This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367972F/6110705C901011ED9475399BF1222468/ki0mxmsPTvhSNY472eGm8bVde4c.mft
File:                     ki0mxmsPTvhSNY472eGm8bVde4c.mft (raw, json)
Hash identifier:          35MDFqdM5tGEe1VPG6GjnOEfdfZXIvD8kp4QVFmXSh4=
Subject key identifier:   34:56:2F:43:E6:49:64:28:1E:3D:FD:0D:B0:3A:42:1C:22:71:95:2D
Authority key identifier: 92:2D:26:C6:6B:0F:4E:F8:52:35:8E:3B:D9:E1:A6:F1:B5:5D:7B:87
Certificate issuer:       /CN=F367972FAF/serialNumber=922D26C66B0F4EF852358E3BD9E1A6F1B55D7B87
Certificate serial:       046F
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/ki0mxmsPTvhSNY472eGm8bVde4c.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F367972F/6110705C901011ED9475399BF1222468/ki0mxmsPTvhSNY472eGm8bVde4c.mft
Manifest number:          0468
Signing time:             Tue 23 Dec 2025 03:09:49 +0000
Manifest this update:     Tue 23 Dec 2025 03:09:49 +0000
Manifest next update:     Thu 25 Dec 2025 03:09:49 +0000
Files and hashes:         1: ki0mxmsPTvhSNY472eGm8bVde4c.crl (hash: PeRpJSU1D15OP1+AUOjsOVnNLzmbmJviSPyJ2Nk8g8U=)
                          2: 938ED3E8902411ED9A86A0D1F1222468.roa (hash: GgjrB1MRowvieagE2XuEoecTYc9snCOj4iPepN1usqs=)
                          3: B4757670902411EDA810FAD1F1222468.roa (hash: LcXk9bYeZ53prK+LBi8a4OcZBsCqMeTNkhzE/nnjIPs=)
                          4: 6CF9C04E902411EDAA6A30D1F1222468.roa (hash: RCJ3vAgRCxwx9M4Vjn0jNM+D+vokpMLIZ09HERtg3jU=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F367972F/6110705C901011ED9475399BF1222468/ki0mxmsPTvhSNY472eGm8bVde4c.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F367972F/6110705C901011ED9475399BF1222468/ki0mxmsPTvhSNY472eGm8bVde4c.mft
                          rsync://rpki.afrinic.net/repository/afrinic/ki0mxmsPTvhSNY472eGm8bVde4c.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 25 Dec 2025 03:09:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1135 (0x46f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F367972FAF, serialNumber=922D26C66B0F4EF852358E3BD9E1A6F1B55D7B87
        Validity
            Not Before: Dec 23 03:09:49 2025 GMT
            Not After : Dec 25 03:09:49 2025 GMT
        Subject: CN=694a07fd-246e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:aa:08:da:bc:0b:b2:53:b6:1f:07:bc:fc:12:
                    c5:aa:bd:28:51:e1:68:77:f8:f9:96:d2:86:70:3c:
                    c0:b1:52:f4:f2:bc:ed:4d:18:1c:53:76:73:24:35:
                    3a:cc:9d:42:05:7d:3b:36:89:98:84:96:0d:95:16:
                    b7:42:2c:40:e7:e4:53:ab:08:16:98:7a:9e:bb:88:
                    41:78:f2:64:d7:0c:21:15:ad:4b:58:f7:7e:49:46:
                    22:f2:ca:dd:0d:19:59:0c:c9:58:09:5f:23:3c:91:
                    ed:cb:8d:62:17:2b:54:b8:d0:10:a5:e1:6a:be:8d:
                    cc:9e:fe:2b:f8:ec:62:57:77:a9:ef:c1:0e:99:e7:
                    3a:fd:93:28:e9:04:75:64:d2:4c:f7:72:4c:f3:23:
                    4c:3b:95:bb:54:86:41:e2:9f:36:3a:86:0e:e3:98:
                    83:a0:f3:ce:b5:9c:4e:7d:88:ec:78:ca:62:88:2f:
                    4f:ac:35:3d:6c:b1:e7:b1:f0:4e:cf:ba:e2:68:fa:
                    00:59:4f:8b:b4:a0:55:d8:97:56:4c:29:72:cf:ae:
                    81:ac:72:f7:e5:c3:52:f4:b9:17:d9:82:ed:a2:6d:
                    5e:a8:90:a4:bd:f9:b8:74:62:13:c6:a9:85:64:2c:
                    39:96:d3:49:64:c6:9e:6a:98:1b:cb:24:ab:fb:79:
                    d0:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:56:2F:43:E6:49:64:28:1E:3D:FD:0D:B0:3A:42:1C:22:71:95:2D
            X509v3 Authority Key Identifier:
                keyid:92:2D:26:C6:6B:0F:4E:F8:52:35:8E:3B:D9:E1:A6:F1:B5:5D:7B:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F367972F/6110705C901011ED9475399BF1222468/ki0mxmsPTvhSNY472eGm8bVde4c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/ki0mxmsPTvhSNY472eGm8bVde4c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367972F/6110705C901011ED9475399BF1222468/ki0mxmsPTvhSNY472eGm8bVde4c.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:0d:6d:da:9e:2e:16:cb:78:da:1e:e3:fa:4e:49:9c:b0:68:
         76:37:9e:1a:73:8a:8f:ca:fe:1f:19:c9:39:6c:9b:ee:07:a9:
         03:96:f9:98:48:b4:50:dd:6d:16:5d:65:13:3b:2a:62:a3:b4:
         fc:92:b3:55:fc:a4:a6:ba:c6:f7:fb:f7:e2:71:46:4d:6a:1e:
         bd:43:05:fb:ee:44:a9:db:a9:c2:a6:a0:5b:af:f9:ee:7c:5e:
         45:b6:0b:a5:69:83:e9:14:07:4e:e0:54:b6:ea:25:e3:86:26:
         19:f5:a3:4b:e0:cb:3d:e6:f6:10:33:7b:ce:2e:b7:52:1e:4d:
         30:35:2b:a6:5f:3e:da:67:a9:6a:cf:69:c1:b7:09:4d:5a:aa:
         c6:bb:9b:c0:b4:70:2b:28:39:cd:6e:0b:0a:25:8a:d0:45:0d:
         cc:23:34:16:68:ed:0d:ed:00:bb:0e:09:51:3b:72:48:e6:ac:
         6b:c6:b9:89:8c:6c:db:ab:61:08:7d:de:16:43:a9:15:46:73:
         bf:80:8c:68:1e:34:57:12:5c:28:df:e5:71:3b:9b:b9:f5:36:
         a9:85:ad:f5:07:36:17:0f:44:54:14:a8:4b:8d:87:b1:fe:65:
         c9:90:ff:74:19:e0:e3:1c:25:5f:d0:5f:1e:4a:f8:fa:05:a9:
         5b:84:f4:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 18:36:23 2025 by rpki-client