This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3683A54/5C3677F21F7811EC9A12311AD8A014CE/kXMyk_xjUK7funWpFv_0G1Fez0w.mft
File:                     kXMyk_xjUK7funWpFv_0G1Fez0w.mft (raw, json)
Hash identifier:          vbZHmLf/6l7n0DUVyLX/R/z8ndQjm70B5to93tiRL1c=
Subject key identifier:   9C:1A:9E:AB:11:BC:5B:63:F8:DB:07:A2:7A:32:5D:D6:C0:30:16:C0
Authority key identifier: 91:73:32:93:FC:63:50:AE:DF:BA:75:A9:16:FF:F4:1B:51:5E:CF:4C
Certificate issuer:       /CN=F3683A54AF/serialNumber=91733293FC6350AEDFBA75A916FFF41B515ECF4C
Certificate serial:       0639
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/kXMyk_xjUK7funWpFv_0G1Fez0w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3683A54/5C3677F21F7811EC9A12311AD8A014CE/kXMyk_xjUK7funWpFv_0G1Fez0w.mft
Manifest number:          0636
Signing time:             Sat 20 Dec 2025 02:26:39 +0000
Manifest this update:     Sat 20 Dec 2025 02:26:38 +0000
Manifest next update:     Mon 22 Dec 2025 02:26:38 +0000
Files and hashes:         1: kXMyk_xjUK7funWpFv_0G1Fez0w.crl (hash: DV1OIoLJuGxtKpiFXhKFofu4e5HSTW4wjGMadg2S8JI=)
                          2: 951EA1701F7811ECB1D1961AD8A014CE.roa (hash: 1vZMKT9K0+T6pwn8OE0g59G7GIGSdRRo7NEdcXkRfVc=)
                          3: 7EE185A6B21611EFA9BDF294762E951A.roa (hash: G6244Azl/uqe8/mj3zsQM21nztQl1zF4+5qvnRVhw/Q=)
                          4: E739D1BE1F7811ECBE14071BD8A014CE.roa (hash: XvzpJAf5CAfqUsf2t3F2RGOpHSqxkl68xqf6tTZaymg=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3683A54/5C3677F21F7811EC9A12311AD8A014CE/kXMyk_xjUK7funWpFv_0G1Fez0w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3683A54/5C3677F21F7811EC9A12311AD8A014CE/kXMyk_xjUK7funWpFv_0G1Fez0w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/kXMyk_xjUK7funWpFv_0G1Fez0w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 22 Dec 2025 02:26:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1593 (0x639)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3683A54AF, serialNumber=91733293FC6350AEDFBA75A916FFF41B515ECF4C
        Validity
            Not Before: Dec 20 02:26:38 2025 GMT
            Not After : Dec 22 02:26:38 2025 GMT
        Subject: CN=6946095f-073e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:e8:de:4c:12:66:83:8b:28:3f:fb:9f:76:bc:
                    bd:73:53:e8:38:16:1e:3c:f0:ce:f9:30:4c:4d:38:
                    95:00:39:ae:67:06:aa:4c:70:71:f4:a3:db:21:fc:
                    68:f3:fc:c0:b6:ae:e6:07:c5:b5:25:82:1f:f3:9e:
                    b0:a9:3b:0f:64:47:cf:4b:f9:41:05:34:56:f5:16:
                    6a:d6:22:11:bb:db:4c:31:04:2b:44:fa:91:1d:f5:
                    b0:f2:46:2c:c6:fb:4a:98:42:e0:ba:32:06:81:07:
                    4f:3a:ea:2a:37:fc:80:dd:23:d0:65:e2:38:d2:38:
                    a6:df:0f:cd:42:f2:ad:c3:85:b8:b5:ab:85:5d:3b:
                    e4:51:32:34:fa:ae:a4:3b:87:21:1d:21:cf:32:db:
                    4e:97:9d:82:3c:2d:45:3a:9a:64:ed:82:ae:b3:d0:
                    a0:3c:2d:2c:bd:d1:93:94:a1:2e:32:e2:06:da:e1:
                    a4:8c:5d:c3:2b:4a:87:d8:06:49:5c:ad:46:63:1f:
                    72:2e:6b:af:72:cb:d8:16:82:bd:dc:45:84:2f:80:
                    65:e1:a2:db:99:75:39:8a:a7:1b:da:4f:3b:b7:29:
                    8c:4c:78:c8:32:a7:72:75:52:ec:b3:e3:f6:85:b7:
                    b6:7f:0d:13:c1:bb:b5:47:f1:81:4f:43:c5:09:ef:
                    7a:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:1A:9E:AB:11:BC:5B:63:F8:DB:07:A2:7A:32:5D:D6:C0:30:16:C0
            X509v3 Authority Key Identifier:
                keyid:91:73:32:93:FC:63:50:AE:DF:BA:75:A9:16:FF:F4:1B:51:5E:CF:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3683A54/5C3677F21F7811EC9A12311AD8A014CE/kXMyk_xjUK7funWpFv_0G1Fez0w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/kXMyk_xjUK7funWpFv_0G1Fez0w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3683A54/5C3677F21F7811EC9A12311AD8A014CE/kXMyk_xjUK7funWpFv_0G1Fez0w.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:cf:3b:30:2d:d2:00:f1:24:1b:17:dd:8f:33:60:f8:2b:15:
         76:dd:4b:4c:9d:0e:5a:4e:c7:13:1a:cb:5e:56:70:02:e8:5c:
         5f:52:01:34:f5:c7:47:cd:c0:27:4e:47:25:a7:30:f1:77:3d:
         ff:d4:d1:20:f9:86:52:d7:b2:ce:ff:de:fb:ae:c9:a4:57:e3:
         97:1e:cf:5c:b0:ee:51:4d:de:dd:de:1d:31:88:09:64:c1:f0:
         19:c5:83:62:8d:00:ae:fa:e4:91:65:73:e8:26:84:13:cf:9d:
         ee:32:b3:a1:50:d5:c5:9f:47:dc:c9:40:bc:f8:93:ac:cb:40:
         02:02:61:d4:e7:4d:96:f5:48:b5:c7:31:ec:ac:ef:38:45:77:
         eb:cd:d0:87:fe:18:79:f1:13:ae:5d:1b:4a:ea:9b:73:31:df:
         ab:60:f0:3a:46:6e:84:98:27:8b:e4:6c:27:32:07:fc:d3:da:
         24:1f:d8:d4:6c:12:b3:59:38:ab:9e:34:30:f4:5e:1d:c7:ce:
         2d:e3:ad:5f:8e:06:90:79:a2:15:93:7b:73:a0:b8:28:3e:67:
         ad:f8:b3:42:ba:43:5b:dc:19:21:09:83:69:12:c7:be:13:b0:
         2c:92:8b:00:b1:d2:a5:1c:a1:40:a1:17:a9:96:b3:c3:9b:77:
         85:1b:a1:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 02:09:45 2025 by rpki-client