This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36DB492/10DA99764A0311ED8F59D89EF1222468/9D4GaO9yvYf6U2i-K2gVwLy0AUk.mft
File:                     9D4GaO9yvYf6U2i-K2gVwLy0AUk.mft (raw, json)
Hash identifier:          FDT6mYkhYPXx21+MHGfDxwSzDtBij5PG9Wnoz9dgV2E=
Subject key identifier:   F6:9F:D0:E1:0C:CA:08:8D:99:5D:FD:C5:1B:5E:AB:FB:18:AD:E1:FD
Authority key identifier: F4:3E:06:68:EF:72:BD:87:FA:53:68:BE:2B:68:15:C0:BC:B4:01:49
Certificate issuer:       /CN=F36DB492AF/serialNumber=F43E0668EF72BD87FA5368BE2B6815C0BCB40149
Certificate serial:       04EA
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/9D4GaO9yvYf6U2i-K2gVwLy0AUk.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36DB492/10DA99764A0311ED8F59D89EF1222468/9D4GaO9yvYf6U2i-K2gVwLy0AUk.mft
Manifest number:          04CC
Signing time:             Mon 08 Dec 2025 03:02:44 +0000
Manifest this update:     Mon 08 Dec 2025 03:02:44 +0000
Manifest next update:     Wed 10 Dec 2025 03:02:44 +0000
Files and hashes:         1: 9D4GaO9yvYf6U2i-K2gVwLy0AUk.crl (hash: P45snOJBXd7vk2/UX+UJqLseTaDJ65BzKIIbGBW49l4=)
                          2: CAB5EB42374D11EE8810A0744AD9E6FC.roa (hash: Rd+cT1WHVj6VPW10DhoJe1VPjes86osECuBqlAPA/jk=)
                          3: 20D8603A3C6311EEBD05616B4AD9E6FC.roa (hash: yn1GI8XUJDZhc/a1VL4Ew8aXczcEtSuNRFvBTlTvah0=)
                          4: 662EC19C3C6311EEA2CE226C4AD9E6FC.roa (hash: qJZA5eX+xbJzCe6D7i9PnOvJU1CqeC3CU+zF75cZcts=)
                          5: F67E4B16374D11EEB5DE38754AD9E6FC.roa (hash: hU4jFk//Gd5275KQZyF78ZmsmvKAmuy74Zm19XPUqO4=)
                          6: 14B6AF743B4011EEADF20A804AD9E6FC.roa (hash: K4yraD6px2otzCCbUQWt+Yh6khumJagXOv/4f3vipmU=)
                          7: 53D289E63CCE11EE935F8A394AD9E6FC.roa (hash: 4HBFVVMsDOfA/xrur5pE2xRwqQtzwcjvpCJfYPdn3co=)
                          8: 5F94B5287E1F11EEB18DE56B4AD9E6FC.roa (hash: NnfOKQOywlCm8MbXuo5ryxtlJJnqWeXUY/Zc4KGtk9o=)
                          9: 03541FA67E1F11EE99591D6B4AD9E6FC.roa (hash: tMNuryIys8bdcGqr2btn+01OsiqNMJcIT+oXA5sB548=)
                          10: 4ED14CDCA6DA11EDAEF82299F1222468.roa (hash: iXehJ8WLWU6cHBFHQ5qsEfloV58oVEhPLmmW3fV/BY4=)
                          11: 4788CE9A3C6311EE9733C66B4AD9E6FC.roa (hash: 0sVxWZVOpyK0cudH1BB1HUmOSWE0Bj2HjfkgAIa158s=)
                          12: 158513F4518011EE8BDBCE164AD9E6FC.roa (hash: sbl6JhnjaIL3BTU2+lQRNeSnxalVE/sMDYPWi7BO8vg=)
                          13: 85435BE23C6311EE9E2BB76C4AD9E6FC.roa (hash: ZIlXxtD8wXr16Udjo8wBxB2atTHwjE6MF56MpocHqts=)
                          14: 4433C912374E11EEBD8F3D764AD9E6FC.roa (hash: lHtBjObTBwNyVhJrHEQ/zHzgJmnlb42wMC73m5Dh7UE=)
                          15: A775C5D83C6311EEA094166D4AD9E6FC.roa (hash: L972nqC78lcXrhC+mjzOc5OXmYgCBGyLNtGIrSD8tWw=)
                          16: 20EEA9507E1F11EEAD686A6B4AD9E6FC.roa (hash: +kuN9/TLBGpI4GFRii8gvKOE9Vh3yGtX4DQwHRmVzSA=)
                          17: 88A2141457EF11F0A48D2AC4DAE4EC9C.roa (hash: jwxUZ7nPgwu7fA4ugBBwspQYrmkSwfz/KGPZiiShxok=)
                          18: 04540B763C6311EE82DB186B4AD9E6FC.roa (hash: 8pLsZ3suwRhldyF5vniTCRO+W8oJo+1mBH+nN66FQ8k=)
                          19: 329D5926A54311EEA7A66B2ED25BE465.roa (hash: 1pPOf7iWBENGk84AGGgfnWlGuOjuG2CHIm2+lZTlGVY=)
                          20: 9369A48A374D11EEBBBCC3734AD9E6FC.roa (hash: LriikUtiyzWDzN+qJjLYRklCy7tVdfyDgc1icmMt3FY=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36DB492/10DA99764A0311ED8F59D89EF1222468/9D4GaO9yvYf6U2i-K2gVwLy0AUk.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36DB492/10DA99764A0311ED8F59D89EF1222468/9D4GaO9yvYf6U2i-K2gVwLy0AUk.mft
