This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36549B1/DF788C98561311E5B1A0E360F8AEA228/nxc4PrZn5Ue6AM-3-RT0KExYScw.mft
File:                     nxc4PrZn5Ue6AM-3-RT0KExYScw.mft (raw, json)
Hash identifier:          KO4ILjHKzrKMHkmOOQMEQwyhgvrXTz/dfIcD0A805Hc=
Subject key identifier:   48:3F:77:F8:D3:4E:66:41:12:40:C4:D1:C4:81:8B:CE:DE:98:11:D8
Authority key identifier: 9F:17:38:3E:B6:67:E5:47:BA:00:CF:B7:F9:14:F4:28:4C:58:49:CC
Certificate issuer:       /CN=F36549B1AF/serialNumber=9F17383EB667E547BA00CFB7F914F4284C5849CC
Certificate serial:       0F1D
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/nxc4PrZn5Ue6AM-3-RT0KExYScw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36549B1/DF788C98561311E5B1A0E360F8AEA228/nxc4PrZn5Ue6AM-3-RT0KExYScw.mft
Manifest number:          0F0E
Signing time:             Wed 24 Dec 2025 01:00:04 +0000
Manifest this update:     Wed 24 Dec 2025 01:00:03 +0000
Manifest next update:     Fri 26 Dec 2025 01:00:03 +0000
Files and hashes:         1: nxc4PrZn5Ue6AM-3-RT0KExYScw.crl (hash: 4GGBjf9hCSuE0W0M93bextccFX4xpZBTKw00N1RFxPM=)
                          2: 0F970AA45DDA11EEA9B9B7884AD9E6FC.roa (hash: FMUt2MM7DebKkBEnbyLy3J47YqdDugPo2mNzNBuOTcI=)
                          3: CB802D6A9FD011F0B09E84F1DAE4EC9C.roa (hash: S80ZZFyyc08N7gI7of8t+4zntc1/6kCBNhlAw4585HY=)
                          4: 4252D1905DDE11EEA38F26174AD9E6FC.roa (hash: YEcxnJNljEbbPt+jZqFFjrHFGQrlfrLBxbAphuQ3lR4=)
                          5: AA2ED722D22511EDA73BE0D2F1222468.roa (hash: Bz6y/9VDXHlj+h8pTwHUCwEbbK4O3DXKaYbf9T3u4Kk=)
                          6: F8A03EA22DD711ED9D0F7E83F1222468.roa (hash: A3D2coJfMGVfkM4t+C0wadunWeeP5Netmzy2NPiOcNE=)
                          7: DAD32A825DD911EE908D0E884AD9E6FC.roa (hash: jYCM5n5GYzsPy5dOD3c0IJ0ltyMzwLsK1AtouHVwLZ0=)
                          8: 67208BD45DDE11EEA367B1174AD9E6FC.roa (hash: dUOADrTH86yUTFdknQpwKyYi7Ckfi6ZQrgp/0K1+5iw=)
                          9: 3EB8BE4ED22611EDAF3CB0D4F1222468.roa (hash: 8rUeH5+hrD/1gu9Yu/+gBbmACyJtB7cXUwPkrzQinJI=)
                          10: FA54B1109FD011F08E699CF1DAE4EC9C.roa (hash: F+/CQFEGh7hy0TbdeqQH+fkZYKvk2d9fKx2iVdi2NNY=)
                          11: 7FA6B8DC9FD011F09FBF73EDDAE4EC9C.roa (hash: mIreRYj0MVYZW7c/XBrrdQAMZGvWksvf2R6Ym6OT8rM=)
                          12: 08DDC9D85DDE11EE97117A164AD9E6FC.roa (hash: YTPBR2O7UMDxBF3Dv5l5lllDC58HOmSCof2QHjhKZws=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36549B1/DF788C98561311E5B1A0E360F8AEA228/nxc4PrZn5Ue6AM-3-RT0KExYScw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36549B1/DF788C98561311E5B1A0E360F8AEA228/nxc4PrZn5Ue6AM-3-RT0KExYScw.mft
                          rsync://rpki.afrinic.net/repository/afrinic/nxc4PrZn5Ue6AM-3-RT0KExYScw.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 26 Dec 2025 01:00:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3869 (0xf1d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36549B1AF, serialNumber=9F17383EB667E547BA00CFB7F914F4284C5849CC
