This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F364FE7F/8CEFCC7490B811EDBCC9A5ECF1222468/QQJpBJisN4v_7-4nvGlfkaEjv0M.mft
File:                     QQJpBJisN4v_7-4nvGlfkaEjv0M.mft (raw, json)
Hash identifier:          9MNmc/hlL/BBhHi14hsa1UkaNUMhyY57/t0VIMQNjzo=
Subject key identifier:   6C:74:8C:1F:D2:60:B6:ED:08:D9:0D:2A:FA:33:FC:D6:11:78:83:BC
Authority key identifier: 41:02:69:04:98:AC:37:8B:FF:EF:EE:27:BC:69:5F:91:A1:23:BF:43
Certificate issuer:       /CN=F364FE7FAF/serialNumber=4102690498AC378BFFEFEE27BC695F91A123BF43
Certificate serial:       0453
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/QQJpBJisN4v_7-4nvGlfkaEjv0M.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F364FE7F/8CEFCC7490B811EDBCC9A5ECF1222468/QQJpBJisN4v_7-4nvGlfkaEjv0M.mft
Manifest number:          044E
Signing time:             Thu 04 Dec 2025 03:11:04 +0000
Manifest this update:     Thu 04 Dec 2025 03:11:03 +0000
Manifest next update:     Sat 06 Dec 2025 03:11:03 +0000
Files and hashes:         1: QQJpBJisN4v_7-4nvGlfkaEjv0M.crl (hash: tOLGpl3bcq+PAu4pW08+uFY0+wOI2jFjbYhNsjbXE7Q=)
                          2: 9093EBECEA8211EE9446CC99775412E6.roa (hash: DcDH5wFQnVUfU26v4luxsXa3eW9biUwnVqKcce51e3I=)
                          3: 87CF258C2DA511F09658F3D7DAE4EC9C.roa (hash: VWlaDjgTjpyuACktZVZWNtbFZ4HkyIqtY/A3o1MKtyU=)
                          4: E5FD19E037C111F08C089ADBDAE4EC9C.roa (hash: WSTUjBXRVuiAIXxXadMdKCjmnxqyjMHAgKMrm2ZTNkA=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F364FE7F/8CEFCC7490B811EDBCC9A5ECF1222468/QQJpBJisN4v_7-4nvGlfkaEjv0M.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F364FE7F/8CEFCC7490B811EDBCC9A5ECF1222468/QQJpBJisN4v_7-4nvGlfkaEjv0M.mft
                          rsync://rpki.afrinic.net/repository/afrinic/QQJpBJisN4v_7-4nvGlfkaEjv0M.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 06 Dec 2025 03:11:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1107 (0x453)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F364FE7FAF, serialNumber=4102690498AC378BFFEFEE27BC695F91A123BF43
        Validity
            Not Before: Dec  4 03:11:03 2025 GMT
            Not After : Dec  6 03:11:03 2025 GMT
        Subject: CN=6930fbc7-9e3d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:e2:8b:12:28:09:73:7f:ab:ef:44:ac:04:e9:
                    90:6e:6a:6b:a9:65:15:f8:1b:25:0f:1b:fc:80:ef:
                    fd:db:a1:97:ad:44:05:db:7b:95:13:7b:af:46:07:
                    bb:51:cc:c9:91:cb:8c:ce:25:52:a1:6e:d0:03:e7:
                    4a:6c:bf:7c:dd:32:87:98:27:dc:74:33:3d:c6:00:
                    99:e1:3d:cb:d3:5a:aa:35:e9:7f:0e:ba:48:a7:eb:
                    e6:02:d4:2d:51:a0:24:ce:3c:9a:a2:48:b1:2a:ae:
                    44:5f:cb:b6:00:e6:02:3d:c9:31:6c:01:2f:e1:68:
                    4e:40:af:8a:14:ab:39:15:ba:f4:6a:92:28:c1:03:
                    15:77:12:df:2f:10:c3:b0:d8:c4:25:bc:b6:9b:aa:
                    a3:81:4d:60:6b:d8:f2:8d:2b:3e:13:12:65:38:74:
                    6e:92:6a:2a:f0:d1:99:77:38:72:82:33:20:71:82:
                    00:0b:80:cf:75:b9:13:6e:03:c1:30:73:fd:0a:c4:
                    ce:30:ae:40:02:5c:72:2d:26:8c:3d:41:0e:3a:32:
                    d3:b8:2d:de:84:6b:4a:10:8b:78:be:f5:a8:79:14:
                    dc:e5:3f:18:3c:cd:3e:02:c2:f8:6f:1f:2e:35:0b:
                    37:28:aa:ef:79:bc:a7:c5:17:2d:b2:92:25:08:de:
                    99:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:74:8C:1F:D2:60:B6:ED:08:D9:0D:2A:FA:33:FC:D6:11:78:83:BC
            X509v3 Authority Key Identifier:
                keyid:41:02:69:04:98:AC:37:8B:FF:EF:EE:27:BC:69:5F:91:A1:23:BF:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F364FE7F/8CEFCC7490B811EDBCC9A5ECF1222468/QQJpBJisN4v_7-4nvGlfkaEjv0M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/QQJpBJisN4v_7-4nvGlfkaEjv0M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F364FE7F/8CEFCC7490B811EDBCC9A5ECF1222468/QQJpBJisN4v_7-4nvGlfkaEjv0M.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:39:da:cb:76:3c:cb:61:6b:b2:8b:59:7c:95:2d:6e:e4:31:
         46:4e:7d:ad:db:04:c3:f7:30:aa:3a:8a:97:50:9a:05:91:5f:
         74:7d:c8:75:de:34:3b:b8:15:b3:ea:6d:45:1c:49:86:2d:7e:
         d9:47:f9:e2:62:c5:46:30:bf:e2:b4:5c:e7:98:2a:82:5b:0e:
         eb:52:d9:0b:18:48:9f:81:be:2c:16:a9:51:81:d6:f1:2a:48:
         66:79:cb:4f:44:85:14:a5:a7:20:a5:a8:0a:9d:5f:bb:e2:f3:
         20:3e:9d:17:49:57:aa:60:58:8b:98:2b:b9:c2:f0:f6:07:fc:
         c8:d0:5d:01:2a:c0:c1:e4:5d:1e:cc:8a:43:5a:79:43:19:75:
         b4:9a:b5:a1:10:58:eb:b6:c6:45:7b:06:fd:07:d5:54:52:6f:
         ae:d9:78:52:16:d2:94:4c:aa:63:62:a8:1a:81:ae:c3:a0:0c:
         15:3e:b4:23:b5:fb:45:64:4b:00:5a:a5:6d:2d:8b:06:ac:9d:
         82:7f:ed:11:dc:2b:0c:b1:74:fe:3e:cc:5e:36:70:3c:d5:fc:
         53:79:93:3f:4f:25:d5:1c:88:9d:31:fc:ed:f9:11:c1:13:40:
         06:e3:96:15:7e:9f:f3:d8:f3:6b:01:01:b7:5f:53:07:dc:96:
         e6:ae:04:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 5 02:29:12 2025 by rpki-client