This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368588E/A3823956CB2F11E9890D1B27F8AEA228/XK2jLPsAGrpuTJ9SE9kodlsVozc.mft
File:                     XK2jLPsAGrpuTJ9SE9kodlsVozc.mft (raw, json)
Hash identifier:          YPIE0kdkYq8ofPHcRPQaSPbzIaOkBKH6IMMhPXqiFos=
Subject key identifier:   38:29:44:C6:81:6E:EF:B9:7E:BC:3F:7A:E8:17:B0:74:2E:A2:8D:54
Authority key identifier: 5C:AD:A3:2C:FB:00:1A:BA:6E:4C:9F:52:13:D9:28:76:5B:15:A3:37
Certificate issuer:       /CN=F368588EAF/serialNumber=5CADA32CFB001ABA6E4C9F5213D928765B15A337
Certificate serial:       0958
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/XK2jLPsAGrpuTJ9SE9kodlsVozc.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368588E/A3823956CB2F11E9890D1B27F8AEA228/XK2jLPsAGrpuTJ9SE9kodlsVozc.mft
Manifest number:          094C
Signing time:             Sat 20 Dec 2025 01:34:46 +0000
Manifest this update:     Sat 20 Dec 2025 01:34:46 +0000
Manifest next update:     Mon 22 Dec 2025 01:34:46 +0000
Files and hashes:         1: XK2jLPsAGrpuTJ9SE9kodlsVozc.crl (hash: 2+8LeBllfWcZ/8F14T3KkuY2D0jFL8+alHMFp29R2aM=)
                          2: E90920E88E6511EBBF85CD6BF8AEA228.roa (hash: 2lqZqDUQcUKxveTR9cI5M5tuAOp//Ev36g7no9oTmfc=)
                          3: B45912FE8E6511EB8C41896BF8AEA228.roa (hash: qKKMDXSoDlqwiHmOGrIIdcwys6RCpAU+b2nSH+ukCFY=)
                          4: 82AA23C48E6511EB87AB596BF8AEA228.roa (hash: Awf3KcwUqHS+Tb+h21An3tUV9Zndn4ovZSX7QkhwLRI=)
                          5: 314349A68E6611EB8D43336CF8AEA228.roa (hash: Thxt35OuW2OHwRepR9n+aTVJ70XOv0V6vWotqPw7F9g=)
                          6: 524153BE8E6611EBB85F5E6CF8AEA228.roa (hash: 2hd9ZQH6yn17Npd0+aOdMdIMVFAkEErgQuvgi60v08M=)
                          7: 5B5AB2F28E6511EB82C6206BF8AEA228.roa (hash: uqU9yrUWC7VxCjK9hx7zhOvnfnJosiQgLAmWL6ofW8s=)
                          8: 6001068C237F11EFAF71141F7DDC24C2.roa (hash: Fe1hHfr+f3y3JImtSfxXw39BMD+ou4/AEKixzkcLodk=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368588E/A3823956CB2F11E9890D1B27F8AEA228/XK2jLPsAGrpuTJ9SE9kodlsVozc.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368588E/A3823956CB2F11E9890D1B27F8AEA228/XK2jLPsAGrpuTJ9SE9kodlsVozc.mft
                          rsync://rpki.afrinic.net/repository/afrinic/XK2jLPsAGrpuTJ9SE9kodlsVozc.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 22 Dec 2025 00:06:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2392 (0x958)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368588EAF, serialNumber=5CADA32CFB001ABA6E4C9F5213D928765B15A337
        Validity
            Not Before: Dec 20 01:34:46 2025 GMT
            Not After : Dec 22 01:34:46 2025 GMT
        Subject: CN=6945fd36-794d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:58:c1:42:fe:df:f9:a5:11:eb:9d:5f:28:d4:
                    f9:6c:56:32:b4:79:8b:72:9e:38:71:76:4a:e4:5b:
                    91:64:8b:b3:f2:d4:3a:2b:79:f6:d1:a3:f1:dd:06:
                    9d:a8:1e:9f:78:6f:b8:01:92:c2:1a:be:af:f2:a9:
                    b7:9c:49:21:10:84:c8:af:f0:05:de:63:5e:75:08:
                    6f:db:ae:40:56:3b:78:8f:9b:95:31:71:bf:d0:20:
                    6a:9c:89:22:db:6c:19:4e:57:70:6a:3d:f5:1c:e4:
                    f3:66:ff:e7:43:17:fb:79:b9:d1:2b:d0:14:af:e9:
                    9f:1c:48:55:89:58:c7:e0:b1:20:79:f4:74:d8:65:
                    cb:14:7d:df:e4:ce:66:7f:b3:2e:ed:c4:75:25:70:
                    80:16:d8:64:7d:46:08:70:04:de:6e:f3:d4:07:78:
                    6f:f8:30:b2:ee:da:61:96:4a:a2:63:26:60:e1:cf:
