This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36DB492/10DA99764A0311ED8F59D89EF1222468/9D4GaO9yvYf6U2i-K2gVwLy0AUk.mft
File:                     9D4GaO9yvYf6U2i-K2gVwLy0AUk.mft (raw, json)
Hash identifier:          WGMXlbQ0wcoHX8Ndhsz4rkPzI0yu5vWZQLuskCym0Wg=
Subject key identifier:   02:12:0C:3C:33:ED:EE:F2:3B:5C:E6:9B:38:B6:B6:CF:1E:42:C4:27
Authority key identifier: F4:3E:06:68:EF:72:BD:87:FA:53:68:BE:2B:68:15:C0:BC:B4:01:49
Certificate issuer:       /CN=F36DB492AF/serialNumber=F43E0668EF72BD87FA5368BE2B6815C0BCB40149
Certificate serial:       04F6
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/9D4GaO9yvYf6U2i-K2gVwLy0AUk.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36DB492/10DA99764A0311ED8F59D89EF1222468/9D4GaO9yvYf6U2i-K2gVwLy0AUk.mft
Manifest number:          04D8
Signing time:             Sat 20 Dec 2025 03:03:58 +0000
Manifest this update:     Sat 20 Dec 2025 03:03:57 +0000
Manifest next update:     Mon 22 Dec 2025 03:03:57 +0000
Files and hashes:         1: 9D4GaO9yvYf6U2i-K2gVwLy0AUk.crl (hash: hKShaI7lJY4BSEWyMcorEOW3IB2mTkZ6u/ZEluqDb2c=)
                          2: CAB5EB42374D11EE8810A0744AD9E6FC.roa (hash: Rd+cT1WHVj6VPW10DhoJe1VPjes86osECuBqlAPA/jk=)
                          3: 20D8603A3C6311EEBD05616B4AD9E6FC.roa (hash: yn1GI8XUJDZhc/a1VL4Ew8aXczcEtSuNRFvBTlTvah0=)
                          4: 662EC19C3C6311EEA2CE226C4AD9E6FC.roa (hash: qJZA5eX+xbJzCe6D7i9PnOvJU1CqeC3CU+zF75cZcts=)
                          5: F67E4B16374D11EEB5DE38754AD9E6FC.roa (hash: hU4jFk//Gd5275KQZyF78ZmsmvKAmuy74Zm19XPUqO4=)
                          6: 14B6AF743B4011EEADF20A804AD9E6FC.roa (hash: K4yraD6px2otzCCbUQWt+Yh6khumJagXOv/4f3vipmU=)
                          7: 53D289E63CCE11EE935F8A394AD9E6FC.roa (hash: 4HBFVVMsDOfA/xrur5pE2xRwqQtzwcjvpCJfYPdn3co=)
                          8: 5F94B5287E1F11EEB18DE56B4AD9E6FC.roa (hash: NnfOKQOywlCm8MbXuo5ryxtlJJnqWeXUY/Zc4KGtk9o=)
                          9: 03541FA67E1F11EE99591D6B4AD9E6FC.roa (hash: tMNuryIys8bdcGqr2btn+01OsiqNMJcIT+oXA5sB548=)
                          10: 4ED14CDCA6DA11EDAEF82299F1222468.roa (hash: iXehJ8WLWU6cHBFHQ5qsEfloV58oVEhPLmmW3fV/BY4=)
                          11: 4788CE9A3C6311EE9733C66B4AD9E6FC.roa (hash: 0sVxWZVOpyK0cudH1BB1HUmOSWE0Bj2HjfkgAIa158s=)
                          12: 158513F4518011EE8BDBCE164AD9E6FC.roa (hash: sbl6JhnjaIL3BTU2+lQRNeSnxalVE/sMDYPWi7BO8vg=)
                          13: 85435BE23C6311EE9E2BB76C4AD9E6FC.roa (hash: ZIlXxtD8wXr16Udjo8wBxB2atTHwjE6MF56MpocHqts=)
                          14: 4433C912374E11EEBD8F3D764AD9E6FC.roa (hash: lHtBjObTBwNyVhJrHEQ/zHzgJmnlb42wMC73m5Dh7UE=)
                          15: A775C5D83C6311EEA094166D4AD9E6FC.roa (hash: L972nqC78lcXrhC+mjzOc5OXmYgCBGyLNtGIrSD8tWw=)
                          16: 20EEA9507E1F11EEAD686A6B4AD9E6FC.roa (hash: +kuN9/TLBGpI4GFRii8gvKOE9Vh3yGtX4DQwHRmVzSA=)
                          17: 88A2141457EF11F0A48D2AC4DAE4EC9C.roa (hash: jwxUZ7nPgwu7fA4ugBBwspQYrmkSwfz/KGPZiiShxok=)
                          18: 04540B763C6311EE82DB186B4AD9E6FC.roa (hash: 8pLsZ3suwRhldyF5vniTCRO+W8oJo+1mBH+nN66FQ8k=)
                          19: 329D5926A54311EEA7A66B2ED25BE465.roa (hash: 1pPOf7iWBENGk84AGGgfnWlGuOjuG2CHIm2+lZTlGVY=)
                          20: 9369A48A374D11EEBBBCC3734AD9E6FC.roa (hash: LriikUtiyzWDzN+qJjLYRklCy7tVdfyDgc1icmMt3FY=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36DB492/10DA99764A0311ED8F59D89EF1222468/9D4GaO9yvYf6U2i-K2gVwLy0AUk.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36DB492/10DA99764A0311ED8F59D89EF1222468/9D4GaO9yvYf6U2i-K2gVwLy0AUk.mft
