This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3697F9B/C6DEF4DCE24611EA8D16EF50F8AEA228/a-k9QjdfWHWi-MrSgJiFQWLSUEg.mft
File:                     a-k9QjdfWHWi-MrSgJiFQWLSUEg.mft (raw, json)
Hash identifier:          /ueeZdKIhCRtZ8BIi0H+KbudqOvyoDp6CmIVCSGXagw=
Subject key identifier:   98:E3:6E:83:0C:2D:37:07:94:B6:FF:39:E0:13:4C:72:ED:77:DC:AF
Authority key identifier: 6B:E9:3D:42:37:5F:58:75:A2:F8:CA:D2:80:98:85:41:62:D2:50:48
Certificate issuer:       /CN=F3697F9BAF/serialNumber=6BE93D42375F5875A2F8CAD28098854162D25048
Certificate serial:       07DF
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/a-k9QjdfWHWi-MrSgJiFQWLSUEg.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3697F9B/C6DEF4DCE24611EA8D16EF50F8AEA228/a-k9QjdfWHWi-MrSgJiFQWLSUEg.mft
Manifest number:          07D9
Signing time:             Sat 27 Dec 2025 01:54:24 +0000
Manifest this update:     Sat 27 Dec 2025 01:54:23 +0000
Manifest next update:     Mon 29 Dec 2025 01:54:23 +0000
Files and hashes:         1: a-k9QjdfWHWi-MrSgJiFQWLSUEg.crl (hash: poyBvHqEfG3QqbwzYFgwcLDip2T9ILC8dyac0Er5yjk=)
                          2: E24D05EEE25311EA92AD155EF8AEA228.roa (hash: NhNBSTEDSsS8nv1gPk35pYlSA/j54gCUeglNVOfp5Jk=)
                          3: 8B23E96CE25411EAABDED95EF8AEA228.roa (hash: G1N7VCX3quzWOxjZ6v2ZRD1s53UOL4I3nt3IbyrQuyg=)
                          4: 10D082ECE25411EAB7E7505EF8AEA228.roa (hash: HCeS+ur8bLRwVYC7j4CEZcmf2zW7Wq0HlwhQZaJebjk=)
                          5: 8DA134B6E25311EA83A9A55DF8AEA228.roa (hash: FZLhMJ//MfWJptrE3zcXjMsUeDRso3qHvO1+H5qU2Z0=)
                          6: B193AAD8E25411EAACEFFA5EF8AEA228.roa (hash: 6msQDGgz9SoLw2neOnUxuPHAYOAC1PdRzeLr4+FvrcI=)
                          7: 57CB6630E25411EA8C85A55EF8AEA228.roa (hash: zokPSNjx8r4IpsyxRDDLa5MvDTlpaKfogK8lEwUhKrg=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3697F9B/C6DEF4DCE24611EA8D16EF50F8AEA228/a-k9QjdfWHWi-MrSgJiFQWLSUEg.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3697F9B/C6DEF4DCE24611EA8D16EF50F8AEA228/a-k9QjdfWHWi-MrSgJiFQWLSUEg.mft
                          rsync://rpki.afrinic.net/repository/afrinic/a-k9QjdfWHWi-MrSgJiFQWLSUEg.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 29 Dec 2025 00:06:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2015 (0x7df)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3697F9BAF, serialNumber=6BE93D42375F5875A2F8CAD28098854162D25048
        Validity
            Not Before: Dec 27 01:54:23 2025 GMT
            Not After : Dec 29 01:54:23 2025 GMT
        Subject: CN=694f3c50-ec8d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:2d:3e:75:8c:d0:27:0b:ad:65:8f:ce:85:1c:
                    e0:42:7c:32:ad:62:f4:bf:a6:76:70:2d:12:99:e3:
                    d7:bc:7c:6d:3c:f8:62:9b:ef:bd:47:67:aa:7a:a3:
                    5c:05:ff:a6:8a:9c:52:64:4b:57:26:23:d9:6f:3c:
                    d6:43:e4:b9:f8:82:d6:64:1f:89:60:a6:8d:b6:59:
                    15:39:dc:aa:bf:63:f3:72:d6:35:a8:32:72:3e:8b:
                    4e:53:1b:ce:28:1e:fa:99:be:a8:b7:10:4b:2f:3d:
                    8c:11:5c:5c:2d:32:74:75:18:99:b5:99:6a:c2:07:
                    db:73:8c:37:1f:99:c9:f4:a6:cb:1f:64:e8:4f:85:
                    62:ff:93:70:d6:2e:e7:06:79:75:38:73:8a:4c:14:
                    98:a2:cd:03:fb:36:d9:6e:c7:ea:2e:07:bb:16:b9:
                    06:d3:0c:b8:ab:5d:87:3f:50:c8:4f:f1:53:c6:69:
                    2a:b2:86:4c:f9:61:cb:c4:1e:83:b5:50:25:f8:d0:
