This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F366FAD3/666F962464DF11E8AFE47627F8AEA228/a5D-NKhmmog4_SOMxloRUsRBZQU.mft
File:                     a5D-NKhmmog4_SOMxloRUsRBZQU.mft (raw, json)
Hash identifier:          h86XnSI7M6d7+HcwF9HuOoBO++6Fm7rVbr//4tfA4gc=
Subject key identifier:   7C:0D:E7:83:68:F0:D0:F3:54:04:23:A2:5E:CF:FB:ED:83:08:99:D1
Authority key identifier: 6B:90:FE:34:A8:66:9A:88:38:FD:23:8C:C6:5A:11:52:C4:41:65:05
Certificate issuer:       /CN=F366FAD3AF/serialNumber=6B90FE34A8669A8838FD238CC65A1152C4416505
Certificate serial:       0B20
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/a5D-NKhmmog4_SOMxloRUsRBZQU.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F366FAD3/666F962464DF11E8AFE47627F8AEA228/a5D-NKhmmog4_SOMxloRUsRBZQU.mft
Manifest number:          0B19
Signing time:             Tue 23 Dec 2025 01:11:18 +0000
Manifest this update:     Tue 23 Dec 2025 01:11:18 +0000
Manifest next update:     Thu 25 Dec 2025 01:11:18 +0000
Files and hashes:         1: a5D-NKhmmog4_SOMxloRUsRBZQU.crl (hash: EIrbfx/yThEArBsMCBZ2HtwhNisXW/h1uUDfQ5AqWgI=)
                          2: 053A807256FF11E996D74E7BF8AEA228.roa (hash: hO2TDaSMWg20HoMHgfojmos9nkNQYyH0a66GXivwXhY=)
                          3: 8F2CFCDE56E511E98093C968F8AEA228.roa (hash: 9+KvA5vBTldHkBa01AwWhEOmwfdSKfq79Dv4LMRkqU8=)
                          4: 2B44E2DA56FF11E98AB1737BF8AEA228.roa (hash: KthwQ1M/ZZ2vEvLYbI5jDmjg5aaJSRqGQpQ+loYoav8=)
                          5: 5CDDF2D65F8411E9A487E246F8AEA228.roa (hash: W5D3/ionOUfSBEwoAu8Mc+CDPfPuMjEyhVg8cxMPW1Y=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F366FAD3/666F962464DF11E8AFE47627F8AEA228/a5D-NKhmmog4_SOMxloRUsRBZQU.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F366FAD3/666F962464DF11E8AFE47627F8AEA228/a5D-NKhmmog4_SOMxloRUsRBZQU.mft
                          rsync://rpki.afrinic.net/repository/afrinic/a5D-NKhmmog4_SOMxloRUsRBZQU.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 25 Dec 2025 00:06:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2848 (0xb20)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F366FAD3AF, serialNumber=6B90FE34A8669A8838FD238CC65A1152C4416505
        Validity
            Not Before: Dec 23 01:11:18 2025 GMT
            Not After : Dec 25 01:11:18 2025 GMT
        Subject: CN=6949ec36-b9e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:fb:7f:c7:fb:85:85:0a:55:0e:cd:41:a4:bd:
                    a0:fc:7c:a0:1b:e6:3a:65:d7:42:61:dc:75:d2:5a:
                    b5:bc:b5:bb:57:9e:cc:45:be:1c:04:62:6f:72:7a:
                    56:0e:96:3c:2e:b8:b2:c8:36:a5:ac:ec:aa:66:01:
                    ba:78:a6:08:12:cd:00:04:0e:06:0e:47:0b:cc:2e:
                    6e:b0:8b:af:44:06:7c:f4:b9:52:fb:dd:51:93:1c:
                    04:33:2a:d0:e6:15:42:5e:84:53:d6:8f:80:10:d8:
                    c7:5b:a3:38:71:2a:62:f2:ae:1a:bd:e7:7d:24:23:
                    d0:4f:c6:e6:92:ca:65:20:7e:7f:58:f8:52:17:35:
                    94:f7:e3:1e:dc:3a:87:26:7c:ba:60:c5:4a:85:7b:
                    8b:c0:1c:d7:f7:de:db:7d:45:47:39:ab:8a:04:7f:
                    16:f9:ce:c3:27:f7:62:8a:58:b3:cb:67:7e:44:90:
                    e3:fe:90:f4:80:f0:a3:a6:5f:ca:4a:93:f6:d9:ef:
                    f0:b4:27:64:f1:16:a6:a3:e9:ad:75:d9:9f:ea:d2:
                    c8:79:76:4e:33:05:6c:ca:bc:a2:36:77:0c:a1:65:
                    be:4d:22:4e:6f:dd:86:ac:01:78:0b:c5:77:c3:5f:
                    c3:55:14:9b:3e:7f:2b:6f:32:e2:39:51:61:43:6d:
                    95:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:0D:E7:83:68:F0:D0:F3:54:04:23:A2:5E:CF:FB:ED:83:08:99:D1
            X509v3 Authority Key Identifier:
                keyid:6B:90:FE:34:A8:66:9A:88:38:FD:23:8C:C6:5A:11:52:C4:41:65:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F366FAD3/666F962464DF11E8AFE47627F8AEA228/a5D-NKhmmog4_SOMxloRUsRBZQU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/a5D-NKhmmog4_SOMxloRUsRBZQU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F366FAD3/666F962464DF11E8AFE47627F8AEA228/a5D-NKhmmog4_SOMxloRUsRBZQU.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:08:8e:30:1d:b1:e2:f0:ed:8a:e1:7d:b8:35:91:71:1e:00:
         a3:e4:89:f0:07:7e:01:a7:0d:a9:eb:55:41:39:11:d8:31:b4:
         14:63:39:f2:67:7d:1b:4a:79:22:09:c5:0c:1f:ad:25:f5:cd:
         af:45:91:b2:ea:7c:fc:05:39:b0:0c:27:c0:65:9e:4f:2d:db:
         50:40:3c:c7:c4:d6:e7:3f:f5:d0:a1:42:af:fc:8d:8c:72:1c:
         81:13:c8:e0:a5:e1:04:0f:91:a1:6d:97:77:e3:52:a2:79:1a:
         6a:95:c0:3b:44:63:d7:cc:3a:54:76:e4:6c:9e:26:f3:f3:00:
         f0:f9:63:0f:81:0d:b2:3f:52:21:dc:57:8f:91:d4:d1:31:81:
         75:3f:a3:ac:6d:dd:da:60:69:87:a3:c6:eb:a8:cb:a1:a1:aa:
         a6:bc:a9:88:b9:f0:38:5c:f6:51:76:96:82:2c:e4:a9:d9:e7:
         00:54:76:e6:0c:9a:d4:a6:5d:ef:1f:1c:b6:e3:96:03:87:be:
         e9:89:5e:d3:8f:98:e5:b5:a0:a6:e4:49:1b:2b:39:7c:10:86:
         8f:76:4e:ed:56:ef:52:86:e7:92:9c:92:6e:f9:14:f6:c2:53:
         4a:0b:5c:48:89:4b:2d:44:9c:68:9d:6b:b3:78:81:b7:e7:a7:
         c3:08:bf:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 08:42:22 2025 by rpki-client