This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F2B14/43F81B58ED1C11EA9F838C55F8AEA228/kOiZk2355ouadQW_vmO4r6Cneuk.mft
File:                     kOiZk2355ouadQW_vmO4r6Cneuk.mft (raw, json)
Hash identifier:          bt9GuCriyd3eYLE7ZdVq9XXX55L0SruO/XY4lVpCPV4=
Subject key identifier:   49:06:7E:04:DB:26:A4:F5:D3:C0:D8:14:2B:E9:5F:69:4F:A6:24:0C
Authority key identifier: 90:E8:99:93:6D:F9:E6:8B:9A:75:05:BF:BE:63:B8:AF:A0:A7:7A:E9
Certificate issuer:       /CN=F36F2B14AF/serialNumber=90E899936DF9E68B9A7505BFBE63B8AFA0A77AE9
Certificate serial:       07DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/kOiZk2355ouadQW_vmO4r6Cneuk.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36F2B14/43F81B58ED1C11EA9F838C55F8AEA228/kOiZk2355ouadQW_vmO4r6Cneuk.mft
Manifest number:          07CB
Signing time:             Tue 09 Dec 2025 01:54:10 +0000
Manifest this update:     Tue 09 Dec 2025 01:54:09 +0000
Manifest next update:     Thu 11 Dec 2025 01:54:09 +0000
Files and hashes:         1: kOiZk2355ouadQW_vmO4r6Cneuk.crl (hash: vmxwFyf1vSExbklDiJPgZ5a+4ffiJ//cCHdvXzpuVy0=)
                          2: 964FF29424BD11F0B0FB42CADAE4EC9C.roa (hash: CgoC1yXsglW+JATEA6VXCNngFjyeXhN766ti0g00ayo=)
                          3: BD0225AE79C911F0BDC899ACDAE4EC9C.roa (hash: SVVTzD1gHTnywXiXSXC6Zr4i32IU5rkq1PCzWNpxj6I=)
                          4: 5080F86A79C911F0A4D8A3A8DAE4EC9C.roa (hash: oYW4sgY5AveI0m/hszR/UAybv2k2KBPwfZQyUyew8kc=)
                          5: 295590AC853811EE882D501F4AD9E6FC.roa (hash: IpmxTclJooUyyKaI0gbjeJL9g6pnXl0P79U4aDC1KoE=)
                          6: 5A6278E6853711EEAF78D41C4AD9E6FC.roa (hash: grcDBUy7KAVenDb+XJyfB3Cw20Jma1vzplMK66nlAEg=)
                          7: ACD62F1ADA1C11EF8F9E7079762E951A.roa (hash: qmv5Snnbw7ymf5ESL4Phxfu97RPWPTjcgTMnvEHsriM=)
                          8: C9BA5A68853911EE85DC71244AD9E6FC.roa (hash: b7/gfmmcR06S+U/Q6uheuRvTHtvlSXanbIBxP+AP9Sw=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36F2B14/43F81B58ED1C11EA9F838C55F8AEA228/kOiZk2355ouadQW_vmO4r6Cneuk.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36F2B14/43F81B58ED1C11EA9F838C55F8AEA228/kOiZk2355ouadQW_vmO4r6Cneuk.mft
                          rsync://rpki.afrinic.net/repository/afrinic/kOiZk2355ouadQW_vmO4r6Cneuk.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 11 Dec 2025 01:54:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2012 (0x7dc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36F2B14AF, serialNumber=90E899936DF9E68B9A7505BFBE63B8AFA0A77AE9
        Validity
            Not Before: Dec  9 01:54:09 2025 GMT
            Not After : Dec 11 01:54:09 2025 GMT
        Subject: CN=69378142-5bed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:9f:6d:e1:ac:ad:63:b1:d5:2f:e0:04:61:72:
