This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A44EA/90E3EB36890911E984EC3C5FF8AEA228/mlfRoEhHbJDZjDymmHBdYtTdRNM.mft
File:                     mlfRoEhHbJDZjDymmHBdYtTdRNM.mft (raw, json)
Hash identifier:          81JhS+UbnomvBIZy+CsQ7cCYcXdydfti5p2Z4eA87rA=
Subject key identifier:   3B:EF:F1:8F:86:16:5B:93:17:50:F0:0A:9F:97:8C:EE:A7:AF:9F:31
Authority key identifier: 9A:57:D1:A0:48:47:6C:90:D9:8C:3C:A6:98:70:5D:62:D4:DD:44:D3
Certificate issuer:       /CN=F36A44EAAF/serialNumber=9A57D1A048476C90D98C3CA698705D62D4DD44D3
Certificate serial:       099A
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/mlfRoEhHbJDZjDymmHBdYtTdRNM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/90E3EB36890911E984EC3C5FF8AEA228/mlfRoEhHbJDZjDymmHBdYtTdRNM.mft
Manifest number:          0995
Signing time:             Thu 18 Dec 2025 01:28:30 +0000
Manifest this update:     Thu 18 Dec 2025 01:28:29 +0000
Manifest next update:     Sat 20 Dec 2025 01:28:29 +0000
Files and hashes:         1: mlfRoEhHbJDZjDymmHBdYtTdRNM.crl (hash: 27xI5sk0IkaN5XqOrRkyTl+ofAe8TwiXsqCkQSo/nJs=)
                          2: A59E099282C411F0B018AEC1DAE4EC9C.roa (hash: okBnUm/NcC2euNDAK0BM3ThQh/20GIpH4iqpfDhnEF8=)
                          3: E600EA8C82C311F0AA9237BDDAE4EC9C.roa (hash: fG/5xWCUdEM58O5TjC0L4Y26zDzPnoakqNic7vSKxmM=)
                          4: 193C239E82C411F090E870BDDAE4EC9C.roa (hash: aipTiaVnDtgCS5hSfDq+yj7qAJemAqvJkMKoIB8dgLA=)
                          5: A800754A82C311F09AF518BBDAE4EC9C.roa (hash: SAIigmdTDHDxOusEjUmretqLmVMcAl3gAWgtzTQZPeI=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/90E3EB36890911E984EC3C5FF8AEA228/mlfRoEhHbJDZjDymmHBdYtTdRNM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/90E3EB36890911E984EC3C5FF8AEA228/mlfRoEhHbJDZjDymmHBdYtTdRNM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/mlfRoEhHbJDZjDymmHBdYtTdRNM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 20 Dec 2025 00:07:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2458 (0x99a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A44EAAF, serialNumber=9A57D1A048476C90D98C3CA698705D62D4DD44D3
        Validity
            Not Before: Dec 18 01:28:29 2025 GMT
            Not After : Dec 20 01:28:29 2025 GMT
        Subject: CN=694358be-4ccb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:5d:62:a9:0d:18:a6:76:03:fb:e2:73:39:92:
                    48:61:36:dc:08:2e:a4:dc:ad:a4:d3:e8:5d:bf:94:
                    13:92:b1:30:6f:72:2f:40:8b:63:ce:2a:8c:65:8b:
                    70:06:7f:02:36:80:d6:e4:fc:9c:f1:d8:b4:95:58:
                    5e:bb:d6:04:a3:cc:3e:c0:12:f6:f9:24:82:fa:18:
                    c4:29:d5:e4:a9:c7:47:58:aa:9c:79:40:68:50:7e:
                    61:41:ad:57:e0:7b:e7:39:4b:13:b1:c5:9a:7d:5a:
                    83:da:5f:71:90:38:99:ea:5f:27:d4:f7:42:a6:20:
                    1d:95:e1:ec:0f:1f:20:31:38:54:99:b3:1c:10:08:
                    b0:74:e3:1d:b0:1a:60:ff:17:ed:a9:76:b8:ff:8f:
                    d9:ef:82:24:8b:bb:47:ab:b4:e0:15:d6:b9:35:0c:
                    36:df:7e:65:6f:0c:51:1f:0e:ed:e0:d0:93:27:47:
                    8b:66:93:34:3a:ba:ae:e0:51:60:f8:a1:d3:2a:39:
                    1b:a0:cc:35:c9:7a:93:3c:0e:3b:e4:7b:88:ed:db:
                    01:c7:69:f7:b5:10:b2:62:a6:44:18:9b:99:f9:52:
                    7c:9d:9e:7a:a4:96:7c:95:a1:18:4f:34:92:f8:d6:
                    5f:13:83:d2:2c:44:c6:45:fb:06:fb:92:39:04:96:
                    b2:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:EF:F1:8F:86:16:5B:93:17:50:F0:0A:9F:97:8C:EE:A7:AF:9F:31
            X509v3 Authority Key Identifier:
                keyid:9A:57:D1:A0:48:47:6C:90:D9:8C:3C:A6:98:70:5D:62:D4:DD:44:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/90E3EB36890911E984EC3C5FF8AEA228/mlfRoEhHbJDZjDymmHBdYtTdRNM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/mlfRoEhHbJDZjDymmHBdYtTdRNM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/90E3EB36890911E984EC3C5FF8AEA228/mlfRoEhHbJDZjDymmHBdYtTdRNM.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:30:60:56:ca:ae:4b:ee:51:9a:2f:f1:23:e4:40:33:31:dc:
         cd:4c:bb:b2:79:ba:d4:63:8d:34:89:f1:90:ce:a5:86:4c:67:
         0c:93:94:d4:47:db:cc:6a:d7:25:cc:44:ac:00:3b:bc:5e:7d:
         90:bc:a1:f2:eb:2a:b1:4b:ba:c3:5a:24:53:d9:0b:3c:56:3c:
         99:4b:dc:22:bf:b0:12:90:7f:e3:bb:71:2c:da:a0:ab:32:cc:
         26:71:03:0c:32:67:41:77:c4:bf:d6:04:09:9f:a4:ae:20:1e:
         88:cc:28:14:01:9f:13:55:89:53:b0:18:b2:f8:34:b2:86:d0:
         fd:90:42:63:4d:d1:9a:ff:22:b5:ed:bd:ae:18:a0:5e:a8:d8:
         76:39:9c:ef:4c:68:06:cd:fa:ce:cf:23:9e:88:f1:2e:b1:a3:
         1e:ba:aa:e7:65:96:c7:b2:f4:07:9b:6c:ed:d9:51:43:da:73:
         27:2e:fa:5e:f3:79:97:00:08:d0:92:20:44:45:1e:79:93:12:
         b3:0e:66:02:41:1b:6a:3e:7d:bc:8a:32:80:a1:bb:2d:d7:5d:
         f6:23:af:50:37:02:da:d0:8c:15:43:dc:35:a8:4b:47:fe:4a:
         42:0c:be:3a:7c:ba:54:b0:d5:47:1a:36:35:69:55:2b:e3:17:
         40:37:18:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 18 15:44:56 2025 by rpki-client