This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36DA693/0D2968C67D5F11E99565B87EF8AEA228/CJAS-WmmIAyTmbCTRHqk6iz8qB4.mft
File:                     CJAS-WmmIAyTmbCTRHqk6iz8qB4.mft (raw, json)
Hash identifier:          f9C48fkwFfaykkYFC7nuR2KBkIlqXU11/xFt+EW9hI8=
Subject key identifier:   5F:C8:0B:E3:76:7D:AD:9C:FC:DD:0A:9B:89:C1:99:41:2A:A3:08:25
Authority key identifier: 08:90:12:F9:69:A6:20:0C:93:99:B0:93:44:7A:A4:EA:2C:FC:A8:1E
Certificate issuer:       /CN=F36DA693AF/serialNumber=089012F969A6200C9399B093447AA4EA2CFCA81E
Certificate serial:       09A8
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/CJAS-WmmIAyTmbCTRHqk6iz8qB4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36DA693/0D2968C67D5F11E99565B87EF8AEA228/CJAS-WmmIAyTmbCTRHqk6iz8qB4.mft
Manifest number:          09A1
Signing time:             Tue 09 Dec 2025 01:22:12 +0000
Manifest this update:     Tue 09 Dec 2025 01:22:12 +0000
Manifest next update:     Thu 11 Dec 2025 01:22:11 +0000
Files and hashes:         1: CJAS-WmmIAyTmbCTRHqk6iz8qB4.crl (hash: FihIGfvHT6OdJES0VjoaZpjg6qGlmr92YYxm3px3J4U=)
                          2: 386712568A5D11F0908D56D6DAE4EC9C.roa (hash: ZAUnUwDGlRXUyoezMHi06KLtxdDzkMt5Fh4LGS14wbI=)
                          3: 7E88370E7D5F11E993BB1E7FF8AEA228.roa (hash: am92gfMFQqWByXCSl8p9EO6PUlEqWuTUeM+DI4nReL0=)
                          4: 2A3ED73014EE11EA8694372AF8AEA228.roa (hash: FBxa8Lun9k2Hzq6Q2hfcEGXCZPwxZGKNJqxPvNPWs2c=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36DA693/0D2968C67D5F11E99565B87EF8AEA228/CJAS-WmmIAyTmbCTRHqk6iz8qB4.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36DA693/0D2968C67D5F11E99565B87EF8AEA228/CJAS-WmmIAyTmbCTRHqk6iz8qB4.mft
                          rsync://rpki.afrinic.net/repository/afrinic/CJAS-WmmIAyTmbCTRHqk6iz8qB4.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 11 Dec 2025 01:22:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2472 (0x9a8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36DA693AF, serialNumber=089012F969A6200C9399B093447AA4EA2CFCA81E
        Validity
            Not Before: Dec  9 01:22:12 2025 GMT
            Not After : Dec 11 01:22:11 2025 GMT
        Subject: CN=693779c4-2490
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:ea:bb:ae:bf:bb:c0:47:31:eb:73:c3:b4:87:
                    b8:88:0a:02:d6:66:18:a2:b1:a3:50:92:dd:92:54:
                    20:82:d2:8c:86:2c:81:18:6e:ad:f9:1a:c9:e4:e7:
                    14:26:93:a1:df:45:ea:98:ba:13:75:f9:a1:03:82:
                    8c:48:75:60:e4:6d:db:78:05:d9:ee:ac:1e:e1:68:
                    28:bf:e4:68:e6:51:57:a8:81:f7:94:5a:07:13:84:
                    1d:26:f3:ab:31:cd:17:70:8c:76:99:ce:63:9d:75:
                    37:27:56:bb:8e:52:60:fc:4f:f3:8f:71:0e:4c:28:
                    9d:af:ee:c7:cc:e8:55:41:03:bf:45:4b:14:f7:44:
                    e7:ec:8e:8a:d7:82:c6:b3:85:b5:27:86:74:4e:2b:
                    58:39:95:11:b1:27:fc:2d:8d:43:49:9c:e3:00:c7:
                    b6:13:24:2e:21:3f:3b:69:14:11:29:1d:08:3f:66:
                    bb:be:bf:f0:8f:b1:9d:93:08:e8:ae:0f:1c:5a:39:
                    d3:40:1d:79:8f:14:ce:22:a8:04:56:e5:23:1f:6d:
                    cd:8c:a7:8e:45:24:9a:23:78:9c:a4:3b:6a:1e:58:
                    d3:bc:64:52:96:1a:ba:ea:cd:b8:e1:81:72:ee:82:
