This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3628DDE/BF78233A369E11E9A7D5E220F8AEA228/QrWM7qosEujy3JjWRMIM-BzhzgU.mft
File:                     QrWM7qosEujy3JjWRMIM-BzhzgU.mft (raw, json)
Hash identifier:          k3fGvB8YbVM3u4kDBG/kkbAc9V8qK5GjXFD9K+zSvOA=
Subject key identifier:   B8:2F:A8:44:5E:42:9C:33:D2:15:44:DF:8B:E4:C4:D3:DF:15:AA:A4
Authority key identifier: 42:B5:8C:EE:AA:2C:12:E8:F2:DC:98:D6:44:C2:0C:F8:1C:E1:CE:05
Certificate issuer:       /CN=F3628DDEAF/serialNumber=42B58CEEAA2C12E8F2DC98D644C20CF81CE1CE05
Certificate serial:       0A04
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/QrWM7qosEujy3JjWRMIM-BzhzgU.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3628DDE/BF78233A369E11E9A7D5E220F8AEA228/QrWM7qosEujy3JjWRMIM-BzhzgU.mft
Manifest number:          0A00
Signing time:             Fri 19 Dec 2025 01:18:22 +0000
Manifest this update:     Fri 19 Dec 2025 01:18:21 +0000
Manifest next update:     Sun 21 Dec 2025 01:18:21 +0000
Files and hashes:         1: QrWM7qosEujy3JjWRMIM-BzhzgU.crl (hash: k54qg0BqHQ+PzsQK5+LhOiw6yZZbHI/iy0EMJQUsDxY=)
                          2: 1119CD76DFD311EB88361B37F8AEA228.roa (hash: 4I2Xxy2pBMpErR6JgtR0kZIJe7vFEf1qAmaSQyw+k7I=)
                          3: F539AC2ADFD211EBB0D1FD36F8AEA228.roa (hash: eXFh4emIQs516bgW52azXjxVc2VVoIN8dsu/3Z+Sdok=)
                          4: EE5F2E50369E11E98EDB1621F8AEA228.roa (hash: weMqKqZKyHm0tyqjfHAxnqGFkomIgwidKnm2Dpx5xnA=)
                          5: 14DA972C369F11E9A85A3C21F8AEA228.roa (hash: rRgU+4tFqjCwv3sj5zK6L+vCSIEp2/0zfXQO2ATh2MM=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3628DDE/BF78233A369E11E9A7D5E220F8AEA228/QrWM7qosEujy3JjWRMIM-BzhzgU.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3628DDE/BF78233A369E11E9A7D5E220F8AEA228/QrWM7qosEujy3JjWRMIM-BzhzgU.mft
                          rsync://rpki.afrinic.net/repository/afrinic/QrWM7qosEujy3JjWRMIM-BzhzgU.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 21 Dec 2025 00:06:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2564 (0xa04)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3628DDEAF, serialNumber=42B58CEEAA2C12E8F2DC98D644C20CF81CE1CE05
        Validity
            Not Before: Dec 19 01:18:21 2025 GMT
            Not After : Dec 21 01:18:21 2025 GMT
        Subject: CN=6944a7de-0ed8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:cf:14:b9:31:0a:32:3a:80:ee:77:aa:0f:d4:
                    3a:52:6b:ec:1e:fa:36:d8:d1:d6:2c:9e:2c:d4:f6:
                    21:54:91:2f:31:4b:8d:e4:27:cc:79:38:01:b0:14:
                    8f:11:51:e9:72:18:40:e2:83:ba:a2:de:1a:cf:57:
                    e1:71:57:91:e7:79:7c:d4:94:83:07:99:d2:ee:19:
                    15:8b:cb:50:af:f9:08:ec:fb:32:ea:b5:02:c6:31:
                    42:e9:aa:7e:e2:7f:bb:1e:5c:42:64:ed:df:75:7f:
                    a5:28:14:08:f8:cc:75:d3:49:61:8f:ab:bf:e6:8a:
                    74:5c:c4:a5:c8:21:aa:66:21:b8:21:95:79:8a:17:
                    31:06:ac:87:ee:18:6d:46:d6:6f:ea:54:d4:c7:dd:
                    14:e8:c3:4d:23:1d:81:92:3c:b3:8f:e8:e5:e1:bd:
                    db:9c:3a:00:d9:8a:5d:62:e6:b0:ec:e7:0f:41:73:
                    26:2b:1d:53:40:e7:62:c1:75:d7:a6:b0:e1:7c:c1:
                    86:7f:c4:84:76:b8:c2:e6:52:8d:33:01:08:3f:7b:
                    ec:7a:d4:99:d9:75:64:05:ff:35:64:7a:af:de:e1:
                    8f:24:3c:a5:4a:63:5d:89:43:03:1b:1a:08:49:d3:
                    3c:37:06:ad:e9:be:05:38:23:70:84:58:c0:f0:d8:
                    b1:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:2F:A8:44:5E:42:9C:33:D2:15:44:DF:8B:E4:C4:D3:DF:15:AA:A4
            X509v3 Authority Key Identifier:
                keyid:42:B5:8C:EE:AA:2C:12:E8:F2:DC:98:D6:44:C2:0C:F8:1C:E1:CE:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3628DDE/BF78233A369E11E9A7D5E220F8AEA228/QrWM7qosEujy3JjWRMIM-BzhzgU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/QrWM7qosEujy3JjWRMIM-BzhzgU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3628DDE/BF78233A369E11E9A7D5E220F8AEA228/QrWM7qosEujy3JjWRMIM-BzhzgU.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:11:ca:0d:58:72:aa:75:fb:a4:5e:34:8f:e8:ed:c6:c1:db:
         43:20:43:5e:53:48:fc:22:66:5c:15:92:e1:03:50:19:14:f8:
         8f:a1:31:b5:03:d3:92:11:bf:13:f6:cc:80:e0:66:fb:c8:20:
         41:aa:ce:ba:88:e6:bc:24:16:4c:c8:66:af:6b:2d:b6:98:82:
         51:ba:09:61:45:61:ce:9d:23:e7:f2:92:51:24:36:32:29:22:
         95:2a:c1:9c:6c:c1:0b:e2:9e:dc:9f:fc:60:5d:fc:a1:d6:49:
         d6:6a:13:6b:4a:0a:45:90:74:da:39:0c:ca:8f:18:8b:b7:0b:
         86:67:ea:de:65:3e:4e:58:4a:71:c6:c8:3e:48:44:f8:f2:28:
         c3:ed:0e:f9:ac:b2:93:d2:8f:12:2e:8f:b2:0d:53:ff:67:3d:
         b6:6a:7f:09:68:dd:e9:53:d1:da:a1:ff:bb:f6:08:60:d0:24:
         fd:75:b2:b0:15:13:10:78:f3:44:56:65:04:a5:20:b7:ef:98:
         fc:92:e1:5c:40:f1:f4:35:1b:95:3f:af:ed:67:bf:a2:5b:5a:
         27:65:f7:3d:63:ed:4e:7c:4f:3f:30:72:c6:bf:c6:a8:9e:59:
         ec:c5:b6:54:d1:51:3f:e3:69:b9:73:ec:32:73:3d:af:33:0d:
         a0:f4:c3:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 14:51:01 2025 by rpki-client