This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D8020/0AF51ABEC39911F0BBCE1889DAE4EC9C/QiUOABGQATIiltvNEo4jCi0GSmM.mft
File:                     QiUOABGQATIiltvNEo4jCi0GSmM.mft (raw, json)
Hash identifier:          BHvmAjyI4V1JGo8f6H/xz7jveVuCGBOQfcBnPgKfYks=
Subject key identifier:   4F:3A:84:F1:94:6A:87:04:C6:42:CA:65:75:CF:CB:16:0A:F1:E3:05
Authority key identifier: 42:25:0E:00:11:90:01:32:22:96:DB:CD:12:8E:23:0A:2D:06:4A:63
Certificate issuer:       /CN=F36D8020AF/serialNumber=42250E00119001322296DBCD128E230A2D064A63
Certificate serial:       18
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/QiUOABGQATIiltvNEo4jCi0GSmM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36D8020/0AF51ABEC39911F0BBCE1889DAE4EC9C/QiUOABGQATIiltvNEo4jCi0GSmM.mft
Manifest number:          18
Signing time:             Tue 09 Dec 2025 05:21:19 +0000
Manifest this update:     Tue 09 Dec 2025 05:21:18 +0000
Manifest next update:     Thu 11 Dec 2025 05:21:18 +0000
Files and hashes:         1: QiUOABGQATIiltvNEo4jCi0GSmM.crl (hash: FSoa6/4oCDj6PaYgLVPfMZryMGb+ezz67jO9k8fTJnk=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36D8020/0AF51ABEC39911F0BBCE1889DAE4EC9C/QiUOABGQATIiltvNEo4jCi0GSmM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36D8020/0AF51ABEC39911F0BBCE1889DAE4EC9C/QiUOABGQATIiltvNEo4jCi0GSmM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/QiUOABGQATIiltvNEo4jCi0GSmM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 11 Dec 2025 05:21:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 24 (0x18)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36D8020AF, serialNumber=42250E00119001322296DBCD128E230A2D064A63
        Validity
            Not Before: Dec  9 05:21:18 2025 GMT
            Not After : Dec 11 05:21:18 2025 GMT
        Subject: CN=6937b1cf-8a82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:b9:e4:9e:d6:1c:18:25:83:5a:62:28:77:3e:
                    a7:d6:6c:21:24:0e:ce:f0:89:e2:66:cf:df:51:88:
                    6d:5a:6a:c1:33:fd:0a:90:a7:76:c6:ce:a1:71:41:
                    19:e5:a2:b9:1d:8e:c9:32:c1:77:13:5a:14:0c:29:
                    b7:48:0e:0c:06:a8:e0:3f:e1:fb:5b:73:30:0c:ac:
                    53:07:c7:15:d6:ea:ed:a8:f8:18:37:4f:7a:5d:54:
                    90:d1:58:55:38:91:5a:c6:fb:c9:99:9c:d8:56:1e:
                    ea:27:13:c4:82:36:17:24:c2:42:1a:b7:2a:c5:93:
                    50:db:a0:6d:b3:d6:e0:8c:06:fd:12:60:31:0e:4c:
                    2e:aa:b4:5d:5b:9b:d4:1b:75:3a:dc:36:91:06:be:
                    3c:c0:7d:b9:54:53:c3:d7:0c:9d:fa:b8:1a:2f:d5:
                    e0:f1:6a:3a:b3:3d:83:29:b3:4b:1a:2a:d7:03:57:
                    99:c1:99:77:5b:75:d2:58:2a:f8:bf:06:4d:07:04:
                    c1:e5:67:e5:95:74:10:cf:9a:55:24:5d:6d:57:82:
                    b9:b0:1d:1d:a1:9d:1a:76:bf:19:9c:17:d7:37:af:
                    cb:a9:95:fc:3a:61:0f:81:dd:bd:cd:09:40:8c:cb:
                    ad:61:e9:ca:e6:bb:b5:fd:5e:d2:a3:d4:07:bf:32:
                    ce:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:3A:84:F1:94:6A:87:04:C6:42:CA:65:75:CF:CB:16:0A:F1:E3:05
            X509v3 Authority Key Identifier:
                keyid:42:25:0E:00:11:90:01:32:22:96:DB:CD:12:8E:23:0A:2D:06:4A:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36D8020/0AF51ABEC39911F0BBCE1889DAE4EC9C/QiUOABGQATIiltvNEo4jCi0GSmM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/QiUOABGQATIiltvNEo4jCi0GSmM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D8020/0AF51ABEC39911F0BBCE1889DAE4EC9C/QiUOABGQATIiltvNEo4jCi0GSmM.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:69:8b:ec:28:6d:e6:ab:15:b2:6f:6f:1b:17:9f:ce:6f:82:
         0e:1c:7f:e5:ea:9b:11:8b:db:1b:8a:03:8a:86:48:0e:94:10:
         dc:ef:31:3d:96:f3:8c:43:69:f4:7c:30:07:3f:41:2d:a3:66:
         3d:da:26:5e:c5:92:6e:f6:96:68:74:8c:a8:45:25:80:48:f7:
         f1:17:be:e9:3c:34:0b:1c:ef:be:c3:04:77:aa:1f:50:69:5b:
         39:25:1a:24:14:83:66:fe:4c:08:71:7d:8a:8c:44:04:a7:ef:
         2f:af:d5:85:13:ec:ab:a1:98:50:df:15:82:6c:5c:a8:94:8a:
         6d:19:24:71:f7:c3:71:43:ad:23:a4:c1:df:31:ea:a4:8a:0e:
         57:5d:3c:6a:cb:78:f3:20:51:ca:b9:30:be:e1:d5:5f:12:88:
         2b:16:63:c9:37:ba:c8:02:af:e2:f3:27:7f:4e:f0:d5:a6:e7:
         73:33:d1:31:9e:57:8b:23:b7:5b:a1:43:4a:f5:ad:ac:65:6e:
         3a:94:13:4c:b9:42:f8:ab:08:e6:88:6c:97:eb:b9:ce:31:c0:
         91:59:f9:ed:38:59:be:31:fb:9e:97:ca:c3:d2:56:91:75:72:
         63:e1:10:ba:4a:92:f1:50:4e:0e:e4:95:30:72:2f:8d:20:85:
         b9:f7:a6:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 9 12:03:15 2025 by rpki-client