This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368312F/0BC79D2EB77611F0877ABAE9DAE4EC9C/PQ4DaEavbVRHjAyBh8jXIjOqwco.mft
File:                     PQ4DaEavbVRHjAyBh8jXIjOqwco.mft (raw, json)
Hash identifier:          11Iag+UYlA979WlzC2whaf50hf9kivJ2QGYA3nCdIVw=
Subject key identifier:   C4:63:51:21:73:E3:46:00:F3:48:E4:A5:25:BD:C5:5B:AD:A9:87:72
Authority key identifier: 3D:0E:03:68:46:AF:6D:54:47:8C:0C:81:87:C8:D7:22:33:AA:C1:CA
Certificate issuer:       /CN=F368312FAF/serialNumber=3D0E036846AF6D54478C0C8187C8D72233AAC1CA
Certificate serial:       2D
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/PQ4DaEavbVRHjAyBh8jXIjOqwco.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368312F/0BC79D2EB77611F0877ABAE9DAE4EC9C/PQ4DaEavbVRHjAyBh8jXIjOqwco.mft
Manifest number:          2B
Signing time:             Tue 09 Dec 2025 05:18:12 +0000
Manifest this update:     Tue 09 Dec 2025 05:18:11 +0000
Manifest next update:     Thu 11 Dec 2025 05:18:11 +0000
Files and hashes:         1: PQ4DaEavbVRHjAyBh8jXIjOqwco.crl (hash: NlIUaJ5BpQEfodz3LRc2gaJmuOgcDWzXc+rAToAULhU=)
                          2: 5ADD0CAEB77711F0B31C3CF2DAE4EC9C.roa (hash: XcjIzmFNzJT5kTJblhnVUYbZcRGqo4ZoGY70idy8eA8=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368312F/0BC79D2EB77611F0877ABAE9DAE4EC9C/PQ4DaEavbVRHjAyBh8jXIjOqwco.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368312F/0BC79D2EB77611F0877ABAE9DAE4EC9C/PQ4DaEavbVRHjAyBh8jXIjOqwco.mft
                          rsync://rpki.afrinic.net/repository/afrinic/PQ4DaEavbVRHjAyBh8jXIjOqwco.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 11 Dec 2025 05:18:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 45 (0x2d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368312FAF, serialNumber=3D0E036846AF6D54478C0C8187C8D72233AAC1CA
        Validity
            Not Before: Dec  9 05:18:11 2025 GMT
            Not After : Dec 11 05:18:11 2025 GMT
        Subject: CN=6937b114-9d16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:a5:80:af:37:6c:b4:c5:ba:d9:08:e8:7d:04:
                    95:23:21:3b:0e:75:df:6d:14:a9:35:7c:3f:74:89:
                    58:e4:f1:98:f0:f5:5f:2a:26:62:14:a4:6f:58:66:
                    6d:0e:ac:37:cb:f1:dc:ae:88:9a:a8:ff:e9:07:7f:
                    46:8c:a3:34:ff:6b:8a:a6:84:ff:d8:31:c1:a3:3a:
                    86:90:6e:e3:1b:22:87:5d:ef:3a:35:4b:d6:ff:6e:
                    20:35:95:c1:e8:8f:b2:99:d6:df:f3:2c:fd:7d:b1:
                    56:0c:f0:0e:57:02:f9:98:ca:28:02:c1:c2:36:c0:
                    43:df:ca:4d:b3:9a:e2:ed:58:1b:67:17:36:b4:45:
                    d0:eb:9e:5b:83:30:ac:82:b5:af:4b:00:71:01:76:
                    17:52:a4:66:34:ba:47:8a:9d:e7:2d:60:44:ef:73:
                    e4:73:df:74:5a:c0:85:3c:c6:d7:c1:38:46:da:23:
                    fe:48:60:7d:c5:5e:8a:91:34:1b:63:60:39:97:a0:
                    9a:bf:45:22:ab:21:0b:68:90:e3:56:6f:48:1d:45:
                    b4:ce:3c:a8:6d:89:d3:5a:8f:05:90:5b:f1:ce:34:
                    bd:4e:3e:ca:ad:7a:79:5e:43:93:04:c0:4f:4b:10:
                    f5:46:b9:e0:45:a8:c1:4a:d9:f0:c1:84:f0:4d:86:
                    bd:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:63:51:21:73:E3:46:00:F3:48:E4:A5:25:BD:C5:5B:AD:A9:87:72
            X509v3 Authority Key Identifier:
                keyid:3D:0E:03:68:46:AF:6D:54:47:8C:0C:81:87:C8:D7:22:33:AA:C1:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368312F/0BC79D2EB77611F0877ABAE9DAE4EC9C/PQ4DaEavbVRHjAyBh8jXIjOqwco.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/PQ4DaEavbVRHjAyBh8jXIjOqwco.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368312F/0BC79D2EB77611F0877ABAE9DAE4EC9C/PQ4DaEavbVRHjAyBh8jXIjOqwco.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:5c:26:03:35:8e:d2:a7:91:fe:f3:f7:1b:b4:a4:e9:f1:cc:
         5e:9f:b6:95:63:d8:78:8c:df:a6:b2:2b:e8:9d:56:57:5e:22:
         be:3a:33:d2:a7:68:ac:66:5f:ed:ba:78:2b:99:4e:0c:4d:74:
         04:a1:29:c1:b2:63:46:7f:01:57:d4:b6:a0:dc:45:08:c0:e7:
         64:63:de:d7:bb:a3:ef:4e:f3:70:60:86:c5:41:f4:3e:64:c7:
         2f:01:c7:43:6d:84:07:79:4c:e3:a1:25:60:bd:98:2b:77:3c:
         a8:ad:6d:a7:b1:a8:a2:e3:39:26:44:ba:78:7e:9c:3e:22:f5:
         86:b5:d4:5c:6c:eb:c1:bd:4a:48:4f:6d:66:96:48:b2:c6:5b:
         2f:d2:53:77:eb:bf:e1:e9:ff:b5:6b:fd:73:45:1f:3e:ab:51:
         15:d9:cc:47:ca:39:06:49:33:58:02:ce:40:a7:a6:1e:e6:d2:
         da:5a:69:51:1d:8b:58:90:b6:59:51:82:71:54:8e:23:08:a5:
         1f:ae:8c:35:53:42:f4:73:0a:9f:2a:b3:44:23:f5:9e:99:ce:
         fd:0a:a5:01:ed:17:47:7e:ca:7b:69:fd:6c:b5:1e:33:0c:87:
         58:c6:4d:a6:00:8e:6f:92:a3:81:e7:f3:49:98:01:f8:b1:00:
         aa:af:53:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 9 12:03:17 2025 by rpki-client