        Validity
            Not Before: Dec 24 01:00:03 2025 GMT
            Not After : Dec 26 01:00:03 2025 GMT
        Subject: CN=694b3b14-8f54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:cb:c7:43:ff:fd:40:78:67:13:66:9d:a0:a2:
                    f7:4e:82:9f:e1:63:5f:a8:bb:ee:66:f5:b3:ff:80:
                    cd:41:b5:c6:08:2b:ec:ea:93:f8:69:b3:48:67:97:
                    f8:08:49:5f:1c:73:a8:df:43:63:1b:7a:17:80:4a:
                    89:4e:6b:d0:57:a5:4b:82:6f:eb:33:31:cb:2a:e9:
                    82:6b:7a:be:f7:55:46:10:54:0c:d5:ac:c7:97:77:
                    4c:c3:8d:c1:5e:a7:d1:56:ee:05:1a:af:24:66:f7:
                    a0:dc:7d:bf:2e:46:7f:7b:bd:e2:3d:49:3b:4b:c3:
                    72:4b:05:03:5a:40:fd:35:b3:8b:83:6d:f3:44:d7:
                    eb:a1:45:9e:33:3c:9a:e2:8e:6a:4f:77:17:e2:7c:
                    dc:ac:55:3c:94:72:8a:e7:99:10:e7:d5:a8:aa:d8:
                    34:01:91:77:e8:25:e8:40:ac:c2:33:64:b5:2e:fb:
                    7a:70:55:af:96:a2:a5:c9:88:8a:5a:97:e0:a0:56:
                    f0:56:21:07:09:37:fd:ff:51:c0:82:87:f2:1c:3e:
                    14:d7:a1:16:95:c4:a2:7b:69:e9:a6:a4:07:e7:30:
                    21:97:f6:12:45:d1:ac:33:e8:67:37:ba:c6:e0:fb:
                    a6:de:48:92:50:7f:2e:c6:f3:8e:03:b4:ea:7d:f4:
                    11:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:3F:77:F8:D3:4E:66:41:12:40:C4:D1:C4:81:8B:CE:DE:98:11:D8
            X509v3 Authority Key Identifier:
                keyid:9F:17:38:3E:B6:67:E5:47:BA:00:CF:B7:F9:14:F4:28:4C:58:49:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36549B1/DF788C98561311E5B1A0E360F8AEA228/nxc4PrZn5Ue6AM-3-RT0KExYScw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/nxc4PrZn5Ue6AM-3-RT0KExYScw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36549B1/DF788C98561311E5B1A0E360F8AEA228/nxc4PrZn5Ue6AM-3-RT0KExYScw.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:39:0f:90:ef:34:06:54:d8:d4:23:e7:8f:e8:54:18:65:ff:
         0f:bc:7b:73:7b:13:39:2b:d7:68:44:68:f0:08:f9:99:57:7c:
         9d:a8:87:de:16:ea:2f:b7:55:02:cf:43:81:00:35:e4:af:3c:
         4e:9a:3e:10:31:a3:cb:05:60:47:95:dd:07:38:58:fc:c9:ea:
         dd:61:8e:83:de:73:50:65:fb:c1:f2:46:fb:d7:98:c2:9b:70:
         31:0f:75:06:cc:b3:51:a3:40:08:8e:90:0f:23:ce:ab:c1:ab:
         7d:cc:57:24:b6:78:58:96:92:09:47:dc:2e:5d:bb:6b:91:d0:
         f2:eb:0d:a1:fb:45:91:29:b7:51:27:8a:e0:dc:a4:d6:75:7d:
         a9:bb:72:dc:3f:12:ad:e0:39:12:1c:e1:8d:24:a1:f6:f7:0f:
         7a:cb:44:03:50:28:6b:75:2a:63:74:24:f2:38:2e:41:21:37:
         56:7a:2b:9e:20:42:27:fe:6e:00:fb:f3:f8:c4:e0:a4:68:f2:
         30:38:3a:d4:33:52:dd:ff:31:3a:fd:10:57:93:7f:dc:eb:48:
         15:9e:a9:94:9c:de:41:af:3f:43:de:25:53:61:62:8e:d3:2b:
         14:38:52:91:cf:13:54:cd:27:d7:ca:64:71:bc:bb:94:48:51:
         0e:53:11:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 18:16:09 2025 by rpki-client