                          rsync://rpki.afrinic.net/repository/afrinic/9D4GaO9yvYf6U2i-K2gVwLy0AUk.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 10 Dec 2025 00:06:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1258 (0x4ea)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36DB492AF, serialNumber=F43E0668EF72BD87FA5368BE2B6815C0BCB40149
        Validity
            Not Before: Dec  8 03:02:44 2025 GMT
            Not After : Dec 10 03:02:44 2025 GMT
        Subject: CN=69363fd4-d6fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:9e:92:5f:09:2b:ec:75:9b:bd:55:57:b7:33:
                    27:9c:b8:ea:2a:b1:1e:42:b8:f4:b7:2d:b9:62:7b:
                    88:a0:ec:56:34:17:0d:ee:69:01:0d:8f:7b:52:d6:
                    f6:af:a3:91:3e:2b:af:44:85:39:6a:e6:52:73:7f:
                    3e:79:c3:19:86:c8:0a:4b:27:21:65:f8:6d:3b:b3:
                    79:0c:03:09:e2:05:d4:7b:69:fb:08:00:9d:a9:95:
                    a6:3d:73:12:b9:80:6d:21:62:42:26:ba:95:7f:11:
                    56:49:fd:d6:fd:c8:1e:19:af:fc:94:e5:7f:87:9d:
                    f4:1d:b1:c4:e4:8f:f4:84:e4:76:a6:43:d5:33:9e:
                    e8:67:85:28:82:c0:f1:23:d0:0f:55:03:07:f7:7a:
                    15:98:77:93:bf:34:9c:bc:47:9e:d4:19:ed:72:20:
                    a3:57:7c:2d:9b:49:4c:ec:af:d1:85:6c:61:6a:7e:
                    39:d4:20:c4:be:f0:f4:ce:94:1e:29:6e:de:9d:50:
                    d9:5d:ee:51:c4:e2:22:5f:dc:b4:94:ee:04:b5:f0:
                    ca:0e:5a:b1:be:df:cb:c8:15:b8:29:68:58:5e:c3:
                    43:45:4a:82:e1:97:10:ea:3f:96:d8:57:68:e7:17:
                    43:bc:cb:94:10:c8:02:cc:06:b7:fe:fa:12:0d:cf:
                    d2:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:9F:D0:E1:0C:CA:08:8D:99:5D:FD:C5:1B:5E:AB:FB:18:AD:E1:FD
            X509v3 Authority Key Identifier:
                keyid:F4:3E:06:68:EF:72:BD:87:FA:53:68:BE:2B:68:15:C0:BC:B4:01:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36DB492/10DA99764A0311ED8F59D89EF1222468/9D4GaO9yvYf6U2i-K2gVwLy0AUk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/9D4GaO9yvYf6U2i-K2gVwLy0AUk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36DB492/10DA99764A0311ED8F59D89EF1222468/9D4GaO9yvYf6U2i-K2gVwLy0AUk.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:33:f7:f7:61:1a:4d:fc:90:3d:de:01:22:b4:d6:e2:6e:53:
         75:da:e4:fc:42:4f:7c:ad:6e:51:f9:ba:56:9f:4f:03:56:7d:
         7b:7a:56:e0:c3:a7:eb:6d:d2:f8:93:e7:b6:60:d9:dc:ab:b6:
         19:8f:d6:5c:51:ca:0b:ba:a8:dd:c4:ab:fa:59:bf:01:60:d5:
         eb:75:05:b2:5f:21:c1:03:ca:b4:4f:6f:cc:6f:67:48:ca:5f:
         65:fc:64:91:b0:f9:aa:18:b5:1d:50:5b:3e:5b:13:e5:a1:90:
         20:03:ba:1e:70:85:9d:88:0f:45:75:a9:73:7f:cb:a7:03:82:
         b0:97:c0:af:02:63:42:64:e8:ba:71:6e:58:6b:83:1e:0c:a0:
         4d:d6:79:49:84:0e:17:43:6a:f1:2c:43:ae:22:85:a6:cd:2f:
         bc:0f:cd:83:39:86:ac:98:a9:72:f7:69:70:a4:d0:23:d3:b9:
         aa:5b:33:b7:23:1d:32:20:d9:36:21:a0:c7:41:74:eb:df:80:
         37:06:d4:39:ca:de:35:aa:37:f4:25:1f:90:74:48:3a:c7:fd:
         e4:42:ab:98:2e:50:5c:38:26:78:db:3a:11:61:98:1a:2a:7c:
         79:aa:c2:7f:12:c3:59:a5:28:23:f0:5d:55:40:d4:5c:f9:01:
         58:4b:c9:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 8 03:57:52 2025 by rpki-client