This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FC8A0/F10926A256E611EEA95B26534AD9E6FC/LmD5YTFKp9b93e6durMSN0cF5ss.mft
File:                     LmD5YTFKp9b93e6durMSN0cF5ss.mft (raw, json)
Hash identifier:          zFmIiKLfa9K4M149gWR21Piv8+EJ3HbYZDbWRICC9Ro=
Subject key identifier:   FC:55:18:C1:53:06:4C:A6:51:99:87:64:04:24:B3:70:DA:3D:EB:F6
Authority key identifier: 2E:60:F9:61:31:4A:A7:D6:FD:DD:EE:9D:BA:B3:12:37:47:05:E6:CB
Certificate issuer:       /CN=F36FC8A0AF/serialNumber=2E60F961314AA7D6FDDDEE9DBAB312374705E6CB
Certificate serial:       0345
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/LmD5YTFKp9b93e6durMSN0cF5ss.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36FC8A0/F10926A256E611EEA95B26534AD9E6FC/LmD5YTFKp9b93e6durMSN0cF5ss.mft
Manifest number:          0344
Signing time:             Tue 09 Dec 2025 03:46:11 +0000
Manifest this update:     Tue 09 Dec 2025 03:46:10 +0000
Manifest next update:     Thu 11 Dec 2025 03:46:10 +0000
Files and hashes:         1: LmD5YTFKp9b93e6durMSN0cF5ss.crl (hash: U6fR7SywZxSObp9j2kiElHG7AmAvbzR/YBa+CicwECI=)
                          2: 333100CC56E711EEB82D22544AD9E6FC.roa (hash: iWB0O9f+LLwbK/f70tuWF05AYGrsYH+zV7rCgvpguSc=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36FC8A0/F10926A256E611EEA95B26534AD9E6FC/LmD5YTFKp9b93e6durMSN0cF5ss.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36FC8A0/F10926A256E611EEA95B26534AD9E6FC/LmD5YTFKp9b93e6durMSN0cF5ss.mft
                          rsync://rpki.afrinic.net/repository/afrinic/LmD5YTFKp9b93e6durMSN0cF5ss.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 11 Dec 2025 03:46:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 837 (0x345)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36FC8A0AF, serialNumber=2E60F961314AA7D6FDDDEE9DBAB312374705E6CB
        Validity
            Not Before: Dec  9 03:46:10 2025 GMT
            Not After : Dec 11 03:46:10 2025 GMT
        Subject: CN=69379b83-6a8f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:c4:dd:c8:e1:b4:eb:a5:54:be:cd:40:87:eb:
                    bc:19:68:1b:ba:73:ae:17:3a:0e:94:2e:06:92:6d:
                    42:2d:80:1e:62:27:17:d6:ee:f9:db:c1:df:19:81:
                    d8:f3:5e:ec:d6:45:2e:6c:36:bf:c7:76:68:e4:31:
                    20:63:84:c7:63:2b:9e:b8:ee:75:fb:4d:63:41:fc:
                    37:bc:a6:e6:4f:92:84:a0:3a:0b:5c:46:b2:ec:7f:
                    df:42:85:cc:30:9d:7e:fe:56:5f:2c:6f:60:b4:a3:
                    40:3d:6b:0e:74:5b:39:b8:22:db:6a:31:f5:fa:d1:
                    8f:be:c6:38:8b:b1:0d:f0:44:f8:21:dd:a0:33:ae:
                    54:0e:79:db:b8:4b:15:14:95:65:27:03:f5:01:57:
                    13:a6:c2:1d:1d:22:3b:e4:02:aa:da:16:4c:a1:ad:
                    75:48:c8:d7:2d:3a:21:4e:d8:eb:c6:bf:f0:66:0a:
                    55:09:d1:60:ab:68:2c:72:28:8f:ee:07:65:1e:30:
                    8d:51:23:db:1e:54:ef:8f:2b:00:db:99:ce:ca:5b:
                    b8:12:78:11:98:f9:d6:51:15:31:cd:f2:e0:0c:40:
                    79:29:c6:e9:c7:2f:a8:b4:a5:f2:f2:0c:36:c9:7d:
                    3d:61:c5:da:18:c9:84:62:5a:72:43:fe:de:10:c6:
                    94:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:55:18:C1:53:06:4C:A6:51:99:87:64:04:24:B3:70:DA:3D:EB:F6
            X509v3 Authority Key Identifier:
                keyid:2E:60:F9:61:31:4A:A7:D6:FD:DD:EE:9D:BA:B3:12:37:47:05:E6:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36FC8A0/F10926A256E611EEA95B26534AD9E6FC/LmD5YTFKp9b93e6durMSN0cF5ss.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/LmD5YTFKp9b93e6durMSN0cF5ss.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FC8A0/F10926A256E611EEA95B26534AD9E6FC/LmD5YTFKp9b93e6durMSN0cF5ss.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c9:90:58:60:81:4a:15:43:bd:49:00:e2:d9:8c:13:30:84:9a:
         03:81:aa:a5:5c:35:71:46:b2:e3:fc:ea:a3:6f:1d:c2:c8:3e:
         80:85:85:60:04:1b:2a:6c:90:36:5c:62:13:69:64:65:aa:98:
         5a:e0:9e:d5:0e:7c:8c:c1:4d:76:bb:0d:58:a2:9a:af:0d:cf:
         3c:e0:b4:b2:4e:b1:ad:c9:a0:07:39:20:df:32:d1:72:8a:b5:
         6e:07:c7:e5:f0:82:9e:00:46:46:2a:18:bc:e1:96:58:6e:0d:
         ff:e7:6e:03:32:92:ae:4c:71:a2:74:96:04:b7:f7:f9:40:37:
         c1:af:e1:a1:e7:5e:5f:59:fb:b8:00:84:d4:8a:07:d1:41:2f:
         2f:3f:ff:5c:ba:07:95:d4:96:20:57:28:44:ac:8e:fe:62:c6:
         a0:50:02:0c:31:56:9b:5a:89:3b:05:8b:d3:86:a8:5c:be:e4:
         0b:99:28:53:f5:3d:3f:de:c0:e9:bd:c4:bb:6a:52:eb:77:52:
         8e:47:06:f2:3e:94:ba:24:1c:7a:b3:bb:d8:90:24:54:f2:e3:
         53:b3:b0:80:e9:95:d7:48:2e:f2:a0:ea:67:bd:d9:6c:f8:65:
         68:f5:dd:c2:64:56:a2:e6:f1:08:ec:66:98:60:f0:b0:a7:72:
         6c:bb:87:8f
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICA0UwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
RkM4QTBBRjExMC8GA1UEBRMoMkU2MEY5NjEzMTRBQTdENkZERERFRTlEQkFCMzEy
Mzc0NzA1RTZDQjAeFw0yNTEyMDkwMzQ2MTBaFw0yNTEyMTEwMzQ2MTBaMBgxFjAU
BgNVBAMTDTY5Mzc5YjgzLTZhOGYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC2xN3I4bTrpVS+zUCH67wZaBu6c64XOg6ULgaSbUItgB5iJxfW7vnbwd8Z
gdjzXuzWRS5sNr/HdmjkMSBjhMdjK5647nX7TWNB/De8puZPkoSgOgtcRrLsf99C
hcwwnX7+Vl8sb2C0o0A9aw50Wzm4IttqMfX60Y++xjiLsQ3wRPgh3aAzrlQOedu4
SxUUlWUnA/UBVxOmwh0dIjvkAqraFkyhrXVIyNctOiFO2OvGv/BmClUJ0WCraCxy
KI/uB2UeMI1RI9seVO+PKwDbmc7KW7gSeBGY+dZRFTHN8uAMQHkpxunHL6i0pfLy
DDbJfT1hxdoYyYRiWnJD/t4QxpTdAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQU/FUY
wVMGTKZRmYdkBCSzcNo96/YwHwYDVR0jBBgwFoAULmD5YTFKp9b93e6durMSN0cF
5sswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkZDOEEwL0YxMDkyNkEyNTZFNjExRUVBOTVCMjY1MzRBRDlFNkZDL0xtRDVZ
VEZLcDliOTNlNmR1ck1TTjBjRjVzcy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0xtRDVZVEZLcDliOTNlNmR1ck1TTjBjRjVzcy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2RkM4QTAvRjEwOTI2QTI1NkU2MTFFRUE5NUIyNjUzNEFE
OUU2RkMvTG1ENVlURktwOWI5M2U2ZHVyTVNOMGNGNXNzLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQDJkFhggUoVQ71JAOLZjBMwhJoDgaql
XDVxRrLj/Oqjbx3CyD6AhYVgBBsqbJA2XGITaWRlqpha4J7VDnyMwU12uw1Yopqv
Dc884LSyTrGtyaAHOSDfMtFyirVuB8fl8IKeAEZGKhi84ZZYbg3/524DMpKuTHGi
dJYEt/f5QDfBr+Gh515fWfu4AITUigfRQS8vP/9cugeV1JYgVyhErI7+YsagUAIM
MVabWok7BYvThqhcvuQLmShT9T0/3sDpvcS7alLrd1KORwbyPpS6JBx6s7vYkCRU
8uNTs7CA6ZXXSC7yoOpnvdls+GVo9d3CZFai5vEI7GaYYPCwp3Jsu4eP
-----END CERTIFICATE-----
Generated at Tue Dec 9 12:16:54 2025 by rpki-client