This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367CC68/527491FCD35D11F085817997DAE4EC9C/kFAlcktjykllnsFAWPqwwTHFDp8.mft
File:                     kFAlcktjykllnsFAWPqwwTHFDp8.mft (raw, json)
Hash identifier:          7zOGu26j/yUSZeog1VmL8fomGcQ+Ax26uG09e8lfUwY=
Subject key identifier:   88:24:45:3D:C7:9B:DB:2E:BA:10:5E:80:42:43:C2:D3:AC:F2:C0:A1
Authority key identifier: 90:50:25:72:4B:63:CA:49:65:9E:C1:40:58:FA:B0:C1:31:C5:0E:9F
Certificate issuer:       /CN=F367CC68AF/serialNumber=905025724B63CA49659EC14058FAB0C131C50E9F
Certificate serial:       25
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/kFAlcktjykllnsFAWPqwwTHFDp8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F367CC68/527491FCD35D11F085817997DAE4EC9C/kFAlcktjykllnsFAWPqwwTHFDp8.mft
Manifest number:          1A
Signing time:             Fri 19 Dec 2025 05:24:03 +0000
Manifest this update:     Fri 19 Dec 2025 05:24:03 +0000
Manifest next update:     Sun 21 Dec 2025 05:24:03 +0000
Files and hashes:         1: kFAlcktjykllnsFAWPqwwTHFDp8.crl (hash: GAVx478PVj4mPLdjC4z+L2yHu56BmkiGjnDWiX7evyA=)
                          2: 65FE1EFAD60F11F0B34D61F1DAE4EC9C.roa (hash: mHmRtPN3nZyRtaKXk1NyFAMoXJCcMKBcFKPMe58mtiY=)
                          3: 7FC14BC8D60F11F0939384F1DAE4EC9C.roa (hash: UWIFnq0Lrxsq+X5E3Jj5o9t7xwd79DXmyhte1Zg7m98=)
                          4: 5F36C9FED43A11F087C1DB7BDAE4EC9C.roa (hash: 4Qs9L5d+Awp2J42sO92B4p+sTgRxFXnSs6/Y3boWpeI=)
                          5: 12BB6CB0D61011F080EE71F5DAE4EC9C.roa (hash: jieQwbNjbO9s2qsCMK6/pp01R2MtwreNxzIjr89AhWs=)
                          6: A77BACE0D60E11F0A525F0ECDAE4EC9C.roa (hash: WTe1kO+YXrIxbOoIVpdaqpCDc9gvbrr/Ve7XA6zdn5w=)
                          7: C09D7446D60F11F0929B8FF3DAE4EC9C.roa (hash: jxUAEr+gL2A5pYodyrShkYHLF8BEr2fg48HKO/LfZok=)
                          8: F20A2EE8D60F11F0A4B15CF5DAE4EC9C.roa (hash: OwRd4G+mOpbXOMIkBo/pXf/BF2+Cvu67XOd6VreanjU=)
                          9: 295EF6E4D61011F099E8CAF5DAE4EC9C.roa (hash: rYes370ZUBvIJkRR4ObdZvVs20GYj/AIYKpkc3M+O8c=)
                          10: 462E5B98D61011F09797F9F5DAE4EC9C.roa (hash: OuOErrsFiqhdqJPzGVtN61HMOsmFGKM1fy11PY2D+1E=)
                          11: A814A5BED61111F0B21B3C80DAE4EC9C.roa (hash: awM7RQaOv0f+MQEh7zrBLEQLCpOGervbj3ug5CYTW4A=)
                          12: 9ED17FD8D60F11F0907EC1F1DAE4EC9C.roa (hash: PlomXlfc2/H7NcFtazpjEv+QjpLM7jasTSrZvSQvHKQ=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F367CC68/527491FCD35D11F085817997DAE4EC9C/kFAlcktjykllnsFAWPqwwTHFDp8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F367CC68/527491FCD35D11F085817997DAE4EC9C/kFAlcktjykllnsFAWPqwwTHFDp8.mft