                    88:f0:42:a8:7c:a4:a6:3a:9c:b4:52:aa:d3:23:97:
                    0b:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:C8:0B:E3:76:7D:AD:9C:FC:DD:0A:9B:89:C1:99:41:2A:A3:08:25
            X509v3 Authority Key Identifier:
                keyid:08:90:12:F9:69:A6:20:0C:93:99:B0:93:44:7A:A4:EA:2C:FC:A8:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36DA693/0D2968C67D5F11E99565B87EF8AEA228/CJAS-WmmIAyTmbCTRHqk6iz8qB4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CJAS-WmmIAyTmbCTRHqk6iz8qB4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36DA693/0D2968C67D5F11E99565B87EF8AEA228/CJAS-WmmIAyTmbCTRHqk6iz8qB4.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:f3:5f:f2:c4:0d:72:64:09:9f:e7:bc:8e:47:7b:44:29:b3:
         ab:ce:ba:35:f9:d0:07:97:d0:a4:b1:ea:d3:cc:b4:d0:7c:f9:
         0b:6e:4c:ac:23:c2:10:bf:6b:66:a0:7e:1a:2c:d4:ef:9f:2b:
         32:b9:39:33:8b:a7:c1:57:79:58:6a:b4:12:d2:81:c3:7a:68:
         a4:3e:c9:46:3b:ff:71:fa:5a:10:ec:91:03:92:c0:3f:86:95:
         39:ff:78:d6:af:27:41:88:8a:31:2d:d8:37:30:7e:c7:db:15:
         16:30:af:87:8a:5c:7c:56:01:42:91:11:15:73:00:af:47:2e:
         be:be:de:de:89:f0:eb:27:54:7f:25:4c:08:eb:de:58:c0:7d:
         af:8e:28:67:18:ee:70:fc:2c:4a:fd:3e:9f:6c:b7:75:0e:de:
         65:bc:3f:19:33:f3:11:94:ee:03:63:c2:8d:18:9f:3b:02:c3:
         37:54:48:e5:13:08:64:9b:33:7d:99:27:27:f4:83:72:24:97:
         6a:b9:90:f8:6d:ff:9f:90:d4:8a:05:26:08:32:eb:a9:7c:a9:
         4e:65:23:99:68:35:8d:f9:eb:63:91:9c:12:d3:c6:2e:c2:39:
         dd:a4:62:24:84:75:ff:ab:c3:56:aa:c2:c2:10:2d:14:0a:20:
         74:f5:83:46
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICCagwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
REE2OTNBRjExMC8GA1UEBRMoMDg5MDEyRjk2OUE2MjAwQzkzOTlCMDkzNDQ3QUE0
RUEyQ0ZDQTgxRTAeFw0yNTEyMDkwMTIyMTJaFw0yNTEyMTEwMTIyMTFaMBgxFjAU
BgNVBAMTDTY5Mzc3OWM0LTI0OTAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC66ruuv7vARzHrc8O0h7iICgLWZhiisaNQkt2SVCCC0oyGLIEYbq35Gsnk
5xQmk6HfReqYuhN1+aEDgoxIdWDkbdt4BdnurB7haCi/5GjmUVeogfeUWgcThB0m
86sxzRdwjHaZzmOddTcnVruOUmD8T/OPcQ5MKJ2v7sfM6FVBA79FSxT3ROfsjorX
gsazhbUnhnROK1g5lRGxJ/wtjUNJnOMAx7YTJC4hPztpFBEpHQg/Zru+v/CPsZ2T
COiuDxxaOdNAHXmPFM4iqARW5SMfbc2Mp45FJJojeJykO2oeWNO8ZFKWGrrqzbjh
gXLugojwQqh8pKY6nLRSqtMjlwuXAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUX8gL
43Z9rZz83QqbicGZQSqjCCUwHwYDVR0jBBgwFoAUCJAS+WmmIAyTmbCTRHqk6iz8
qB4wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkRBNjkzLzBEMjk2OEM2N0Q1RjExRTk5NTY1Qjg3RUY4QUVBMjI4L0NKQVMt
V21tSUF5VG1iQ1RSSHFrNml6OHFCNC5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0NKQVMtV21tSUF5VG1iQ1RSSHFrNml6OHFCNC5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2REE2OTMvMEQyOTY4QzY3RDVGMTFFOTk1NjVCODdFRjhB
RUEyMjgvQ0pBUy1XbW1JQXlUbWJDVFJIcWs2aXo4cUI0Lm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCY81/yxA1yZAmf57yOR3tEKbOrzro1
+dAHl9CkserTzLTQfPkLbkysI8IQv2tmoH4aLNTvnysyuTkzi6fBV3lYarQS0oHD
emikPslGO/9x+loQ7JEDksA/hpU5/3jWrydBiIoxLdg3MH7H2xUWMK+Hilx8VgFC
kREVcwCvRy6+vt7eifDrJ1R/JUwI695YwH2vjihnGO5w/CxK/T6fbLd1Dt5lvD8Z
M/MRlO4DY8KNGJ87AsM3VEjlEwhkmzN9mScn9INyJJdquZD4bf+fkNSKBSYIMuup
fKlOZSOZaDWN+etjkZwS08YuwjndpGIkhHX/q8NWqsLCEC0UCiB09YNG
-----END CERTIFICATE-----
Generated at Tue Dec 9 12:06:14 2025 by rpki-client