This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3629B7B/D1FD7020E35511ECB0A0F090F1222468/QfCSTGDWjh-8ANKZ8hiUzkyhtck.mft
File:                     QfCSTGDWjh-8ANKZ8hiUzkyhtck.mft (raw, json)
Hash identifier:          Ldzc/1Q6SBzzkTWhdzclCwV32L9z1DLa+cFwdC3N7oE=
Subject key identifier:   5F:2A:D6:66:AE:E3:0E:23:14:C5:C4:69:1B:40:FC:CE:17:FC:20:F6
Authority key identifier: 41:F0:92:4C:60:D6:8E:1F:BC:00:D2:99:F2:18:94:CE:4C:A1:B5:C9
Certificate issuer:       /CN=F3629B7BAF/serialNumber=41F0924C60D68E1FBC00D299F21894CE4CA1B5C9
Certificate serial:       053C
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/QfCSTGDWjh-8ANKZ8hiUzkyhtck.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3629B7B/D1FD7020E35511ECB0A0F090F1222468/QfCSTGDWjh-8ANKZ8hiUzkyhtck.mft
Manifest number:          053B
Signing time:             Wed 24 Dec 2025 02:52:23 +0000
Manifest this update:     Wed 24 Dec 2025 02:52:23 +0000
Manifest next update:     Fri 26 Dec 2025 02:52:23 +0000
Files and hashes:         1: QfCSTGDWjh-8ANKZ8hiUzkyhtck.crl (hash: S6RjjQln0wlDwgDTcJvaS++yXWHlrCoFP/pH9rBzgcY=)
                          2: 8923FE84E70411ECB97A00C7F1222468.roa (hash: ef6Udp4f7yAWn4yjb6CIRvJunMzfPBNgWsJ+Z6PTHZE=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3629B7B/D1FD7020E35511ECB0A0F090F1222468/QfCSTGDWjh-8ANKZ8hiUzkyhtck.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3629B7B/D1FD7020E35511ECB0A0F090F1222468/QfCSTGDWjh-8ANKZ8hiUzkyhtck.mft
                          rsync://rpki.afrinic.net/repository/afrinic/QfCSTGDWjh-8ANKZ8hiUzkyhtck.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 26 Dec 2025 02:52:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1340 (0x53c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3629B7BAF, serialNumber=41F0924C60D68E1FBC00D299F21894CE4CA1B5C9
        Validity
            Not Before: Dec 24 02:52:23 2025 GMT
            Not After : Dec 26 02:52:23 2025 GMT
        Subject: CN=694b5567-c903
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:90:b2:ed:94:f4:d9:65:5d:ac:a6:63:59:7c:
                    21:6d:c4:6d:83:b3:79:ad:d7:e5:3d:21:57:7a:a4:
                    44:f1:0e:49:58:36:91:cb:34:cb:3c:45:f9:c6:9c:
                    dd:95:a5:65:5f:c1:ca:ca:bb:53:f7:00:f5:97:85:
                    48:5b:cd:11:64:79:ff:30:04:24:ec:36:5f:1a:8d:
                    12:4f:36:71:3f:c6:c1:6b:d0:d1:ef:88:fe:41:2e:
                    78:41:ba:9d:9d:d1:54:b2:b0:63:93:3d:6d:00:ff:
                    69:16:6f:26:c9:7e:b4:5b:9c:e0:9a:63:a9:69:2a:
                    b6:c7:5d:44:6b:06:7a:40:c4:d0:1e:8b:ae:7e:76:
                    54:6e:22:96:3e:b3:28:24:d9:6c:68:7c:a0:3a:6d:
                    ed:2a:aa:a8:01:85:ea:17:7a:e7:40:6f:89:a4:98:
                    9a:a8:c8:7c:6f:8a:82:a9:07:8e:f9:0d:1f:c8:7d:
                    b1:69:8e:52:ba:a1:11:74:8e:38:10:39:69:ba:86:
                    32:84:53:86:b0:da:9f:42:73:dc:5d:14:6f:a7:fb:
                    a1:38:6f:07:ff:ec:23:20:19:be:06:e6:f4:1a:20:
                    e5:77:93:23:8b:30:80:4a:29:3b:d7:23:fd:03:87:
                    90:b8:97:79:b2:51:7d:33:63:13:16:27:4f:e0:6e:
                    85:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:2A:D6:66:AE:E3:0E:23:14:C5:C4:69:1B:40:FC:CE:17:FC:20:F6
            X509v3 Authority Key Identifier:
                keyid:41:F0:92:4C:60:D6:8E:1F:BC:00:D2:99:F2:18:94:CE:4C:A1:B5:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3629B7B/D1FD7020E35511ECB0A0F090F1222468/QfCSTGDWjh-8ANKZ8hiUzkyhtck.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/QfCSTGDWjh-8ANKZ8hiUzkyhtck.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3629B7B/D1FD7020E35511ECB0A0F090F1222468/QfCSTGDWjh-8ANKZ8hiUzkyhtck.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b7:bd:0c:29:23:68:d6:12:af:f3:4a:98:ec:0c:ac:59:e3:5d:
         d1:0c:f6:70:e7:98:53:65:03:ca:fc:b9:d7:33:69:6b:5d:35:
         22:13:8c:71:43:29:5a:29:75:cc:02:30:b4:ab:ca:e7:81:49:
         74:86:0f:6b:9d:ad:a3:eb:2c:63:d3:0e:c3:85:7a:ba:b9:ef:
         82:b0:75:7b:fe:1a:e5:7b:02:32:75:4e:ad:10:42:fa:da:0d:
         cd:3a:4a:e8:e6:d8:5f:ef:be:ac:88:5b:70:7f:9b:e2:27:ad:
         db:d4:3c:f2:54:8e:14:b3:c5:e9:0b:f1:b8:d6:cc:a7:47:6d:
         a5:aa:53:fc:c6:c8:a4:73:b5:49:56:d3:49:d0:99:50:3b:e2:
         95:ca:eb:04:70:69:2e:f1:57:07:28:a2:d0:3e:ec:8e:7a:2a:
         65:19:ea:b2:54:3f:d9:dc:c5:38:1b:81:3d:31:44:d5:1c:4a:
         f2:1d:dd:c2:6e:80:49:44:a9:14:40:ce:d3:55:05:23:3b:dd:
         ff:63:de:58:31:6d:85:58:9a:60:83:42:61:13:6c:5b:7c:26:
         45:79:1a:09:31:55:4a:c0:0c:0b:be:e3:c5:d0:15:ac:62:dd:
         e6:88:6c:44:f6:68:c5:32:e4:8e:02:2c:91:1d:8d:16:22:00:
         b2:00:65:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 18:10:04 2025 by rpki-client