This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F366F191/1DA5A51E07F711E79CDBB30AF8AEA228/pz69jeko0iBEFPgOnBKclZ18RIk.mft
File:                     pz69jeko0iBEFPgOnBKclZ18RIk.mft (raw, json)
Hash identifier:          uN8BvZb8PumrRZTFQ/ILYGscC7muHzvXWgkV6f/OII0=
Subject key identifier:   C2:C3:C7:DB:15:99:71:CE:2D:D4:73:78:94:19:8C:7F:9F:CF:87:86
Authority key identifier: A7:3E:BD:8D:E9:28:D2:20:44:14:F8:0E:9C:12:9C:95:9D:7C:44:89
Certificate issuer:       /CN=F366F191AF/serialNumber=A73EBD8DE928D2204414F80E9C129C959D7C4489
Certificate serial:       0CCD
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/pz69jeko0iBEFPgOnBKclZ18RIk.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F366F191/1DA5A51E07F711E79CDBB30AF8AEA228/pz69jeko0iBEFPgOnBKclZ18RIk.mft
Manifest number:          0CCB
Signing time:             Sat 20 Dec 2025 01:07:51 +0000
Manifest this update:     Sat 20 Dec 2025 01:07:51 +0000
Manifest next update:     Mon 22 Dec 2025 01:07:51 +0000
Files and hashes:         1: pz69jeko0iBEFPgOnBKclZ18RIk.crl (hash: 7+4LrQwclIuUQdxf1PduoYC6HdB/PHwNwj4ZiNLvySA=)
                          2: A5F505EE310A11E89814DE46F8AEA228.roa (hash: G7wALW0FIkxQXpAJOH3ldp5an+aZ2+T0e/6OMG97saU=)
                          3: E7F9C2D60E4C11E795956341F8AEA228.roa (hash: emeNnLebc/Q9zvHY298LJgCEJ9keSysC0t/xMmR8occ=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F366F191/1DA5A51E07F711E79CDBB30AF8AEA228/pz69jeko0iBEFPgOnBKclZ18RIk.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F366F191/1DA5A51E07F711E79CDBB30AF8AEA228/pz69jeko0iBEFPgOnBKclZ18RIk.mft
                          rsync://rpki.afrinic.net/repository/afrinic/pz69jeko0iBEFPgOnBKclZ18RIk.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 22 Dec 2025 01:07:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3277 (0xccd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F366F191AF, serialNumber=A73EBD8DE928D2204414F80E9C129C959D7C4489
        Validity
            Not Before: Dec 20 01:07:51 2025 GMT
            Not After : Dec 22 01:07:51 2025 GMT
        Subject: CN=6945f6e7-a737
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:02:1f:b0:54:96:1f:35:5d:bb:5c:59:81:aa:
                    2f:6a:9a:e4:81:0e:ae:b6:55:e0:cf:9b:e3:f3:98:
                    26:4f:55:fa:02:28:90:75:d6:13:e3:6b:fa:8c:64:
                    bb:11:61:70:69:ac:b1:4a:83:49:92:30:7f:57:67:
                    3c:08:ef:66:1e:14:4f:4e:ff:e9:8b:41:ea:52:63:
                    32:a3:42:f9:09:7e:f3:ef:c4:0d:32:ab:0c:4d:5f:
                    7b:eb:77:de:ac:0f:fa:c7:1d:51:28:4c:6a:6e:5f:
                    60:b6:32:ad:36:c9:bf:f6:00:3d:91:b5:49:c3:76:
                    99:fa:18:d0:5d:6f:89:6a:53:5b:e4:6f:7d:ba:c3:
                    61:97:ce:71:ea:e2:d9:9f:52:0c:83:52:51:94:db:
                    f6:6d:6a:5b:90:96:40:87:f9:75:63:41:44:dc:56:
                    be:4b:e7:a9:a2:f6:e1:27:e1:7c:2a:2f:d4:96:41:
                    3b:1e:8d:d4:37:5b:92:53:b1:55:6d:99:08:0e:3c:
                    d2:42:27:33:c2:f6:ba:4e:71:9d:6d:79:27:c8:a9:
                    f6:98:14:a9:89:f6:07:62:a2:74:71:c6:eb:d4:45:
                    6d:a5:e0:a6:43:d4:0a:dd:f4:f8:ef:05:0a:54:e5:
                    c9:05:b2:79:ae:f7:78:24:3b:2b:a3:8c:61:af:83:
                    d7:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:C3:C7:DB:15:99:71:CE:2D:D4:73:78:94:19:8C:7F:9F:CF:87:86
            X509v3 Authority Key Identifier:
                keyid:A7:3E:BD:8D:E9:28:D2:20:44:14:F8:0E:9C:12:9C:95:9D:7C:44:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F366F191/1DA5A51E07F711E79CDBB30AF8AEA228/pz69jeko0iBEFPgOnBKclZ18RIk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/pz69jeko0iBEFPgOnBKclZ18RIk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F366F191/1DA5A51E07F711E79CDBB30AF8AEA228/pz69jeko0iBEFPgOnBKclZ18RIk.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:eb:9c:a3:78:b1:91:6b:77:51:8f:94:a2:fc:65:93:92:02:
         a7:7c:96:3d:0f:1e:1f:71:45:f5:4c:39:59:08:cd:5e:2e:e5:
         f8:4c:45:d6:3e:7a:b2:e1:60:e2:11:67:b3:aa:00:88:7c:01:
         3b:14:25:55:f4:0f:a9:46:65:5d:2c:1f:61:7c:7d:4a:06:86:
         4a:31:2a:de:35:13:43:7f:6f:09:f5:bb:f9:c7:69:53:35:81:
         70:6a:88:d5:e8:47:9a:34:bb:90:9c:24:cd:0b:f6:ae:61:bf:
         3e:84:d6:f4:6f:c3:31:57:02:19:92:ea:a4:e6:8d:7b:62:22:
         af:4c:e6:5e:82:b6:34:6e:db:3c:df:49:e5:ca:62:bc:ee:61:
         02:63:24:29:b2:d5:9a:75:3a:e7:8d:91:b2:dc:94:66:e6:48:
         be:d5:9a:d9:b0:c2:73:12:62:72:b4:24:b2:dc:e3:1e:1b:c1:
         b0:8f:ce:bd:79:6e:4b:54:84:b3:4a:eb:e6:b6:a5:d1:2d:70:
         5d:f2:9c:23:f2:20:68:c8:1c:9b:12:ec:32:bb:b0:54:c9:87:
         85:a2:ec:8b:65:3c:d2:2f:f3:57:aa:0f:95:34:4c:40:4a:fa:
         bb:6a:18:08:d6:e0:f5:b7:bc:e1:2a:d3:80:33:75:8b:67:0c:
         a9:04:8e:11
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICDM0wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NkYxOTFBRjExMC8GA1UEBRMoQTczRUJEOERFOTI4RDIyMDQ0MTRGODBFOUMxMjlD
OTU5RDdDNDQ4OTAeFw0yNTEyMjAwMTA3NTFaFw0yNTEyMjIwMTA3NTFaMBgxFjAU
BgNVBAMTDTY5NDVmNmU3LWE3MzcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDlAh+wVJYfNV27XFmBqi9qmuSBDq62VeDPm+PzmCZPVfoCKJB11hPja/qM
ZLsRYXBprLFKg0mSMH9XZzwI72YeFE9O/+mLQepSYzKjQvkJfvPvxA0yqwxNX3vr
d96sD/rHHVEoTGpuX2C2Mq02yb/2AD2RtUnDdpn6GNBdb4lqU1vkb326w2GXznHq
4tmfUgyDUlGU2/ZtaluQlkCH+XVjQUTcVr5L56mi9uEn4XwqL9SWQTsejdQ3W5JT
sVVtmQgOPNJCJzPC9rpOcZ1teSfIqfaYFKmJ9gdionRxxuvURW2l4KZD1Ard9Pjv
BQpU5ckFsnmu93gkOyujjGGvg9cpAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUwsPH
2xWZcc4t1HN4lBmMf5/Ph4YwHwYDVR0jBBgwFoAUpz69jeko0iBEFPgOnBKclZ18
RIkwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjZGMTkxLzFEQTVBNTFFMDdGNzExRTc5Q0RCQjMwQUY4QUVBMjI4L3B6Njlq
ZWtvMGlCRUZQZ09uQktjbFoxOFJJay5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL3B6NjlqZWtvMGlCRUZQZ09uQktjbFoxOFJJay5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2NkYxOTEvMURBNUE1MUUwN0Y3MTFFNzlDREJCMzBBRjhB
RUEyMjgvcHo2OWpla28waUJFRlBnT25CS2NsWjE4UklrLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCf65yjeLGRa3dRj5Si/GWTkgKnfJY9
Dx4fcUX1TDlZCM1eLuX4TEXWPnqy4WDiEWezqgCIfAE7FCVV9A+pRmVdLB9hfH1K
BoZKMSreNRNDf28J9bv5x2lTNYFwaojV6EeaNLuQnCTNC/auYb8+hNb0b8MxVwIZ
kuqk5o17YiKvTOZegrY0bts830nlymK87mECYyQpstWadTrnjZGy3JRm5ki+1ZrZ
sMJzEmJytCSy3OMeG8Gwj869eW5LVISzSuvmtqXRLXBd8pwj8iBoyBybEuwyu7BU
yYeFouyLZTzSL/NXqg+VNExASvq7ahgI1uD1t7zhKtOAM3WLZwypBI4R
-----END CERTIFICATE-----
Generated at Sun Dec 21 01:51:44 2025 by rpki-client