This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362793F/065D4DBAA64311EF8B4D3E8B762E951A/2qhy_5oERGtxio2fR1VL-lgbOg4.mft
File:                     2qhy_5oERGtxio2fR1VL-lgbOg4.mft (raw, json)
Hash identifier:          34T+G32RBieOrpISFKvfjDAYVp6LlDnEKes8Fv8Gzxs=
Subject key identifier:   6C:4D:FD:5D:57:F3:79:28:23:18:37:98:C8:B2:08:94:02:E9:B6:08
Authority key identifier: DA:A8:72:FF:9A:04:44:6B:71:8A:8D:9F:47:55:4B:FA:58:1B:3A:0E
Certificate issuer:       /CN=F362793FAF/serialNumber=DAA872FF9A04446B718A8D9F47554BFA581B3A0E
Certificate serial:       01CC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/2qhy_5oERGtxio2fR1VL-lgbOg4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F362793F/065D4DBAA64311EF8B4D3E8B762E951A/2qhy_5oERGtxio2fR1VL-lgbOg4.mft
Manifest number:          01B8
Signing time:             Tue 23 Dec 2025 04:41:31 +0000
Manifest this update:     Tue 23 Dec 2025 04:41:30 +0000
Manifest next update:     Thu 25 Dec 2025 04:41:30 +0000
Files and hashes:         1: 2qhy_5oERGtxio2fR1VL-lgbOg4.crl (hash: /gUJ33fAsr5gZ2jaaaSQxGQFuXsPcGow+PXSM/qLNr0=)
                          2: 7D874958B87D11EFB3643257762E951A.roa (hash: onul5/YLBBz+YGmXUqj+3gM9pVUef26/bXQij1jV9rY=)
                          3: 3D775376B87D11EFAB4FF956762E951A.roa (hash: b6euF38rD57vl3/+UQug0tSlMLOGy1TjPgA9WLcJx/k=)
                          4: 5A3BE2FAB87E11EF981C545D762E951A.roa (hash: iiNCcB7diX0XVv+jA4F51IRnj9i5QGDFj/H4TV2LPnA=)
                          5: 8BF912DCB8C311EFBA768387762E951A.roa (hash: 4MzJryMeE1qGlBnjDKdwaAv93aYiFWEXltRxjKpruGs=)
                          6: 378108EEB87E11EF81427D5B762E951A.roa (hash: pvxHcsYPa0Lv9jDaQ8hW3DYwerAD0pRgtEnW8FTTQOg=)
                          7: B3D4A0FAB87D11EF99011259762E951A.roa (hash: pJknO3SfyaIF7Mf7TXt63Y5B2q/zY499L4XbyGAJGWw=)
                          8: 5C024D8CB87D11EFB7C42257762E951A.roa (hash: NFBzy2Yi/mXJiGIrYLnb6yECZlLOSbsf4t2bOiNIZd8=)
                          9: 98F59802B87D11EFBDAE0659762E951A.roa (hash: McIOupeXZ3ZuHvVifTjAnpDUlUDytTyutBT9QiQDcHw=)
                          10: FC601FE8B87D11EFB11B5D5B762E951A.roa (hash: kMhymzWCs2TuT+6gLYGn8unjH29vHiUNHpcIxz2N4+Y=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F362793F/065D4DBAA64311EF8B4D3E8B762E951A/2qhy_5oERGtxio2fR1VL-lgbOg4.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F362793F/065D4DBAA64311EF8B4D3E8B762E951A/2qhy_5oERGtxio2fR1VL-lgbOg4.mft
                          rsync://rpki.afrinic.net/repository/afrinic/2qhy_5oERGtxio2fR1VL-lgbOg4.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 25 Dec 2025 00:06:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 460 (0x1cc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F362793FAF, serialNumber=DAA872FF9A04446B718A8D9F47554BFA581B3A0E
        Validity
            Not Before: Dec 23 04:41:30 2025 GMT
