMAo.mft (raw, json)
Hash identifier:          3fqzag2E9p+1u5BZcwZCWOknewTmE7szOyNSXKjqvYE=
Subject key identifier:   A8:8E:B8:3B:2F:15:D5:A6:CE:25:7A:9A:04:89:C9:1F:A0:BF:6A:2F
Authority key identifier: 3D:55:C7:84:EA:17:91:2F:0E:96:0A:25:C6:CA:92:0E:10:02:30:0A
Certificate issuer:       /CN=F364712FAF/serialNumber=3D55C784EA17912F0E960A25C6CA920E1002300A
Certificate serial:       070D
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/PVXHhOoXkS8OlgolxsqSDhACMAo.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/PVXHhOoXkS8OlgolxsqSDhACMAo.mft
Manifest number:          06F8
Signing time:             Sun 21 Dec 2025 02:05:50 +0000
Manifest this update:     Sun 21 Dec 2025 02:05:49 +0000
Manifest next update:     Tue 23 Dec 2025 02:05:49 +0000
Files and hashes:         1: PVXHhOoXkS8OlgolxsqSDhACMAo.crl (hash: HQavEkx8kMURqZXd83gMIw6D1Yu/wuUyiwFh1Cd5mYg=)
                          2: 4F98057C463A11EC8FC05E15D8A014CE.roa (hash: xBs6Vj/OeiFnzOXPhSwdSucFxUDsg3Mh5ATS3BYbuQQ=)
                          3: A081D0764BB711EC90B9B946D8A014CE.roa (hash: gyJOxBOesIDsoX+F0wCqdrw9sX0TpvZI+h6iVzCHXus=)
                          4: 8665119A463911EC88B22A14D8A014CE.roa (hash: 9v5B2xaH3Bc4zwDA3exaH6jQCediAk11PcOAPXe7o5k=)
                          5: D6EDC7E0517E11EEB8E0E4124AD9E6FC.roa (hash: FEIMhfmeS/WDUY9eK4oDCHAUgtEzM8qgwjxj7XmdiaM=)
                          6: 5A777F624BB811EC988AD647D8A014CE.roa (hash: 1YHFKzIw60VPhLGMqgaM8DC3X+uEENoWlpBODyIvx+8=)
                          7: 88C7F19A463A11EC8A6DCA15D8A014CE.roa (hash: anrHJdrDwUVVxzqA0H5Lv7h5BhwjhCFTP0rDmIVAs5g=)
                          8: 2D81E60CD70411EFA4774B68762E951A.roa (hash: WMzMow+21CqdCgojBhlWOGoOTPRBXGbF6iL94Q4Dv5A=)
                          9: D955A76630FE11ECB753D321D8A014CE.roa (hash: xjCeaYd+LKJvUwcXfMZMX504OiVLskv9I2sBgX5AZDo=)
                          10: 44276DB4463911EC8EA8D613D8A014CE.roa (hash: 4eP0uQUhgh8UojN9cwAJrEyBjLKtzCe+6TB80lYgykw=)
                          11: 29A1C4C4463B11ECBE2BB116D8A014CE.roa (hash: O5Px9+yMxD3h4TaIj58cVZ2T/wrbePoVvt5KjLdgZMg=)
                          12: C25BF862463911EC9C659114D8A014CE.roa (hash: TAmKKzQBDoLwr1xj5R0Z1MOOtgdIjMvjgf/j1EH6WSQ=)
                          13: 05AE8E624BB811ECB8B77047D8A014CE.roa (hash: IqZdrn6PDd5tCiFmENh9gtBL/vqPbtxvIIhISM2npRA=)
                          14: 5B28A01A463811ECB5776C12D8A014CE.roa (hash: sw9X0bgyaC8iP6hm/pS3038w/pYcaM83WRGaPy6yt0M=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/PVXHhOoXkS8OlgolxsqSDhACMAo.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/PVXHhOoXkS8OlgolxsqSDhACMAo.mft
                          rsync://rpki.afrinic.net/repository/afrinic/PVXHhOoXkS8OlgolxsqSDhACMAo.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 23 Dec 2025 02:05:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1805 (0x70d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F364712FAF, serialNumber=3D55C784EA17912F0E960A25C6CA920E1002300A
        Validity
            Not Before: Dec 21 02:05:49 2025 GMT
            Not After : Dec 23 02:05:49 2025 GMT
        Subject: CN=694755fe-4adb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:40:20:3d:63:40:ca:e2:58:81:d2:9f:f7:4f:
                    12:19:8e:9e:7c:a3:3a:a0:e0:66:8b:ff:5f:99:e5:
                    e2:89:8f:cb:b4:53:d3:a2:1c:c1:77:20:52:c8:aa:
                    09:2e:36:b3:71:88:c4:2e:28:aa:ec:0e:06:f0:45:
                    39:58:c4:4e:7f:2f:db:57:84:eb:b3:5e:fc:bb:5a:
                    fa:c5:e1:f2:db:29:c7:32:11:56:8a:aa:26:fd:d9:
                    f9:e8:4a:ae:cb:e4:42:a1:81:45:a7:e3:0c:fe:30:
                    cc:7a:c4:ec:e9:95:68:74:7e:97:79:e5:0b:b8:e1:
                    49:7b:03:d2:48:7f:bc:76:10:3a:b9:7e:c0:e1:b5:
                    da:da:db:3d:b3:fc:4d:c4:d9:fa:4c:72:8c:e9:d0:
                    91:dd:b5:bf:df:e6:48:d6:b7:b5:bf:86:d4:cb:fe:
                    03:63:46:8b:21:ab:5c:1a:11:b1:58:43:ec:65:db:
                    3e:48:0a:b5:6a:40:c7:9d:14:33:08:ca:dc:e6:72:
                    d4:e8:92:34:e7:3f:1b:67:9c:7a:95:b3:07:14:eb:
                    f9:7d:ac:02:f8:71:c5:5e:c4:cc:18:09:ed:f8:c4:
                    63:f9:f0:a7:a9:a1:ae:17:65:3a:16:95:c0:87:b0:
                    6b:b7:4e:6f:f0:6b:1b:03:bd:7d:b5:0b:66:3c:78:
                    77:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:8E:B8:3B:2F:15:D5:A6:CE:25:7A:9A:04:89:C9:1F:A0:BF:6A:2F
            X509v3 Authority Key Identifier:
                keyid:3D:55:C7:84:EA:17:91:2F:0E:96:0A:25:C6:CA:92:0E:10:02:30:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/PVXHhOoXkS8OlgolxsqSDhACMAo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/PVXHhOoXkS8OlgolxsqSDhACMAo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/PVXHhOoXkS8OlgolxsqSDhACMAo.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:22:b8:21:67:bc:3d:b3:8a:e0:a8:81:09:6c:c4:c1:22:16:
         07:ce:29:11:62:5c:c2:62:b0:af:a0:da:cd:03:81:8e:fb:0a:
         48:9d:f6:32:8e:8b:94:bf:47:0d:c2:8a:df:cc:6b:3a:9a:d9:
         33:ca:91:8e:fe:f2:cc:75:74:cb:2e:fb:89:d3:22:c3:ef:aa:
         3c:b2:29:d7:b7:fd:14:95:86:76:4f:e8:ba:32:65:bb:1b:85:
         69:1e:c5:50:23:a1:c4:6b:b8:71:1e:3b:a1:83:31:9d:7d:a0:
         46:24:91:4b:c8:2d:34:f5:44:2f:6c:e0:25:a3:9d:82:7c:93:
         97:41:37:79:c6:e5:e6:7e:37:e2:d6:93:3d:88:5e:9d:51:4e:
         df:23:b7:ce:c2:26:3c:1f:18:cc:b1:55:5a:07:e4:cc:e6:a9:
         a9:fb:75:eb:51:a9:87:d9:8c:8d:39:ce:da:36:91:a0:e9:61:
         a9:87:d9:34:2f:81:5c:1a:21:ed:6f:0e:72:6f:3b:0b:ad:2b:
         01:6d:ec:3b:3a:da:e8:1b:e5:b6:35:24:77:9c:72:57:7c:25:
         fa:66:0c:78:60:9a:7a:e3:69:ca:57:4f:7f:26:21:89:de:49:
         d6:ba:71:68:6f:81:7b:34:2d:fd:01:e1:59:b9:6d:d7:9a:5e:
         01:37:b9:1e
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICBw0wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NDcxMkZBRjExMC8GA1UEBRMoM0Q1NUM3ODRFQTE3OTEyRjBFOTYwQTI1QzZDQTky
MEUxMDAyMzAwQTAeFw0yNTEyMjEwMjA1NDlaFw0yNTEyMjMwMjA1NDlaMBgxFjAU
BgNVBAMTDTY5NDc1NWZlLTRhZGIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC/QCA9Y0DK4liB0p/3TxIZjp58ozqg4GaL/1+Z5eKJj8u0U9OiHMF3IFLI
qgkuNrNxiMQuKKrsDgbwRTlYxE5/L9tXhOuzXvy7WvrF4fLbKccyEVaKqib92fno
Sq7L5EKhgUWn4wz+MMx6xOzplWh0fpd55Qu44Ul7A9JIf7x2EDq5fsDhtdra2z2z
/E3E2fpMcozp0JHdtb/f5kjWt7W/htTL/gNjRoshq1waEbFYQ+xl2z5ICrVqQMed
FDMIytzmctTokjTnPxtnnHqVswcU6/l9rAL4ccVexMwYCe34xGP58Kepoa4XZToW
lcCHsGu3Tm/waxsDvX21C2Y8eHfPAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUqI64
Oy8V1abOJXqaBInJH6C/ai8wHwYDVR0jBBgwFoAUPVXHhOoXkS8OlgolxsqSDhAC
MAowDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjQ3MTJGL0U5QzRCQUEyQTBFODExRUI4ODk1OEQxMEY4QUVBMjI4L1BWWEho
T29Ya1M4T2xnb2x4c3FTRGhBQ01Bby5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1BWWEhoT29Ya1M4T2xnb2x4c3FTRGhBQ01Bby5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2NDcxMkYvRTlDNEJBQTJBMEU4MTFFQjg4OTU4RDEwRjhB
RUEyMjgvUFZYSGhPb1hrUzhPbGdvbHhzcVNEaEFDTUFvLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCVIrghZ7w9s4rgqIEJbMTBIhYHzikR
YlzCYrCvoNrNA4GO+wpInfYyjouUv0cNworfzGs6mtkzypGO/vLMdXTLLvuJ0yLD
76o8sinXt/0UlYZ2T+i6MmW7G4VpHsVQI6HEa7hxHjuhgzGdfaBGJJFLyC009UQv
bOAlo52CfJOXQTd5xuXmfjfi1pM9iF6dUU7fI7fOwiY8HxjMsVVaB+TM5qmp+3Xr
UamH2YyNOc7aNpGg6WGph9k0L4FcGiHtbw5ybzsLrSsBbew7OtroG+W2NSR3nHJX
fCX6Zgx4YJp642nKV09/JiGJ3knWunFob4F7NC39AeFZuW3Xml4BN7ke
-----END CERTIFICATE-----
Generated at Sun Dec 21 19:29:12 2025 by rpki-client