This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A854F/5E87C042B73411EDA8D4CCA4F1222468/i-QDW-vJyDQotaJ76Fuslm125cs.mft
File:                     i-QDW-vJyDQotaJ76Fuslm125cs.mft (raw, json)
Hash identifier:          MjFKV19rs1S5MeuG8yu3AxOGpnBbpirHR7XZ0fmp8cQ=
Subject key identifier:   4A:9E:1B:2E:52:DB:BD:EB:21:03:E0:EC:D2:10:46:B2:39:26:01:B3
Authority key identifier: 8B:E4:03:5B:EB:C9:C8:34:28:B5:A2:7B:E8:5B:AC:96:6D:76:E5:CB
Certificate issuer:       /CN=F36A854FAF/serialNumber=8BE4035BEBC9C83428B5A27BE85BAC966D76E5CB
Certificate serial:       0425
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/i-QDW-vJyDQotaJ76Fuslm125cs.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A854F/5E87C042B73411EDA8D4CCA4F1222468/i-QDW-vJyDQotaJ76Fuslm125cs.mft
Manifest number:          041F
Signing time:             Tue 09 Dec 2025 03:17:44 +0000
Manifest this update:     Tue 09 Dec 2025 03:17:43 +0000
Manifest next update:     Thu 11 Dec 2025 03:17:43 +0000
Files and hashes:         1: i-QDW-vJyDQotaJ76Fuslm125cs.crl (hash: eZCABMulEKssDob08pyy9W+CZShtVo7nbW+UsZm6AxU=)
                          2: 557725A0B21511EF88D2448C762E951A.roa (hash: opZztqXESofrVmYo2p5Jk1wm+34HapZU5YnopzpKiHA=)
                          3: 9394FD62B21511EFBC825D8E762E951A.roa (hash: lu1oced98iyT24G4vw7hwl0wpa8JR56UCd+rbr6ylXY=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A854F/5E87C042B73411EDA8D4CCA4F1222468/i-QDW-vJyDQotaJ76Fuslm125cs.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A854F/5E87C042B73411EDA8D4CCA4F1222468/i-QDW-vJyDQotaJ76Fuslm125cs.mft
                          rsync://rpki.afrinic.net/repository/afrinic/i-QDW-vJyDQotaJ76Fuslm125cs.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 11 Dec 2025 03:17:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1061 (0x425)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A854FAF, serialNumber=8BE4035BEBC9C83428B5A27BE85BAC966D76E5CB
        Validity
            Not Before: Dec  9 03:17:43 2025 GMT
            Not After : Dec 11 03:17:43 2025 GMT
        Subject: CN=693794d7-2d49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:80:1a:94:2f:ec:a8:d2:a9:c7:3d:01:74:4a:
                    be:22:3d:96:f1:b5:59:f7:f3:40:5b:19:9a:ed:61:
                    9e:6e:47:8c:fa:2d:b3:c4:8c:12:2a:fc:5f:70:a4:
                    82:e7:23:91:ba:96:46:bf:8c:03:97:17:94:0e:d0:
                    bc:5c:89:38:f1:e8:15:f4:9f:45:fb:9d:bc:4f:19:
                    8f:33:38:84:49:81:01:7c:5e:2b:41:bd:b6:4c:ec:
                    5a:c8:ed:81:c3:86:0b:c8:1b:eb:48:f9:cf:44:59:
                    15:3c:02:62:fb:e7:02:ae:5f:8c:2b:a4:49:89:2e:
                    04:00:c1:28:f8:c1:bf:c5:f8:cb:55:54:13:3b:79:
                    8d:31:c7:d4:54:f7:4f:2f:78:10:07:71:0b:bf:fc:
                    7d:6f:8a:5c:2f:d5:65:9c:97:e1:db:29:49:5a:62:
                    db:84:1e:32:1f:e2:53:03:0d:f8:f9:2c:f5:ce:09:
                    39:81:0b:81:7d:17:5d:01:5f:9b:56:0d:da:5a:1f:
                    79:72:28:75:43:93:97:eb:03:19:b3:e1:28:65:ed:
                    b5:8a:00:d1:25:a9:ca:ff:85:69:20:45:ef:81:2d:
                    4c:68:7c:a2:40:13:38:5e:f2:91:70:65:ef:38:fd:
                    2b:27:f8:0c:c9:26:20:5b:14:84:df:10:10:3c:1b:
                    bb:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:9E:1B:2E:52:DB:BD:EB:21:03:E0:EC:D2:10:46:B2:39:26:01:B3
            X509v3 Authority Key Identifier:
                keyid:8B:E4:03:5B:EB:C9:C8:34:28:B5:A2:7B:E8:5B:AC:96:6D:76:E5:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A854F/5E87C042B73411EDA8D4CCA4F1222468/i-QDW-vJyDQotaJ76Fuslm125cs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/i-QDW-vJyDQotaJ76Fuslm125cs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A854F/5E87C042B73411EDA8D4CCA4F1222468/i-QDW-vJyDQotaJ76Fuslm125cs.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:45:31:31:57:2b:62:63:e1:1a:f4:f3:91:38:10:7f:67:a5:
         44:6d:8b:40:9d:e6:ae:49:3a:1c:bc:43:21:06:ed:32:d8:bc:
         b4:9d:42:2e:8e:77:73:d1:44:5b:79:91:10:b1:c3:ca:8c:bc:
         43:5b:3d:66:81:3b:56:3b:c5:4a:97:a2:59:dd:37:4c:da:61:
         6d:dc:6e:4e:3c:62:c6:d2:f3:be:75:c4:42:fb:76:b3:3d:29:
         8a:cd:62:4d:b4:01:83:cc:7a:1f:a0:29:3e:21:2f:37:d3:9b:
         98:f5:63:69:b3:e4:dc:f2:5d:9a:73:53:da:cb:a6:b6:c2:2c:
         da:10:7f:05:27:fd:82:ea:65:f1:59:06:e1:b6:92:7e:47:65:
         78:06:20:3b:26:38:91:53:8d:f6:46:14:35:1a:21:3b:20:2c:
         59:72:50:0d:cb:5b:1f:94:fe:af:bb:0e:0f:ad:63:de:b0:45:
         18:21:a2:bf:10:bb:db:f4:a5:12:94:4f:53:54:89:ad:40:66:
         d8:16:9a:d1:3a:cc:0e:09:58:28:74:a2:c1:e3:65:a2:a0:0d:
         80:7c:7b:90:be:c0:d9:9f:0a:4b:53:b9:cf:0d:3d:28:a9:8d:
         96:b7:66:33:ec:a7:53:e7:24:25:63:34:4e:d5:a4:00:fd:92:
         7d:0a:72:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 9 12:32:43 2025 by rpki-client