This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F6034/D916758A90FC11EA9D81306EF8AEA228/xwJ5nqS9Xbo-09BppxkblBtad5o.mft
File:                     xwJ5nqS9Xbo-09BppxkblBtad5o.mft (raw, json)
Hash identifier:          va2Z7BVtjtKwIARBto3GnT0v7b5kpNiOJzSfsd3Qmz0=
Subject key identifier:   BA:C6:07:29:8B:5D:A5:11:0F:3E:D1:E5:A2:EF:C2:B9:52:9C:66:0F
Authority key identifier: C7:02:79:9E:A4:BD:5D:BA:3E:D3:D0:69:A7:19:1B:94:1B:5A:77:9A
Certificate issuer:       /CN=F36F6034AF/serialNumber=C702799EA4BD5DBA3ED3D069A7191B941B5A779A
Certificate serial:       0878
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/xwJ5nqS9Xbo-09BppxkblBtad5o.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36F6034/D916758A90FC11EA9D81306EF8AEA228/xwJ5nqS9Xbo-09BppxkblBtad5o.mft
Manifest number:          085F
Signing time:             Sat 20 Dec 2025 01:47:57 +0000
Manifest this update:     Sat 20 Dec 2025 01:47:56 +0000
Manifest next update:     Mon 22 Dec 2025 01:47:56 +0000
Files and hashes:         1: xwJ5nqS9Xbo-09BppxkblBtad5o.crl (hash: Ock6531NFnm99o+wCjRrWrWMVjMsS7oZ1K7gwPtkDq8=)
                          2: 1CB4AD46B54D11F0AE8DE1DFDAE4EC9C.roa (hash: GpBCPBpYP7jSKCmZZyQgNpO5GbazBb3Ixsp5RwZj6vM=)
                          3: 608B48BEB55611F0B2E28A9CDAE4EC9C.roa (hash: 6xR9Yw6qiVIfQSJDhytaGImSZ1A3jFhmSl44es/ykHg=)
                          4: B9EABCD2B54C11F09D128FDFDAE4EC9C.roa (hash: FQu8ySvpjzSm8Wt9V+i50XqTr/lNpOUbbdjMIfmS/L8=)
                          5: 757792B4CABE11F088A16090DAE4EC9C.roa (hash: fllEO4/M7DBFU1aZgpIed0R6Y23bArLMy7qHRzCl4ts=)
                          6: 094FEDD4B55611F08FD11F9CDAE4EC9C.roa (hash: jvqPC+LV3haBj2mis1++y3ICQS3fsxJo9KRlAft0JPY=)
                          7: 96B4A35AB55511F08FC6E597DAE4EC9C.roa (hash: 6Qab2GQfV990KSXtH4bePzdjsFn7IxaaFDENDt4G4Yc=)
                          8: DBE779FCB55511F09281119CDAE4EC9C.roa (hash: r38PJu83hUBvf7P5w3SkDI8cVfAvH12yPWpkkk25OPA=)
                          9: 2E1AF6B8B55611F0BCB8249CDAE4EC9C.roa (hash: BLNEGjyDBYxkX0YHPraswO3BVBLrA7gab5y1HJSh2U4=)
                          10: 7F2A789EB55611F097EC52A0DAE4EC9C.roa (hash: 2L2OgLFRPecgH2xTdenUefSJFiuBkC2MjqJciX7PRvY=)
                          11: C4C9B73AB55511F08736369ADAE4EC9C.roa (hash: CMYKxCS3jFNWQQUqDagCHxfFByaW82mbkSwsyKkTgQ4=)
                          12: E79DE1AEB54C11F092F6BDDFDAE4EC9C.roa (hash: yiPtl3UM2gTn4BwT0BadrawkZ+QM2YDZW4gZb83Wnio=)
                          13: 9A0C2716B55611F094735AA0DAE4EC9C.roa (hash: 43UkRVumG67YdCPCBU+yiy01Xg1w6Ryu6pqrcLYThmU=)
                          14: 457A28BEB54D11F085FD31E0DAE4EC9C.roa (hash: WvjKJ61Ybf7E0w2qd2kPgyK95N5i97V0MyHCGmY1W6o=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36F6034/D916758A90FC11EA9D81306EF8AEA228/xwJ5nqS9Xbo-09BppxkblBtad5o.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36F6034/D916758A90FC11EA9D81306EF8AEA228/xwJ5nqS9Xbo-09BppxkblBtad5o.mft
                          rsync://rpki.afrinic.net/repository/afrinic/xwJ5nqS9Xbo-09BppxkblBtad5o.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 22 Dec 2025 00:06:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2168 (0x878)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36F6034AF, serialNumber=C702799EA4BD5DBA3ED3D069A7191B941B5A779A
