This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362FA5F/71124C3ED5C511F0944258ACDAE4EC9C/pCKYJAT-Aumg8-y5hTV-RG-IID0.mft
File:                     pCKYJAT-Aumg8-y5hTV-RG-IID0.mft (raw, json)
Hash identifier:          1oe2/RvX2bcFqh+zWHiM002K6dFo7fBtJEe10vgm1WQ=
Subject key identifier:   C5:7D:EA:0E:F8:D0:E2:C8:D7:51:59:2E:DA:FE:1F:E9:D2:20:AD:68
Authority key identifier: A4:22:98:24:04:FE:02:E9:A0:F3:EC:B9:85:35:7E:44:6F:88:20:3D
Certificate issuer:       /CN=F362FA5FAF/serialNumber=A422982404FE02E9A0F3ECB985357E446F88203D
Certificate serial:       10
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/pCKYJAT-Aumg8-y5hTV-RG-IID0.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F362FA5F/71124C3ED5C511F0944258ACDAE4EC9C/pCKYJAT-Aumg8-y5hTV-RG-IID0.mft
Manifest number:          0E
Signing time:             Fri 19 Dec 2025 05:24:41 +0000
Manifest this update:     Fri 19 Dec 2025 05:24:40 +0000
Manifest next update:     Sun 21 Dec 2025 05:24:40 +0000
Files and hashes:         1: pCKYJAT-Aumg8-y5hTV-RG-IID0.crl (hash: plfv0tAEzcsfbbKy2/TfNJrHfP9lhMgAn4rIXsRgXcA=)
                          2: 02DBFF9AD5C911F0BEEFA9C1DAE4EC9C.roa (hash: 6Mw6IJOKCFiOFJKPzw6NDpNLOWvwX8+ywwAHH8ia5xU=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F362FA5F/71124C3ED5C511F0944258ACDAE4EC9C/pCKYJAT-Aumg8-y5hTV-RG-IID0.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F362FA5F/71124C3ED5C511F0944258ACDAE4EC9C/pCKYJAT-Aumg8-y5hTV-RG-IID0.mft
                          rsync://rpki.afrinic.net/repository/afrinic/pCKYJAT-Aumg8-y5hTV-RG-IID0.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 21 Dec 2025 05:24:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16 (0x10)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F362FA5FAF, serialNumber=A422982404FE02E9A0F3ECB985357E446F88203D
        Validity
            Not Before: Dec 19 05:24:40 2025 GMT
            Not After : Dec 21 05:24:40 2025 GMT
        Subject: CN=6944e199-a906
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:00:c5:c7:8a:90:b6:e3:cd:7a:91:d8:12:36:
                    a8:7e:c4:9d:12:75:c9:b9:c8:3b:32:67:d3:a8:ec:
                    45:47:5a:94:9b:af:99:c9:b8:2e:f6:9c:96:20:69:
                    6f:fb:62:a3:4c:21:8f:ee:39:9c:64:06:d7:b1:8b:
                    0d:19:43:e0:33:5b:71:ab:fe:5c:31:99:af:da:b3:
                    27:fe:a8:1e:b9:70:e8:98:9c:f5:cd:09:40:a6:85:
                    fb:e4:9a:66:0b:37:b6:f2:98:b2:d4:4b:1a:a3:93:
                    04:a6:0d:08:ef:6f:dc:ed:e3:1a:59:2d:70:ce:4c:
                    e6:59:58:3e:58:61:8a:c5:d6:65:1e:e7:61:be:93:
                    76:dd:b9:68:c8:10:57:6d:6a:3a:6c:29:5e:62:42:
                    34:a3:ce:92:64:18:6c:a9:84:d8:04:69:5d:07:06:
                    1f:8b:96:72:85:c5:74:5f:fd:ae:df:b6:d0:3f:db:
                    10:4b:6d:45:36:e0:9d:29:fa:be:60:ce:0a:a8:33:
                    5c:ce:47:ab:b4:54:4d:b9:47:b8:0e:20:2d:4e:60:
                    42:79:87:5b:13:ca:c1:d1:cb:05:ce:80:08:a0:64:
                    fb:02:45:75:2b:4c:92:5e:1d:5b:34:3e:93:a1:9f:
                    da:59:d3:a5:be:bb:52:ea:27:00:d2:30:2c:d0:9c:
                    18:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:7D:EA:0E:F8:D0:E2:C8:D7:51:59:2E:DA:FE:1F:E9:D2:20:AD:68
            X509v3 Authority Key Identifier:
                keyid:A4:22:98:24:04:FE:02:E9:A0:F3:EC:B9:85:35:7E:44:6F:88:20:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F362FA5F/71124C3ED5C511F0944258ACDAE4EC9C/pCKYJAT-Aumg8-y5hTV-RG-IID0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/pCKYJAT-Aumg8-y5hTV-RG-IID0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362FA5F/71124C3ED5C511F0944258ACDAE4EC9C/pCKYJAT-Aumg8-y5hTV-RG-IID0.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:c1:59:dc:dc:9f:7b:ab:53:6f:6e:34:2b:d8:3c:e0:f8:b9:
         62:91:d7:34:6a:33:c5:c2:39:f7:29:8e:c5:9b:a3:a4:d5:52:
         2a:e6:b7:6d:08:f1:f8:c2:e0:f7:67:d1:65:3f:60:1e:27:6e:
         a0:07:32:7e:a6:a3:68:c5:3a:9b:fd:63:37:e1:a1:ce:2c:a8:
         2c:9e:f6:64:9c:3a:8c:b6:8d:63:c1:df:d5:67:bc:8e:73:66:
         d6:07:11:6a:30:1b:5c:2a:23:4c:4f:f8:44:ca:17:c5:6a:cc:
         c7:37:0f:51:3a:28:32:b9:29:fb:20:96:68:fb:d8:54:4b:35:
         bb:2f:45:6f:3d:5f:f7:00:49:19:a5:29:26:66:a4:dc:e5:3f:
         66:ee:8f:60:35:e6:0e:75:77:e4:3e:7b:4c:a0:28:5a:ab:5e:
         6e:7c:18:5b:7e:45:a8:cf:db:91:e8:ff:ef:71:77:3d:03:61:
         91:4e:7e:cd:c1:9d:11:ed:21:e6:07:92:f7:48:db:d9:43:1f:
         bb:57:95:b9:7d:7d:ce:6c:c0:0a:6b:bc:d5:91:44:c8:81:2e:
         41:0d:ef:68:4e:3e:4f:74:bb:21:54:87:50:98:e3:d1:b0:42:
         d9:be:a8:61:c3:bd:a8:0f:f1:ed:e0:f4:e4:fc:bf:d2:b9:9a:
         dd:ce:c4:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 02:52:00 2025 by rpki-client