                          rsync://rpki.afrinic.net/repository/afrinic/9D4GaO9yvYf6U2i-K2gVwLy0AUk.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 22 Dec 2025 00:06:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1270 (0x4f6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36DB492AF, serialNumber=F43E0668EF72BD87FA5368BE2B6815C0BCB40149
        Validity
            Not Before: Dec 20 03:03:57 2025 GMT
            Not After : Dec 22 03:03:57 2025 GMT
        Subject: CN=6946121e-73b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:2c:27:89:9c:3b:e1:49:ec:a3:ab:99:07:04:
                    f6:65:d7:aa:36:6f:10:c1:9e:65:e0:e8:1f:b0:88:
                    a8:7d:7e:a2:2d:5b:c8:b4:38:f9:95:5b:e8:c9:3b:
                    2c:77:5d:66:66:55:5f:0d:18:28:4c:30:97:53:17:
                    24:37:fa:d3:03:8e:53:68:6b:77:37:2b:d8:a4:aa:
                    31:5c:3b:c8:00:0a:5a:1e:67:77:91:41:65:64:2f:
                    d6:10:87:ae:4c:a1:86:f9:15:ff:52:a7:a6:07:f0:
                    03:bb:f9:2b:3d:fa:34:0c:55:a5:7e:31:6f:ed:95:
                    a0:20:79:ae:14:ac:37:75:0c:b3:26:29:be:09:06:
                    44:c8:85:19:5e:3f:4c:61:f8:15:52:77:d1:b0:b5:
                    a4:86:ff:a9:8b:5b:85:99:c8:2d:98:b4:f7:d5:00:
                    d2:4d:09:ec:37:c7:6f:83:ca:56:01:7c:85:64:41:
                    6f:0f:0e:90:9b:0b:8d:d8:b2:4d:1b:ba:b1:e1:33:
                    86:7c:62:eb:50:6e:ea:a0:bf:ad:bf:fb:05:37:fa:
                    e5:d7:62:91:fe:5b:39:50:a4:57:73:90:50:15:52:
                    e8:9f:07:1c:a2:28:11:e5:27:49:d0:11:f3:be:93:
                    a0:62:c6:89:f2:02:88:4f:df:ff:52:ce:3e:77:82:
                    93:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:12:0C:3C:33:ED:EE:F2:3B:5C:E6:9B:38:B6:B6:CF:1E:42:C4:27
            X509v3 Authority Key Identifier:
                keyid:F4:3E:06:68:EF:72:BD:87:FA:53:68:BE:2B:68:15:C0:BC:B4:01:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36DB492/10DA99764A0311ED8F59D89EF1222468/9D4GaO9yvYf6U2i-K2gVwLy0AUk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/9D4GaO9yvYf6U2i-K2gVwLy0AUk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36DB492/10DA99764A0311ED8F59D89EF1222468/9D4GaO9yvYf6U2i-K2gVwLy0AUk.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:a4:69:5a:6b:02:4b:9a:41:db:7f:d4:87:b7:ed:20:5b:cd:
         e7:e2:aa:8c:39:f3:2e:6a:86:b9:b0:b4:cf:f7:a8:65:10:59:
         5a:42:70:67:0e:db:84:1d:c3:76:56:68:f8:8e:19:05:14:f3:
         70:5e:54:55:a1:a4:93:d7:23:01:66:f5:55:89:85:e6:b3:a4:
         d1:52:ce:69:77:bf:a8:50:d9:9b:a0:1b:42:36:08:13:2b:91:
         31:84:35:db:6c:a4:09:6b:cf:4a:86:44:52:ed:2e:65:f0:9f:
         23:de:f2:3e:d5:15:17:c3:5c:d0:04:fd:13:b8:8c:fb:6c:3d:
         55:19:7f:99:b1:31:8d:b1:96:40:08:cc:ac:3e:1c:48:00:50:
         cd:3d:00:58:65:67:e4:03:1f:c6:54:93:99:e8:00:c7:21:f0:
         9d:0b:34:76:c4:ca:62:6c:40:9a:c1:ee:95:8b:fa:a7:d8:fc:
         ce:44:1b:44:0b:25:15:fc:e7:71:81:26:dd:82:46:69:d6:62:
         e4:8f:5f:07:8c:e9:67:95:71:49:77:4b:d6:48:34:c0:d1:bd:
         ad:98:a9:d1:ef:9e:68:5c:0e:12:53:eb:89:c2:3d:42:c7:f0:
         e8:cb:70:78:91:f3:e2:77:44:fa:c6:83:ac:d4:e7:b3:6b:da:
         e8:31:0b:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 17:16:11 2025 by rpki-client