This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F731F/A187DF92379711EEA4C498314AD9E6FC/9cC2O6peevekOGtjf9EgajaC0MM.mft
File:                     9cC2O6peevekOGtjf9EgajaC0MM.mft (raw, json)
Hash identifier:          WKcvnVH43SFIMmc1RgnBBT7+4duQyeFBBMFnAsf85QU=
Subject key identifier:   65:6A:F5:14:A2:33:23:32:A3:45:3B:5C:3D:86:6B:6C:4B:20:0E:03
Authority key identifier: F5:C0:B6:3B:AA:5E:7A:F7:A4:38:6B:63:7F:D1:20:6A:36:82:D0:C3
Certificate issuer:       /CN=F36F731FAF/serialNumber=F5C0B63BAA5E7AF7A4386B637FD1206A3682D0C3
Certificate serial:       03AE
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/9cC2O6peevekOGtjf9EgajaC0MM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36F731F/A187DF92379711EEA4C498314AD9E6FC/9cC2O6peevekOGtjf9EgajaC0MM.mft
Manifest number:          0398
Signing time:             Sun 21 Dec 2025 03:39:59 +0000
Manifest this update:     Sun 21 Dec 2025 03:39:58 +0000
Manifest next update:     Tue 23 Dec 2025 03:39:58 +0000
Files and hashes:         1: 9cC2O6peevekOGtjf9EgajaC0MM.crl (hash: biGdizNgONYP+NI1aXpuIsqyrvxVSw9P20U7BGCDTrQ=)
                          2: 267EAD8272DF11F0AD464C91DAE4EC9C.roa (hash: C7Gyg+4x8Hh2iqCcntRO+fHKd/DGeXvmNHuRFLOmz04=)
                          3: 6FBE03AE72E311F0BDEFCDABDAE4EC9C.roa (hash: GDOqL1OTznuXTMdN5hvVfNOqFauRmjCI7pSQfs/61Bg=)
                          4: 2470589872E311F0B4EE5DABDAE4EC9C.roa (hash: WDF/PbAAV4TFNjA9XU2xgOeBCnlYy/RDmqiM+sgfu1o=)
                          5: 91475E9A72E211F09C8B08A7DAE4EC9C.roa (hash: dmA6rvzXEJFKOZ61W1TI8NubIg9lNoADQlry0wfROZM=)
                          6: D2AC214272E011F08FD2499ADAE4EC9C.roa (hash: eAUkLW2UflJP71U92dqZlcLwcktEmsvuPM9OK2RRXnQ=)
                          7: 80842C1C72DF11F0BF649F91DAE4EC9C.roa (hash: aZOMO0+Z7igI3PaEyE+67UEBIfUxAUFnCbsi9OnPJZU=)
                          8: 4B479B12743111F0A63B64B4DAE4EC9C.roa (hash: F8PB0Xl+VxolCksfnH9PLc4qAD+h/G6brzLlc4/i1tQ=)
                          9: F8B6E34672DF11F0891FBB95DAE4EC9C.roa (hash: w2bbzRZUts884GdGNQ/ARumhi7i/n68wBygotYrEdRQ=)
                          10: DD3C16F672E211F09AF665A7DAE4EC9C.roa (hash: 67phmLpraZ+TtW1XJir/6xrM9G94j8vX+qHMp4plIeo=)
                          11: 25448AB472DE11F0AFF50189DAE4EC9C.roa (hash: OUwQI8Wpq7YkfutxF3r2SbuF+hjD7BMye8Cgl6fS3Tw=)
                          12: 01F8D29672E711F0B012AEC1DAE4EC9C.roa (hash: ZCo20DEZ3jjBn9iev2zsxyuNhGfd+XXOlj6pMmP9mwQ=)
                          13: 63498D5272E111F0B646849EDAE4EC9C.roa (hash: 21/eCvRVXcBmFJZT4KGihw0yio6Yd2hm4xWHCwHphyk=)
                          14: 2539CEB072E011F08CD40396DAE4EC9C.roa (hash: hShops0GwFAXo5gbF/S8a7PguYniu2oQp8CEizQK5tY=)
                          15: DD22D36872E111F0AC53A5A2DAE4EC9C.roa (hash: QuCk5ffNaczjJdVdreAb3kkct9VCmQhrEAkYSnzbe2o=)
                          16: AD23161472E111F08259CAA0DAE4EC9C.roa (hash: CXW28jJhcJI4pbvFp4dtjP/zrfIgrsyQ25MiQvCPSyE=)
                          17: 32652F9472E511F09A23C0B6DAE4EC9C.roa (hash: eZURWL+ZrtdxT2rF22IPu3O6ltuid4qJqQt7RblkS5I=)
                          18: B185F28C72DF11F0A2456A95DAE4EC9C.roa (hash: JthSN0OOhvboQ7GailBpQ0PlPXIDL2fkxmvjlY0OCAE=)
                          19: 6C09F61A72E211F09581F0A6DAE4EC9C.roa (hash: UcVgAglDQSEP0uPY3QLGRmH+dWW7hvJEw53QIFsBsFQ=)
