This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A2CA0/DFAEDC70AC9F11EA8B649748F8AEA228/qTyToDhGqGjBZRyD_VmonbSAVE4.mft
File:                     qTyToDhGqGjBZRyD_VmonbSAVE4.mft (raw, json)
Hash identifier:          1FMUTBZ9X9uR9wEsXX0lwM1RGHLiwHjtpqSeipQMHZk=
Subject key identifier:   81:CE:5D:ED:E3:33:F6:08:E3:69:51:58:7A:BB:73:DB:43:0C:25:12
Authority key identifier: A9:3C:93:A0:38:46:A8:68:C1:65:1C:83:FD:59:A8:9D:B4:80:54:4E
Certificate issuer:       /CN=F36A2CA0AF/serialNumber=A93C93A03846A868C1651C83FD59A89DB480544E
Certificate serial:       081A
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/qTyToDhGqGjBZRyD_VmonbSAVE4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A2CA0/DFAEDC70AC9F11EA8B649748F8AEA228/qTyToDhGqGjBZRyD_VmonbSAVE4.mft
Manifest number:          0816
Signing time:             Fri 19 Dec 2025 01:51:47 +0000
Manifest this update:     Fri 19 Dec 2025 01:51:46 +0000
Manifest next update:     Sun 21 Dec 2025 01:51:46 +0000
Files and hashes:         1: qTyToDhGqGjBZRyD_VmonbSAVE4.crl (hash: CfozQVIecYHqREDZVSQgwG1hQ4uyJiy2taGxRrgSeS8=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A2CA0/DFAEDC70AC9F11EA8B649748F8AEA228/qTyToDhGqGjBZRyD_VmonbSAVE4.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A2CA0/DFAEDC70AC9F11EA8B649748F8AEA228/qTyToDhGqGjBZRyD_VmonbSAVE4.mft
                          rsync://rpki.afrinic.net/repository/afrinic/qTyToDhGqGjBZRyD_VmonbSAVE4.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 21 Dec 2025 00:06:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2074 (0x81a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A2CA0AF, serialNumber=A93C93A03846A868C1651C83FD59A89DB480544E
        Validity
            Not Before: Dec 19 01:51:46 2025 GMT
            Not After : Dec 21 01:51:46 2025 GMT
        Subject: CN=6944afb3-d6bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:58:63:ce:f1:1e:15:a1:5d:71:25:e6:46:d9:
                    a9:0a:0b:dc:24:40:ca:69:3b:94:e4:2b:b7:07:aa:
                    2a:13:50:72:c4:ce:66:c7:c2:87:89:2a:84:75:d2:
                    23:fe:8c:6e:38:0a:ca:fd:e9:24:dd:24:b4:7a:d0:
                    be:d7:6d:73:ae:5a:8f:ee:d8:cc:ba:6f:79:7c:a9:
                    cb:ab:48:63:d5:94:58:13:e6:47:02:e2:c8:6e:2f:
                    a7:05:07:04:9c:9e:40:81:28:6b:5a:b9:32:81:96:
                    c6:3f:26:0a:3f:df:b4:f4:a1:87:04:37:a6:90:f5:
                    24:0b:5a:bd:a7:50:a1:6e:79:3e:85:fd:0c:c3:f7:
                    7c:5c:09:b7:c4:cb:33:7d:3d:a1:a5:55:57:21:71:
                    65:90:58:c6:57:9e:e3:0e:ef:b3:1f:38:ac:da:1c:
                    f3:db:3e:6d:d0:f3:35:67:24:9e:69:67:47:8a:e9:
                    bc:2d:d2:c1:00:e0:6e:93:2f:9a:71:fb:13:f4:08:
                    eb:6d:c6:0d:6d:aa:8d:a1:50:7f:a7:b5:b0:05:79:
                    04:95:43:60:b3:35:94:8b:bb:17:eb:b5:6d:84:a3:
                    21:f4:b9:ba:24:3d:98:af:9d:8d:c7:1b:c2:ee:31:
                    3c:a0:5f:8a:2e:4a:e4:8d:fe:e9:86:a4:5f:6c:3b:
                    88:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:CE:5D:ED:E3:33:F6:08:E3:69:51:58:7A:BB:73:DB:43:0C:25:12
