This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D5F5A/2173E83ADAA611ED8227D4C42F6D8C1D/KCk0NtTW2jqTpg7KP77HfY3Dj2E.mft
File:                     KCk0NtTW2jqTpg7KP77HfY3Dj2E.mft (raw, json)
Hash identifier:          FTAT6kHAWJCEhEGNZTtzgZS7W2XzHjR6NztN/P/5Y4E=
Subject key identifier:   0C:B6:D2:00:E4:7E:26:50:E8:09:C1:63:E7:C8:55:24:29:C2:83:58
Authority key identifier: 28:29:34:36:D4:D6:DA:3A:93:A6:0E:CA:3F:BE:C7:7D:8D:C3:8F:61
Certificate issuer:       /CN=F36D5F5AAF/serialNumber=28293436D4D6DA3A93A60ECA3FBEC77D8DC38F61
Certificate serial:       03F9
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/KCk0NtTW2jqTpg7KP77HfY3Dj2E.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36D5F5A/2173E83ADAA611ED8227D4C42F6D8C1D/KCk0NtTW2jqTpg7KP77HfY3Dj2E.mft
Manifest number:          03EF
Signing time:             Thu 04 Dec 2025 03:25:07 +0000
Manifest this update:     Thu 04 Dec 2025 03:25:06 +0000
Manifest next update:     Sat 06 Dec 2025 03:25:06 +0000
Files and hashes:         1: KCk0NtTW2jqTpg7KP77HfY3Dj2E.crl (hash: GRkzX9ljT7+r2fuaJFtjdIEiYyROMXi6HcsQy/Z9XoM=)
                          2: 3BE81A3892FF11F088E51979DAE4EC9C.roa (hash: Yzg3xjGIsu/ulsgWMNyoDewqrKHbp+zn1cyoVl3O9Yg=)
                          3: FDA533F092FE11F0BA755DF5DAE4EC9C.roa (hash: pQCV7Xh0G5jeTLV72a/weSIz6eXJKOWd6gDgzxScmXg=)
                          4: 74B5C16292FF11F0BA81327BDAE4EC9C.roa (hash: X3y3ETyNfJkv+gNamJ5YAN6Cv+s3LQHP84dm6Z/93XY=)
                          5: 5B36715A92FF11F084841C7BDAE4EC9C.roa (hash: Y8PSOzjedh9cWf7Fh5eBNpi+rFoGWqu8tq9b4nzoOjg=)
                          6: C65FE1F692FE11F0BC8418F5DAE4EC9C.roa (hash: 36hjpJHDjwEXOIEOe0bkLRIciGsDO/S0H+3g2hxaodo=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36D5F5A/2173E83ADAA611ED8227D4C42F6D8C1D/KCk0NtTW2jqTpg7KP77HfY3Dj2E.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36D5F5A/2173E83ADAA611ED8227D4C42F6D8C1D/KCk0NtTW2jqTpg7KP77HfY3Dj2E.mft
                          rsync://rpki.afrinic.net/repository/afrinic/KCk0NtTW2jqTpg7KP77HfY3Dj2E.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 06 Dec 2025 03:25:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1017 (0x3f9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36D5F5AAF, serialNumber=28293436D4D6DA3A93A60ECA3FBEC77D8DC38F61
        Validity
            Not Before: Dec  4 03:25:06 2025 GMT
            Not After : Dec  6 03:25:06 2025 GMT
        Subject: CN=6930ff13-d87b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:72:e1:48:b8:6c:c5:fd:b4:38:6d:3c:28:0f:
                    97:64:b4:5d:52:17:bc:1a:3b:6e:53:2c:41:8b:be:
                    3f:c0:76:b7:c3:e0:6a:13:5d:28:cd:bd:fd:bf:66:
                    01:55:90:65:49:f5:d6:c4:db:8c:c8:b4:26:3a:09:
                    98:1d:f2:83:21:3a:72:ba:87:5a:a8:c6:75:67:46:
                    43:3d:c7:2a:d9:fa:df:54:66:70:5e:dc:88:ee:b9:
                    4c:18:59:a6:de:82:00:44:0b:42:81:c4:6f:ba:97:
                    73:88:7a:1d:2c:c8:cb:17:f5:7b:83:7f:86:64:24:
                    f2:3b:05:5f:e1:c5:e8:86:a1:5a:55:6c:68:0d:34:
                    6e:51:4b:e0:66:88:0a:92:35:2d:09:10:cf:9e:2c:
                    68:0a:a8:b0:8f:c1:62:9b:c2:79:97:34:61:8d:6d:
                    61:e1:4a:de:16:46:63:0b:4e:4d:ba:ca:e8:38:8a:
                    c8:9c:f5:88:91:7a:14:f3:38:c5:0f:1f:1d:47:d9:
                    7a:aa:c1:0a:e5:32:e9:eb:e7:f4:bd:9e:45:f8:1c:
                    84:5b:d7:20:67:8b:90:75:4b:9a:1e:a5:53:c5:0a:
                    2d:74:d3:fc:33:15:dc:18:09:45:3c:42:e8:54:cc:
                    98:ce:02:3a:3e:e3:fa:c6:23:9c:b6:38:78:62:47:
                    be:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:B6:D2:00:E4:7E:26:50:E8:09:C1:63:E7:C8:55:24:29:C2:83:58
            X509v3 Authority Key Identifier:
                keyid:28:29:34:36:D4:D6:DA:3A:93:A6:0E:CA:3F:BE:C7:7D:8D:C3:8F:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36D5F5A/2173E83ADAA611ED8227D4C42F6D8C1D/KCk0NtTW2jqTpg7KP77HfY3Dj2E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/KCk0NtTW2jqTpg7KP77HfY3Dj2E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D5F5A/2173E83ADAA611ED8227D4C42F6D8C1D/KCk0NtTW2jqTpg7KP77HfY3Dj2E.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:9a:77:00:b4:0d:c5:c2:0c:57:69:d7:f3:26:0b:e4:b6:3e:
         13:89:8a:4c:33:ca:e8:bf:59:d1:ad:23:05:03:ec:be:80:48:
         0d:40:96:a2:1e:72:f8:38:a4:fe:98:34:5b:c3:b3:0e:7f:c2:
         aa:b1:68:62:cb:cf:6c:5c:9c:71:e1:83:39:9b:28:80:2f:35:
         e8:8e:08:f8:6d:72:db:98:04:1a:59:ad:95:fc:86:ab:ed:ef:
         48:55:d9:16:97:d1:6c:7d:59:16:83:07:21:a3:34:92:a7:15:
         74:5b:d7:de:fc:d0:69:0f:d3:19:a5:78:0c:48:9d:43:0f:d6:
         0b:9b:02:26:9e:fe:90:a0:f7:c3:21:da:31:f9:27:2c:65:6e:
         a7:73:db:8f:f5:65:c9:ea:f5:65:be:e9:fb:6d:16:05:cb:77:
         5f:a1:55:9a:26:e3:9c:3b:20:b5:a9:17:99:8f:d7:38:96:5b:
         4d:65:51:a1:ab:33:a2:9f:30:9b:33:49:cd:e3:5d:d9:eb:f0:
         52:28:85:77:98:88:6e:05:f0:4b:e0:96:df:f1:2b:a5:0b:81:
         b7:c9:3b:0c:7d:bd:14:f3:3e:68:3c:04:83:b9:c2:d2:49:74:
         d6:ea:dd:66:50:2a:16:1a:31:3a:b6:5f:02:07:5c:22:ad:3f:
         8b:e1:9a:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 5 02:26:37 2025 by rpki-client