            Not After : Dec 25 04:41:30 2025 GMT
        Subject: CN=694a1d7b-9905
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:ea:bd:86:b9:24:fe:8b:e8:8c:bd:7c:5b:42:
                    eb:fb:b2:36:22:db:a3:01:6b:ae:de:50:25:35:bc:
                    a1:06:40:43:9c:fa:35:b6:2b:60:3d:67:f4:b1:f0:
                    4c:24:f7:50:cc:82:d9:5c:40:c4:fa:c5:34:ad:61:
                    15:d7:20:a6:a8:da:17:ec:e2:dc:20:a3:0a:37:ac:
                    99:92:d3:77:4a:31:4e:5d:25:52:db:8f:6d:ab:58:
                    ff:5d:33:db:39:20:6e:c3:b9:e5:53:b0:26:9d:e2:
                    06:5d:99:c6:36:04:40:b5:05:4f:16:4e:72:3c:48:
                    3d:40:9a:36:23:92:24:c3:1e:bc:5f:17:ee:80:42:
                    ea:3f:71:8b:84:35:a3:cf:26:aa:34:98:e1:27:ae:
                    53:09:31:44:a6:34:79:0b:79:de:b6:2c:09:cb:73:
                    3d:55:c6:da:ca:11:09:5f:48:41:c1:d9:42:76:bc:
                    79:c3:a4:83:61:e3:e3:67:02:4e:ad:c3:03:b2:4a:
                    a5:de:d4:49:76:c4:5d:c4:51:c8:3f:ca:4e:1e:e2:
                    05:d8:a6:11:fc:a0:53:9a:06:28:28:53:5f:5d:8d:
                    58:5b:24:06:4c:84:39:ef:a3:d8:ac:b9:73:bb:34:
                    5e:cf:be:37:55:ce:a7:cd:b7:7a:5a:d7:9a:ee:2f:
                    2c:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:4D:FD:5D:57:F3:79:28:23:18:37:98:C8:B2:08:94:02:E9:B6:08
            X509v3 Authority Key Identifier:
                keyid:DA:A8:72:FF:9A:04:44:6B:71:8A:8D:9F:47:55:4B:FA:58:1B:3A:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F362793F/065D4DBAA64311EF8B4D3E8B762E951A/2qhy_5oERGtxio2fR1VL-lgbOg4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/2qhy_5oERGtxio2fR1VL-lgbOg4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362793F/065D4DBAA64311EF8B4D3E8B762E951A/2qhy_5oERGtxio2fR1VL-lgbOg4.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:c6:c7:65:61:9a:22:57:34:7f:92:90:4f:4d:e2:f6:b6:aa:
         a6:23:85:69:a9:4e:c9:51:7d:39:53:4f:52:af:e2:f1:ce:67:
         60:b8:5e:5c:6f:a6:dd:df:d6:2d:e8:1a:3b:85:7e:c9:c5:73:
         ab:06:58:f8:b2:04:6a:ce:e5:6e:4b:61:36:fd:17:b8:92:7b:
         71:3b:ee:16:03:6f:47:7e:40:b2:ad:23:10:ae:f9:f6:06:82:
         5b:99:9f:3d:cd:5c:4f:f2:90:b8:b2:ed:55:d4:49:31:1c:e7:
         aa:a6:25:10:e1:21:da:40:62:16:82:e9:65:2e:03:60:0c:a2:
         06:3c:6e:30:31:d2:1c:09:f8:23:43:02:f6:be:59:16:ae:3c:
         ec:8f:f5:37:2b:15:01:ee:fb:58:6f:1b:15:87:20:64:84:a1:
         fb:a4:45:da:13:f6:0c:01:c6:2d:85:cb:c1:9e:bd:c9:39:7b:
         23:72:e0:0c:64:b7:28:63:72:9c:42:1e:5c:1f:14:91:cf:0e:
         a0:72:75:40:ac:4b:cd:68:f8:58:2d:b2:0c:44:3a:06:0d:af:
         72:8b:76:33:46:27:77:b4:16:83:95:40:ec:26:e3:d3:0b:77:
         bc:ae:04:d8:48:61:30:0d:86:c7:55:86:31:5b:f2:08:a2:a6:
         00:c6:5e:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 09:16:29 2025 by rpki-client