This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36E373D/4D22ACD68B7311E9A49A4368F8AEA228/_Y4EWISxZp69QwrlZnIdl0BKbOg.mft
File:                     _Y4EWISxZp69QwrlZnIdl0BKbOg.mft (raw, json)
Hash identifier:          JgFcIymppHEWV/HooGbqreJcKWIWClmtt+Wq3d/UzJU=
Subject key identifier:   52:DD:E7:05:BD:E7:7F:33:D2:1C:8C:70:7D:84:AC:CB:F2:BA:0E:F2
Authority key identifier: FD:8E:04:58:84:B1:66:9E:BD:43:0A:E5:66:72:1D:97:40:4A:6C:E8
Certificate issuer:       /CN=F36E373DAF/serialNumber=FD8E045884B1669EBD430AE566721D97404A6CE8
Certificate serial:       09E0
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/_Y4EWISxZp69QwrlZnIdl0BKbOg.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36E373D/4D22ACD68B7311E9A49A4368F8AEA228/_Y4EWISxZp69QwrlZnIdl0BKbOg.mft
Manifest number:          09C0
Signing time:             Thu 25 Dec 2025 01:28:10 +0000
Manifest this update:     Thu 25 Dec 2025 01:28:09 +0000
Manifest next update:     Sat 27 Dec 2025 01:28:09 +0000
Files and hashes:         1: _Y4EWISxZp69QwrlZnIdl0BKbOg.crl (hash: eS+6WzVXsAbNaQij9i4Q+80XdjODiIgAZTnDOFuL1Pc=)
                          2: 72FDA95EBED111EBB1E95938F8AEA228.roa (hash: BFwqjnvA7M7iOe8MrvjQVzzYtcahDaV6kGy9p/HlFzg=)
                          3: 8CFF0D3452E011EEB9E2557C4AD9E6FC.roa (hash: AjdT4e8a6WXfxGEzOMU2Ejz3vHkEPA/+xC+T83HmsUY=)
                          4: 7E2AA4AC953C11ECB825FCA95A40D577.roa (hash: V0xEm03mcnP/23ED2cL/AoR2czYuEnqqGtBl0cqLVJY=)
                          5: 771B25DAC1DC11EBAFF27A22F8AEA228.roa (hash: hB7LK5vkWRJBikNKLrZykTmcN1gbhqGJuoapPw28t74=)
                          6: 487A092ADA8611ED9609AEE52F6D8C1D.roa (hash: D/BuyKELkA6Kinn/ZmmBBy28n4BcPuuOdNb0VMO9tSc=)
                          7: EBFDEB1CDA8511EDAD8DC8E42F6D8C1D.roa (hash: T0K4k+0IgpuVi35+ZPDqnwWPZANeAHrt4BvXYlWbXMI=)
                          8: 417B7412681D11EABAE8A23BF8AEA228.roa (hash: EcSboq3Auo5ZSfF9dSrc6D9TXAo4UTRY5/uzWoCkLSY=)
                          9: B5869B0AC3C211F09F106C8BDAE4EC9C.roa (hash: mJeNbgIsODW0IZbdvirwPYTHzrvnFAJ+2bHY0LU02rk=)
                          10: A0A710B2C1DC11EBBC70BD22F8AEA228.roa (hash: nWisPdHBij3RvecNt34Yu238DLfWQU7kpk3sAXEBWpo=)
                          11: 9132C716F59111E9AF6CD33BF8AEA228.roa (hash: rXypH2zp9nVVHeDRCTVV4b8eCSlSkXxt3YUitRlyOEk=)
                          12: 9364DF78BED111EBB8FF9938F8AEA228.roa (hash: NRhe7qbaq8yZpi9FGOqJZVS+hbrFKmeWDZsrvab3+uA=)
                          13: 65F327B8C3C011F0ABEF947BDAE4EC9C.roa (hash: ZNx35ltsV215KO54NwIZRAjQFKuUp9eg7CgfIYk5wag=)
                          14: 7F0A8334DA8611ED854699E62F6D8C1D.roa (hash: GP3NdP5uExbY2GZHQJ+RZAHZhDY8bRc/dyrY/rF4P6I=)
                          15: 238CE30A681D11EA8E2A7D3BF8AEA228.roa (hash: ydKx4ungEUC7wspHHxXIcDKz2U1m9S6af+pOZ0cF1vY=)
                          16: D7EB2302681D11EA9D36683CF8AEA228.roa (hash: AgNVSSf6L6GA3IHpXql3JWZ8L6ROJY9bnjmSjQeMQnU=)
                          17: F251F7A2681D11EA847A8F3CF8AEA228.roa (hash: CH6IVgy5lqquXIo/aSkiaRuN6dDR9B17P94pxUuhf4w=)
                          18: AF1ED052BED111EBAE20BD38F8AEA228.roa (hash: 4XRclk/yI8EJN8d2ChhuI+DM9Txu0zUGc/TXnREwp8M=)
                          19: A6F9E6BC52E711EEA98697134AD9E6FC.roa (hash: 522xUbFyDNAfNVyOqkEJj/kgs5vlVi6RihMtJZxJPIA=)
                          20: 51E7667A198311EDA6FEC5BFF1222468.roa (hash: 5AYXvFdqlcLtOaW600VeglJz5MATpO6Rt2/LbZme/P8=)
                          21: 882D016CC3C211F091DEFD88DAE4EC9C.roa (hash: P8CrTuzMoS9SDVWJrxvNUlVaky2bUCzT4t7YspZSN5c=)
                          22: DBFF1E3C43DD11ED95883DBCF1222468.roa (hash: Y8zoZUQnQqpVoToxLOumwxqYjQxD2d4+Fg81697ZwlM=)
                          23: 60E94C82DA8611EDB9B5F0E52F6D8C1D.roa (hash: uN0Q1zV+VPkcLgC9gryjBgSon2OLOyHeE5NbuOjD/vU=)
