This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36E373D/4D22ACD68B7311E9A49A4368F8AEA228/_Y4EWISxZp69QwrlZnIdl0BKbOg.mft
File:                     _Y4EWISxZp69QwrlZnIdl0BKbOg.mft (raw, json)
Hash identifier:          WjmqjMF5ZWOJHH7xw7iq+xP8VXNIUSB9bAA6uMh1QO0=
Subject key identifier:   30:AB:3B:10:A1:6D:D7:46:39:AA:9B:3D:00:79:8F:91:7B:E3:1C:A1
Authority key identifier: FD:8E:04:58:84:B1:66:9E:BD:43:0A:E5:66:72:1D:97:40:4A:6C:E8
Certificate issuer:       /CN=F36E373DAF/serialNumber=FD8E045884B1669EBD430AE566721D97404A6CE8
Certificate serial:       09CD
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/_Y4EWISxZp69QwrlZnIdl0BKbOg.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36E373D/4D22ACD68B7311E9A49A4368F8AEA228/_Y4EWISxZp69QwrlZnIdl0BKbOg.mft
Manifest number:          09AD
Signing time:             Sat 06 Dec 2025 01:28:00 +0000
Manifest this update:     Sat 06 Dec 2025 01:27:59 +0000
Manifest next update:     Mon 08 Dec 2025 01:27:59 +0000
Files and hashes:         1: _Y4EWISxZp69QwrlZnIdl0BKbOg.crl (hash: lYmvmw39EecvoA0wgg8/Cs2Yqwq8YhyFKQPRo5xY5hQ=)
                          2: 72FDA95EBED111EBB1E95938F8AEA228.roa (hash: BFwqjnvA7M7iOe8MrvjQVzzYtcahDaV6kGy9p/HlFzg=)
                          3: 8CFF0D3452E011EEB9E2557C4AD9E6FC.roa (hash: AjdT4e8a6WXfxGEzOMU2Ejz3vHkEPA/+xC+T83HmsUY=)
                          4: 7E2AA4AC953C11ECB825FCA95A40D577.roa (hash: V0xEm03mcnP/23ED2cL/AoR2czYuEnqqGtBl0cqLVJY=)
                          5: 771B25DAC1DC11EBAFF27A22F8AEA228.roa (hash: hB7LK5vkWRJBikNKLrZykTmcN1gbhqGJuoapPw28t74=)
                          6: 487A092ADA8611ED9609AEE52F6D8C1D.roa (hash: D/BuyKELkA6Kinn/ZmmBBy28n4BcPuuOdNb0VMO9tSc=)
                          7: EBFDEB1CDA8511EDAD8DC8E42F6D8C1D.roa (hash: T0K4k+0IgpuVi35+ZPDqnwWPZANeAHrt4BvXYlWbXMI=)
                          8: 417B7412681D11EABAE8A23BF8AEA228.roa (hash: EcSboq3Auo5ZSfF9dSrc6D9TXAo4UTRY5/uzWoCkLSY=)
                          9: B5869B0AC3C211F09F106C8BDAE4EC9C.roa (hash: mJeNbgIsODW0IZbdvirwPYTHzrvnFAJ+2bHY0LU02rk=)
                          10: A0A710B2C1DC11EBBC70BD22F8AEA228.roa (hash: nWisPdHBij3RvecNt34Yu238DLfWQU7kpk3sAXEBWpo=)
                          11: 9132C716F59111E9AF6CD33BF8AEA228.roa (hash: rXypH2zp9nVVHeDRCTVV4b8eCSlSkXxt3YUitRlyOEk=)
                          12: 9364DF78BED111EBB8FF9938F8AEA228.roa (hash: NRhe7qbaq8yZpi9FGOqJZVS+hbrFKmeWDZsrvab3+uA=)
                          13: 65F327B8C3C011F0ABEF947BDAE4EC9C.roa (hash: ZNx35ltsV215KO54NwIZRAjQFKuUp9eg7CgfIYk5wag=)
                          14: 7F0A8334DA8611ED854699E62F6D8C1D.roa (hash: GP3NdP5uExbY2GZHQJ+RZAHZhDY8bRc/dyrY/rF4P6I=)
                          15: 238CE30A681D11EA8E2A7D3BF8AEA228.roa (hash: ydKx4ungEUC7wspHHxXIcDKz2U1m9S6af+pOZ0cF1vY=)
                          16: D7EB2302681D11EA9D36683CF8AEA228.roa (hash: AgNVSSf6L6GA3IHpXql3JWZ8L6ROJY9bnjmSjQeMQnU=)
                          17: F251F7A2681D11EA847A8F3CF8AEA228.roa (hash: CH6IVgy5lqquXIo/aSkiaRuN6dDR9B17P94pxUuhf4w=)
                          18: AF1ED052BED111EBAE20BD38F8AEA228.roa (hash: 4XRclk/yI8EJN8d2ChhuI+DM9Txu0zUGc/TXnREwp8M=)
                          19: A6F9E6BC52E711EEA98697134AD9E6FC.roa (hash: 522xUbFyDNAfNVyOqkEJj/kgs5vlVi6RihMtJZxJPIA=)
                          20: 51E7667A198311EDA6FEC5BFF1222468.roa (hash: 5AYXvFdqlcLtOaW600VeglJz5MATpO6Rt2/LbZme/P8=)
                          21: 882D016CC3C211F091DEFD88DAE4EC9C.roa (hash: P8CrTuzMoS9SDVWJrxvNUlVaky2bUCzT4t7YspZSN5c=)
                          22: DBFF1E3C43DD11ED95883DBCF1222468.roa (hash: Y8zoZUQnQqpVoToxLOumwxqYjQxD2d4+Fg81697ZwlM=)
                          23: 60E94C82DA8611EDB9B5F0E52F6D8C1D.roa (hash: uN0Q1zV+VPkcLgC9gryjBgSon2OLOyHeE5NbuOjD/vU=)
