This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36E61B7/AA88E506734611E98799801FF8AEA228/Q3alYtTdhNTWiSJjLrC7NCpq2mo.mft
File:                     Q3alYtTdhNTWiSJjLrC7NCpq2mo.mft (raw, json)
Hash identifier:          rmn+iNRvYvtNI+ytLsDsrmiOa1T2hOvUjOedHWM8c+o=
Subject key identifier:   9D:1E:DE:C0:91:0C:14:A6:5E:17:37:3B:28:A5:15:02:03:CB:11:78
Authority key identifier: 43:76:A5:62:D4:DD:84:D4:D6:89:22:63:2E:B0:BB:34:2A:6A:DA:6A
Certificate issuer:       /CN=F36E61B7AF/serialNumber=4376A562D4DD84D4D68922632EB0BB342A6ADA6A
Certificate serial:       09A8
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/Q3alYtTdhNTWiSJjLrC7NCpq2mo.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36E61B7/AA88E506734611E98799801FF8AEA228/Q3alYtTdhNTWiSJjLrC7NCpq2mo.mft
Manifest number:          09A5
Signing time:             Tue 09 Dec 2025 01:20:21 +0000
Manifest this update:     Tue 09 Dec 2025 01:20:20 +0000
Manifest next update:     Thu 11 Dec 2025 01:20:20 +0000
Files and hashes:         1: Q3alYtTdhNTWiSJjLrC7NCpq2mo.crl (hash: 8FBBQCbJOX6+T1GVPBCVL+s9rPMCS7+abLkn7s2KYDM=)
                          2: 3E2B9236734711E9B82EF41FF8AEA228.roa (hash: sHavROAEkdgwvUhdTRWjp16c0hkbhCfTH2dCNlT1fQc=)
                          3: 02D94732CD3911EDB44730E4F1222468.roa (hash: hdUJSRvpanPiNqPIFPGVK06JZp+d865/mAWTIg6oHiI=)
                          4: 086D98B0CCA811EDB662B1A7F1222468.roa (hash: nnMjPyXhgx6XEhhcx/f+j045cw3LDYD0M4TZuc1eZmM=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36E61B7/AA88E506734611E98799801FF8AEA228/Q3alYtTdhNTWiSJjLrC7NCpq2mo.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36E61B7/AA88E506734611E98799801FF8AEA228/Q3alYtTdhNTWiSJjLrC7NCpq2mo.mft
                          rsync://rpki.afrinic.net/repository/afrinic/Q3alYtTdhNTWiSJjLrC7NCpq2mo.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 11 Dec 2025 01:20:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2472 (0x9a8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36E61B7AF, serialNumber=4376A562D4DD84D4D68922632EB0BB342A6ADA6A
        Validity
            Not Before: Dec  9 01:20:20 2025 GMT
            Not After : Dec 11 01:20:20 2025 GMT
        Subject: CN=69377955-55aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fd:70:c5:94:82:e6:0b:08:ec:a9:be:55:62:30:
                    6d:c3:2d:fc:d2:a8:57:93:df:88:3b:fd:55:3d:10:
                    e6:bf:05:fb:29:3b:05:a9:8b:9e:4a:43:c8:e0:ea:
                    e6:0e:f2:7f:af:e6:d4:2f:52:f5:6a:b7:d7:3d:05:
                    ce:d1:b1:8f:d6:4a:6e:7d:b9:f4:38:24:b0:9c:fb:
                    ce:65:df:ca:e3:70:e5:45:f8:2f:86:01:2f:63:74:
                    3b:e8:f5:2a:8b:00:21:a9:a6:32:ac:a0:17:c9:e7:
                    b8:d9:5c:3c:6e:8f:c0:d0:43:60:7c:fe:e0:0f:03:
                    ad:cf:be:8a:85:e2:82:9b:5c:0d:2b:b6:64:27:0c:
                    a3:b3:82:e1:7d:eb:b1:59:a1:dd:33:49:e4:fb:82:
                    d1:8a:d4:1e:81:30:79:fd:3d:42:4f:a8:e4:5f:eb:
                    8b:73:6b:08:cd:aa:98:f3:bd:9f:e5:69:7a:c3:d6:
                    2d:e3:c2:e5:17:d4:7e:8c:bb:b2:04:f7:7a:f6:9b:
                    ca:22:47:9e:7b:6f:a2:ec:ce:5d:1c:8f:1d:c9:5a:
                    a7:b6:4d:4b:6f:48:b0:59:2d:db:c0:9b:fb:a6:e8:
                    59:22:7a:98:7e:ca:02:d6:8c:48:69:9e:53:f2:01:
                    d0:a0:f0:85:a8:c3:80:bc:17:2c:37:71:a9:98:03:
                    e4:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:1E:DE:C0:91:0C:14:A6:5E:17:37:3B:28:A5:15:02:03:CB:11:78
            X509v3 Authority Key Identifier:
                keyid:43:76:A5:62:D4:DD:84:D4:D6:89:22:63:2E:B0:BB:34:2A:6A:DA:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36E61B7/AA88E506734611E98799801FF8AEA228/Q3alYtTdhNTWiSJjLrC7NCpq2mo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Q3alYtTdhNTWiSJjLrC7NCpq2mo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E61B7/AA88E506734611E98799801FF8AEA228/Q3alYtTdhNTWiSJjLrC7NCpq2mo.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:c7:24:38:86:d2:18:9a:4b:ce:e4:2f:56:30:96:c3:68:4a:
         43:cc:14:c1:74:be:8c:09:ae:e3:d1:14:3d:90:35:d8:2f:b9:
         b8:7e:a8:1c:1d:c1:16:79:22:88:fd:6f:56:1c:5b:69:af:c4:
         4d:c4:7a:da:6b:51:6f:f6:a5:b0:b2:65:58:54:2f:73:e0:48:
         fb:47:84:ef:16:31:48:bb:9d:11:92:39:f9:8d:e8:5d:94:d8:
         ae:eb:60:a8:b1:a2:d7:45:d5:77:c4:fc:9a:4d:b6:ca:05:f1:
         dc:d4:5f:e9:d1:1f:5e:2e:a4:6a:9a:6c:f2:81:c0:28:c4:84:
         7c:65:17:9d:7a:7e:5b:36:3b:16:b0:52:b3:86:16:7e:ec:96:
         69:c9:d9:79:e7:cf:74:ef:25:0f:43:e1:6e:38:c9:ba:07:f7:
         bf:3f:7e:4e:d1:5a:9e:bb:90:98:dd:dc:48:29:36:83:14:3f:
         b3:2d:74:9c:ea:39:b0:f9:6f:24:cc:91:70:9a:47:c3:15:e5:
         d2:35:77:c0:b3:ea:39:79:f2:aa:52:bf:d1:69:12:09:05:a3:
         10:f1:01:31:cb:10:4f:fb:fb:6f:7f:50:4e:cf:68:14:aa:75:
         c7:d1:7e:b8:10:a2:a1:07:2f:9c:bb:f3:4f:0f:49:f4:dd:f5:
         f1:16:46:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 9 12:18:28 2025 by rpki-client