This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FB3ED/9024FED24EC311ED888A1488F1222468/yQJA_HUSr6EDEZhw4oNL0tTCOcQ.mft
File:                     yQJA_HUSr6EDEZhw4oNL0tTCOcQ.mft (raw, json)
Hash identifier:          tOjlh+lgvK5cOP1YVxFY8ojCV419M9w2CHFuWP42Na4=
Subject key identifier:   51:FF:09:B8:DC:BA:02:3A:8A:DD:F3:17:94:C9:8A:5C:9B:CA:C5:A0
Authority key identifier: C9:02:40:FC:75:12:AF:A1:03:11:98:70:E2:83:4B:D2:D4:C2:39:C4
Certificate issuer:       /CN=F36FB3EDAF/serialNumber=C90240FC7512AFA103119870E2834BD2D4C239C4
Certificate serial:       04AF
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/yQJA_HUSr6EDEZhw4oNL0tTCOcQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36FB3ED/9024FED24EC311ED888A1488F1222468/yQJA_HUSr6EDEZhw4oNL0tTCOcQ.mft
Manifest number:          04AE
Signing time:             Sun 21 Dec 2025 03:04:19 +0000
Manifest this update:     Sun 21 Dec 2025 03:04:18 +0000
Manifest next update:     Tue 23 Dec 2025 03:04:18 +0000
Files and hashes:         1: yQJA_HUSr6EDEZhw4oNL0tTCOcQ.crl (hash: ugdGBVtU7i0yvCHtcL/fZl+Jt5uV6G5rC4NKIdQvvWo=)
                          2: CBC05E684EC411EDBBC03A8BF1222468.roa (hash: iwEq/fHu2kMxv/0tavD/wLmOmI/Juh/s4dhe4VyEou8=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36FB3ED/9024FED24EC311ED888A1488F1222468/yQJA_HUSr6EDEZhw4oNL0tTCOcQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36FB3ED/9024FED24EC311ED888A1488F1222468/yQJA_HUSr6EDEZhw4oNL0tTCOcQ.mft
                          rsync://rpki.afrinic.net/repository/afrinic/yQJA_HUSr6EDEZhw4oNL0tTCOcQ.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 23 Dec 2025 03:04:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1199 (0x4af)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36FB3EDAF, serialNumber=C90240FC7512AFA103119870E2834BD2D4C239C4
        Validity
            Not Before: Dec 21 03:04:18 2025 GMT
            Not After : Dec 23 03:04:18 2025 GMT
        Subject: CN=694763b3-d844
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:e4:fd:3c:b0:21:38:af:55:f5:6f:05:fe:d7:
                    5e:be:48:f7:ca:36:4f:ab:7d:35:f0:dc:55:fb:a0:
                    ef:74:94:02:50:3a:0e:f0:02:af:5c:7b:31:0b:5e:
                    ca:10:4e:22:15:ba:8f:a1:4b:4f:2c:05:50:b1:0d:
                    35:29:74:94:3a:0f:20:c6:6b:06:cb:1b:20:cd:41:
                    e8:b6:4d:43:0e:31:a4:ab:16:8f:da:a6:06:6e:cb:
                    e4:fb:ae:27:83:37:25:19:a2:78:7b:27:2e:aa:d9:
                    40:d2:9c:f7:9f:7e:81:5d:a8:db:f6:5a:d7:47:39:
                    65:66:6b:a2:68:74:cb:fe:2c:2b:c1:8f:b2:27:ac:
                    5d:69:09:df:21:1e:19:0c:ce:a3:76:6b:3d:8f:97:
                    f6:25:a1:e5:95:77:e0:fa:71:17:23:1e:cd:79:01:
                    19:25:4a:eb:2a:96:a1:41:ce:01:15:8a:fa:ed:4b:
                    96:05:e8:06:a2:29:45:44:e1:67:43:15:9f:a9:fd:
                    4a:2d:92:9a:b5:3b:3e:ca:2b:f1:8c:13:4d:e1:63:
                    84:57:9a:9b:5e:ea:f9:0c:08:5b:94:26:72:0e:e7:
                    a3:ef:4e:c8:17:ab:eb:b5:fb:a3:fc:d8:f0:d4:29:
                    6d:77:3f:1c:de:90:a0:2c:20:4c:b6:8b:25:d1:8c:
                    6e:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:FF:09:B8:DC:BA:02:3A:8A:DD:F3:17:94:C9:8A:5C:9B:CA:C5:A0
            X509v3 Authority Key Identifier:
                keyid:C9:02:40:FC:75:12:AF:A1:03:11:98:70:E2:83:4B:D2:D4:C2:39:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36FB3ED/9024FED24EC311ED888A1488F1222468/yQJA_HUSr6EDEZhw4oNL0tTCOcQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/yQJA_HUSr6EDEZhw4oNL0tTCOcQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FB3ED/9024FED24EC311ED888A1488F1222468/yQJA_HUSr6EDEZhw4oNL0tTCOcQ.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:ed:6c:42:da:73:d9:8f:07:56:07:99:56:6b:b6:12:7c:2d:
         ec:68:c7:1f:3c:d3:81:ac:ba:29:91:47:3e:82:53:ef:da:43:
         f6:58:23:f9:f7:c5:e5:af:37:dc:27:c5:79:8d:82:f2:5d:c4:
         d4:d9:33:55:86:57:d3:fc:1d:2a:ff:1b:3b:88:16:6c:97:f4:
         0c:be:c8:4f:5a:4c:9d:a2:ae:d0:15:ce:70:c3:fa:85:9b:29:
         d7:46:c7:09:ab:a8:e1:4e:8c:57:7d:51:6f:11:29:56:4e:ff:
         88:c5:05:43:94:26:d0:d7:14:fe:2f:da:00:f8:25:c7:4a:ee:
         d6:ea:99:88:2d:06:3b:1f:a3:f5:13:1c:b3:d4:ad:0a:dd:1f:
         51:b3:9f:b7:ac:c1:48:0c:8d:08:cf:99:49:58:0a:9c:b2:fc:
         3d:da:98:52:1d:06:d9:35:40:d0:01:e4:5a:26:e4:10:41:68:
         51:cb:d6:7f:05:77:8d:b0:bf:01:fc:34:8b:a1:b8:ae:40:5f:
         56:f3:83:44:74:da:f6:e5:b1:f8:ad:8f:61:7d:94:91:a5:2e:
         b3:bd:e5:32:47:d8:d8:67:29:2f:0c:6b:a5:7a:37:52:11:ff:
         76:79:c8:28:d5:be:ba:2c:ab:ac:99:74:24:ca:dc:52:4c:5a:
         f9:5f:9d:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 21:32:17 2025 by rpki-client