This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3697F9B/C6DEF4DCE24611EA8D16EF50F8AEA228/a-k9QjdfWHWi-MrSgJiFQWLSUEg.mft
File:                     a-k9QjdfWHWi-MrSgJiFQWLSUEg.mft (raw, json)
Hash identifier:          Jzy2v85xT3OLM2BxRP2HYIHq8YznqXq9+eEPo4BI75o=
Subject key identifier:   A2:6A:F0:06:FA:99:81:3C:12:5F:C9:33:45:06:2E:D4:34:8F:F1:5C
Authority key identifier: 6B:E9:3D:42:37:5F:58:75:A2:F8:CA:D2:80:98:85:41:62:D2:50:48
Certificate issuer:       /CN=F3697F9BAF/serialNumber=6BE93D42375F5875A2F8CAD28098854162D25048
Certificate serial:       07C8
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/a-k9QjdfWHWi-MrSgJiFQWLSUEg.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3697F9B/C6DEF4DCE24611EA8D16EF50F8AEA228/a-k9QjdfWHWi-MrSgJiFQWLSUEg.mft
Manifest number:          07C2
Signing time:             Thu 04 Dec 2025 01:54:49 +0000
Manifest this update:     Thu 04 Dec 2025 01:54:49 +0000
Manifest next update:     Sat 06 Dec 2025 01:54:49 +0000
Files and hashes:         1: a-k9QjdfWHWi-MrSgJiFQWLSUEg.crl (hash: eH+Ng/z8w3890ZoH6SY6Cw8HuJ47QpNchCa2x7YEzzU=)
                          2: E24D05EEE25311EA92AD155EF8AEA228.roa (hash: NhNBSTEDSsS8nv1gPk35pYlSA/j54gCUeglNVOfp5Jk=)
                          3: 8B23E96CE25411EAABDED95EF8AEA228.roa (hash: G1N7VCX3quzWOxjZ6v2ZRD1s53UOL4I3nt3IbyrQuyg=)
                          4: 10D082ECE25411EAB7E7505EF8AEA228.roa (hash: HCeS+ur8bLRwVYC7j4CEZcmf2zW7Wq0HlwhQZaJebjk=)
                          5: 8DA134B6E25311EA83A9A55DF8AEA228.roa (hash: FZLhMJ//MfWJptrE3zcXjMsUeDRso3qHvO1+H5qU2Z0=)
                          6: B193AAD8E25411EAACEFFA5EF8AEA228.roa (hash: 6msQDGgz9SoLw2neOnUxuPHAYOAC1PdRzeLr4+FvrcI=)
                          7: 57CB6630E25411EA8C85A55EF8AEA228.roa (hash: zokPSNjx8r4IpsyxRDDLa5MvDTlpaKfogK8lEwUhKrg=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3697F9B/C6DEF4DCE24611EA8D16EF50F8AEA228/a-k9QjdfWHWi-MrSgJiFQWLSUEg.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3697F9B/C6DEF4DCE24611EA8D16EF50F8AEA228/a-k9QjdfWHWi-MrSgJiFQWLSUEg.mft
                          rsync://rpki.afrinic.net/repository/afrinic/a-k9QjdfWHWi-MrSgJiFQWLSUEg.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 06 Dec 2025 01:54:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1992 (0x7c8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3697F9BAF, serialNumber=6BE93D42375F5875A2F8CAD28098854162D25048
        Validity
            Not Before: Dec  4 01:54:49 2025 GMT
            Not After : Dec  6 01:54:49 2025 GMT
        Subject: CN=6930e9e9-81b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:29:a8:12:ab:b4:7d:50:b3:14:4d:2e:f1:9f:
