This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F366E62B/B91D9518BE9011EEA70F3393775412E6/kp-MtyJC3APxF2jH_xZcaDK3U7U.mft
File:                     kp-MtyJC3APxF2jH_xZcaDK3U7U.mft (raw, json)
Hash identifier:          1Qw+3JfkW3VmwKbM4aHxzaAGZtQ7YjBUmUU/c8rlT+w=
Subject key identifier:   98:28:FD:63:5A:86:DA:46:F9:5F:9E:55:E9:5E:BA:34:07:06:69:DB
Authority key identifier: 92:9F:8C:B7:22:42:DC:03:F1:17:68:C7:FF:16:5C:68:32:B7:53:B5
Certificate issuer:       /CN=F366E62BAF/serialNumber=929F8CB72242DC03F11768C7FF165C6832B753B5
Certificate serial:       02BB
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/kp-MtyJC3APxF2jH_xZcaDK3U7U.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F366E62B/B91D9518BE9011EEA70F3393775412E6/kp-MtyJC3APxF2jH_xZcaDK3U7U.mft
Manifest number:          02BA
Signing time:             Tue 09 Dec 2025 04:01:30 +0000
Manifest this update:     Tue 09 Dec 2025 04:01:30 +0000
Manifest next update:     Thu 11 Dec 2025 04:01:30 +0000
Files and hashes:         1: kp-MtyJC3APxF2jH_xZcaDK3U7U.crl (hash: 6eD+j5+gOUqPok7p0viwTGkL/w2DDMaK6saAXVFWhNU=)
                          2: A864F076BE9611EE998D299D775412E6.roa (hash: 1SOFM20prFpQpyBQ79yS3b8vfUM/+4DhWbKvJj39ado=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F366E62B/B91D9518BE9011EEA70F3393775412E6/kp-MtyJC3APxF2jH_xZcaDK3U7U.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F366E62B/B91D9518BE9011EEA70F3393775412E6/kp-MtyJC3APxF2jH_xZcaDK3U7U.mft
                          rsync://rpki.afrinic.net/repository/afrinic/kp-MtyJC3APxF2jH_xZcaDK3U7U.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 11 Dec 2025 04:01:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 699 (0x2bb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F366E62BAF, serialNumber=929F8CB72242DC03F11768C7FF165C6832B753B5
        Validity
            Not Before: Dec  9 04:01:30 2025 GMT
            Not After : Dec 11 04:01:30 2025 GMT
        Subject: CN=69379f1a-d94a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:73:e7:30:d3:50:e8:af:9e:63:17:6b:ae:49:
                    63:da:17:56:b5:70:b0:85:09:2c:6a:28:fb:1f:1f:
                    c3:4b:f4:9f:70:d3:fc:ca:6b:78:1e:b2:7e:22:e0:
                    c1:bd:16:10:28:97:35:e9:0c:12:e0:21:86:ae:5e:
                    ff:3b:fb:f4:af:82:cc:6f:43:bf:be:a8:82:7d:1c:
                    4b:28:50:6e:7b:54:13:b5:06:17:e8:dd:86:f2:71:
                    2f:bf:2c:4e:8a:31:83:9e:0a:cc:ed:b7:f2:bd:7d:
                    2c:50:37:17:88:8a:4f:b1:cc:76:98:ca:1b:bb:6c:
                    7d:d7:f1:4a:8e:d1:d2:c1:16:56:20:27:a5:84:16:
                    4a:84:c2:0e:73:fe:a6:f2:5b:ff:62:67:34:59:62:
                    09:d5:f1:b5:b9:cf:43:57:e9:11:71:32:a8:9d:0e:
                    8f:32:b7:04:13:5f:06:4c:60:03:cd:7b:ad:5b:fd:
                    96:e6:cc:a5:61:7e:c5:4e:3d:f6:a8:2d:1f:4a:ce:
                    33:04:36:f4:15:5b:6b:23:fa:47:c8:8c:92:90:a2:
                    fd:e1:b3:f2:a2:cb:4f:8c:ac:09:39:a4:ec:ca:86:
                    a5:17:66:c1:e8:e2:95:96:bd:30:e0:95:1e:07:98:
                    27:c5:6a:d5:c7:22:5b:a7:99:98:02:67:cf:c1:9c:
                    01:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:28:FD:63:5A:86:DA:46:F9:5F:9E:55:E9:5E:BA:34:07:06:69:DB
            X509v3 Authority Key Identifier:
                keyid:92:9F:8C:B7:22:42:DC:03:F1:17:68:C7:FF:16:5C:68:32:B7:53:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F366E62B/B91D9518BE9011EEA70F3393775412E6/kp-MtyJC3APxF2jH_xZcaDK3U7U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/kp-MtyJC3APxF2jH_xZcaDK3U7U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F366E62B/B91D9518BE9011EEA70F3393775412E6/kp-MtyJC3APxF2jH_xZcaDK3U7U.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:a3:d9:75:6c:e3:bb:e2:f8:2b:7d:73:32:7d:9d:b6:24:a8:
         00:07:27:d8:2e:30:29:a9:24:a3:68:0b:b0:29:6c:4b:2b:60:
         b8:7e:b8:15:31:c3:61:01:86:d7:22:5a:8d:e0:d0:5f:52:c8:
         56:f0:8c:94:47:cd:1d:36:66:10:d0:21:c5:d1:36:4a:fd:09:
         f0:91:3c:cf:b9:a6:09:c4:a7:c6:43:fb:bd:c8:83:aa:73:65:
         f8:26:04:a3:12:96:55:84:94:22:3b:c4:5e:73:f4:a1:8a:47:
         f9:39:63:70:ba:14:22:35:87:99:74:3a:ef:ab:cf:7f:c4:a9:
         24:04:be:29:58:e8:42:6c:86:97:d9:38:a9:77:b2:48:c8:b5:
         23:24:e9:a9:fa:72:b9:fc:18:23:a5:51:b9:e1:33:a8:42:ac:
         db:c0:2e:a1:e9:8b:b3:c1:03:f7:9c:ae:ff:bd:e3:0a:a8:2b:
         98:c5:4d:bf:0f:5b:eb:76:51:5e:13:93:e2:c5:87:3c:f4:75:
         cf:c0:eb:c9:47:5d:b2:72:94:48:6a:38:99:a5:9f:b2:62:10:
         5a:98:0f:ab:c5:29:d5:61:68:ad:9e:a8:a1:6b:e4:6a:3e:c3:
         04:09:7f:b1:79:fb:b6:52:c8:f5:39:6b:e6:26:63:88:0c:fe:
         b9:f7:bf:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 9 12:03:42 2025 by rpki-client