                    7a:d0:7c:a4:f0:27:8b:e4:7a:fa:ba:fd:3e:12:fe:
                    cb:15:b0:4d:62:a6:c3:12:80:d9:ba:3f:f4:b4:d4:
                    70:ca:aa:d8:54:a1:ac:66:ae:bb:2b:41:72:ba:6b:
                    48:a1:fc:a0:c9:d4:2b:16:ab:d1:29:a7:5a:5f:e1:
                    c8:1e:50:02:00:20:92:92:79:c2:76:4c:3f:73:38:
                    ae:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:29:44:C6:81:6E:EF:B9:7E:BC:3F:7A:E8:17:B0:74:2E:A2:8D:54
            X509v3 Authority Key Identifier:
                keyid:5C:AD:A3:2C:FB:00:1A:BA:6E:4C:9F:52:13:D9:28:76:5B:15:A3:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368588E/A3823956CB2F11E9890D1B27F8AEA228/XK2jLPsAGrpuTJ9SE9kodlsVozc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/XK2jLPsAGrpuTJ9SE9kodlsVozc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368588E/A3823956CB2F11E9890D1B27F8AEA228/XK2jLPsAGrpuTJ9SE9kodlsVozc.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:a3:04:74:d3:d7:97:10:45:ce:9d:88:80:c8:31:26:0a:83:
         d4:59:e1:e4:16:30:13:38:5a:25:00:0c:f0:a3:0b:bf:2f:53:
         cd:4f:ac:c2:05:7f:10:aa:f0:97:01:03:41:67:99:90:ee:cf:
         87:03:03:00:87:0d:6c:0c:1f:22:7a:76:66:fd:b9:76:93:b2:
         87:a6:59:e1:6b:f0:33:dc:f8:19:4d:78:bb:6c:c8:54:ec:70:
         04:27:4c:3a:ef:2b:03:09:12:29:47:60:25:2b:1d:ff:fa:b2:
         f7:b9:7c:63:08:9a:fb:fe:f1:15:86:6e:c5:b5:a5:e2:4d:03:
         8c:05:d1:a9:d7:cb:fe:35:f5:de:61:f7:cc:90:24:85:db:1d:
         a4:86:9c:26:7c:ac:5b:9c:9d:34:18:23:00:86:5e:a1:e2:cb:
         ae:53:e1:2b:66:9f:82:ca:14:70:1f:10:2b:62:df:39:67:6f:
         d8:ee:74:18:cb:c4:19:29:df:ed:b5:b1:d6:2f:e8:89:b5:a5:
         81:33:49:b2:7d:6b:b2:f7:f8:26:37:5a:7b:92:68:6a:bf:f8:
         15:34:48:01:d2:1a:77:ee:6d:26:52:6c:1e:d3:86:d4:fe:4b:
         9b:b8:a6:cf:44:5f:c5:60:1b:c6:8f:4e:01:fa:40:36:85:10:
         70:77:55:59
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICCVgwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
ODU4OEVBRjExMC8GA1UEBRMoNUNBREEzMkNGQjAwMUFCQTZFNEM5RjUyMTNEOTI4
NzY1QjE1QTMzNzAeFw0yNTEyMjAwMTM0NDZaFw0yNTEyMjIwMTM0NDZaMBgxFjAU
BgNVBAMTDTY5NDVmZDM2LTc5NGQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDYWMFC/t/5pRHrnV8o1PlsVjK0eYtynjhxdkrkW5Fki7Py1DorefbRo/Hd
Bp2oHp94b7gBksIavq/yqbecSSEQhMiv8AXeY151CG/brkBWO3iPm5Uxcb/QIGqc
iSLbbBlOV3BqPfUc5PNm/+dDF/t5udEr0BSv6Z8cSFWJWMfgsSB59HTYZcsUfd/k
zmZ/sy7txHUlcIAW2GR9RghwBN5u89QHeG/4MLLu2mGWSqJjJmDhz3rQfKTwJ4vk
evq6/T4S/ssVsE1ipsMSgNm6P/S01HDKqthUoaxmrrsrQXK6a0ih/KDJ1CsWq9Ep
p1pf4cgeUAIAIJKSecJ2TD9zOK6lAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUOClE
xoFu77l+vD966BewdC6ijVQwHwYDVR0jBBgwFoAUXK2jLPsAGrpuTJ9SE9kodlsV
ozcwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjg1ODhFL0EzODIzOTU2Q0IyRjExRTk4OTBEMUIyN0Y4QUVBMjI4L1hLMmpM
UHNBR3JwdVRKOVNFOWtvZGxzVm96Yy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1hLMmpMUHNBR3JwdVRKOVNFOWtvZGxzVm96Yy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2ODU4OEUvQTM4MjM5NTZDQjJGMTFFOTg5MEQxQjI3RjhB
RUEyMjgvWEsyakxQc0FHcnB1VEo5U0U5a29kbHNWb3pjLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAaowR009eXEEXOnYiAyDEmCoPUWeHk
FjATOFolAAzwowu/L1PNT6zCBX8QqvCXAQNBZ5mQ7s+HAwMAhw1sDB8ienZm/bl2
k7KHplnha/Az3PgZTXi7bMhU7HAEJ0w67ysDCRIpR2AlKx3/+rL3uXxjCJr7/vEV
hm7FtaXiTQOMBdGp18v+NfXeYffMkCSF2x2khpwmfKxbnJ00GCMAhl6h4suuU+Er
Zp+CyhRwHxArYt85Z2/Y7nQYy8QZKd/ttbHWL+iJtaWBM0myfWuy9/gmN1p7kmhq
v/gVNEgB0hp37m0mUmwe04bU/kubuKbPRF/FYBvGj04B+kA2hRBwd1VZ
-----END CERTIFICATE-----
Generated at Sat Dec 20 23:38:34 2025 by rpki-client