This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FB628/2535C52034C011E7BDE4355EF8AEA228/DmdFN0vlZOXm1eI_aockyL53qVI.mft
File:                     DmdFN0vlZOXm1eI_aockyL53qVI.mft (raw, json)
Hash identifier:          yRbvDkjHdTlEm4Gst6+0TJBTn2Tpof3ux3DVS6xIWw8=
Subject key identifier:   29:6A:8D:37:9E:D5:D8:C8:98:77:55:0D:41:E1:58:4F:96:2C:06:2D
Authority key identifier: 0E:67:45:37:4B:E5:64:E5:E6:D5:E2:3F:6A:87:24:C8:BE:77:A9:52
Certificate issuer:       /CN=F36FB628AF/serialNumber=0E6745374BE564E5E6D5E23F6A8724C8BE77A952
Certificate serial:       0C94
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/DmdFN0vlZOXm1eI_aockyL53qVI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36FB628/2535C52034C011E7BDE4355EF8AEA228/DmdFN0vlZOXm1eI_aockyL53qVI.mft
Manifest number:          0C93
Signing time:             Thu 25 Dec 2025 01:08:11 +0000
Manifest this update:     Thu 25 Dec 2025 01:08:10 +0000
Manifest next update:     Sat 27 Dec 2025 01:08:10 +0000
Files and hashes:         1: DmdFN0vlZOXm1eI_aockyL53qVI.crl (hash: lqHKj7L4LyG64KEZjrp7frYJ5qBlEdixBmPU6xlljCA=)
                          2: D550D09C037F11EDA40460C2F1222468.roa (hash: 9wZBqedJVTgdGdUQ5S31jykjUra1rcqD+ULApifCF68=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36FB628/2535C52034C011E7BDE4355EF8AEA228/DmdFN0vlZOXm1eI_aockyL53qVI.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36FB628/2535C52034C011E7BDE4355EF8AEA228/DmdFN0vlZOXm1eI_aockyL53qVI.mft
                          rsync://rpki.afrinic.net/repository/afrinic/DmdFN0vlZOXm1eI_aockyL53qVI.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 27 Dec 2025 00:06:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3220 (0xc94)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36FB628AF, serialNumber=0E6745374BE564E5E6D5E23F6A8724C8BE77A952
        Validity
            Not Before: Dec 25 01:08:10 2025 GMT
            Not After : Dec 27 01:08:10 2025 GMT
        Subject: CN=694c8e7b-2993
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:c4:a4:bf:c0:a2:7d:06:fd:ca:b8:4c:92:35:
                    3a:71:4d:5d:fe:a1:51:5d:a3:2b:5c:1d:c2:4a:4f:
                    b9:f7:65:eb:8d:5f:9d:99:8d:ec:7e:5a:60:5d:51:
                    ab:ef:3e:1f:9c:8c:f9:bf:96:cd:9f:da:47:d5:d8:
                    ba:64:df:33:48:60:7b:60:b1:dc:00:2d:76:ab:d0:
                    74:07:57:bb:2b:5c:7c:f1:3c:63:3f:f3:7c:cc:d1:
                    86:5d:60:c6:83:6f:c5:67:35:b6:7a:b7:93:38:82:
                    03:38:54:3b:3a:43:91:06:a8:d8:7b:d7:e2:08:ca:
                    02:fd:dd:18:ab:b6:de:52:10:e2:e1:5a:0e:07:92:
                    6f:ec:12:c5:db:18:07:8b:16:23:3f:0e:db:15:46:
                    e4:f7:ff:f8:69:7c:e1:73:fa:ce:ed:54:d5:1c:46:
                    21:c9:9f:38:3f:7e:73:86:0e:64:5e:51:9c:89:ba:
                    8d:79:58:a5:d6:81:cb:a7:95:b8:a2:3b:b0:cd:35:
                    9a:c0:7b:40:19:35:5b:d7:b3:29:ed:89:72:54:f2:
                    e8:fd:d6:a4:c1:de:31:25:d8:5a:44:8f:c6:44:99:
                    e7:50:7a:dd:69:14:a3:92:41:db:0a:48:c1:a4:e2:
                    b8:19:fa:35:1a:d6:27:e3:16:f4:82:5a:48:de:43:
                    a0:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:6A:8D:37:9E:D5:D8:C8:98:77:55:0D:41:E1:58:4F:96:2C:06:2D
            X509v3 Authority Key Identifier:
                keyid:0E:67:45:37:4B:E5:64:E5:E6:D5:E2:3F:6A:87:24:C8:BE:77:A9:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36FB628/2535C52034C011E7BDE4355EF8AEA228/DmdFN0vlZOXm1eI_aockyL53qVI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/DmdFN0vlZOXm1eI_aockyL53qVI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FB628/2535C52034C011E7BDE4355EF8AEA228/DmdFN0vlZOXm1eI_aockyL53qVI.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:4c:e9:b0:6d:53:68:5b:2a:20:37:22:57:f0:72:19:3c:6a:
         ea:d4:30:08:40:ad:4a:33:d2:3e:f7:b2:38:f3:14:6c:75:94:
         d2:73:b2:17:c1:9e:1d:09:4b:bb:6c:f0:eb:83:a1:9a:9b:7a:
         58:95:ab:94:a6:13:d2:d6:33:cc:dd:e3:ad:ed:d8:50:fc:f3:
         d3:84:cd:3d:29:64:b4:e2:1b:8f:60:bf:77:ed:f6:19:d2:c6:
         21:01:78:d0:c1:8e:00:0a:e2:da:f8:7d:e9:48:b9:21:e0:84:
         b9:58:e6:2d:4d:65:9c:4f:e6:b1:d8:fd:1c:09:d9:f1:7b:8c:
         db:b7:29:27:bb:8c:3b:db:df:a5:4b:2e:bd:b3:62:4e:2d:e3:
         74:50:c5:fa:d1:9a:60:7f:70:16:0f:ef:10:81:31:df:4e:c3:
         8d:7a:7c:e0:1d:a7:93:ae:c5:09:9b:83:8a:04:90:f1:a0:16:
         17:ec:cc:58:3a:5f:58:14:09:82:8f:a1:89:39:2e:72:00:1e:
         b9:41:ee:d3:5d:9e:70:30:75:52:6b:94:7f:88:bd:7e:e6:df:
         16:fc:bd:29:0d:be:f2:e4:37:82:8c:d2:d2:e7:8c:86:77:1e:
         bb:35:8d:c6:dd:9b:6b:1d:6a:4d:3e:33:5c:e7:c3:79:87:34:
         65:34:2c:cb
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICDJQwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
RkI2MjhBRjExMC8GA1UEBRMoMEU2NzQ1Mzc0QkU1NjRFNUU2RDVFMjNGNkE4NzI0
QzhCRTc3QTk1MjAeFw0yNTEyMjUwMTA4MTBaFw0yNTEyMjcwMTA4MTBaMBgxFjAU
BgNVBAMTDTY5NGM4ZTdiLTI5OTMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCWxKS/wKJ9Bv3KuEySNTpxTV3+oVFdoytcHcJKT7n3ZeuNX52Zjex+WmBd
UavvPh+cjPm/ls2f2kfV2Lpk3zNIYHtgsdwALXar0HQHV7srXHzxPGM/83zM0YZd
YMaDb8VnNbZ6t5M4ggM4VDs6Q5EGqNh71+IIygL93Rirtt5SEOLhWg4Hkm/sEsXb
GAeLFiM/DtsVRuT3//hpfOFz+s7tVNUcRiHJnzg/fnOGDmReUZyJuo15WKXWgcun
lbiiO7DNNZrAe0AZNVvXsyntiXJU8uj91qTB3jEl2FpEj8ZEmedQet1pFKOSQdsK
SMGk4rgZ+jUa1ifjFvSCWkjeQ6CLAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUKWqN
N57V2MiYd1UNQeFYT5YsBi0wHwYDVR0jBBgwFoAUDmdFN0vlZOXm1eI/aockyL53
qVIwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkZCNjI4LzI1MzVDNTIwMzRDMDExRTdCREU0MzU1RUY4QUVBMjI4L0RtZEZO
MHZsWk9YbTFlSV9hb2NreUw1M3FWSS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0RtZEZOMHZsWk9YbTFlSV9hb2NreUw1M3FWSS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2RkI2MjgvMjUzNUM1MjAzNEMwMTFFN0JERTQzNTVFRjhB
RUEyMjgvRG1kRk4wdmxaT1htMWVJX2FvY2t5TDUzcVZJLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCxTOmwbVNoWyogNyJX8HIZPGrq1DAI
QK1KM9I+97I48xRsdZTSc7IXwZ4dCUu7bPDrg6Gam3pYlauUphPS1jPM3eOt7dhQ
/PPThM09KWS04huPYL937fYZ0sYhAXjQwY4ACuLa+H3pSLkh4IS5WOYtTWWcT+ax
2P0cCdnxe4zbtyknu4w729+lSy69s2JOLeN0UMX60Zpgf3AWD+8QgTHfTsONenzg
HaeTrsUJm4OKBJDxoBYX7MxYOl9YFAmCj6GJOS5yAB65Qe7TXZ5wMHVSa5R/iL1+
5t8W/L0pDb7y5DeCjNLS54yGdx67NY3G3ZtrHWpNPjNc58N5hzRlNCzL
-----END CERTIFICATE-----
Generated at Thu Dec 25 07:11:05 2025 by rpki-client