This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367BA6A/0F4A37F4ECD911EE9F732C67775412E6/T0jn6jDJibFdNjk3djVToH4WzY4.mft
File:                     T0jn6jDJibFdNjk3djVToH4WzY4.mft (raw, json)
Hash identifier:          FJcD36fRxJ/qMHsBR5bPPLkUQ9XoYJ/5C4vkyilkOV0=
Subject key identifier:   FE:A1:05:23:D8:CB:61:EE:5E:F2:8D:B7:21:4A:70:B0:17:6C:41:9A
Authority key identifier: 4F:48:E7:EA:30:C9:89:B1:5D:36:39:37:76:35:53:A0:7E:16:CD:8E
Certificate issuer:       /CN=F367BA6AAF/serialNumber=4F48E7EA30C989B15D363937763553A07E16CD8E
Certificate serial:       02C5
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/T0jn6jDJibFdNjk3djVToH4WzY4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F367BA6A/0F4A37F4ECD911EE9F732C67775412E6/T0jn6jDJibFdNjk3djVToH4WzY4.mft
Manifest number:          02AF
Signing time:             Sun 28 Dec 2025 04:15:35 +0000
Manifest this update:     Sun 28 Dec 2025 04:15:34 +0000
Manifest next update:     Tue 30 Dec 2025 04:15:34 +0000
Files and hashes:         1: T0jn6jDJibFdNjk3djVToH4WzY4.crl (hash: +ExirgQQcDsnsik1bn82S5ItYeUlljnkPkLqytCOh7k=)
                          2: 01FFB238325511EFBB9C746F762E951A.roa (hash: HwB4zPJU9kPQhOWUZlM6j0iw2tO8p/LDrcqvDUSUml8=)
                          3: E3677BF4325311EF8E43A166762E951A.roa (hash: /yOVgWKNONmcMcmqu8GnU0BKllh0LGM51U9XQ2bz01g=)
                          4: A66EC216ECDA11EE9EC08472775412E6.roa (hash: f71Fay/DESTXOMYTj0DRv2PY2902rnleTuR/D0d4cTA=)
                          5: 5A1BE094EB6511EF853965AB762E951A.roa (hash: m2DS77Vz7boH9o3knUuqENRMtVGaoDlo5YdpHFrrc4w=)
                          6: B302C860325311EF8EF04166762E951A.roa (hash: PaTtuEHFKauPFcvBG7F1Vb+HR7eUcOBrKqbBlq0OM3o=)
                          7: C4815F54D81E11EFB891499E762E951A.roa (hash: wuzVVrhPQApx6Smw2Hs9Pgr/IoLeBCq0Aedko2SwUlE=)
                          8: 880847F2325311EFAA2C1666762E951A.roa (hash: Wluds4MwrpwwEfBvwaxH1Q9uLDWNvfUcuMAqtTfYhng=)
                          9: B163A47EEA6411EFB0192A8F762E951A.roa (hash: gd0V9wGbms8dangRjTs1B1syY6Co0GN21dzbunIC3Oo=)
                          10: 8FBDDA88024311EF8F71D755017001B1.roa (hash: U5+3ihpDeTDN/QaTSJ0S4ji0OUYXEbqAt0B5DT/fsvo=)
                          11: ABC9643AED2B11EFB63252B0762E951A.roa (hash: rYe+cPZkMHhDG2GzW8uh3+g2G04Hmp44xW61bCXWx/Y=)
                          12: FBD09FE6387411EF80E58557762E951A.roa (hash: gpW090sQ3gSntI8ZuxHiEJc42Mhxrl4srlTmd4Q5n+I=)
                          13: 0139A80E1C2511EFB46BB8E77CDC24C2.roa (hash: QmuJlGJat+l8+ngZcwk1G2cycsf7YIyKE+PvKaaYwKw=)
                          14: 01B62ACEF64F11EEA7BF4372775412E6.roa (hash: JFeLgbzAfmQPQNmjnlZv5H8jcPctU6ppJiDbWstuUUU=)
                          15: 7ECDEEE6387311EF9CCF594A762E951A.roa (hash: 2ZeihCUzI0W9JMOxurwJNNO7X97D4kJnt3ZQCqSXzLk=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F367BA6A/0F4A37F4ECD911EE9F732C67775412E6/T0jn6jDJibFdNjk3djVToH4WzY4.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F367BA6A/0F4A37F4ECD911EE9F732C67775412E6/T0jn6jDJibFdNjk3djVToH4WzY4.mft
