This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367CC68/527491FCD35D11F085817997DAE4EC9C/kFAlcktjykllnsFAWPqwwTHFDp8.mft
File:                     kFAlcktjykllnsFAWPqwwTHFDp8.mft (raw, json)
Hash identifier:          sbNondKrWp+vzis84i4Fc55m4s3pCjgjSyVj5vfE4N4=
Subject key identifier:   40:FF:35:9E:07:AD:96:87:1C:B3:C4:E6:4C:FA:6C:84:87:2F:43:64
Authority key identifier: 90:50:25:72:4B:63:CA:49:65:9E:C1:40:58:FA:B0:C1:31:C5:0E:9F
Certificate issuer:       /CN=F367CC68AF/serialNumber=905025724B63CA49659EC14058FAB0C131C50E9F
Certificate serial:       06
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/kFAlcktjykllnsFAWPqwwTHFDp8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F367CC68/527491FCD35D11F085817997DAE4EC9C/kFAlcktjykllnsFAWPqwwTHFDp8.mft
Manifest number:          05
Signing time:             Tue 09 Dec 2025 05:24:00 +0000
Manifest this update:     Tue 09 Dec 2025 05:24:00 +0000
Manifest next update:     Thu 11 Dec 2025 05:24:00 +0000
Files and hashes:         1: kFAlcktjykllnsFAWPqwwTHFDp8.crl (hash: NbSK/aB6paOyo5ok1gGbTmL7qLkROL32qCO0dPRaF3o=)
                          2: 5F36C9FED43A11F087C1DB7BDAE4EC9C.roa (hash: 4Qs9L5d+Awp2J42sO92B4p+sTgRxFXnSs6/Y3boWpeI=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F367CC68/527491FCD35D11F085817997DAE4EC9C/kFAlcktjykllnsFAWPqwwTHFDp8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F367CC68/527491FCD35D11F085817997DAE4EC9C/kFAlcktjykllnsFAWPqwwTHFDp8.mft
                          rsync://rpki.afrinic.net/repository/afrinic/kFAlcktjykllnsFAWPqwwTHFDp8.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 11 Dec 2025 05:23:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6 (0x6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F367CC68AF, serialNumber=905025724B63CA49659EC14058FAB0C131C50E9F
        Validity
            Not Before: Dec  9 05:24:00 2025 GMT
            Not After : Dec 11 05:24:00 2025 GMT
        Subject: CN=6937b270-94ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:f0:e0:24:b7:e8:04:78:a0:36:bd:11:cd:ca:
                    ff:5c:68:90:5b:37:b8:af:cf:d8:50:5a:38:33:6e:
                    75:68:0a:e9:e7:c4:89:3a:a2:c7:dd:db:da:66:69:
                    a0:65:8f:14:80:f7:f3:29:68:f6:26:37:6e:56:55:
                    84:0d:11:33:5e:79:2d:f0:8e:88:3e:11:da:29:fa:
                    4e:a5:0c:71:2d:11:9f:b6:c5:d9:ab:aa:fe:b0:04:
                    a6:a3:bd:15:92:03:fe:4f:5c:9d:4a:6b:a0:95:11:
                    02:87:12:1c:50:6d:47:d2:3e:38:b1:5f:1e:21:2b:
                    c6:18:c5:ce:7c:cd:d2:d2:30:c4:33:a3:a4:c2:e3:
                    ef:38:32:1f:6f:6d:1c:58:11:6e:ef:86:12:ae:19:
                    eb:77:ca:d7:4a:53:48:db:ef:0d:be:7f:f5:b2:fa:
                    6c:59:48:ba:b2:f7:46:80:b2:f0:b8:2c:a4:06:10:
                    8d:11:88:38:27:00:1a:e4:5e:cc:d2:b0:1e:e7:73:
                    aa:ba:6e:0a:15:6d:fb:30:8f:72:fd:ba:6e:37:19:
                    10:8e:e1:ee:50:d8:fe:a7:a3:73:33:5e:4a:ca:b7:
                    96:aa:83:e0:b4:08:e6:f2:3c:4f:db:bf:44:b1:9d:
                    13:6e:4b:81:a1:10:5b:d7:b8:9f:b2:e6:40:dc:04:
                    91:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:FF:35:9E:07:AD:96:87:1C:B3:C4:E6:4C:FA:6C:84:87:2F:43:64
            X509v3 Authority Key Identifier:
                keyid:90:50:25:72:4B:63:CA:49:65:9E:C1:40:58:FA:B0:C1:31:C5:0E:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F367CC68/527491FCD35D11F085817997DAE4EC9C/kFAlcktjykllnsFAWPqwwTHFDp8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/kFAlcktjykllnsFAWPqwwTHFDp8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367CC68/527491FCD35D11F085817997DAE4EC9C/kFAlcktjykllnsFAWPqwwTHFDp8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:32:56:83:ae:fe:49:55:ab:c9:74:0b:34:4e:fb:8f:44:58:
         ae:95:4a:43:8b:d4:bf:c2:50:ec:47:ef:cb:03:4e:fc:8c:7c:
         81:e7:09:09:4f:97:b4:96:96:0d:af:70:51:6d:e8:a3:b7:4c:
         79:67:a1:c4:8e:c1:22:31:00:19:52:ff:e6:c8:81:ed:ac:8e:
         6b:a3:7a:86:d4:b6:2c:95:a5:38:69:bf:58:ab:d0:36:a5:97:
         b8:52:b6:06:b6:74:ec:c7:6e:4a:f0:09:7d:7b:f7:40:0a:dd:
         95:1a:80:ff:f3:41:9e:07:d8:7a:c0:4e:fa:3b:d6:0a:d6:da:
         8e:59:bd:54:cd:f6:99:76:86:55:0e:fc:54:74:62:eb:09:d1:
         f2:bd:2e:e5:0b:2c:89:9d:40:b1:3e:a4:ec:f3:0e:95:27:b5:
         04:1c:08:92:dc:f7:8f:e2:88:a5:9f:c8:35:47:2e:f8:75:2c:
         22:54:7a:53:2e:4c:eb:ed:d3:88:e9:54:eb:51:c3:33:45:b7:
         33:3d:4b:62:e5:ac:3b:4a:7f:d4:1e:30:ec:f7:0a:bf:fd:2a:
         bc:ff:bb:6f:d6:16:90:84:58:38:12:fb:27:f1:48:76:2f:6b:
         19:fa:62:d2:35:90:b9:84:81:37:53:d6:87:85:b7:1e:b9:c8:
         cf:b5:cf:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 9 12:03:15 2025 by rpki-client