This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F364FE7F/8CEFCC7490B811EDBCC9A5ECF1222468/QQJpBJisN4v_7-4nvGlfkaEjv0M.mft
File:                     QQJpBJisN4v_7-4nvGlfkaEjv0M.mft (raw, json)
Hash identifier:          GDNBkCyqtY48Qw3299zpiemJ36e53C01MVyu6EPjrwU=
Subject key identifier:   04:EC:43:48:18:CB:A0:46:2D:EC:F7:4C:78:94:99:FD:2C:D0:AB:9D
Authority key identifier: 41:02:69:04:98:AC:37:8B:FF:EF:EE:27:BC:69:5F:91:A1:23:BF:43
Certificate issuer:       /CN=F364FE7FAF/serialNumber=4102690498AC378BFFEFEE27BC695F91A123BF43
Certificate serial:       046B
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/QQJpBJisN4v_7-4nvGlfkaEjv0M.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F364FE7F/8CEFCC7490B811EDBCC9A5ECF1222468/QQJpBJisN4v_7-4nvGlfkaEjv0M.mft
Manifest number:          0466
Signing time:             Sun 28 Dec 2025 03:16:58 +0000
Manifest this update:     Sun 28 Dec 2025 03:16:57 +0000
Manifest next update:     Tue 30 Dec 2025 03:16:57 +0000
Files and hashes:         1: QQJpBJisN4v_7-4nvGlfkaEjv0M.crl (hash: ma+RLDBPisiRigRSaiNqhxWC1PKhiiO7NwpXDjzroaE=)
                          2: 9093EBECEA8211EE9446CC99775412E6.roa (hash: DcDH5wFQnVUfU26v4luxsXa3eW9biUwnVqKcce51e3I=)
                          3: 87CF258C2DA511F09658F3D7DAE4EC9C.roa (hash: VWlaDjgTjpyuACktZVZWNtbFZ4HkyIqtY/A3o1MKtyU=)
                          4: E5FD19E037C111F08C089ADBDAE4EC9C.roa (hash: WSTUjBXRVuiAIXxXadMdKCjmnxqyjMHAgKMrm2ZTNkA=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F364FE7F/8CEFCC7490B811EDBCC9A5ECF1222468/QQJpBJisN4v_7-4nvGlfkaEjv0M.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F364FE7F/8CEFCC7490B811EDBCC9A5ECF1222468/QQJpBJisN4v_7-4nvGlfkaEjv0M.mft
                          rsync://rpki.afrinic.net/repository/afrinic/QQJpBJisN4v_7-4nvGlfkaEjv0M.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 30 Dec 2025 00:06:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1131 (0x46b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F364FE7FAF, serialNumber=4102690498AC378BFFEFEE27BC695F91A123BF43
        Validity
            Not Before: Dec 28 03:16:57 2025 GMT
            Not After : Dec 30 03:16:57 2025 GMT
        Subject: CN=6950a12a-a4b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:7b:2d:b0:f0:e3:3f:c8:32:45:c5:dd:80:42:
                    e4:aa:16:0f:fb:e8:65:10:df:72:90:ea:3a:18:2c:
                    98:dc:f3:38:c4:b1:09:da:d5:c0:ba:a8:43:40:64:
                    87:a9:1d:22:bb:bb:d5:a1:8d:bd:db:09:3b:71:20:
                    58:75:14:ae:d6:ba:75:e6:7c:1c:80:5c:66:88:01:
                    74:7c:66:c5:5c:b0:2c:72:2d:44:9f:bb:52:b5:2c:
                    ed:a2:14:55:b8:4c:36:f8:cc:fc:8e:5c:88:78:e6:
                    7d:32:2a:c4:06:12:2f:63:f4:83:73:72:a0:56:87:
                    68:e3:34:2a:1c:0a:fe:3d:9d:34:94:90:d1:5b:e5:
                    9a:8b:74:68:b5:1a:d5:9b:21:72:26:9b:68:08:8f:
                    cc:67:fa:82:f1:70:43:ae:11:56:0e:51:3b:d6:bd:
                    25:fc:36:b4:72:af:3b:0d:03:de:d6:a7:65:07:b4:
                    e6:7e:4e:85:03:95:15:df:06:35:9b:a5:b3:c5:52:
                    3d:ed:21:c0:af:7c:a2:19:be:33:b6:34:14:31:aa:
                    5f:ee:a0:30:6b:1e:b0:86:16:f9:79:07:5d:e2:25:
                    cb:81:47:5a:58:f1:6a:55:dd:c0:42:ec:f1:4a:ae:
                    f7:0b:a4:f6:11:77:dd:2d:cb:a6:ba:97:33:29:72:
                    d1:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:EC:43:48:18:CB:A0:46:2D:EC:F7:4C:78:94:99:FD:2C:D0:AB:9D
            X509v3 Authority Key Identifier:
                keyid:41:02:69:04:98:AC:37:8B:FF:EF:EE:27:BC:69:5F:91:A1:23:BF:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F364FE7F/8CEFCC7490B811EDBCC9A5ECF1222468/QQJpBJisN4v_7-4nvGlfkaEjv0M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/QQJpBJisN4v_7-4nvGlfkaEjv0M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F364FE7F/8CEFCC7490B811EDBCC9A5ECF1222468/QQJpBJisN4v_7-4nvGlfkaEjv0M.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:0e:33:4d:bc:d8:32:f1:d8:91:d6:f8:f5:ed:72:b0:b3:66:
         63:62:27:1e:0a:60:ae:ce:2f:31:f9:f7:2d:be:bf:b6:c7:d2:
         76:70:35:53:0d:48:d1:9e:5d:29:ae:a5:9c:6c:87:8f:c5:35:
         5c:36:cc:85:88:2b:b5:86:f3:fd:be:bf:a6:8d:21:24:9f:a8:
         e6:bd:02:55:59:9f:d2:76:f2:a2:08:62:76:ec:06:a7:63:4d:
         e3:d7:59:6a:33:cc:75:ed:ac:63:b3:d6:6d:74:0c:85:74:85:
         a7:22:31:65:d3:0a:a8:83:09:62:47:46:1a:72:b8:23:a3:60:
         d0:34:21:4c:a8:db:19:29:fb:8b:87:8e:7f:c7:b2:b9:e6:b3:
         d8:62:63:d1:54:56:6f:ec:d7:b7:81:77:3c:83:9b:f8:3a:1d:
         8a:f4:b2:46:a7:7d:f2:c5:a9:38:b2:57:03:fc:2f:9a:ac:ae:
         cf:5a:41:e5:44:a4:b2:a1:40:fa:2f:e4:53:fb:8d:5a:b6:05:
         90:98:b0:a9:1f:66:c4:95:bf:e8:54:b5:11:b6:76:97:bc:df:
         d8:14:30:f1:b4:18:c5:be:38:66:70:14:13:9e:ec:4f:38:a1:
         f0:5d:22:5f:77:b5:3f:5f:2c:f2:c2:1e:c0:35:bf:97:d9:80:
         9e:48:1d:28
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICBGswDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NEZFN0ZBRjExMC8GA1UEBRMoNDEwMjY5MDQ5OEFDMzc4QkZGRUZFRTI3QkM2OTVG
OTFBMTIzQkY0MzAeFw0yNTEyMjgwMzE2NTdaFw0yNTEyMzAwMzE2NTdaMBgxFjAU
BgNVBAMTDTY5NTBhMTJhLWE0YjYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCvey2w8OM/yDJFxd2AQuSqFg/76GUQ33KQ6joYLJjc8zjEsQna1cC6qENA
ZIepHSK7u9Whjb3bCTtxIFh1FK7WunXmfByAXGaIAXR8ZsVcsCxyLUSfu1K1LO2i
FFW4TDb4zPyOXIh45n0yKsQGEi9j9INzcqBWh2jjNCocCv49nTSUkNFb5ZqLdGi1
GtWbIXImm2gIj8xn+oLxcEOuEVYOUTvWvSX8NrRyrzsNA97Wp2UHtOZ+ToUDlRXf
BjWbpbPFUj3tIcCvfKIZvjO2NBQxql/uoDBrHrCGFvl5B13iJcuBR1pY8WpV3cBC
7PFKrvcLpPYRd90ty6a6lzMpctHnAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUBOxD
SBjLoEYt7PdMeJSZ/SzQq50wHwYDVR0jBBgwFoAUQQJpBJisN4v/7+4nvGlfkaEj
v0MwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjRGRTdGLzhDRUZDQzc0OTBCODExRURCQ0M5QTVFQ0YxMjIyNDY4L1FRSnBC
SmlzTjR2XzctNG52R2xma2FFanYwTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1FRSnBCSmlzTjR2XzctNG52R2xma2FFanYwTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2NEZFN0YvOENFRkNDNzQ5MEI4MTFFREJDQzlBNUVDRjEy
MjI0NjgvUVFKcEJKaXNONHZfNy00bnZHbGZrYUVqdjBNLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQA5DjNNvNgy8diR1vj17XKws2ZjYice
CmCuzi8x+fctvr+2x9J2cDVTDUjRnl0prqWcbIePxTVcNsyFiCu1hvP9vr+mjSEk
n6jmvQJVWZ/SdvKiCGJ27AanY03j11lqM8x17axjs9ZtdAyFdIWnIjFl0wqogwli
R0Yacrgjo2DQNCFMqNsZKfuLh45/x7K55rPYYmPRVFZv7Ne3gXc8g5v4Oh2K9LJG
p33yxak4slcD/C+arK7PWkHlRKSyoUD6L+RT+41atgWQmLCpH2bElb/oVLURtnaX
vN/YFDDxtBjFvjhmcBQTnuxPOKHwXSJfd7U/Xyzywh7ANb+X2YCeSB0o
-----END CERTIFICATE-----
Generated at Sun Dec 28 09:07:05 2025 by rpki-client