This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362A2E1/01C4AD5EF61711EC819754AAF1222468/4qOmjo-ihl0uVH2MskMPqyH8oG0.mft
File:                     4qOmjo-ihl0uVH2MskMPqyH8oG0.mft (raw, json)
Hash identifier:          woTT4OLKOeiRUDzypmM1ssqFHOSDIxjthgcar9ldg2Q=
Subject key identifier:   24:F6:72:CF:98:FA:F4:A8:8C:E0:D8:59:6C:69:A8:F6:95:54:64:1F
Authority key identifier: E2:A3:A6:8E:8F:A2:86:5D:2E:54:7D:8C:B2:43:0F:AB:21:FC:A0:6D
Certificate issuer:       /CN=F362A2E1AF/serialNumber=E2A3A68E8FA2865D2E547D8CB2430FAB21FCA06D
Certificate serial:       0536
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/4qOmjo-ihl0uVH2MskMPqyH8oG0.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F362A2E1/01C4AD5EF61711EC819754AAF1222468/4qOmjo-ihl0uVH2MskMPqyH8oG0.mft
Manifest number:          0530
Signing time:             Wed 31 Dec 2025 02:51:20 +0000
Manifest this update:     Wed 31 Dec 2025 02:51:19 +0000
Manifest next update:     Fri 02 Jan 2026 02:51:19 +0000
Files and hashes:         1: 4qOmjo-ihl0uVH2MskMPqyH8oG0.crl (hash: ZtwLGCMmHPwQAxe8ocXhwrb78JTZxxx6SjSfDbUebEg=)
                          2: B063A1E4F70C11EC941F0CB4F1222468.roa (hash: Pp0AH2ECom1pa7n5F8aA5h/FubB3+W9tB91zRCkX5hA=)
                          3: 38150926F61711EC9FF6E8AAF1222468.roa (hash: R4O17UWTwxmFzLEBa28mhDTCBi+yy6jmbDMn8Gh9fK0=)
                          4: C6B22452F70C11ECB35A5DB4F1222468.roa (hash: qE23fzU6w713psdmbvCNENyQme+t86q76CBB2jdDWu0=)
                          5: E8C1348EF70C11ECA5BCDAB4F1222468.roa (hash: sQtWx2Bv/Sqp8d9pEf9Jqmmnu5VfFPqFz45blSrAhD8=)
                          6: 507471B4F61711ECA8BD35ABF1222468.roa (hash: mftcHJVRxHtq4aPHGuWKQ475mDfq8IorWrPcZAJ1yKo=)
                          7: 105F0D40F70D11EC8E5663B5F1222468.roa (hash: mjO2Sp6OVpSiQ7xZGU3orqZpsq+WKN6CkJVcH0QEXeM=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F362A2E1/01C4AD5EF61711EC819754AAF1222468/4qOmjo-ihl0uVH2MskMPqyH8oG0.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F362A2E1/01C4AD5EF61711EC819754AAF1222468/4qOmjo-ihl0uVH2MskMPqyH8oG0.mft
                          rsync://rpki.afrinic.net/repository/afrinic/4qOmjo-ihl0uVH2MskMPqyH8oG0.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 02 Jan 2026 00:06:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1334 (0x536)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F362A2E1AF, serialNumber=E2A3A68E8FA2865D2E547D8CB2430FAB21FCA06D
        Validity
            Not Before: Dec 31 02:51:19 2025 GMT
            Not After : Jan  2 02:51:19 2026 GMT
        Subject: CN=69548fa8-da20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:72:75:6a:a2:43:f7:b9:52:35:5b:a0:66:f1:
                    b6:df:ff:91:7a:62:c8:ff:8e:0e:21:0d:10:f0:22:
                    ae:fa:68:42:b2:5f:82:0e:c6:94:5a:fb:0c:1e:5a:
                    47:ce:4d:a4:79:aa:3e:2e:35:9b:60:39:4d:09:52:
                    09:8b:c3:e4:42:2b:8f:48:9a:2d:fd:9f:61:7e:bc:
                    14:0a:a7:06:74:9c:6a:97:dd:13:7f:e0:10:06:ee:
                    a6:ca:bb:17:3e:23:52:80:a0:b3:b8:8d:59:46:f4:
                    8b:ae:de:65:2e:3f:63:b2:b5:5b:a4:0f:98:31:15:
                    a4:8e:b3:9e:7c:10:40:f9:77:be:08:db:e8:66:51:
                    c1:32:6e:e3:cf:19:32:47:39:20:60:51:c2:69:9d:
                    1b:03:5b:6d:af:a6:35:a0:ef:0d:29:18:47:68:1c:
                    44:59:b6:70:20:c1:c4:0f:36:e1:ff:a7:d3:03:95:
                    eb:c7:3f:84:e7:38:a6:03:6e:2f:e0:8f:62:45:2f:
                    34:e3:43:60:42:c7:4f:d4:62:01:72:00:b8:97:85:
                    a8:53:a0:59:47:07:10:75:e4:f1:b9:a5:93:7c:64:
                    8a:ec:5f:d5:03:5b:02:be:05:5b:7a:a1:ac:5d:25:
                    98:da:09:69:95:52:ad:82:e4:67:1d:96:d2:d3:0f:
                    0a:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:F6:72:CF:98:FA:F4:A8:8C:E0:D8:59:6C:69:A8:F6:95:54:64:1F
            X509v3 Authority Key Identifier:
                keyid:E2:A3:A6:8E:8F:A2:86:5D:2E:54:7D:8C:B2:43:0F:AB:21:FC:A0:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F362A2E1/01C4AD5EF61711EC819754AAF1222468/4qOmjo-ihl0uVH2MskMPqyH8oG0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/4qOmjo-ihl0uVH2MskMPqyH8oG0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362A2E1/01C4AD5EF61711EC819754AAF1222468/4qOmjo-ihl0uVH2MskMPqyH8oG0.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:15:5e:d6:04:4b:99:78:fc:8f:7b:cd:1d:41:f2:fc:d4:af:
         f8:12:2f:cf:e3:16:a0:f6:aa:1b:bb:37:7f:15:21:c3:3b:7a:
         ae:5d:a2:66:8a:c7:a2:1c:ea:3e:92:7c:0e:b8:02:97:27:f3:
         cb:8f:ac:11:f5:ec:bb:13:9c:71:c4:bd:2b:26:f1:11:4e:8e:
         53:c6:b5:ae:64:c9:d0:6d:b8:99:3f:66:e1:fc:74:bb:04:9c:
         ee:03:2c:37:8a:59:21:c2:a5:95:2d:81:48:00:c3:7e:19:b9:
         f6:b0:44:d5:2f:ce:56:e2:d1:d8:7a:dc:ad:9c:ef:63:dc:5f:
         64:5a:06:b9:5d:c1:36:38:bd:9c:94:6d:c3:73:75:1e:6c:a1:
         f0:f2:78:96:74:63:8c:af:9c:71:1c:5c:21:c3:e7:b1:ea:a3:
         e9:e5:d5:22:03:87:05:11:a1:9b:5b:e0:49:dc:45:d1:e6:f7:
         df:81:d8:8a:3e:c8:2e:de:19:1d:fb:78:93:25:52:62:30:6f:
         c7:bb:9d:6e:de:ef:3d:29:e4:45:38:95:88:8f:a6:be:56:91:
         e3:2c:6f:4f:85:53:8b:1f:84:1e:b8:77:e5:e6:d0:e6:08:79:
         fc:5a:fd:ec:15:ef:d3:96:c3:dc:01:41:c3:c7:bd:96:25:39:
         0f:e9:e3:f3
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICBTYwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
MkEyRTFBRjExMC8GA1UEBRMoRTJBM0E2OEU4RkEyODY1RDJFNTQ3RDhDQjI0MzBG
QUIyMUZDQTA2RDAeFw0yNTEyMzEwMjUxMTlaFw0yNjAxMDIwMjUxMTlaMBgxFjAU
BgNVBAMTDTY5NTQ4ZmE4LWRhMjAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCwcnVqokP3uVI1W6Bm8bbf/5F6Ysj/jg4hDRDwIq76aEKyX4IOxpRa+wwe
WkfOTaR5qj4uNZtgOU0JUgmLw+RCK49Imi39n2F+vBQKpwZ0nGqX3RN/4BAG7qbK
uxc+I1KAoLO4jVlG9Iuu3mUuP2OytVukD5gxFaSOs558EED5d74I2+hmUcEybuPP
GTJHOSBgUcJpnRsDW22vpjWg7w0pGEdoHERZtnAgwcQPNuH/p9MDlevHP4TnOKYD
bi/gj2JFLzTjQ2BCx0/UYgFyALiXhahToFlHBxB15PG5pZN8ZIrsX9UDWwK+BVt6
oaxdJZjaCWmVUq2C5GcdltLTDwojAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUJPZy
z5j69KiM4NhZbGmo9pVUZB8wHwYDVR0jBBgwFoAU4qOmjo+ihl0uVH2MskMPqyH8
oG0wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjJBMkUxLzAxQzRBRDVFRjYxNzExRUM4MTk3NTRBQUYxMjIyNDY4LzRxT21q
by1paGwwdVZIMk1za01QcXlIOG9HMC5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljLzRxT21qby1paGwwdVZIMk1za01QcXlIOG9HMC5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2MkEyRTEvMDFDNEFENUVGNjE3MTFFQzgxOTc1NEFBRjEy
MjI0NjgvNHFPbWpvLWlobDB1VkgyTXNrTVBxeUg4b0cwLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQB+FV7WBEuZePyPe80dQfL81K/4Ei/P
4xag9qobuzd/FSHDO3quXaJmiseiHOo+knwOuAKXJ/PLj6wR9ey7E5xxxL0rJvER
To5TxrWuZMnQbbiZP2bh/HS7BJzuAyw3ilkhwqWVLYFIAMN+Gbn2sETVL85W4tHY
etytnO9j3F9kWga5XcE2OL2clG3Dc3UebKHw8niWdGOMr5xxHFwhw+ex6qPp5dUi
A4cFEaGbW+BJ3EXR5vffgdiKPsgu3hkd+3iTJVJiMG/Hu51u3u89KeRFOJWIj6a+
VpHjLG9PhVOLH4QeuHfl5tDmCHn8Wv3sFe/TlsPcAUHDx72WJTkP6ePz
-----END CERTIFICATE-----
Generated at Wed Dec 31 08:01:55 2025 by rpki-client