This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36AE219/52BAC3D8231011EF92871F3A7DDC24C2/kcmeRXlnuZKbLt55eXKLD-Jjmtk.mft
File:                     kcmeRXlnuZKbLt55eXKLD-Jjmtk.mft (raw, json)
Hash identifier:          gPW3NgHWmFtQvmf60sH5Mw9U0pNq4MzyvoeONfA6p1E=
Subject key identifier:   29:57:9A:FF:C3:2F:38:56:02:F9:FC:76:53:F9:A3:C5:43:C1:26:10
Authority key identifier: 91:C9:9E:45:79:67:B9:92:9B:2E:DE:79:79:72:8B:0F:E2:63:9A:D9
Certificate issuer:       /CN=F36AE219AF/serialNumber=91C99E457967B9929B2EDE7979728B0FE2639AD9
Certificate serial:       023F
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/kcmeRXlnuZKbLt55eXKLD-Jjmtk.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36AE219/52BAC3D8231011EF92871F3A7DDC24C2/kcmeRXlnuZKbLt55eXKLD-Jjmtk.mft
Manifest number:          0233
Signing time:             Sat 22 Nov 2025 04:18:21 +0000
Manifest this update:     Sat 22 Nov 2025 04:18:20 +0000
Manifest next update:     Mon 24 Nov 2025 04:18:20 +0000
Files and hashes:         1: kcmeRXlnuZKbLt55eXKLD-Jjmtk.crl (hash: 2YjWv8HxwozifAfrxujtIFCOaqrvD0ms3zOEmiaQUb4=)
                          2: 12F98C3A322C11F09C0E00A8DAE4EC9C.roa (hash: 3/y2xPCMLAqnZ9fL5r4SiXDKczBJPyz466opmOdw+x8=)
                          3: AA49DBAA0BBA11F0ABCF1C53762E951A.roa (hash: 1gTiKBvUuN5Hp+vmaDEDs42+vihpN5KZK723GLEruGs=)
                          4: C21173B24F4811EF8A277884762E951A.roa (hash: Af8VqHnpag7lv/aOf7jeqaTrvvKqqPvGk8sXdY9C8oE=)
                          5: 2BFA32F04F4911EF85B98B88762E951A.roa (hash: VLnmys2y2qLTP9i5IM1gmNfB2WyHqNq5FeIYAdMqXMg=)
                          6: 8F09B9704F4811EF95C0F883762E951A.roa (hash: Jb7IC1uL5aUvVn+T0mFpr5lxOWcWzHI+l9IojCLU5sE=)
                          7: 4691B7064F4811EFB5EC1580762E951A.roa (hash: Y7dEtQLSXLs6SEUJz5C6Rgx6jukPXe2EL/tguL6OuEc=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36AE219/52BAC3D8231011EF92871F3A7DDC24C2/kcmeRXlnuZKbLt55eXKLD-Jjmtk.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36AE219/52BAC3D8231011EF92871F3A7DDC24C2/kcmeRXlnuZKbLt55eXKLD-Jjmtk.mft
                          rsync://rpki.afrinic.net/repository/afrinic/kcmeRXlnuZKbLt55eXKLD-Jjmtk.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 24 Nov 2025 00:06:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 575 (0x23f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36AE219AF, serialNumber=91C99E457967B9929B2EDE7979728B0FE2639AD9
        Validity
            Not Before: Nov 22 04:18:20 2025 GMT
            Not After : Nov 24 04:18:20 2025 GMT
        Subject: CN=6921398d-c851
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:39:d3:d5:b0:f1:0c:c1:76:66:8d:57:db:29:
                    5d:ac:c3:3a:08:ca:76:90:ad:dc:13:4b:49:67:da:
                    b6:5f:f2:d0:cc:e2:27:64:72:75:1f:5a:1a:34:ff:
                    33:31:38:ab:f6:65:47:ac:d6:df:29:b1:82:8f:72:
                    c9:2d:c4:87:c8:ae:7b:1a:62:4c:78:b2:f7:27:b0:
                    da:5a:ab:e0:7e:35:4b:66:44:ab:96:b8:74:67:3b:
                    88:5f:c4:f6:38:db:03:a8:48:f7:64:bb:d2:86:5d:
                    60:c5:e4:de:2f:5d:03:c0:ce:75:33:aa:c1:73:88:
                    b6:44:3a:8e:64:59:a5:8f:32:bf:96:ef:b1:42:a3:
                    a2:ae:46:ee:61:ac:7f:94:4a:6e:ea:d4:1e:60:44:
                    f5:ab:44:93:8f:99:28:aa:40:b6:e5:c1:ae:da:2b:
                    a8:6f:ea:95:61:89:4b:7b:dc:c9:50:4e:35:5c:06:
                    7a:53:1d:99:77:05:ce:9f:8c:ed:06:ca:8e:34:47:
                    08:d1:43:e8:1d:8f:c7:1d:c5:23:f8:fb:0c:f1:31:
                    a3:40:fa:46:46:da:aa:61:f5:f4:00:25:3f:52:35:
                    c8:4d:72:b5:9f:d1:12:20:d1:b8:e8:fe:24:7e:8b:
                    e1:50:32:d3:94:27:5b:a5:bc:7e:e4:23:d8:ae:12:
                    86:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:57:9A:FF:C3:2F:38:56:02:F9:FC:76:53:F9:A3:C5:43:C1:26:10
            X509v3 Authority Key Identifier:
                keyid:91:C9:9E:45:79:67:B9:92:9B:2E:DE:79:79:72:8B:0F:E2:63:9A:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36AE219/52BAC3D8231011EF92871F3A7DDC24C2/kcmeRXlnuZKbLt55eXKLD-Jjmtk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/kcmeRXlnuZKbLt55eXKLD-Jjmtk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36AE219/52BAC3D8231011EF92871F3A7DDC24C2/kcmeRXlnuZKbLt55eXKLD-Jjmtk.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:53:3c:e3:6d:b6:ce:29:22:8a:01:56:47:85:3b:5c:c9:90:
         4b:4b:9d:f8:fc:bb:ee:83:94:db:fa:dd:7e:c3:ec:ea:3b:54:
         63:81:a3:c2:ea:61:1c:20:98:29:18:68:85:78:f5:2a:15:01:
         86:d5:b5:2f:90:62:af:d0:44:c6:e9:38:94:2c:73:5e:b1:cb:
         38:73:80:21:c1:58:e3:a9:6c:26:d4:3e:a4:f7:6c:b8:0f:c6:
         42:c5:ff:3a:17:49:a1:2e:42:43:1b:18:b2:22:70:0c:79:48:
         a4:d6:54:cf:f3:6d:ee:51:4d:a8:5b:d8:54:c2:cd:10:2f:55:
         cb:bc:13:4d:c4:9f:63:89:15:87:d6:27:b5:ce:cc:61:b4:99:
         84:76:9f:c9:4e:e8:86:b0:6e:a6:93:f9:22:6c:d2:16:a7:0b:
         75:04:44:b8:7d:68:1f:34:eb:3e:a3:7f:d5:e6:7c:63:41:8e:
         82:42:44:1c:04:70:3c:ca:78:a3:ab:75:da:2a:ce:6e:01:e8:
         13:7c:b2:8a:07:14:e8:e1:2e:37:3a:09:80:39:98:78:b7:f6:
         f8:8a:f6:96:6b:cd:57:09:b0:ff:7b:06:32:c0:8e:82:f3:01:
         85:db:7e:8c:07:d4:18:96:9e:b9:9b:cf:03:1e:ad:f9:79:fb:
         0e:28:df:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 22 21:39:43 2025 by rpki-client