                    c8:3c:7c:c7:60:12:34:97:08:02:d4:5b:82:c6:13:
                    f3:ae:3f:52:7b:ea:d2:3c:b9:ff:fe:4a:41:40:ff:
                    ff:93:77:b1:6f:05:79:83:49:04:d8:47:6c:60:ff:
                    5c:db:13:42:e3:32:b8:32:7c:2d:0d:2d:f0:0b:86:
                    5c:ce:87:dd:3d:78:cc:ba:41:1b:ae:3b:5e:7c:0a:
                    b1:7a:02:31:c9:f2:af:54:36:d9:48:90:cb:fb:ce:
                    d4:d1:7d:17:b2:02:10:e7:78:79:00:dc:15:e3:93:
                    fb:7c:1b:48:97:0a:37:24:32:b0:7b:bc:e1:68:4c:
                    0d:7d:06:80:68:2e:87:84:ef:7e:89:15:76:fc:8e:
                    85:b1:76:d5:e3:11:a2:74:fe:25:b6:33:ee:15:8b:
                    3b:51:e3:3b:14:77:24:88:2d:31:87:09:5f:82:d2:
                    e7:54:e9:57:63:6e:d0:02:f1:ca:42:1a:a1:a3:1d:
                    4c:80:33:34:62:4e:b2:e3:db:cc:fc:1f:cb:2d:a5:
                    e5:37:e1:1c:51:e5:9d:23:d6:d8:8a:a1:01:42:1e:
                    2d:77:cc:2a:a6:75:22:13:7f:45:f0:e5:60:5d:3a:
                    03:ca:4f:a8:d6:43:74:bd:8a:bf:2c:3c:40:64:7c:
                    52:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:06:7E:04:DB:26:A4:F5:D3:C0:D8:14:2B:E9:5F:69:4F:A6:24:0C
            X509v3 Authority Key Identifier:
                keyid:90:E8:99:93:6D:F9:E6:8B:9A:75:05:BF:BE:63:B8:AF:A0:A7:7A:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36F2B14/43F81B58ED1C11EA9F838C55F8AEA228/kOiZk2355ouadQW_vmO4r6Cneuk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/kOiZk2355ouadQW_vmO4r6Cneuk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F2B14/43F81B58ED1C11EA9F838C55F8AEA228/kOiZk2355ouadQW_vmO4r6Cneuk.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:20:ad:b5:5c:21:42:15:b3:a5:b3:49:c3:73:1f:c2:c6:57:
         6e:5a:45:a3:94:46:b4:95:90:84:2e:52:e9:01:a4:e3:89:f2:
         bd:50:90:0b:f7:10:b9:2c:21:6f:f7:c3:29:df:83:1c:46:1b:
         31:e9:da:c9:1e:f8:fd:92:26:19:1a:c9:f4:d8:05:ec:08:51:
         c6:d4:4a:1a:5d:df:43:89:c3:62:4c:ef:54:b9:5e:d1:c1:ea:
         90:60:76:53:7e:18:96:00:a0:59:97:c2:96:cc:b0:fe:81:14:
         0a:2e:29:c5:f8:bd:5d:29:eb:90:c0:5a:0e:e6:f8:1e:e8:4e:
         57:5c:aa:47:da:7f:a9:c7:2e:23:51:6c:28:4b:62:3e:e0:82:
         d1:79:7d:84:c8:c2:b9:17:ab:25:7b:dd:1e:f0:97:eb:67:6c:
         cc:51:ce:2a:56:a2:a7:aa:bb:ac:ef:77:dc:3a:bf:77:70:a8:
         1b:0d:e1:23:7f:5d:4e:e2:7b:ad:e8:fb:d4:43:7b:fb:99:dd:
         5c:b1:d3:2d:8a:bb:75:0d:dd:f5:fe:19:67:29:d2:41:71:83:
         13:cf:58:5e:b0:f4:3b:42:54:65:01:3e:3b:7a:90:41:93:ef:
         b5:ae:a5:0a:61:bb:f4:50:1f:0c:a0:42:98:73:6b:f5:57:c3:
         83:91:21:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 9 12:19:13 2025 by rpki-client