This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F366FAD3/666F962464DF11E8AFE47627F8AEA228/a5D-NKhmmog4_SOMxloRUsRBZQU.mft
File:                     a5D-NKhmmog4_SOMxloRUsRBZQU.mft (raw, json)
Hash identifier:          4a7iiKhmbm6uC8UDR4XYtXOmfZTxgXMf9h/5xCsewAQ=
Subject key identifier:   1B:69:AC:AC:CC:E3:5A:DE:A0:A5:D6:A4:00:F7:58:AD:B0:71:0A:93
Authority key identifier: 6B:90:FE:34:A8:66:9A:88:38:FD:23:8C:C6:5A:11:52:C4:41:65:05
Certificate issuer:       /CN=F366FAD3AF/serialNumber=6B90FE34A8669A8838FD238CC65A1152C4416505
Certificate serial:       0B22
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/a5D-NKhmmog4_SOMxloRUsRBZQU.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F366FAD3/666F962464DF11E8AFE47627F8AEA228/a5D-NKhmmog4_SOMxloRUsRBZQU.mft
Manifest number:          0B1B
Signing time:             Thu 25 Dec 2025 01:11:22 +0000
Manifest this update:     Thu 25 Dec 2025 01:11:21 +0000
Manifest next update:     Sat 27 Dec 2025 01:11:21 +0000
Files and hashes:         1: a5D-NKhmmog4_SOMxloRUsRBZQU.crl (hash: FNHSkArkkl8R435jyYBXaGCPg7PGgpPazH8D2STHfR8=)
                          2: 053A807256FF11E996D74E7BF8AEA228.roa (hash: hO2TDaSMWg20HoMHgfojmos9nkNQYyH0a66GXivwXhY=)
                          3: 8F2CFCDE56E511E98093C968F8AEA228.roa (hash: 9+KvA5vBTldHkBa01AwWhEOmwfdSKfq79Dv4LMRkqU8=)
                          4: 2B44E2DA56FF11E98AB1737BF8AEA228.roa (hash: KthwQ1M/ZZ2vEvLYbI5jDmjg5aaJSRqGQpQ+loYoav8=)
                          5: 5CDDF2D65F8411E9A487E246F8AEA228.roa (hash: W5D3/ionOUfSBEwoAu8Mc+CDPfPuMjEyhVg8cxMPW1Y=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F366FAD3/666F962464DF11E8AFE47627F8AEA228/a5D-NKhmmog4_SOMxloRUsRBZQU.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F366FAD3/666F962464DF11E8AFE47627F8AEA228/a5D-NKhmmog4_SOMxloRUsRBZQU.mft
                          rsync://rpki.afrinic.net/repository/afrinic/a5D-NKhmmog4_SOMxloRUsRBZQU.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 27 Dec 2025 00:06:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2850 (0xb22)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F366FAD3AF, serialNumber=6B90FE34A8669A8838FD238CC65A1152C4416505
        Validity
            Not Before: Dec 25 01:11:21 2025 GMT
            Not After : Dec 27 01:11:21 2025 GMT
        Subject: CN=694c8f3a-c6cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:5b:85:30:44:9a:fc:a1:d5:d6:51:d2:3a:d4:
                    e1:4e:6a:cb:cd:34:17:af:71:5c:67:c0:c8:da:41:
                    ad:a4:f4:29:79:16:d5:48:b7:ae:85:fc:94:a5:56:
                    43:25:37:ae:a6:23:b6:e0:4f:e8:9d:94:f4:c6:6a:
                    49:4b:ba:9e:8b:c6:28:a3:47:2c:c5:5a:bb:52:a9:
                    9e:dd:7b:9f:7a:d7:44:b3:7c:9e:94:7c:bb:87:36:
                    e5:b5:e9:1c:ab:86:4c:dc:ca:a2:f1:e9:bc:69:90:
                    21:36:da:57:66:5b:92:c3:80:cf:74:8a:49:83:f9:
                    fd:7a:b2:a2:cb:4d:c5:76:68:bf:02:24:92:23:48:
                    bb:1d:b7:cb:cf:49:a4:51:c2:d0:a5:12:16:fb:0c:
                    46:e3:8f:d1:d3:a2:9a:da:79:fe:12:6b:32:78:4c:
                    1e:a3:7d:07:f9:76:0a:f1:7a:81:25:ad:00:b0:0d:
                    b9:6e:49:9f:40:46:dd:04:b9:89:a3:72:38:34:0e:
                    02:68:1d:8c:78:94:0e:27:af:85:f2:0d:6a:46:aa:
                    84:0a:dd:a3:a3:6a:56:a8:41:b9:6b:95:e9:14:7d:
                    1a:ac:5a:28:c6:fe:99:13:be:8d:94:25:27:ba:1c:
                    5b:5c:ba:d4:05:b4:90:15:ec:3b:55:8e:dd:f2:55:
                    78:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:69:AC:AC:CC:E3:5A:DE:A0:A5:D6:A4:00:F7:58:AD:B0:71:0A:93
            X509v3 Authority Key Identifier:
                keyid:6B:90:FE:34:A8:66:9A:88:38:FD:23:8C:C6:5A:11:52:C4:41:65:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F366FAD3/666F962464DF11E8AFE47627F8AEA228/a5D-NKhmmog4_SOMxloRUsRBZQU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/a5D-NKhmmog4_SOMxloRUsRBZQU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F366FAD3/666F962464DF11E8AFE47627F8AEA228/a5D-NKhmmog4_SOMxloRUsRBZQU.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:c3:4d:46:3c:01:db:16:1d:d7:2e:6a:e3:ff:21:8c:84:3f:
         ff:6d:c9:d1:e9:b0:2c:30:5a:e7:89:09:6a:e5:ea:de:c1:f1:
         37:5c:00:87:a4:79:fd:38:3b:a1:12:fb:a4:9b:52:1d:a2:36:
         52:29:6f:55:ab:d4:c7:ac:43:06:58:d8:17:8a:ff:51:21:0f:
         c4:f4:53:c5:ca:1f:e6:34:1a:d7:22:b8:27:ca:84:47:2e:54:
         ae:f3:ee:4a:0d:47:c2:15:0e:27:7f:5d:4b:4a:d4:6d:e5:65:
         0d:c3:e7:a5:4b:8b:c7:f7:e2:10:2b:f4:9b:87:25:b0:ef:77:
         f8:69:7c:22:f5:33:63:bf:1f:f3:f5:78:71:63:90:ff:9d:5c:
         19:ea:93:69:fa:04:bd:27:4b:13:e8:20:5e:fa:84:80:9b:98:
         99:42:a5:0b:7b:2b:96:ce:b9:97:cf:aa:b8:d6:e2:38:50:50:
         e6:b2:91:85:40:16:af:e9:0f:b0:bd:6c:70:41:94:3c:34:08:
         33:76:61:98:f3:b9:68:fd:fe:ae:ff:31:56:43:3c:6c:5c:06:
         3c:f6:34:3f:08:c6:88:42:bb:a0:7c:0d:04:86:de:6a:39:d1:
         46:71:b8:a2:c7:b6:a0:4c:a8:99:a6:48:d0:e9:ab:ee:b6:63:
         d6:46:a1:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 25 12:47:51 2025 by rpki-client