This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3690C51/AE080A8CA67F11EF97375182762E951A/M9k2dXxyMpyzVJDsNDXRPytwToI.mft
File:                     M9k2dXxyMpyzVJDsNDXRPytwToI.mft (raw, json)
Hash identifier:          NaKbWZoTLq/wTutIWDMQk3J7uce7OLJ1J4CT04+sphQ=
Subject key identifier:   73:36:9A:86:FF:EF:86:64:EE:F6:9F:84:01:6B:C4:1B:EE:5D:99:59
Authority key identifier: 33:D9:36:75:7C:72:32:9C:B3:54:90:EC:34:35:D1:3F:2B:70:4E:82
Certificate issuer:       /CN=F3690C51AF/serialNumber=33D936757C72329CB35490EC3435D13F2B704E82
Certificate serial:       019B
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/M9k2dXxyMpyzVJDsNDXRPytwToI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3690C51/AE080A8CA67F11EF97375182762E951A/M9k2dXxyMpyzVJDsNDXRPytwToI.mft
Manifest number:          019A
Signing time:             Tue 23 Dec 2025 04:41:43 +0000
Manifest this update:     Tue 23 Dec 2025 04:41:42 +0000
Manifest next update:     Thu 25 Dec 2025 04:41:42 +0000
Files and hashes:         1: M9k2dXxyMpyzVJDsNDXRPytwToI.crl (hash: 3lumQw+cxSfW0BwpX0Y6Qx4QkTLgLGqtUJGTDuiscZM=)
                          2: 2E2B725AEEF411EFBCFA6F43762E951A.roa (hash: pbm0HU0V1QcdM+FCx6QyJP3O4fULzd1SgmZHd7KGnyo=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3690C51/AE080A8CA67F11EF97375182762E951A/M9k2dXxyMpyzVJDsNDXRPytwToI.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3690C51/AE080A8CA67F11EF97375182762E951A/M9k2dXxyMpyzVJDsNDXRPytwToI.mft
                          rsync://rpki.afrinic.net/repository/afrinic/M9k2dXxyMpyzVJDsNDXRPytwToI.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 25 Dec 2025 00:06:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 411 (0x19b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3690C51AF, serialNumber=33D936757C72329CB35490EC3435D13F2B704E82
        Validity
            Not Before: Dec 23 04:41:42 2025 GMT
            Not After : Dec 25 04:41:42 2025 GMT
        Subject: CN=694a1d87-8e8d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:b3:af:69:76:3e:49:d0:73:33:bb:68:4e:cc:
                    54:aa:fb:23:04:1d:8a:19:d2:5d:3b:d4:97:34:d6:
                    18:4d:38:17:7e:a1:e8:da:4c:41:5b:d5:8c:76:37:
                    08:04:4c:e2:3e:5b:21:a0:e2:a5:f3:d6:44:8e:17:
                    3a:f7:e3:ed:90:48:ca:0a:97:ae:02:85:87:36:32:
                    48:04:35:24:94:e6:54:87:48:31:90:d2:89:b6:3e:
                    6d:53:ff:81:77:36:cb:b1:de:7b:72:52:1b:ad:42:
                    70:66:7d:47:0c:42:5c:8c:8f:7c:53:ec:00:5f:54:
                    11:17:af:b0:52:9e:38:14:32:99:5f:ca:7b:bb:3e:
                    ed:59:8b:82:a0:b2:4f:4d:f2:2b:89:92:63:e7:9b:
                    60:ba:9f:48:fe:cd:26:c7:4a:57:c3:d7:2a:1e:26:
                    08:69:e0:ec:33:5c:84:a7:b6:10:0c:0f:32:2f:75:
                    41:b3:54:6b:07:86:cf:71:b3:18:30:64:a8:cd:42:
                    4f:85:e5:ba:a8:7f:c8:ef:e4:3b:de:02:23:86:3f:
                    28:8b:9f:48:aa:9d:5b:cd:8c:eb:4b:1e:22:8e:6c:
                    d5:44:2d:d0:17:ca:fd:be:90:d9:71:d6:d6:5e:5d:
                    f8:bc:23:12:f7:04:23:04:4c:c7:51:c7:cb:73:a1:
                    8a:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:36:9A:86:FF:EF:86:64:EE:F6:9F:84:01:6B:C4:1B:EE:5D:99:59
            X509v3 Authority Key Identifier:
                keyid:33:D9:36:75:7C:72:32:9C:B3:54:90:EC:34:35:D1:3F:2B:70:4E:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3690C51/AE080A8CA67F11EF97375182762E951A/M9k2dXxyMpyzVJDsNDXRPytwToI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/M9k2dXxyMpyzVJDsNDXRPytwToI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3690C51/AE080A8CA67F11EF97375182762E951A/M9k2dXxyMpyzVJDsNDXRPytwToI.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:b9:16:4f:31:17:b3:b8:4a:25:1b:2d:af:f1:91:99:2c:3b:
         6a:dd:fc:c2:e3:5a:99:67:da:af:8e:98:f5:3c:6c:a7:4f:f2:
         a7:2e:1b:0a:cd:00:89:98:58:4a:64:0d:2d:09:03:d1:e4:c9:
         a6:20:a7:a0:8d:ab:24:01:27:51:3d:fa:d9:64:b5:16:f3:7c:
         b1:70:2a:8f:57:83:8e:43:4c:4b:47:e5:a5:05:a7:47:d1:c8:
         1b:b9:09:f9:be:88:7e:c7:c3:dd:0b:1c:3b:97:4a:6d:32:c5:
         ba:47:6a:fe:dc:de:f6:b0:ed:c6:b7:eb:ff:b8:c9:98:66:e2:
         78:71:7e:9f:1c:db:06:1b:ef:4a:94:86:8a:25:e6:fa:fb:ab:
         da:63:d4:fd:0b:f1:04:c6:d5:7b:e9:b0:a1:12:78:dc:6b:0d:
         83:e7:ef:d2:5a:80:53:f2:27:4d:cf:f6:2a:23:84:7c:63:ae:
         04:b7:0d:ca:6f:52:e5:30:7b:bf:db:2f:24:f6:81:f6:f6:57:
         7d:c3:37:e2:f9:94:20:6a:08:aa:33:df:42:03:42:ad:fd:0f:
         01:79:a9:fa:98:77:50:73:9d:54:18:79:8b:47:7e:08:a1:78:
         33:98:d2:d4:5d:f5:be:29:fa:ee:4d:2a:ac:a8:55:4c:11:78:
         34:fc:76:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 08:40:28 2025 by rpki-client