This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F5D39/2624B8A482E011EEB87E50264AD9E6FC/9quAr34JmFsP46OzgjMPLIk1jNg.mft
File:                     9quAr34JmFsP46OzgjMPLIk1jNg.mft (raw, json)
Hash identifier:          a1hBF0K3ibxkt2iEYNfMF/I6c1U1Aipa6HUUJRO170Q=
Subject key identifier:   A6:B4:42:AE:D4:AF:58:72:AD:EF:0C:D0:1B:69:EC:05:C1:25:A4:EA
Authority key identifier: F6:AB:80:AF:7E:09:98:5B:0F:E3:A3:B3:82:33:0F:2C:89:35:8C:D8
Certificate issuer:       /CN=F36F5D39AF/serialNumber=F6AB80AF7E09985B0FE3A3B382330F2C89358CD8
Certificate serial:       030A
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/9quAr34JmFsP46OzgjMPLIk1jNg.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36F5D39/2624B8A482E011EEB87E50264AD9E6FC/9quAr34JmFsP46OzgjMPLIk1jNg.mft
Manifest number:          030A
Signing time:             Tue 09 Dec 2025 03:52:12 +0000
Manifest this update:     Tue 09 Dec 2025 03:52:11 +0000
Manifest next update:     Thu 11 Dec 2025 03:52:11 +0000
Files and hashes:         1: 9quAr34JmFsP46OzgjMPLIk1jNg.crl (hash: GWY1QO/f2Gz0SCZtsfeuvQO1zTB4n+ZymYVaX8csSM0=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36F5D39/2624B8A482E011EEB87E50264AD9E6FC/9quAr34JmFsP46OzgjMPLIk1jNg.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36F5D39/2624B8A482E011EEB87E50264AD9E6FC/9quAr34JmFsP46OzgjMPLIk1jNg.mft
                          rsync://rpki.afrinic.net/repository/afrinic/9quAr34JmFsP46OzgjMPLIk1jNg.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 11 Dec 2025 03:52:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 778 (0x30a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36F5D39AF, serialNumber=F6AB80AF7E09985B0FE3A3B382330F2C89358CD8
        Validity
            Not Before: Dec  9 03:52:11 2025 GMT
            Not After : Dec 11 03:52:11 2025 GMT
        Subject: CN=69379cec-754a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:7e:7e:4a:d1:0d:a9:3a:d8:a3:ac:ae:56:cf:
                    ad:64:48:53:96:4e:fe:bc:0c:69:68:80:27:9a:f2:
                    2d:2f:f6:34:bf:10:dc:07:fe:b2:a8:9a:4e:cd:8c:
                    a0:94:27:a2:5f:b2:03:9d:ef:2d:93:0a:cb:56:51:
                    56:9a:fd:96:4a:24:64:fc:da:18:59:de:5a:8c:78:
                    04:3a:cc:e0:ed:df:97:21:e8:f0:38:f9:8f:76:84:
                    d0:09:26:82:89:ef:b4:b5:46:5f:42:ea:ec:0a:5c:
                    2a:11:ae:f7:55:8b:1b:d7:57:7c:02:fd:bf:47:b3:
                    21:4e:de:24:50:0f:81:da:13:8f:43:2c:a8:a9:59:
                    cb:7e:e2:17:f5:2c:81:a4:11:6a:3e:49:cb:f4:a0:
                    c6:f5:f2:09:9f:1b:61:c5:2c:be:5a:3e:08:39:88:
                    0e:7d:0d:51:00:ce:7e:07:b4:81:53:a0:76:5a:ac:
                    aa:e8:0f:32:a7:f3:cf:a7:10:f0:66:fb:1e:92:a5:
                    57:4b:71:88:8e:70:b7:8b:dd:8a:27:47:f8:6c:a1:
                    cb:2d:58:52:28:d7:8a:ab:0b:7b:a9:ae:a6:63:f7:
                    4e:a8:a2:e8:84:a8:0a:9e:d8:c8:0d:cb:c9:f2:9b:
                    3c:3c:d6:2b:64:2f:c9:3a:f0:c4:d9:7a:2b:d2:8b:
                    45:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:B4:42:AE:D4:AF:58:72:AD:EF:0C:D0:1B:69:EC:05:C1:25:A4:EA
            X509v3 Authority Key Identifier:
                keyid:F6:AB:80:AF:7E:09:98:5B:0F:E3:A3:B3:82:33:0F:2C:89:35:8C:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36F5D39/2624B8A482E011EEB87E50264AD9E6FC/9quAr34JmFsP46OzgjMPLIk1jNg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/9quAr34JmFsP46OzgjMPLIk1jNg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F5D39/2624B8A482E011EEB87E50264AD9E6FC/9quAr34JmFsP46OzgjMPLIk1jNg.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:55:5f:81:eb:22:63:ad:1f:e5:e8:b8:05:71:5a:41:38:82:
         6c:60:7f:b6:ae:3b:ba:9c:8b:1d:d7:3c:54:7e:2c:ef:49:7c:
         eb:28:b5:e0:fb:4f:c1:80:82:5c:69:4c:18:f2:81:69:23:0b:
         55:f4:4b:8b:fd:ea:10:c4:31:52:95:64:cf:13:b2:85:50:4c:
         41:3b:9d:13:17:c5:d4:24:fc:38:88:0e:1e:02:83:16:96:58:
         15:c1:eb:91:ef:8d:c0:d9:e7:75:05:24:9c:e5:6c:bb:00:4f:
         01:f0:82:40:43:87:5b:e7:bd:dd:cf:8a:23:5c:00:72:80:8b:
         ec:ac:66:bd:50:66:71:5a:94:61:f5:58:33:4d:c8:2b:18:0a:
         d3:e8:83:07:7a:42:88:da:4b:d2:53:dd:b5:80:ef:45:31:07:
         54:62:b3:b5:1e:cf:4d:4d:73:b8:64:fe:33:7b:01:7a:44:bc:
         ce:e8:4b:a5:c5:a7:e1:32:f8:a3:9d:8d:f1:e4:6e:e0:33:3a:
         d7:ae:ea:92:d9:2f:e2:7d:6a:49:94:b6:01:a4:b4:e8:b5:b3:
         98:e8:7d:dd:80:c0:fc:85:6a:f1:64:7d:df:f8:2b:3c:69:81:
         dd:e8:e8:f4:fe:fa:21:16:ae:97:ea:b0:98:06:c1:02:bb:f4:
         8d:45:ac:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 9 12:06:15 2025 by rpki-client