This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36E29ED/1C5B5D02DC0911EC9CEBDE9BF1222468/KjzJ5VGaWluxPQgxDKk0gkiW-lo.mft
File:                     KjzJ5VGaWluxPQgxDKk0gkiW-lo.mft (raw, json)
Hash identifier:          tD28jBiBGjG9zdGZhC7tntEXKFXAxp18MSIXk0un0oQ=
Subject key identifier:   7C:EB:42:A4:BD:D5:71:52:69:D3:37:F5:FD:DF:F0:E8:A3:42:82:51
Authority key identifier: 2A:3C:C9:E5:51:9A:5A:5B:B1:3D:08:31:0C:A9:34:82:48:96:FA:5A
Certificate issuer:       /CN=F36E29EDAF/serialNumber=2A3CC9E5519A5A5BB13D08310CA934824896FA5A
Certificate serial:       055F
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/KjzJ5VGaWluxPQgxDKk0gkiW-lo.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36E29ED/1C5B5D02DC0911EC9CEBDE9BF1222468/KjzJ5VGaWluxPQgxDKk0gkiW-lo.mft
Manifest number:          0557
Signing time:             Tue 30 Dec 2025 02:45:54 +0000
Manifest this update:     Tue 30 Dec 2025 02:45:53 +0000
Manifest next update:     Thu 01 Jan 2026 02:45:53 +0000
Files and hashes:         1: KjzJ5VGaWluxPQgxDKk0gkiW-lo.crl (hash: NJhiV6uRAaTKLJc4TIil4KhgpBZg21a2QMumVsKqmZk=)
                          2: 073BD64605C911EE95E74F304AD9E6FC.roa (hash: In9Q3d/Y0USLa0Qt9FonWtXn6zDCpfpzJ3Ey6VoUa4c=)
                          3: 16A921E4DC0B11EC947D03A2F1222468.roa (hash: vGBFcYwGWSd28shsl6wLto7Mn3qQgY7dKVAEPsi5kBs=)
                          4: A9F0CED005CB11EEAE1D25384AD9E6FC.roa (hash: zxEwyc9gplQBJFrp7SAoD+b4/1ve107UCm4IoIpj8I0=)
                          5: BF8426E405CA11EE92157D354AD9E6FC.roa (hash: A+WykTSmvAsx1MAKq+Pb3eSJ+oLcJkndPTp4NaD0n4Y=)
                          6: 3DA37FA805CA11EE97650D344AD9E6FC.roa (hash: qnjPAnaVGfXdRft23JxV+6Cp0V+QdoJKnDCoKaZOhOc=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36E29ED/1C5B5D02DC0911EC9CEBDE9BF1222468/KjzJ5VGaWluxPQgxDKk0gkiW-lo.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36E29ED/1C5B5D02DC0911EC9CEBDE9BF1222468/KjzJ5VGaWluxPQgxDKk0gkiW-lo.mft
                          rsync://rpki.afrinic.net/repository/afrinic/KjzJ5VGaWluxPQgxDKk0gkiW-lo.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 01 Jan 2026 00:07:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1375 (0x55f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36E29EDAF, serialNumber=2A3CC9E5519A5A5BB13D08310CA934824896FA5A
        Validity
            Not Before: Dec 30 02:45:53 2025 GMT
            Not After : Jan  1 02:45:53 2026 GMT
        Subject: CN=69533ce1-83ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:f7:e0:03:70:3f:f9:c6:75:8b:2d:11:fb:1c:
                    95:12:30:ba:19:4d:61:a0:09:12:e1:51:2a:37:ee:
                    87:25:1c:10:5e:69:24:93:d1:f1:ae:96:38:15:86:
                    82:62:33:12:7b:23:af:b3:c4:2e:67:31:15:4d:0d:
                    23:91:0e:f9:fe:13:ab:e9:7a:d6:f5:a8:2b:3e:b2:
                    97:11:4a:79:b3:99:f3:e8:1d:38:a9:5d:c7:67:54:
                    77:27:ed:60:4f:ff:85:a3:a5:c0:87:22:b4:eb:3f:
                    71:a3:06:55:ec:30:7a:0b:44:c2:3f:75:f3:39:55:
                    c3:b9:b8:ae:8f:ce:d0:a8:1c:94:79:4b:f0:30:a7:
                    a8:cb:ce:9a:2c:0d:bc:63:56:4b:19:9c:98:37:79:
                    3c:0a:cf:ef:62:b7:a9:a6:91:c3:c1:db:d1:2e:76:
                    d1:0f:0e:fd:2a:1a:c4:1c:3e:e0:a0:e7:88:d0:db:
                    ce:1e:9d:8f:1c:41:d2:03:7c:bd:9e:2f:49:9f:92:
                    7d:b3:4f:ee:34:fd:e4:d6:9c:ff:e2:29:5c:dd:61:
                    2d:93:f1:17:2f:12:37:e4:2f:c5:79:fc:38:b7:35:
                    e9:37:29:b5:22:94:91:7e:f9:21:06:41:9b:19:bd:
                    d5:92:8a:28:f5:20:67:72:b9:4b:5f:5a:45:d6:2d:
                    d0:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:EB:42:A4:BD:D5:71:52:69:D3:37:F5:FD:DF:F0:E8:A3:42:82:51
            X509v3 Authority Key Identifier:
                keyid:2A:3C:C9:E5:51:9A:5A:5B:B1:3D:08:31:0C:A9:34:82:48:96:FA:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36E29ED/1C5B5D02DC0911EC9CEBDE9BF1222468/KjzJ5VGaWluxPQgxDKk0gkiW-lo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/KjzJ5VGaWluxPQgxDKk0gkiW-lo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E29ED/1C5B5D02DC0911EC9CEBDE9BF1222468/KjzJ5VGaWluxPQgxDKk0gkiW-lo.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:30:07:12:9b:c8:91:9b:23:34:cd:f0:c3:52:e7:08:c2:ce:
         79:bd:40:91:9a:df:63:6d:36:53:55:32:dd:d7:f9:e0:3d:cf:
         23:74:29:cb:c3:f8:a0:99:60:d1:16:0b:80:81:24:bd:c3:09:
         53:6d:5b:66:05:08:ee:a8:b2:ee:b9:41:c8:7c:cd:a5:b5:5a:
         81:b6:47:b7:15:15:30:c8:e6:d4:21:36:88:c5:21:13:7d:cd:
         4c:05:83:1f:6a:ac:a7:4d:f0:47:a9:48:24:c4:a3:7a:4f:93:
         02:77:ef:0e:c8:83:c7:b5:16:03:ec:89:4f:d1:c3:51:79:0e:
         9c:68:c2:37:86:3d:dd:80:1c:37:c5:6b:1e:bb:a3:c0:f7:9a:
         76:fd:d8:5e:cc:00:9a:98:9f:b0:64:4d:d0:a3:10:eb:7b:f1:
         36:59:53:31:9b:dc:33:ec:73:58:7a:3e:9c:0e:dc:de:28:f8:
         f9:7d:3c:82:f2:c4:ff:eb:d6:94:01:53:87:92:86:f7:f6:56:
         6e:59:96:d3:c0:dc:b1:bd:3a:58:61:32:d9:d3:6e:6e:c5:79:
         ed:c7:9e:94:35:21:f6:62:48:2f:d6:45:de:25:89:70:2b:d6:
         d6:e3:e1:92:1d:0c:9d:84:4d:70:c2:5b:b5:22:85:f9:06:8a:
         fe:22:bc:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 30 06:39:39 2025 by rpki-client