                          24: 14FC84CEDA8611EDAD5B23E52F6D8C1D.roa (hash: S6+GPt3mMdOMUzMxpxdXeFeENM7hq23EiAhTHkvC6fQ=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36E373D/4D22ACD68B7311E9A49A4368F8AEA228/_Y4EWISxZp69QwrlZnIdl0BKbOg.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36E373D/4D22ACD68B7311E9A49A4368F8AEA228/_Y4EWISxZp69QwrlZnIdl0BKbOg.mft
                          rsync://rpki.afrinic.net/repository/afrinic/_Y4EWISxZp69QwrlZnIdl0BKbOg.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 27 Dec 2025 00:06:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2528 (0x9e0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36E373DAF, serialNumber=FD8E045884B1669EBD430AE566721D97404A6CE8
        Validity
            Not Before: Dec 25 01:28:09 2025 GMT
            Not After : Dec 27 01:28:09 2025 GMT
        Subject: CN=694c932a-ccdf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:0d:12:9f:3a:b1:fc:4b:41:69:dc:77:20:5f:
                    72:2d:3b:29:c1:d8:0d:9a:1d:60:26:d3:2f:f6:52:
                    25:09:b6:c5:69:1f:77:32:a8:7e:76:24:98:1e:2e:
                    67:f6:41:60:3d:34:51:c9:df:7b:66:0f:b2:4a:ac:
                    54:c0:4e:5b:c3:a5:67:d1:09:8b:65:4f:99:a0:97:
                    64:34:7c:0a:6e:1f:cb:c1:b3:d8:47:d9:c6:b5:e1:
                    45:0a:1a:f1:64:77:a5:3b:17:d8:53:d3:79:f7:79:
                    ee:ae:00:cb:c3:28:31:70:17:1c:2f:c6:19:b8:5b:
                    a3:b7:e7:15:36:07:f8:1b:1e:69:e5:4c:d9:5a:12:
                    8d:a8:4b:9c:b7:f5:b1:06:12:58:7d:39:05:5c:fd:
                    c6:0f:0d:cd:1f:98:90:6b:29:05:7a:33:22:54:17:
                    63:f7:4a:32:f8:c8:2b:6a:eb:d7:1a:ad:d5:ae:96:
                    20:b7:0f:6a:60:74:bf:cb:1c:61:4d:ee:68:d9:90:
                    ab:05:c6:53:0c:14:e8:29:26:f0:20:29:23:4f:5a:
                    f9:81:16:b0:15:db:93:79:6c:28:0c:e1:29:8f:21:
                    9e:1a:c1:b4:ad:19:e3:21:32:c2:f9:38:f0:f8:c3:
                    2e:4d:66:10:20:42:07:d4:68:4d:bb:12:83:01:97:
                    9b:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:DD:E7:05:BD:E7:7F:33:D2:1C:8C:70:7D:84:AC:CB:F2:BA:0E:F2
            X509v3 Authority Key Identifier:
                keyid:FD:8E:04:58:84:B1:66:9E:BD:43:0A:E5:66:72:1D:97:40:4A:6C:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36E373D/4D22ACD68B7311E9A49A4368F8AEA228/_Y4EWISxZp69QwrlZnIdl0BKbOg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/_Y4EWISxZp69QwrlZnIdl0BKbOg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E373D/4D22ACD68B7311E9A49A4368F8AEA228/_Y4EWISxZp69QwrlZnIdl0BKbOg.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:73:ca:a7:46:2c:04:58:d7:60:90:f5:75:19:55:b3:54:27:
         9b:01:40:99:4b:68:fb:76:c8:f0:6b:21:f8:4b:ac:c0:1e:98:
         c2:66:61:c3:d5:84:30:3e:ea:98:28:be:de:e1:9f:3d:ce:59:
         89:f1:15:17:f5:e8:d6:48:c8:c8:a5:ab:62:4d:2e:9d:e2:ed:
         1e:bc:ee:81:f9:90:3a:de:8f:42:06:b7:73:ad:7f:f5:65:77:
         ca:ec:6c:cb:11:88:fc:5c:ca:01:52:ae:ec:53:8e:93:ab:17:
         21:a6:5e:65:c3:0a:e3:f7:f5:20:57:47:60:f1:d7:00:0d:e6:
         01:99:06:9e:35:ec:6d:fe:46:9e:b7:7f:33:5b:1f:1d:11:e9:
         8b:8a:f5:c0:59:f1:11:c0:b9:14:d5:8c:39:dd:a6:db:2e:37:
         af:bf:90:27:90:be:ed:f7:15:d0:f6:dc:87:fe:ad:6c:d0:ce:
         7d:b4:14:5c:8c:7a:db:96:1d:e1:b7:fe:fe:36:25:77:6a:ab:
         d4:54:21:99:39:5d:a9:02:ac:9e:94:80:18:70:48:40:9a:2e:
         e3:93:26:97:c5:95:d6:bf:d9:a1:ae:90:8c:72:8f:72:d4:bd:
         7d:12:ff:2b:4d:e6:6b:08:da:a3:fc:d5:2e:a0:0f:ff:4d:f9:
         f9:66:62:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 25 09:17:43 2025 by rpki-client