                    c5:ac:60:b3:39:4e:84:bb:0f:30:1b:fb:8e:3f:4c:
                    e1:ce:ce:59:e5:b3:b7:71:c6:0d:7a:73:69:93:05:
                    17:27:16:01:8f:4e:b8:e3:d9:cf:87:d4:8f:1b:3c:
                    53:ea:aa:c4:0d:a0:9e:8d:58:76:68:bb:9e:cc:e6:
                    04:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:E3:6E:83:0C:2D:37:07:94:B6:FF:39:E0:13:4C:72:ED:77:DC:AF
            X509v3 Authority Key Identifier:
                keyid:6B:E9:3D:42:37:5F:58:75:A2:F8:CA:D2:80:98:85:41:62:D2:50:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3697F9B/C6DEF4DCE24611EA8D16EF50F8AEA228/a-k9QjdfWHWi-MrSgJiFQWLSUEg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/a-k9QjdfWHWi-MrSgJiFQWLSUEg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3697F9B/C6DEF4DCE24611EA8D16EF50F8AEA228/a-k9QjdfWHWi-MrSgJiFQWLSUEg.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:f6:75:b4:d8:58:47:34:88:64:cd:5a:a8:c2:a0:f0:80:18:
         4d:6d:1a:71:40:04:eb:a8:cb:57:05:f5:ba:19:11:bc:54:bd:
         92:b0:ee:2a:3c:28:13:b2:1f:cd:df:71:4e:0a:51:84:0a:8f:
         64:19:85:70:5c:b4:3c:7d:67:bc:19:c3:15:12:98:bc:cc:04:
         be:9a:1e:7f:3f:7e:61:95:62:81:5c:b4:2d:74:40:f3:7e:71:
         24:4d:3a:e6:6e:b1:69:25:e6:6c:c3:6b:e5:72:ab:9f:5e:17:
         be:99:15:e1:06:1e:b9:23:7a:58:b3:8c:31:62:87:6a:b2:03:
         d7:7f:5c:f0:ec:7f:23:18:16:bd:3c:4c:02:48:9a:94:f4:5c:
         c2:ca:d7:f7:4a:51:b5:cf:01:ef:84:b7:f9:5a:05:a7:7c:0b:
         53:e0:cd:17:90:ca:34:e1:4d:ff:f0:80:15:80:6a:35:59:33:
         85:7d:e7:ff:d4:82:be:d3:79:e8:60:52:91:a1:72:b0:18:72:
         b2:bf:f5:cb:c6:62:ff:03:6f:ae:12:32:45:18:f8:f2:05:da:
         ff:81:31:3c:2b:e8:80:3c:3d:73:8c:d0:0c:cd:03:68:a3:5e:
         ba:d5:95:3d:ec:50:6f:fa:bf:86:00:42:6f:dd:7a:ad:0e:1d:
         e3:2f:f5:c3
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICB98wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
OTdGOUJBRjExMC8GA1UEBRMoNkJFOTNENDIzNzVGNTg3NUEyRjhDQUQyODA5ODg1
NDE2MkQyNTA0ODAeFw0yNTEyMjcwMTU0MjNaFw0yNTEyMjkwMTU0MjNaMBgxFjAU
BgNVBAMTDTY5NGYzYzUwLWVjOGQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC0LT51jNAnC61lj86FHOBCfDKtYvS/pnZwLRKZ49e8fG08+GKb771HZ6p6
o1wF/6aKnFJkS1cmI9lvPNZD5Ln4gtZkH4lgpo22WRU53Kq/Y/Ny1jWoMnI+i05T
G84oHvqZvqi3EEsvPYwRXFwtMnR1GJm1mWrCB9tzjDcfmcn0pssfZOhPhWL/k3DW
LucGeXU4c4pMFJiizQP7Ntlux+ouB7sWuQbTDLirXYc/UMhP8VPGaSqyhkz5YcvE
HoO1UCX40MWsYLM5ToS7DzAb+44/TOHOzlnls7dxxg16c2mTBRcnFgGPTrjj2c+H
1I8bPFPqqsQNoJ6NWHZou57M5gS5AgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUmONu
gwwtNweUtv854BNMcu133K8wHwYDVR0jBBgwFoAUa+k9QjdfWHWi+MrSgJiFQWLS
UEgwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjk3RjlCL0M2REVGNERDRTI0NjExRUE4RDE2RUY1MEY4QUVBMjI4L2EtazlR
amRmV0hXaS1NclNnSmlGUVdMU1VFZy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2EtazlRamRmV0hXaS1NclNnSmlGUVdMU1VFZy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2OTdGOUIvQzZERUY0RENFMjQ2MTFFQThEMTZFRjUwRjhB
RUEyMjgvYS1rOVFqZGZXSFdpLU1yU2dKaUZRV0xTVUVnLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBU9nW02FhHNIhkzVqowqDwgBhNbRpx
QATrqMtXBfW6GRG8VL2SsO4qPCgTsh/N33FOClGECo9kGYVwXLQ8fWe8GcMVEpi8
zAS+mh5/P35hlWKBXLQtdEDzfnEkTTrmbrFpJeZsw2vlcqufXhe+mRXhBh65I3pY
s4wxYodqsgPXf1zw7H8jGBa9PEwCSJqU9FzCytf3SlG1zwHvhLf5WgWnfAtT4M0X
kMo04U3/8IAVgGo1WTOFfef/1IK+03noYFKRoXKwGHKyv/XLxmL/A2+uEjJFGPjy
Bdr/gTE8K+iAPD1zjNAMzQNoo1661ZU97FBv+r+GAEJv3XqtDh3jL/XD
-----END CERTIFICATE-----
Generated at Sat Dec 27 07:03:30 2025 by rpki-client