This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367FECC/449EE63EEA3E11EB941D9B39D8A014CE/1QtxHNd881kYPT_e5YqZVLbPdwg.mft
File:                     1QtxHNd881kYPT_e5YqZVLbPdwg.mft (raw, json)
Hash identifier:          eT0SoTPe5S/4axP5JUy/SV8fNxNk0RomvDJk3czFRtc=
Subject key identifier:   8C:5E:5F:B4:F8:50:1E:A6:A2:BF:3B:6E:AA:37:BC:D1:7E:03:BB:8E
Authority key identifier: D5:0B:71:1C:D7:7C:F3:59:18:3D:3F:DE:E5:8A:99:54:B6:CF:77:08
Certificate issuer:       /CN=F367FECCAF/serialNumber=D50B711CD77CF359183D3FDEE58A9954B6CF7708
Certificate serial:       0672
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/1QtxHNd881kYPT_e5YqZVLbPdwg.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F367FECC/449EE63EEA3E11EB941D9B39D8A014CE/1QtxHNd881kYPT_e5YqZVLbPdwg.mft
Manifest number:          0670
Signing time:             Tue 09 Dec 2025 02:17:12 +0000
Manifest this update:     Tue 09 Dec 2025 02:17:11 +0000
Manifest next update:     Thu 11 Dec 2025 02:17:11 +0000
Files and hashes:         1: 1QtxHNd881kYPT_e5YqZVLbPdwg.crl (hash: q3bszPjADCpyg2+2BRZPdAI/HbkL0wqPwWDhe1Hmnj0=)
                          2: B690F15AEA3F11EB95F0A53BD8A014CE.roa (hash: zcL/xyLFW6ScnLFhDbmKjK12jh4EIgZ+FnDPZ3ww0Pc=)
                          3: EF13939EEA3E11EBAF73813AD8A014CE.roa (hash: 8Po3zyxjlwyh9BwwxrkrQw/Ky3Lp6GZyHJxMXtGCOnQ=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F367FECC/449EE63EEA3E11EB941D9B39D8A014CE/1QtxHNd881kYPT_e5YqZVLbPdwg.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F367FECC/449EE63EEA3E11EB941D9B39D8A014CE/1QtxHNd881kYPT_e5YqZVLbPdwg.mft
                          rsync://rpki.afrinic.net/repository/afrinic/1QtxHNd881kYPT_e5YqZVLbPdwg.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 11 Dec 2025 02:17:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1650 (0x672)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F367FECCAF, serialNumber=D50B711CD77CF359183D3FDEE58A9954B6CF7708
        Validity
            Not Before: Dec  9 02:17:11 2025 GMT
            Not After : Dec 11 02:17:11 2025 GMT
        Subject: CN=693786a7-cf1c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:35:99:68:bc:c7:4c:a0:2c:d5:c6:9d:e8:2c:
                    c2:a8:12:24:c0:c7:5c:4e:ed:a0:9a:36:09:da:f6:
                    da:70:b9:89:e1:0b:0f:80:ef:50:36:74:94:ab:2f:
                    fc:ad:92:69:4e:6c:49:f3:88:9e:b8:a4:7c:7b:ab:
                    54:dc:81:b3:d2:cc:4e:83:cb:ca:81:b6:c0:de:b4:
                    24:e4:1c:66:da:86:07:7e:b1:c3:a1:8d:b5:14:3b:
                    57:ef:ee:0b:3f:85:05:e4:3c:e4:79:20:40:a1:37:
                    ae:1d:ad:e4:4f:d4:07:bd:5d:25:88:97:e1:e5:9a:
                    ef:71:a6:f8:43:5d:a4:7b:d6:4c:31:04:54:68:c3:
                    a8:0d:19:dd:00:b8:9b:fa:da:5e:18:c9:66:fc:36:
                    83:3c:5e:f4:39:4c:c6:e5:f7:85:15:de:95:11:7c:
                    f9:c9:10:e8:ec:12:c5:a3:3d:3a:a4:c3:4b:f0:27:
                    6e:17:eb:e1:40:17:ab:c9:be:5e:c1:90:05:80:83:
                    c3:62:47:32:ab:7d:02:13:88:49:21:70:59:37:f2:
                    d9:cf:27:12:53:e1:a0:ba:88:cf:ef:20:1d:bb:80:
                    49:af:74:cf:49:a9:bf:14:d9:67:01:dc:54:af:96:
                    d3:78:1b:0d:3a:5d:eb:fe:14:7c:59:30:f6:c4:7b:
                    d4:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:5E:5F:B4:F8:50:1E:A6:A2:BF:3B:6E:AA:37:BC:D1:7E:03:BB:8E
            X509v3 Authority Key Identifier:
                keyid:D5:0B:71:1C:D7:7C:F3:59:18:3D:3F:DE:E5:8A:99:54:B6:CF:77:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F367FECC/449EE63EEA3E11EB941D9B39D8A014CE/1QtxHNd881kYPT_e5YqZVLbPdwg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/1QtxHNd881kYPT_e5YqZVLbPdwg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367FECC/449EE63EEA3E11EB941D9B39D8A014CE/1QtxHNd881kYPT_e5YqZVLbPdwg.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:6f:e4:bf:9a:4c:5d:1c:9a:35:a8:98:26:3a:8d:4c:6c:ed:
         e6:a2:c9:da:87:06:09:17:68:7c:45:42:8e:f7:02:20:24:5e:
         0d:a6:d6:ad:c7:fb:61:c6:40:5d:6d:e3:a7:3a:9c:db:ff:6f:
         92:3c:09:65:01:40:39:84:c3:02:55:c0:f3:89:36:22:be:f3:
         30:ea:4a:16:4e:e7:27:b6:b5:18:87:ee:b9:55:36:e3:68:ad:
         de:eb:e9:b4:65:d0:17:d4:89:40:da:15:b2:b6:c6:03:4b:8c:
         80:6d:b7:56:c1:64:08:46:4c:81:78:d5:50:0e:7d:68:a0:89:
         06:b1:e5:f0:bf:d1:3f:37:88:68:05:53:d6:23:d8:91:81:fe:
         0f:00:18:07:86:68:78:93:aa:68:2a:7d:9a:f7:91:37:c8:b3:
         5f:70:48:1e:c6:49:f6:72:f4:02:5a:c4:40:23:7c:71:b8:51:
         4c:d1:2d:47:c2:86:53:84:cb:b2:ed:bd:a8:20:64:53:ad:27:
         96:f3:a3:07:2c:5c:b9:75:ad:50:a8:9e:ef:64:aa:1d:6b:95:
         b6:da:41:9d:e2:e4:4d:3f:65:13:76:28:c7:e8:41:fe:fe:97:
         6e:74:9a:19:e5:0a:51:aa:c9:5e:3d:65:ba:ba:ff:5b:12:13:
         be:88:c1:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 9 12:22:02 2025 by rpki-client