                          24: 14FC84CEDA8611EDAD5B23E52F6D8C1D.roa (hash: S6+GPt3mMdOMUzMxpxdXeFeENM7hq23EiAhTHkvC6fQ=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36E373D/4D22ACD68B7311E9A49A4368F8AEA228/_Y4EWISxZp69QwrlZnIdl0BKbOg.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36E373D/4D22ACD68B7311E9A49A4368F8AEA228/_Y4EWISxZp69QwrlZnIdl0BKbOg.mft
                          rsync://rpki.afrinic.net/repository/afrinic/_Y4EWISxZp69QwrlZnIdl0BKbOg.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 08 Dec 2025 00:06:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2509 (0x9cd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36E373DAF, serialNumber=FD8E045884B1669EBD430AE566721D97404A6CE8
        Validity
            Not Before: Dec  6 01:27:59 2025 GMT
            Not After : Dec  8 01:27:59 2025 GMT
        Subject: CN=6933869f-88be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:3c:94:e9:af:ac:19:d7:c2:41:4f:59:77:19:
                    e2:a0:6b:24:08:fa:4a:1d:9c:e1:2e:ce:20:b2:72:
                    da:08:f2:b8:c0:b7:7e:ac:8a:67:0c:3e:9d:9b:3e:
                    12:dc:6c:b5:73:c6:a5:2f:e3:cc:ea:9b:bd:fc:e0:
                    f1:f9:d0:33:ec:7e:b1:19:34:bb:2d:f6:aa:c6:be:
                    10:5d:ab:e7:6c:eb:42:57:ad:24:ea:31:7b:4d:d6:
                    09:b9:c0:cb:48:8d:f5:7b:f9:6c:65:8d:3f:2a:8d:
                    d5:d6:98:ec:bc:43:1e:90:ed:db:ce:6b:e8:c1:ab:
                    21:bd:e5:e4:d0:59:04:9c:1b:74:04:f0:b8:64:1c:
                    1c:fd:6d:b2:0a:a4:e4:a8:53:8a:3e:39:2d:d9:d6:
                    cb:1c:f0:a1:74:fa:bc:14:bd:f6:11:30:f1:34:e0:
                    aa:1d:04:46:a4:f0:06:7e:0e:2c:05:81:90:e2:90:
                    60:e3:c1:2b:03:a0:4b:72:e7:61:6c:32:29:e1:e2:
                    9e:36:60:18:4d:5c:69:a5:16:27:ff:06:00:bf:da:
                    a0:29:e4:36:43:a8:2f:bc:c1:ea:91:3a:69:74:a2:
                    57:cb:95:6e:34:4c:db:7c:2a:f0:12:54:71:71:11:
                    d6:7a:ac:05:fe:7c:df:d4:d4:4d:96:ea:e3:a7:c7:
                    a8:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:AB:3B:10:A1:6D:D7:46:39:AA:9B:3D:00:79:8F:91:7B:E3:1C:A1
            X509v3 Authority Key Identifier:
                keyid:FD:8E:04:58:84:B1:66:9E:BD:43:0A:E5:66:72:1D:97:40:4A:6C:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36E373D/4D22ACD68B7311E9A49A4368F8AEA228/_Y4EWISxZp69QwrlZnIdl0BKbOg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/_Y4EWISxZp69QwrlZnIdl0BKbOg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E373D/4D22ACD68B7311E9A49A4368F8AEA228/_Y4EWISxZp69QwrlZnIdl0BKbOg.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:0a:35:34:d3:66:0a:5c:ff:d5:e1:78:ba:15:82:d9:dc:c3:
         3a:94:01:2f:3e:eb:50:d7:59:0a:d6:f4:e1:43:c6:63:3f:7f:
         c9:f4:e3:3a:6a:30:42:0b:62:91:bd:0d:cd:44:0a:45:6d:0a:
         5a:cf:fa:cd:9b:eb:d4:7a:63:fd:44:31:e6:e1:00:0a:08:82:
         09:e4:22:de:44:e5:1b:d0:c5:22:22:81:ba:2c:a6:9e:15:05:
         fd:5e:cb:62:d9:a1:e5:28:e7:9c:32:af:72:eb:41:51:5a:98:
         f9:2d:67:06:8c:2a:a8:b6:02:21:e6:54:9c:46:7a:b0:25:26:
         60:77:52:30:75:b4:78:a3:97:be:28:8e:04:8f:6a:71:90:90:
         59:b3:96:45:74:be:fd:d0:ac:89:85:37:e9:60:50:20:a2:d8:
         1a:1b:e3:82:55:93:9b:40:84:ad:5d:75:10:4e:6b:7b:b8:3f:
         4c:0f:95:14:5f:c8:47:4f:39:3e:86:8d:51:af:b5:c3:87:bf:
         06:92:39:67:41:6e:9f:cb:9f:43:e8:43:1a:34:db:62:2a:92:
         2d:51:36:76:24:94:1c:a0:ef:ac:a5:1d:c1:03:f3:c5:7e:52:
         0f:ec:54:d2:51:99:fe:bc:fd:ab:cc:4e:d5:1e:15:11:83:c6:
         a7:bd:8b:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 04:01:10 2025 by rpki-client