            X509v3 Authority Key Identifier:
                keyid:A9:3C:93:A0:38:46:A8:68:C1:65:1C:83:FD:59:A8:9D:B4:80:54:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A2CA0/DFAEDC70AC9F11EA8B649748F8AEA228/qTyToDhGqGjBZRyD_VmonbSAVE4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/qTyToDhGqGjBZRyD_VmonbSAVE4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A2CA0/DFAEDC70AC9F11EA8B649748F8AEA228/qTyToDhGqGjBZRyD_VmonbSAVE4.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:44:0b:c9:91:c4:fb:20:bc:bf:49:3c:79:92:78:30:e6:ba:
         d9:be:b1:3d:d0:ea:83:65:c5:ed:c3:65:c9:45:1c:d1:79:e8:
         3a:00:06:71:cc:0d:25:8b:2e:c9:90:5d:4b:72:b2:c0:1b:4c:
         b8:38:7d:38:5a:a0:51:91:62:d1:01:1f:32:a9:2b:c1:7e:21:
         68:02:10:2a:d2:1b:5d:41:1c:c3:d9:57:0d:85:73:9e:02:37:
         e2:59:da:1b:4b:c7:89:b3:68:a1:62:5f:58:e3:bf:c1:ac:e8:
         2b:be:9d:56:86:95:32:6c:d7:8d:bb:03:35:30:1c:d9:0a:ee:
         7d:87:f9:72:b3:95:9d:7a:74:b9:78:16:48:44:c7:17:79:af:
         07:db:f0:36:69:8a:62:dc:32:b0:15:3a:56:c6:3a:a2:b6:31:
         2a:a1:a4:09:3e:98:bb:5f:f7:9a:b9:f6:48:46:a2:6c:92:80:
         67:39:1d:9b:30:a9:7c:02:1a:e4:3d:41:60:cb:36:e7:21:c0:
         22:05:3a:33:cc:51:2d:72:65:bf:49:dc:32:2f:90:23:d0:12:
         a4:33:55:99:71:00:7d:be:8d:8b:84:f8:00:f7:39:26:7b:41:
         d7:42:4a:e3:75:74:b1:46:c5:75:63:ad:34:b9:c8:b3:83:91:
         90:19:63:eb
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICCBowDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QTJDQTBBRjExMC8GA1UEBRMoQTkzQzkzQTAzODQ2QTg2OEMxNjUxQzgzRkQ1OUE4
OURCNDgwNTQ0RTAeFw0yNTEyMTkwMTUxNDZaFw0yNTEyMjEwMTUxNDZaMBgxFjAU
BgNVBAMTDTY5NDRhZmIzLWQ2YmMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC4WGPO8R4VoV1xJeZG2akKC9wkQMppO5TkK7cHqioTUHLEzmbHwoeJKoR1
0iP+jG44Csr96STdJLR60L7XbXOuWo/u2My6b3l8qcurSGPVlFgT5kcC4shuL6cF
BwScnkCBKGtauTKBlsY/Jgo/37T0oYcEN6aQ9SQLWr2nUKFueT6F/QzD93xcCbfE
yzN9PaGlVVchcWWQWMZXnuMO77MfOKzaHPPbPm3Q8zVnJJ5pZ0eK6bwt0sEA4G6T
L5px+xP0COttxg1tqo2hUH+ntbAFeQSVQ2CzNZSLuxfrtW2EoyH0ubokPZivnY3H
G8LuMTygX4ouSuSN/umGpF9sO4hHAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUgc5d
7eMz9gjjaVFYertz20MMJRIwHwYDVR0jBBgwFoAUqTyToDhGqGjBZRyD/VmonbSA
VE4wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkEyQ0EwL0RGQUVEQzcwQUM5RjExRUE4QjY0OTc0OEY4QUVBMjI4L3FUeVRv
RGhHcUdqQlpSeURfVm1vbmJTQVZFNC5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL3FUeVRvRGhHcUdqQlpSeURfVm1vbmJTQVZFNC5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2QTJDQTAvREZBRURDNzBBQzlGMTFFQThCNjQ5NzQ4RjhB
RUEyMjgvcVR5VG9EaEdxR2pCWlJ5RF9WbW9uYlNBVkU0Lm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAzRAvJkcT7ILy/STx5kngw5rrZvrE9
0OqDZcXtw2XJRRzReeg6AAZxzA0liy7JkF1LcrLAG0y4OH04WqBRkWLRAR8yqSvB
fiFoAhAq0htdQRzD2VcNhXOeAjfiWdobS8eJs2ihYl9Y47/BrOgrvp1WhpUybNeN
uwM1MBzZCu59h/lys5WdenS5eBZIRMcXea8H2/A2aYpi3DKwFTpWxjqitjEqoaQJ
Ppi7X/eaufZIRqJskoBnOR2bMKl8AhrkPUFgyzbnIcAiBTozzFEtcmW/SdwyL5Aj
0BKkM1WZcQB9vo2LhPgA9zkme0HXQkrjdXSxRsV1Y600ucizg5GQGWPr
-----END CERTIFICATE-----
Generated at Fri Dec 19 04:56:06 2025 by rpki-client