                          rsync://rpki.afrinic.net/repository/afrinic/T0jn6jDJibFdNjk3djVToH4WzY4.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 30 Dec 2025 00:06:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 709 (0x2c5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F367BA6AAF, serialNumber=4F48E7EA30C989B15D363937763553A07E16CD8E
        Validity
            Not Before: Dec 28 04:15:34 2025 GMT
            Not After : Dec 30 04:15:34 2025 GMT
        Subject: CN=6950aee6-b06c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:d0:78:9f:1a:29:93:a6:79:15:f2:68:5c:80:
                    6f:e3:6a:00:61:a7:4f:9d:71:e1:67:26:6d:5f:9b:
                    9e:f1:05:56:a7:b2:80:fc:0d:6d:51:06:5d:89:17:
                    37:1d:24:da:b7:76:e9:55:98:9a:95:36:b8:5a:83:
                    8d:2d:d1:28:9f:dc:d9:b5:38:9d:2d:2d:46:6d:7f:
                    d3:1f:c8:f1:fd:4a:8c:1c:29:81:3d:78:2b:ee:b0:
                    e0:e5:fd:1a:76:62:2e:03:a6:71:dd:44:13:85:48:
                    b9:6d:02:67:62:68:82:e4:12:e2:5b:c9:66:91:f3:
                    f6:ee:e9:c9:cb:fa:96:82:9e:14:f3:4b:6c:cb:3b:
                    14:ad:12:38:3a:4b:c5:de:a0:e2:34:09:5e:f1:bb:
                    c3:a9:09:f8:90:c2:44:cd:13:08:8c:90:06:0c:01:
                    cb:c5:bf:53:4b:35:1f:cc:0f:96:73:27:8c:d6:74:
                    d9:81:69:ee:cf:d0:8b:a1:e8:81:c5:91:f5:f9:fc:
                    8e:37:0c:08:d3:da:d3:1e:d1:cd:9d:78:40:5d:79:
                    bb:32:02:04:61:88:0a:6d:70:d8:09:14:ea:dd:b3:
                    e1:c9:92:a7:02:6c:c9:7f:d5:da:bb:dc:e6:e2:0c:
                    bb:fe:44:21:10:26:91:d3:af:ed:ee:8e:22:87:26:
                    0e:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:A1:05:23:D8:CB:61:EE:5E:F2:8D:B7:21:4A:70:B0:17:6C:41:9A
            X509v3 Authority Key Identifier:
                keyid:4F:48:E7:EA:30:C9:89:B1:5D:36:39:37:76:35:53:A0:7E:16:CD:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F367BA6A/0F4A37F4ECD911EE9F732C67775412E6/T0jn6jDJibFdNjk3djVToH4WzY4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/T0jn6jDJibFdNjk3djVToH4WzY4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367BA6A/0F4A37F4ECD911EE9F732C67775412E6/T0jn6jDJibFdNjk3djVToH4WzY4.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:87:5a:72:27:b3:c9:f0:2c:35:3d:e7:37:a8:26:b1:63:15:
         ac:06:83:1b:99:43:2f:5a:83:98:95:94:0c:3b:a3:99:b5:51:
         ec:89:72:df:c2:55:2b:87:7b:f9:c0:30:bb:af:08:87:ce:52:
         ad:74:e3:a7:61:ad:46:59:15:41:b5:7c:b8:2e:0c:ca:67:d8:
         b8:e8:02:9f:7b:e2:39:c0:04:3c:e3:16:67:22:11:9e:3e:5f:
         ab:1b:5d:8b:c7:73:f3:54:ef:b1:fd:4c:d3:cb:c5:ce:eb:f3:
         e0:c4:3c:5b:40:35:fc:da:34:8a:ee:b1:34:49:41:67:e7:73:
         18:23:b5:9f:4c:9f:b0:ea:51:41:41:5b:71:89:f4:74:ce:d6:
         24:d1:41:09:a7:34:2f:fc:e0:80:0c:26:03:fa:5a:3a:36:d8:
         e7:3a:96:97:a6:60:f2:3d:6e:a9:78:a0:8d:e8:85:35:a8:a9:
         b1:15:52:54:56:b2:74:be:6d:30:ab:a2:15:3e:07:2d:1a:c7:
         e4:b2:2b:d2:cf:8a:84:68:d1:ce:57:b1:0c:6f:14:5d:b0:d2:
         e2:fc:95:f8:bb:66:e1:19:1b:d3:c5:f1:1d:73:25:7f:35:cb:
         94:c3:be:42:7e:0f:09:2f:59:44:bb:1c:12:4f:a9:00:fd:26:
         6d:f7:4e:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 28 05:50:38 2025 by rpki-client