                    e8:71:75:e1:8d:bb:49:82:9e:77:3d:d4:8e:79:4f:
                    83:4f:bd:26:31:42:51:f7:3d:c6:71:a7:bd:24:92:
                    26:ac:64:56:2d:b1:cf:fd:02:e2:47:22:66:13:1f:
                    94:3a:b2:a9:3d:be:8e:31:5d:e7:7d:33:0e:e2:ce:
                    5e:db:4f:cf:3c:a8:78:9e:57:e6:13:07:0e:44:a4:
                    0b:ee:49:4c:08:5f:4d:23:e5:be:ae:18:e2:00:71:
                    aa:7f:5d:4b:60:3e:5a:6c:51:17:60:10:b2:89:ad:
                    7c:39:e1:1f:42:59:ff:cd:97:f8:d7:bd:a5:9d:37:
                    8b:15:b3:24:ef:18:dd:cf:3e:06:3c:a4:bd:c9:ef:
                    b8:8b:6a:8e:f0:f3:d5:62:a7:cb:86:dd:1b:8a:72:
                    2a:c9:88:d6:f2:80:e4:87:7e:19:cf:59:cb:21:01:
                    77:fb:2b:62:3c:af:2e:9f:14:6c:21:dc:40:f1:cf:
                    df:49:85:9e:a3:48:cb:8e:89:cf:39:d3:52:ad:ea:
                    a7:9c:e1:48:a7:fb:54:71:92:7b:24:4f:ea:66:95:
                    4a:e0:39:13:d6:18:5a:b5:19:f4:c2:e5:8b:f9:81:
                    c4:80:c1:fc:e6:48:31:a8:10:20:18:4d:f3:07:d6:
                    28:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:6A:F0:06:FA:99:81:3C:12:5F:C9:33:45:06:2E:D4:34:8F:F1:5C
            X509v3 Authority Key Identifier:
                keyid:6B:E9:3D:42:37:5F:58:75:A2:F8:CA:D2:80:98:85:41:62:D2:50:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3697F9B/C6DEF4DCE24611EA8D16EF50F8AEA228/a-k9QjdfWHWi-MrSgJiFQWLSUEg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/a-k9QjdfWHWi-MrSgJiFQWLSUEg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3697F9B/C6DEF4DCE24611EA8D16EF50F8AEA228/a-k9QjdfWHWi-MrSgJiFQWLSUEg.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:09:d1:aa:93:46:0d:99:8a:ec:69:af:77:a5:ee:9c:8d:5b:
         b6:9b:a3:fc:26:40:df:18:01:bf:be:05:82:ab:35:11:c6:b3:
         a0:29:6b:83:c3:3f:eb:f9:2f:aa:0a:82:3f:84:7c:ea:13:69:
         83:a5:12:8c:98:99:ce:11:cc:dd:3f:f7:1e:1e:86:7e:39:62:
         4b:7d:78:c9:65:c3:67:a4:8d:fe:b2:6d:29:f9:5b:eb:91:b6:
         ca:63:12:1b:aa:99:06:c1:4c:56:ae:0e:8b:9c:f3:aa:93:20:
         18:01:3d:4f:9b:80:27:6f:a5:03:a1:b9:f0:ab:78:3e:d2:c2:
         bb:e3:c2:d0:21:c7:52:77:2e:4d:89:56:f3:97:81:9b:6c:ff:
         79:bc:ea:23:e3:11:f5:28:dd:13:b4:96:55:eb:49:5e:d7:28:
         de:fe:8c:e9:59:01:8d:a1:6d:c4:24:d3:37:57:4d:78:31:30:
         92:c8:a6:a5:1f:ed:f6:d9:aa:4d:30:17:cb:50:e9:73:69:e5:
         b9:5f:c8:b0:d9:92:69:26:ae:55:3d:3d:c5:b4:94:a3:6c:02:
         d7:f5:76:ba:1c:47:a1:6b:0c:b8:48:b5:b8:64:43:98:48:06:
         23:06:9e:5f:5a:ed:5a:27:f5:ba:80:e5:ed:79:24:53:db:c0:
         b5:b8:12:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 4 11:23:24 2025 by rpki-client