        Validity
            Not Before: Dec 20 01:47:56 2025 GMT
            Not After : Dec 22 01:47:56 2025 GMT
        Subject: CN=6946004d-b7c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:07:65:4d:30:19:b0:6b:0e:f7:f6:ca:b6:c4:
                    52:bc:1b:df:cb:c1:b1:7a:3e:d5:6c:17:f5:1e:29:
                    6d:17:96:58:9e:f4:3a:84:d4:9e:ee:35:db:ad:c9:
                    a0:25:22:03:7d:12:5f:0e:07:95:b7:ab:ff:7a:96:
                    e4:e6:f8:cc:d3:77:22:73:99:6e:44:45:13:18:d0:
                    d7:a0:b8:9b:50:eb:23:d5:4e:74:9a:51:cc:96:6f:
                    d5:5e:36:6e:dc:12:1c:f1:e7:c7:d1:bd:2c:54:39:
                    1c:64:d4:ee:8f:2e:fe:8e:b6:9d:2c:b7:8d:c3:c3:
                    d0:77:89:30:f0:53:97:20:78:c3:01:71:09:0a:8e:
                    79:bf:d7:4b:ee:0f:b8:98:c4:94:42:f3:4a:b5:d6:
                    f9:3b:49:53:30:d5:1c:7a:69:d1:0e:05:5e:93:dd:
                    c1:1d:29:c3:de:a3:2f:8e:3f:57:04:b9:a5:ce:15:
                    b5:1e:7a:f5:18:3e:a3:6c:aa:75:e1:46:88:10:ab:
                    cc:c2:a7:9a:c5:12:7f:fb:95:f0:f4:bb:ba:38:18:
                    b4:c0:13:b9:23:c6:15:28:bd:3a:57:d5:fb:04:bd:
                    8f:93:ff:cc:a8:88:76:04:d6:7b:05:3d:ca:1f:7c:
                    7d:2a:50:7d:33:27:f0:2f:5e:fa:9a:71:01:1d:ce:
                    00:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:C6:07:29:8B:5D:A5:11:0F:3E:D1:E5:A2:EF:C2:B9:52:9C:66:0F
            X509v3 Authority Key Identifier:
                keyid:C7:02:79:9E:A4:BD:5D:BA:3E:D3:D0:69:A7:19:1B:94:1B:5A:77:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36F6034/D916758A90FC11EA9D81306EF8AEA228/xwJ5nqS9Xbo-09BppxkblBtad5o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/xwJ5nqS9Xbo-09BppxkblBtad5o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F6034/D916758A90FC11EA9D81306EF8AEA228/xwJ5nqS9Xbo-09BppxkblBtad5o.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:6d:f7:f9:d6:88:dd:6d:19:21:1e:3d:63:ea:25:c4:d4:72:
         32:54:69:e8:d2:e9:45:51:e6:0b:ff:6f:a4:11:b0:54:d1:6c:
         c8:1e:a2:d2:23:8f:4c:fd:bc:ff:96:20:70:86:dc:ab:a9:54:
         e8:76:25:22:12:b0:8c:fd:af:bc:28:52:51:5e:a4:a4:c0:f3:
         1c:97:48:95:1c:71:b4:65:1a:a5:07:1a:54:cc:5d:37:7b:e1:
         24:bd:d9:2d:60:3a:94:ad:c6:57:93:49:ba:5f:a4:e2:3e:cf:
         ec:49:d3:99:66:8a:76:df:9c:ea:8e:02:24:1a:48:43:94:41:
         07:79:24:25:d2:34:78:8e:dd:35:7c:98:ff:f0:db:60:f2:97:
         ba:91:eb:16:0f:0a:7d:1b:e6:09:7b:34:1b:a6:49:a1:c2:a5:
         bc:25:64:06:c3:75:a2:51:7e:99:ce:98:43:c4:dc:7a:51:32:
         22:b6:3a:53:41:0a:61:b4:81:98:91:14:75:72:63:9a:94:23:
         bb:e1:e2:d6:dd:95:9f:32:7e:e0:06:5b:07:f9:1b:de:67:e5:
         4e:c6:1b:53:11:4e:64:a8:ad:82:00:c3:3e:a6:a5:8c:3b:d5:
         09:43:a8:14:a1:ea:bc:a4:bc:76:ec:7a:be:3a:44:99:a9:0c:
         08:30:ab:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 15:20:21 2025 by rpki-client