This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36746EB/0C564C5E5E4711ECB9A1AED95A40D577/KxftsiWoqa1OodSC-tfzt4JwvaQ.mft
File:                     KxftsiWoqa1OodSC-tfzt4JwvaQ.mft (raw, json)
Hash identifier:          3KU3RHGid43hmH9V/BKnz5ZOnaZXTqG9czb+NE3WRBo=
Subject key identifier:   8D:80:AC:63:9B:6B:D9:30:F5:08:6C:B7:83:C1:5E:7D:76:F9:A7:D8
Authority key identifier: 2B:17:ED:B2:25:A8:A9:AD:4E:A1:D4:82:FA:D7:F3:B7:82:70:BD:A4
Certificate issuer:       /CN=F36746EBAF/serialNumber=2B17EDB225A8A9AD4EA1D482FAD7F3B78270BDA4
Certificate serial:       05D9
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/KxftsiWoqa1OodSC-tfzt4JwvaQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36746EB/0C564C5E5E4711ECB9A1AED95A40D577/KxftsiWoqa1OodSC-tfzt4JwvaQ.mft
Manifest number:          05D8
Signing time:             Tue 09 Dec 2025 02:34:35 +0000
Manifest this update:     Tue 09 Dec 2025 02:34:35 +0000
Manifest next update:     Thu 11 Dec 2025 02:34:35 +0000
Files and hashes:         1: KxftsiWoqa1OodSC-tfzt4JwvaQ.crl (hash: Q0QBWzIt5j25Pq17lmEkGHztkIUHJElTQCC/NB6H6yk=)
                          2: 0755AE8C5E4911EC910446DF5A40D577.roa (hash: AItjzWPSlit+SXvmdCFmobWIhqJxwMx7F/NvBd+HRhQ=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36746EB/0C564C5E5E4711ECB9A1AED95A40D577/KxftsiWoqa1OodSC-tfzt4JwvaQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36746EB/0C564C5E5E4711ECB9A1AED95A40D577/KxftsiWoqa1OodSC-tfzt4JwvaQ.mft
                          rsync://rpki.afrinic.net/repository/afrinic/KxftsiWoqa1OodSC-tfzt4JwvaQ.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 11 Dec 2025 02:34:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1497 (0x5d9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36746EBAF, serialNumber=2B17EDB225A8A9AD4EA1D482FAD7F3B78270BDA4
        Validity
            Not Before: Dec  9 02:34:35 2025 GMT
            Not After : Dec 11 02:34:35 2025 GMT
        Subject: CN=69378abb-06be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:22:d0:56:36:2b:f0:67:b9:cf:98:b4:a1:39:
                    a4:14:a2:09:d9:bd:57:3a:77:c9:b3:fe:69:47:76:
                    3e:cd:38:01:77:2c:c9:78:b3:6a:b2:1d:26:81:27:
                    8c:de:fd:a1:81:a8:36:74:3d:b6:f6:28:9f:e6:5b:
                    40:51:64:54:8b:93:e1:9c:56:11:7a:e8:b7:a1:73:
                    7e:21:a4:90:68:00:bc:17:c8:ed:7a:e7:3b:c8:ce:
                    b8:8d:37:d7:28:a8:5f:0d:01:7c:fe:cd:3c:dc:53:
                    8e:32:38:d2:55:27:8a:7b:a6:fb:bc:b0:31:c1:bd:
                    3a:df:62:19:5d:af:4c:5b:74:f5:64:b6:6f:39:e7:
                    4a:63:8c:63:ea:18:39:81:7f:9a:65:8e:09:e8:89:
                    13:26:04:7b:62:7c:7a:4c:f9:f4:af:71:91:84:b8:
                    98:e9:eb:59:6e:83:d5:45:69:45:96:03:9f:6d:37:
                    ff:23:51:6c:e0:41:06:6c:a0:bf:35:c4:80:3d:6c:
                    07:70:09:1c:86:67:b3:08:66:36:d0:bc:96:d7:29:
                    90:c2:f1:06:e2:21:69:ec:e5:d2:95:10:e7:6d:94:
                    86:7c:b5:10:c1:1d:09:18:7b:06:b9:8f:40:6b:49:
                    3d:b0:53:c3:43:49:7b:b1:ed:e4:37:79:66:69:6d:
                    78:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:80:AC:63:9B:6B:D9:30:F5:08:6C:B7:83:C1:5E:7D:76:F9:A7:D8
            X509v3 Authority Key Identifier:
                keyid:2B:17:ED:B2:25:A8:A9:AD:4E:A1:D4:82:FA:D7:F3:B7:82:70:BD:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36746EB/0C564C5E5E4711ECB9A1AED95A40D577/KxftsiWoqa1OodSC-tfzt4JwvaQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/KxftsiWoqa1OodSC-tfzt4JwvaQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36746EB/0C564C5E5E4711ECB9A1AED95A40D577/KxftsiWoqa1OodSC-tfzt4JwvaQ.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:e2:b3:42:20:32:7b:fd:28:5c:65:f5:d6:be:b4:3f:e4:c6:
         26:7f:c1:56:a5:36:6b:99:70:6e:10:63:64:3e:f7:b1:92:52:
         a1:cc:a8:f0:e6:ea:7f:dc:b9:43:bd:ec:83:c3:1b:da:7c:5c:
         c9:70:0c:a0:29:89:0f:80:65:d4:89:9c:71:e9:db:e7:58:07:
         c4:67:cc:84:96:59:f6:e6:66:5a:3c:e7:6a:3a:2d:29:1f:51:
         7e:8a:9c:9f:9c:32:83:a9:b4:e8:83:ac:ab:b5:a7:ab:bb:11:
         91:68:56:a0:b6:10:93:2f:e6:f3:48:c6:8c:db:69:4a:2c:5a:
         fa:8f:af:72:ed:b4:32:5a:4e:11:a7:a7:01:16:fd:cd:e6:b5:
         54:a6:94:ae:1e:9b:56:5b:d6:b4:4e:f7:98:45:67:6c:ba:bb:
         e2:1d:39:15:53:19:c4:ac:4b:3f:56:c1:9b:07:e2:84:b2:b9:
         72:b1:04:7e:4b:7e:99:31:50:4e:fe:33:30:09:20:35:f7:b7:
         08:9b:b5:09:c1:6a:0f:c6:58:88:12:20:b2:80:d4:ed:ac:49:
         02:3c:eb:8d:86:4f:b3:46:64:4d:0e:e8:1c:65:76:8b:02:ff:
         2c:4a:70:d6:01:1d:9b:5a:f8:b7:ca:30:ae:7a:06:79:f1:1b:
         0e:87:85:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 9 12:20:31 2025 by rpki-client