                          rsync://rpki.afrinic.net/repository/afrinic/kFAlcktjykllnsFAWPqwwTHFDp8.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 21 Dec 2025 05:24:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 37 (0x25)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F367CC68AF, serialNumber=905025724B63CA49659EC14058FAB0C131C50E9F
        Validity
            Not Before: Dec 19 05:24:03 2025 GMT
            Not After : Dec 21 05:24:03 2025 GMT
        Subject: CN=6944e173-feed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:85:d5:18:06:5d:f7:1f:84:5a:42:2c:49:34:
                    db:1a:08:c7:73:fb:ba:e0:f4:5c:fc:39:1b:72:a8:
                    74:33:70:87:3b:7d:95:be:8d:89:7e:68:e1:9f:62:
                    9f:4a:5e:0d:ae:51:13:6c:c2:32:70:71:07:22:fd:
                    b9:a0:7d:25:f1:fd:20:96:a0:76:9a:c0:5e:97:bf:
                    ed:ca:cc:e9:61:d8:1c:af:72:39:6b:d9:83:b0:c7:
                    71:a0:0d:89:f5:45:f5:63:a2:e8:09:20:da:21:9a:
                    7c:1c:cb:1a:41:e1:e3:ec:fd:81:8e:8e:33:af:60:
                    0e:59:01:44:02:00:de:c8:78:7c:a9:53:01:dc:23:
                    bc:54:b1:20:5c:7e:25:d8:81:d4:cc:e6:89:0e:21:
                    23:fc:1e:8c:43:d7:d3:07:2e:56:c0:2c:c6:37:f0:
                    96:80:21:94:65:3e:0b:b9:50:2e:b8:14:49:0f:2f:
                    0e:3f:96:63:1c:c1:17:1b:bd:09:d5:29:95:b0:01:
                    e3:8f:92:af:05:15:19:9a:94:f8:1d:17:90:c4:7c:
                    ac:cc:71:2f:8f:17:e8:59:74:bd:d9:5a:ac:6a:b7:
                    55:6b:cf:86:b7:6b:85:09:10:f2:f5:d4:68:ab:dd:
                    b1:38:e2:cf:17:78:51:fa:14:eb:92:84:ab:28:c9:
                    68:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:24:45:3D:C7:9B:DB:2E:BA:10:5E:80:42:43:C2:D3:AC:F2:C0:A1
            X509v3 Authority Key Identifier:
                keyid:90:50:25:72:4B:63:CA:49:65:9E:C1:40:58:FA:B0:C1:31:C5:0E:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F367CC68/527491FCD35D11F085817997DAE4EC9C/kFAlcktjykllnsFAWPqwwTHFDp8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/kFAlcktjykllnsFAWPqwwTHFDp8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367CC68/527491FCD35D11F085817997DAE4EC9C/kFAlcktjykllnsFAWPqwwTHFDp8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:dc:64:6c:3a:2b:fb:fa:d0:0f:20:a8:96:14:d6:4e:e9:2e:
         bc:90:24:10:20:bc:87:e2:23:c2:10:30:2a:95:02:dc:b1:78:
         c5:0c:38:d3:fb:2c:84:2c:8f:0e:20:ed:74:8f:97:e6:c6:ce:
         27:04:f6:d3:11:62:06:27:9b:2b:e9:c4:67:e3:e0:45:46:18:
         b2:9c:d6:98:da:6e:22:33:14:73:5b:e5:76:65:63:9b:8b:c5:
         49:93:63:02:b0:24:e5:d9:72:f1:8c:b6:a8:13:45:39:13:07:
         11:7b:d9:d9:85:05:c3:cf:20:ab:da:52:73:8a:40:81:4e:17:
         5f:0c:14:1b:c8:b3:8f:82:53:be:d9:a0:0b:83:9e:61:8b:8a:
         70:1f:8c:4a:29:62:15:82:f6:88:a1:f9:0f:6b:a9:c3:44:3f:
         7d:8a:68:ca:48:ba:79:2c:b6:fd:7f:7f:eb:f9:88:ce:fa:a1:
         33:1e:52:da:99:22:9d:4b:f8:c6:f3:ab:fa:06:12:24:44:8e:
         b3:88:f5:27:d7:d8:39:fe:7f:7c:05:ee:0e:40:5c:c1:87:bf:
         14:61:3d:7a:fe:e4:2c:27:12:e6:7b:35:b0:e7:11:fc:52:3a:
         bb:bb:3b:22:e6:5e:11:be:a0:62:40:ec:90:b4:a4:af:5e:7c:
         4a:57:64:72
-----BEGIN CERTIFICATE-----
MIIFlTCCBH2gAwIBAgIBJTANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDEwpGMzY3
Q0M2OEFGMTEwLwYDVQQFEyg5MDUwMjU3MjRCNjNDQTQ5NjU5RUMxNDA1OEZBQjBD
MTMxQzUwRTlGMB4XDTI1MTIxOTA1MjQwM1oXDTI1MTIyMTA1MjQwM1owGDEWMBQG
A1UEAxMNNjk0NGUxNzMtZmVlZDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAPOF1RgGXfcfhFpCLEk02xoIx3P7uuD0XPw5G3KodDNwhzt9lb6NiX5o4Z9i
n0peDa5RE2zCMnBxByL9uaB9JfH9IJagdprAXpe/7crM6WHYHK9yOWvZg7DHcaAN
ifVF9WOi6Akg2iGafBzLGkHh4+z9gY6OM69gDlkBRAIA3sh4fKlTAdwjvFSxIFx+
JdiB1MzmiQ4hI/wejEPX0wcuVsAsxjfwloAhlGU+C7lQLrgUSQ8vDj+WYxzBFxu9
CdUplbAB44+SrwUVGZqU+B0XkMR8rMxxL48X6Fl0vdlarGq3VWvPhrdrhQkQ8vXU
aKvdsTjizxd4UfoU65KEqyjJaH0CAwEAAaOCArgwggK0MB0GA1UdDgQWBBSIJEU9
x5vbLroQXoBCQ8LTrPLAoTAfBgNVHSMEGDAWgBSQUCVyS2PKSWWewUBY+rDBMcUO
nzAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2N0NDNjgvNTI3NDkxRkNEMzVEMTFGMDg1ODE3OTk3REFFNEVDOUMva0ZBbGNr
dGp5a2xsbnNGQVdQcXd3VEhGRHA4LmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMva0ZBbGNrdGp5a2xsbnNGQVdQcXd3VEhGRHA4LmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCB1QYIKwYBBQUHAQsEgcgwgcUwgYsGCCsGAQUF
BzALhn9yc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY3Q0M2OC81Mjc0OTFGQ0QzNUQxMUYwODU4MTc5OTdEQUU0
RUM5Qy9rRkFsY2t0anlrbGxuc0ZBV1Bxd3dUSEZEcDgubWZ0MDUGCCsGAQUFBzAN
hilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggr
BgEFBQcBCAEB/wQGMASgAgUAMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE
AgACBQAwDQYJKoZIhvcNAQELBQADggEBACncZGw6K/v60A8gqJYU1k7pLryQJBAg
vIfiI8IQMCqVAtyxeMUMONP7LIQsjw4g7XSPl+bGzicE9tMRYgYnmyvpxGfj4EVG
GLKc1pjabiIzFHNb5XZlY5uLxUmTYwKwJOXZcvGMtqgTRTkTBxF72dmFBcPPIKva
UnOKQIFOF18MFBvIs4+CU77ZoAuDnmGLinAfjEopYhWC9oih+Q9rqcNEP32KaMpI
unkstv1/f+v5iM76oTMeUtqZIp1L+Mbzq/oGEiREjrOI9SfX2Dn+f3wF7g5AXMGH
vxRhPXr+5CwnEuZ7NbDnEfxSOru7OyLmXhG+oGJA7JC0pK9efEpXZHI=
-----END CERTIFICATE-----
Generated at Sat Dec 20 02:52:07 2025 by rpki-client