This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FEA6B/7B27920E8B8211E9888B6F73F8AEA228/k8LJmvDsTRpGQ0l_X4y9x-xFdI8.mft
File:                     k8LJmvDsTRpGQ0l_X4y9x-xFdI8.mft (raw, json)
Hash identifier:          nhO5jHuqARgHLhGHu2S8gOFnqZA7u+zINJlg8OjDAKQ=
Subject key identifier:   FB:21:42:0B:26:77:1B:85:F4:A8:5D:20:F2:60:86:07:CD:2F:F5:22
Authority key identifier: 93:C2:C9:9A:F0:EC:4D:1A:46:43:49:7F:5F:8C:BD:C7:EC:45:74:8F
Certificate issuer:       /CN=F36FEA6BAF/serialNumber=93C2C99AF0EC4D1A4643497F5F8CBDC7EC45748F
Certificate serial:       09A7
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/k8LJmvDsTRpGQ0l_X4y9x-xFdI8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36FEA6B/7B27920E8B8211E9888B6F73F8AEA228/k8LJmvDsTRpGQ0l_X4y9x-xFdI8.mft
Manifest number:          099E
Signing time:             Mon 22 Dec 2025 01:29:20 +0000
Manifest this update:     Mon 22 Dec 2025 01:29:19 +0000
Manifest next update:     Wed 24 Dec 2025 01:29:19 +0000
Files and hashes:         1: k8LJmvDsTRpGQ0l_X4y9x-xFdI8.crl (hash: kAnoZY3Q2AaKUekUifVVE7QIstSYdRIGnZbBt0+Zf98=)
                          2: C7641772A95111E996327569F8AEA228.roa (hash: zc2sHBHJr4VAxxPP7oCatGt+nqgAgifPd0TVAOYCceY=)
                          3: A3FDC7B0A95111E9AAD65A69F8AEA228.roa (hash: 0K5eGgVbvu8FC7WyD8sLN1TIhCRCwpbYVJe4XMYjSoU=)
                          4: DB963EBAA95011E9B922BA68F8AEA228.roa (hash: vNERaKTpGQ3bPaoxkOtKP33r5596Gf5AbL5hU7WDtMM=)
                          5: 040A9D2CA95211E9BA19AD69F8AEA228.roa (hash: d5eKRJswPQOdst1U1f3S5KMf2lH/jWZCYOfKv1LJoCI=)
                          6: E558A086A95111E981E48069F8AEA228.roa (hash: MBZdMaPZOc8kPGCwpfLOeCgHyo2GuPSxS7SV1R8ZrgE=)
                          7: E95E4E02065B11F0BF610D92762E951A.roa (hash: hC1qoRCVr73SSJvtnxgOKj5VeDUtOUW6+PzCj2xq8vw=)
                          8: 833F912AA95111E9AEA64269F8AEA228.roa (hash: CVPSUPHc97z8+REt/xLFN1h3Agjjhgwt02UGfD7Jtsc=)
                          9: 7B3DF01C8F6F11E9B8F82D5FF8AEA228.roa (hash: nFOWMxTM8t65qguasjyQKc77AeNcYXGCBaZB7vYGI0Q=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36FEA6B/7B27920E8B8211E9888B6F73F8AEA228/k8LJmvDsTRpGQ0l_X4y9x-xFdI8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36FEA6B/7B27920E8B8211E9888B6F73F8AEA228/k8LJmvDsTRpGQ0l_X4y9x-xFdI8.mft
                          rsync://rpki.afrinic.net/repository/afrinic/k8LJmvDsTRpGQ0l_X4y9x-xFdI8.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 24 Dec 2025 00:06:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2471 (0x9a7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36FEA6BAF, serialNumber=93C2C99AF0EC4D1A4643497F5F8CBDC7EC45748F
        Validity
            Not Before: Dec 22 01:29:19 2025 GMT
            Not After : Dec 24 01:29:19 2025 GMT
        Subject: CN=69489ef0-6d61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:5b:55:18:67:9b:32:e9:b9:9c:ad:0e:82:31:
                    81:3e:ba:32:d0:66:c7:79:34:0d:5b:a9:1b:96:19:
                    e6:57:02:ce:31:be:39:1b:bd:8c:3e:e9:c9:89:f7:
                    67:ac:0d:42:1e:2e:05:18:09:8f:e6:55:9f:c9:56:
                    21:9b:2e:0a:87:b9:27:5f:74:eb:2a:8e:f8:9b:bf:
                    72:a3:02:0c:9e:b6:83:28:82:b8:92:f7:4d:a2:77:
                    27:97:bd:2c:ec:7c:40:cb:d4:e7:97:ef:20:90:16:
                    1b:d0:e7:64:81:fa:5a:a1:d2:65:68:85:b7:68:ef:
                    34:a4:5e:80:be:5c:b1:22:2b:59:4f:10:8f:61:b5:
                    90:ef:0b:dd:fa:2c:f8:ee:0e:0a:fa:cc:39:b8:2c:
                    76:b8:4f:bc:ca:f6:b3:3f:d9:c8:80:5c:23:a5:fd:
                    f5:19:b1:49:9c:b7:c2:d7:9c:87:bb:94:6c:3b:f0:
                    0a:94:4f:8f:4a:36:34:78:ec:93:5f:19:25:b2:27:
                    a8:2d:c8:33:0d:2b:ed:9a:59:e8:82:95:c0:16:76:
                    70:fa:88:cf:7e:64:ce:a2:b1:e2:1f:0e:28:5b:a5:
                    63:c4:73:2b:7d:62:8c:39:d8:e2:65:73:7b:8e:de:
                    d8:6d:ff:95:9b:20:ee:16:d4:f8:a4:ec:1e:90:63:
                    01:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:21:42:0B:26:77:1B:85:F4:A8:5D:20:F2:60:86:07:CD:2F:F5:22
            X509v3 Authority Key Identifier:
                keyid:93:C2:C9:9A:F0:EC:4D:1A:46:43:49:7F:5F:8C:BD:C7:EC:45:74:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36FEA6B/7B27920E8B8211E9888B6F73F8AEA228/k8LJmvDsTRpGQ0l_X4y9x-xFdI8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/k8LJmvDsTRpGQ0l_X4y9x-xFdI8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FEA6B/7B27920E8B8211E9888B6F73F8AEA228/k8LJmvDsTRpGQ0l_X4y9x-xFdI8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:1c:2e:97:17:9b:a0:c7:ef:16:79:96:5e:77:8b:9f:d4:7c:
         38:1c:1c:94:e9:b9:8d:7f:73:9a:89:87:ff:de:61:0f:10:15:
         ce:4a:d7:ac:91:02:f6:50:bd:90:56:77:cb:3c:e9:57:9e:dd:
         ba:20:06:90:10:ba:96:8c:92:5c:26:10:d3:76:23:19:7a:ea:
         37:3f:43:b2:9f:c1:31:6c:3d:12:65:51:29:bb:01:92:03:36:
         18:f6:c3:64:84:f5:4e:9f:84:1f:79:d6:f0:bb:98:4f:dc:2f:
         7d:cd:d5:9c:15:0d:76:97:79:06:d1:db:d5:72:5d:db:7f:50:
         22:b7:76:e9:4d:37:ed:62:a9:e0:16:0c:c8:ba:13:57:ab:39:
         6d:21:82:14:bc:0c:24:7a:0a:8e:2d:7f:f5:b2:88:d3:17:88:
         9f:0a:6f:a9:91:51:0f:42:a9:50:a4:33:6a:36:1f:a4:71:86:
         2e:b3:4e:91:a2:a4:e2:aa:69:ee:1b:ce:b8:37:9d:c5:03:e7:
         4a:53:a3:a7:25:10:ae:29:25:49:4c:4d:ce:fc:4f:af:25:9b:
         f8:9a:77:2c:29:36:5b:5d:8a:a3:fb:98:09:a8:16:98:99:34:
         00:bb:b7:62:f0:5a:80:a3:f6:4d:8c:d4:f2:75:67:10:5f:43:
         98:2e:27:b0
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICCacwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
RkVBNkJBRjExMC8GA1UEBRMoOTNDMkM5OUFGMEVDNEQxQTQ2NDM0OTdGNUY4Q0JE
QzdFQzQ1NzQ4RjAeFw0yNTEyMjIwMTI5MTlaFw0yNTEyMjQwMTI5MTlaMBgxFjAU
BgNVBAMTDTY5NDg5ZWYwLTZkNjEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCxW1UYZ5sy6bmcrQ6CMYE+ujLQZsd5NA1bqRuWGeZXAs4xvjkbvYw+6cmJ
92esDUIeLgUYCY/mVZ/JViGbLgqHuSdfdOsqjvibv3KjAgyetoMogriS902idyeX
vSzsfEDL1OeX7yCQFhvQ52SB+lqh0mVohbdo7zSkXoC+XLEiK1lPEI9htZDvC936
LPjuDgr6zDm4LHa4T7zK9rM/2ciAXCOl/fUZsUmct8LXnIe7lGw78AqUT49KNjR4
7JNfGSWyJ6gtyDMNK+2aWeiClcAWdnD6iM9+ZM6iseIfDihbpWPEcyt9Yow52OJl
c3uO3tht/5WbIO4W1Pik7B6QYwGRAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQU+yFC
CyZ3G4X0qF0g8mCGB80v9SIwHwYDVR0jBBgwFoAUk8LJmvDsTRpGQ0l/X4y9x+xF
dI8wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkZFQTZCLzdCMjc5MjBFOEI4MjExRTk4ODhCNkY3M0Y4QUVBMjI4L2s4TEpt
dkRzVFJwR1EwbF9YNHk5eC14RmRJOC5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2s4TEptdkRzVFJwR1EwbF9YNHk5eC14RmRJOC5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2RkVBNkIvN0IyNzkyMEU4QjgyMTFFOTg4OEI2RjczRjhB
RUEyMjgvazhMSm12RHNUUnBHUTBsX1g0eTl4LXhGZEk4Lm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAbHC6XF5ugx+8WeZZed4uf1Hw4HByU
6bmNf3OaiYf/3mEPEBXOSteskQL2UL2QVnfLPOlXnt26IAaQELqWjJJcJhDTdiMZ
euo3P0Oyn8ExbD0SZVEpuwGSAzYY9sNkhPVOn4Qfedbwu5hP3C99zdWcFQ12l3kG
0dvVcl3bf1Ait3bpTTftYqngFgzIuhNXqzltIYIUvAwkegqOLX/1sojTF4ifCm+p
kVEPQqlQpDNqNh+kcYYus06RoqTiqmnuG864N53FA+dKU6OnJRCuKSVJTE3O/E+v
JZv4mncsKTZbXYqj+5gJqBaYmTQAu7di8FqAo/ZNjNTydWcQX0OYLiew
-----END CERTIFICATE-----
Generated at Mon Dec 22 14:30:43 2025 by rpki-client