This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36CAD03/90CF9CCA1F4211EEB18184614AD9E6FC/fzc4orKLb6wO4WjazaECCZH2Xv8.mft
File:                     fzc4orKLb6wO4WjazaECCZH2Xv8.mft (raw, json)
Hash identifier:          sSpKgi1s7LYJ9UqU1UBP/k2Xcpp8cpuvy4wwlamEWwM=
Subject key identifier:   89:FB:F6:EB:13:AD:0D:5C:49:F7:52:DF:5B:42:DC:02:4B:3B:3F:C7
Authority key identifier: 7F:37:38:A2:B2:8B:6F:AC:0E:E1:68:DA:CD:A1:02:09:91:F6:5E:FF
Certificate issuer:       /CN=F36CAD03AF/serialNumber=7F3738A2B28B6FAC0EE168DACDA1020991F65EFF
Certificate serial:       03A5
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/fzc4orKLb6wO4WjazaECCZH2Xv8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36CAD03/90CF9CCA1F4211EEB18184614AD9E6FC/fzc4orKLb6wO4WjazaECCZH2Xv8.mft
Manifest number:          039D
Signing time:             Fri 19 Dec 2025 03:37:08 +0000
Manifest this update:     Fri 19 Dec 2025 03:37:08 +0000
Manifest next update:     Sun 21 Dec 2025 03:37:08 +0000
Files and hashes:         1: fzc4orKLb6wO4WjazaECCZH2Xv8.crl (hash: nItoLzWhOCOEYpb93MQxXfy9EwZujPGjHatPyx00G2Y=)
                          2: 5201D7B49AA211F0847D9CEFDAE4EC9C.roa (hash: vv3TG7X10dkDewJJBWp8gsrO41Ats4FLyzxkghQmX3s=)
                          3: 2A2938409AA211F0AC8E98EDDAE4EC9C.roa (hash: qOE+EV84QYKmUD93zBU7aMqugV0LjUqZj/XSzGnEmpw=)
                          4: FB21D3049AA111F0A09833EDDAE4EC9C.roa (hash: 2qR4wjqNuC0TKOwbykEt6Pca7LKb2L8DNkEqc+08Jrw=)
                          5: AFDCE496DD6A11EFB91A764C762E951A.roa (hash: LUqMxb0MwGP6MZT9i0MH7OuuoSQyIJFrnjoWDAeBNXw=)
                          6: 5101379C1F4311EE8FC7B9634AD9E6FC.roa (hash: 9vRfRWcOnYof6Mu0ENqhdmmo04buF4ccumW7t2r2a0A=)
                          7: 85AD2BD69AA211F0A03B72F1DAE4EC9C.roa (hash: kobMuaQNgwzOY1HkqprMAm4bLPBawaJ7hSf0Z9cXUEE=)
                          8: 1FACC63EDD6A11EFB9FD6F4B762E951A.roa (hash: dF+TudNzn5JdoAREd/OnWJP6k5lbPTgpi/h8Pngj+g0=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36CAD03/90CF9CCA1F4211EEB18184614AD9E6FC/fzc4orKLb6wO4WjazaECCZH2Xv8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36CAD03/90CF9CCA1F4211EEB18184614AD9E6FC/fzc4orKLb6wO4WjazaECCZH2Xv8.mft
                          rsync://rpki.afrinic.net/repository/afrinic/fzc4orKLb6wO4WjazaECCZH2Xv8.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 21 Dec 2025 00:06:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 933 (0x3a5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36CAD03AF, serialNumber=7F3738A2B28B6FAC0EE168DACDA1020991F65EFF
        Validity
            Not Before: Dec 19 03:37:08 2025 GMT
            Not After : Dec 21 03:37:08 2025 GMT
        Subject: CN=6944c864-366b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:49:7b:9d:f6:62:db:51:ae:67:12:8d:dd:a9:
                    be:32:83:85:67:2d:2d:df:fa:14:b8:04:c5:29:69:
                    8b:c2:be:94:31:73:76:8a:36:6d:9b:2e:05:de:3e:
                    20:c4:7c:82:ee:5f:ab:9a:cb:6c:15:27:a4:81:a7:
                    e9:80:a1:1f:04:82:de:54:06:4e:82:6f:80:66:00:
                    d4:58:4a:9a:ac:b2:56:e9:13:cb:5f:c3:67:e9:64:
                    f1:32:b7:ee:82:af:49:64:7d:c9:c2:03:ad:7b:6c:
                    92:9f:5f:19:9e:4c:0d:1d:25:9f:4a:f9:3a:92:71:
                    43:f7:61:c7:0a:9a:c7:0c:08:81:1d:7d:c6:e0:bc:
                    92:f8:04:a6:67:dd:09:e9:f7:e7:ee:9d:32:fb:e5:
                    d0:a5:21:80:3f:a6:72:31:f0:76:08:c9:50:b6:88:
                    93:b7:72:51:47:e8:3c:df:61:db:bd:e3:fc:69:d2:
                    b2:1d:98:8d:53:95:f2:02:32:62:87:ae:33:82:20:
                    a8:c7:e4:cf:bb:c8:d3:11:78:6a:d4:0b:8d:57:cf:
                    92:0a:0b:39:3c:31:99:a5:38:04:f4:fc:ba:39:fc:
                    d3:50:fa:d0:71:d9:33:ca:f2:88:55:46:45:20:24:
                    71:29:25:6b:9e:1d:cd:34:c2:91:06:ec:3a:39:f3:
                    05:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:FB:F6:EB:13:AD:0D:5C:49:F7:52:DF:5B:42:DC:02:4B:3B:3F:C7
            X509v3 Authority Key Identifier:
                keyid:7F:37:38:A2:B2:8B:6F:AC:0E:E1:68:DA:CD:A1:02:09:91:F6:5E:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36CAD03/90CF9CCA1F4211EEB18184614AD9E6FC/fzc4orKLb6wO4WjazaECCZH2Xv8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/fzc4orKLb6wO4WjazaECCZH2Xv8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36CAD03/90CF9CCA1F4211EEB18184614AD9E6FC/fzc4orKLb6wO4WjazaECCZH2Xv8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:4d:99:a4:8e:c2:50:f4:0c:72:74:39:e1:09:83:0a:53:17:
         9a:11:7a:53:51:d7:9f:ef:01:19:24:43:cd:c0:f0:b6:2e:c5:
         1f:37:93:f2:40:dc:75:2f:6a:ba:15:ff:1f:e9:08:a1:a0:fb:
         ab:0b:49:06:ad:6b:9f:4c:86:69:19:10:1f:6e:8d:13:51:cb:
         21:dc:2d:ac:fe:2c:99:15:1a:b3:d7:f9:42:8f:2e:cb:90:5d:
         38:5b:ba:b7:bc:51:d1:15:0d:a7:99:e1:d9:78:d8:c5:41:7a:
         9b:26:15:d0:fd:df:b6:0d:78:a2:35:64:bf:02:3f:72:6b:ae:
         3a:24:05:bd:22:c0:15:5d:5f:99:1c:6e:6e:73:27:81:00:07:
         ec:9c:2c:72:a9:1b:0e:74:64:8f:a5:13:5e:59:ef:95:dc:e6:
         a9:c4:7f:90:ae:7b:fa:da:f8:f1:9b:99:cb:44:7f:eb:82:54:
         bd:9e:55:9d:48:fd:17:80:c8:a4:1e:cc:2a:a9:02:a0:b4:3e:
         03:33:27:82:7a:d9:b5:f6:1a:f3:3d:9a:7f:07:31:0f:ac:3e:
         5c:e5:0e:6d:38:05:b6:87:e2:88:49:3d:d8:37:0d:87:d4:60:
         56:db:47:32:c0:ab:c7:21:4a:2d:5f:31:4f:64:17:5a:c8:f5:
         c9:8a:82:08
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICA6UwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
Q0FEMDNBRjExMC8GA1UEBRMoN0YzNzM4QTJCMjhCNkZBQzBFRTE2OERBQ0RBMTAy
MDk5MUY2NUVGRjAeFw0yNTEyMTkwMzM3MDhaFw0yNTEyMjEwMzM3MDhaMBgxFjAU
BgNVBAMTDTY5NDRjODY0LTM2NmIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCsSXud9mLbUa5nEo3dqb4yg4VnLS3f+hS4BMUpaYvCvpQxc3aKNm2bLgXe
PiDEfILuX6uay2wVJ6SBp+mAoR8Egt5UBk6Cb4BmANRYSpqsslbpE8tfw2fpZPEy
t+6Cr0lkfcnCA617bJKfXxmeTA0dJZ9K+TqScUP3YccKmscMCIEdfcbgvJL4BKZn
3Qnp9+funTL75dClIYA/pnIx8HYIyVC2iJO3clFH6DzfYdu94/xp0rIdmI1TlfIC
MmKHrjOCIKjH5M+7yNMReGrUC41Xz5IKCzk8MZmlOAT0/Lo5/NNQ+tBx2TPK8ohV
RkUgJHEpJWueHc00wpEG7Do58wWFAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUifv2
6xOtDVxJ91LfW0LcAks7P8cwHwYDVR0jBBgwFoAUfzc4orKLb6wO4WjazaECCZH2
Xv8wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkNBRDAzLzkwQ0Y5Q0NBMUY0MjExRUVCMTgxODQ2MTRBRDlFNkZDL2Z6YzRv
cktMYjZ3TzRXamF6YUVDQ1pIMlh2OC5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2Z6YzRvcktMYjZ3TzRXamF6YUVDQ1pIMlh2OC5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2Q0FEMDMvOTBDRjlDQ0ExRjQyMTFFRUIxODE4NDYxNEFE
OUU2RkMvZnpjNG9yS0xiNndPNFdqYXphRUNDWkgyWHY4Lm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCwTZmkjsJQ9AxydDnhCYMKUxeaEXpT
Udef7wEZJEPNwPC2LsUfN5PyQNx1L2q6Ff8f6QihoPurC0kGrWufTIZpGRAfbo0T
Ucsh3C2s/iyZFRqz1/lCjy7LkF04W7q3vFHRFQ2nmeHZeNjFQXqbJhXQ/d+2DXii
NWS/Aj9ya646JAW9IsAVXV+ZHG5ucyeBAAfsnCxyqRsOdGSPpRNeWe+V3OapxH+Q
rnv62vjxm5nLRH/rglS9nlWdSP0XgMikHswqqQKgtD4DMyeCetm19hrzPZp/BzEP
rD5c5Q5tOAW2h+KIST3YNw2H1GBW20cywKvHIUotXzFPZBdayPXJioII
-----END CERTIFICATE-----
Generated at Fri Dec 19 10:42:12 2025 by rpki-client