                          20: 121D078272E211F0A497F1A2DAE4EC9C.roa (hash: QV56lqv72VjNV1FXxfBXzR+88I2equPTmmIREvSVQyw=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36F731F/A187DF92379711EEA4C498314AD9E6FC/9cC2O6peevekOGtjf9EgajaC0MM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36F731F/A187DF92379711EEA4C498314AD9E6FC/9cC2O6peevekOGtjf9EgajaC0MM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/9cC2O6peevekOGtjf9EgajaC0MM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 23 Dec 2025 00:06:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 942 (0x3ae)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36F731FAF, serialNumber=F5C0B63BAA5E7AF7A4386B637FD1206A3682D0C3
        Validity
            Not Before: Dec 21 03:39:58 2025 GMT
            Not After : Dec 23 03:39:58 2025 GMT
        Subject: CN=69476c0e-8b38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:d4:90:c2:67:19:d9:76:28:b7:b9:26:6a:eb:
                    a0:a8:69:f4:06:60:98:b8:e6:88:d5:f5:45:ac:a4:
                    25:e3:94:bc:6c:75:86:78:8f:d8:03:0a:0d:b9:9a:
                    a0:50:85:e4:98:38:27:c6:ae:a4:44:0f:bd:24:87:
                    66:0f:c5:76:00:87:7d:95:99:59:50:07:97:ed:b8:
                    ba:da:8b:e0:33:e4:f4:50:b1:a1:6d:aa:40:d1:db:
                    6a:14:58:19:bd:ab:bb:02:dd:b8:55:f1:29:69:73:
                    95:22:03:fe:fc:84:e4:02:e4:19:6e:ad:2b:fd:02:
                    b9:80:d7:10:42:39:15:f9:3c:36:67:e9:5a:59:64:
                    3f:76:1f:5d:32:ed:0c:7d:37:05:17:99:e4:87:2a:
                    f8:13:3a:68:f0:06:b7:95:bc:2b:9e:72:a7:34:50:
                    0a:2f:39:37:31:82:03:13:c3:f6:8b:8e:3f:f2:85:
                    83:d7:60:9c:96:8f:d3:4e:81:1a:19:08:32:94:2b:
                    9d:50:68:a8:af:b0:0c:2d:d6:73:f7:53:0b:47:41:
                    ef:83:1e:e6:77:95:7b:02:97:ee:e4:4f:ab:ff:e1:
                    42:45:9a:7b:78:68:fb:ff:7a:f0:e9:28:46:8f:b1:
                    01:06:7d:d2:09:9f:56:b4:c3:c9:0b:a3:47:14:df:
                    11:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:6A:F5:14:A2:33:23:32:A3:45:3B:5C:3D:86:6B:6C:4B:20:0E:03
            X509v3 Authority Key Identifier:
                keyid:F5:C0:B6:3B:AA:5E:7A:F7:A4:38:6B:63:7F:D1:20:6A:36:82:D0:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36F731F/A187DF92379711EEA4C498314AD9E6FC/9cC2O6peevekOGtjf9EgajaC0MM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/9cC2O6peevekOGtjf9EgajaC0MM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F731F/A187DF92379711EEA4C498314AD9E6FC/9cC2O6peevekOGtjf9EgajaC0MM.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:db:37:7f:9a:11:ba:6e:98:d7:86:47:58:e7:96:55:96:1b:
         4b:91:9e:79:d2:38:d3:1d:05:26:2d:fe:b6:12:22:0a:b9:d9:
         72:ba:b9:00:70:2d:7c:20:ad:73:82:64:57:b9:86:a7:af:48:
         55:da:c2:f4:68:5e:26:83:24:13:ec:e4:66:2c:64:f9:08:0f:
         39:3c:30:81:62:e6:7c:59:2f:f5:07:22:af:91:50:12:e9:36:
         d5:2c:87:23:92:6a:68:32:9f:de:c1:c4:86:79:e2:96:32:70:
         db:60:20:96:cd:32:f6:75:2b:11:81:5b:0a:0e:22:04:e3:f6:
         c7:5c:98:68:41:d2:1e:f1:c9:85:27:f9:a1:f6:c3:2e:50:a1:
         c3:5a:eb:cc:44:4d:3b:b6:f8:e5:77:bf:41:d4:59:1f:16:04:
         55:23:00:c8:74:11:fa:8d:04:16:41:53:8b:86:5a:e5:ce:06:
         3a:86:04:e1:74:9c:d6:0a:cf:b3:5a:0d:5a:1f:f9:d5:db:b8:
         f8:28:04:37:bd:78:0c:b8:f5:88:98:fe:f0:42:c7:5c:1f:60:
         c9:89:07:4d:7b:16:70:2e:aa:17:2e:26:d6:ec:f8:22:2e:7e:
         ce:b6:fc:63:05:87:6f:c5:16:81:ba:12:1d:57:30:3e:e6:b2:
         00:da:cd:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 12:28:54 2025 by rpki-client