This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F365972A/2EA31FD677E411EE96312D884AD9E6FC/MCQ1DTQJIIK5C1PqPZv9uOdFHVo.mft
File:                     MCQ1DTQJIIK5C1PqPZv9uOdFHVo.mft (raw, json)
Hash identifier:          5ny7GO79JxhVRUGHyqGtUvXdPHUJ4TNfnefPsWsXMKs=
Subject key identifier:   2F:89:AA:41:A3:E8:46:05:1D:23:15:91:01:C7:EC:5F:91:2E:FD:7E
Authority key identifier: 30:24:35:0D:34:09:20:82:B9:0B:53:EA:3D:9B:FD:B8:E7:45:1D:5A
Certificate issuer:       /CN=F365972AAF/serialNumber=3024350D34092082B90B53EA3D9BFDB8E7451D5A
Certificate serial:       032C
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/MCQ1DTQJIIK5C1PqPZv9uOdFHVo.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F365972A/2EA31FD677E411EE96312D884AD9E6FC/MCQ1DTQJIIK5C1PqPZv9uOdFHVo.mft
Manifest number:          032A
Signing time:             Thu 25 Dec 2025 03:50:24 +0000
Manifest this update:     Thu 25 Dec 2025 03:50:23 +0000
Manifest next update:     Sat 27 Dec 2025 03:50:23 +0000
Files and hashes:         1: MCQ1DTQJIIK5C1PqPZv9uOdFHVo.crl (hash: zBOcUGJ8lWjK+pyrDd8CxA4kALFGX/NO/tN1Sus8npI=)
                          2: 92399C0CCFB511F0886853A2DAE4EC9C.roa (hash: 8B6wU1xY38cYhzr9lZGnTjsUMM95hSXAG9bGNEVmCPI=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F365972A/2EA31FD677E411EE96312D884AD9E6FC/MCQ1DTQJIIK5C1PqPZv9uOdFHVo.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F365972A/2EA31FD677E411EE96312D884AD9E6FC/MCQ1DTQJIIK5C1PqPZv9uOdFHVo.mft
                          rsync://rpki.afrinic.net/repository/afrinic/MCQ1DTQJIIK5C1PqPZv9uOdFHVo.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 27 Dec 2025 00:06:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 812 (0x32c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F365972AAF, serialNumber=3024350D34092082B90B53EA3D9BFDB8E7451D5A
        Validity
            Not Before: Dec 25 03:50:23 2025 GMT
            Not After : Dec 27 03:50:23 2025 GMT
        Subject: CN=694cb480-f7e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:b3:35:25:da:5f:6a:3a:68:41:88:32:de:56:
                    a0:37:84:87:45:d1:e3:cd:63:5b:77:60:ae:bf:59:
                    89:30:3b:e6:01:f0:28:70:20:9d:90:9a:09:0d:66:
                    67:06:8f:50:9f:58:8c:fa:e8:33:d6:d7:9d:5e:6f:
                    c5:90:b8:eb:89:47:97:c1:26:2a:17:78:62:17:2d:
                    54:06:2c:23:e8:0d:92:38:2c:a9:9e:c7:10:81:6a:
                    37:57:78:bc:1e:8c:46:aa:be:5e:3d:3c:70:8d:c0:
                    ec:47:06:34:a7:df:7f:d6:f6:eb:3d:b5:2e:7f:80:
                    d5:7c:24:f8:bb:1b:ed:23:45:2f:db:38:4a:24:4c:
                    8e:bb:64:e9:c0:d7:b3:6f:10:58:8d:2f:ac:b1:ac:
                    9f:43:fc:5c:9f:a6:61:44:12:e4:36:d4:a4:98:af:
                    29:b6:99:a2:ca:5b:83:55:66:64:9c:fb:87:f9:94:
                    05:93:83:dd:fb:4d:2b:7f:99:22:92:70:95:56:d7:
                    04:8c:fe:1f:ac:ce:ca:00:77:0d:21:ca:8d:cf:a0:
                    6b:fb:bd:5a:92:2a:78:15:d3:56:03:4e:9d:bd:10:
                    23:28:ee:7c:f4:15:72:72:7e:f4:1f:ae:b6:9b:6b:
                    76:0a:ff:55:eb:8a:bd:f6:de:b4:9f:92:9d:ce:4c:
                    9c:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:89:AA:41:A3:E8:46:05:1D:23:15:91:01:C7:EC:5F:91:2E:FD:7E
            X509v3 Authority Key Identifier:
                keyid:30:24:35:0D:34:09:20:82:B9:0B:53:EA:3D:9B:FD:B8:E7:45:1D:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F365972A/2EA31FD677E411EE96312D884AD9E6FC/MCQ1DTQJIIK5C1PqPZv9uOdFHVo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/MCQ1DTQJIIK5C1PqPZv9uOdFHVo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F365972A/2EA31FD677E411EE96312D884AD9E6FC/MCQ1DTQJIIK5C1PqPZv9uOdFHVo.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:b4:bb:d6:f9:e4:f7:b9:5a:ee:ec:e1:70:4d:7a:7a:1d:ae:
         47:05:0f:8e:a2:0a:42:71:e3:66:8a:cc:2d:48:dd:14:6b:00:
         b5:03:db:6b:51:50:4a:9d:8f:9d:a4:6d:62:cd:78:a9:fa:37:
         ff:4f:d2:fc:d1:43:f3:8f:f7:48:6b:a0:4e:28:a4:5b:38:6f:
         07:68:bb:b7:03:78:d8:95:e7:dc:1c:b6:d8:36:f9:2e:b2:87:
         70:48:90:b9:07:c3:0b:9e:70:01:49:36:7b:8b:81:d9:b1:32:
         99:3d:24:88:76:e6:b2:27:8a:77:4b:40:54:38:1a:8f:ae:82:
         a3:c3:35:3c:fb:00:47:86:47:ee:2f:66:e1:b2:fc:f5:29:84:
         cc:db:7c:03:01:0f:54:73:95:77:14:89:44:1e:4f:a7:4d:9f:
         63:6d:23:66:26:be:48:80:8c:dc:18:0e:23:e4:4d:e6:5d:2b:
         c9:ba:05:c2:d4:07:bd:96:0e:a9:e0:c2:3b:70:a9:db:ba:fe:
         e8:d6:fa:9b:3f:17:ed:09:c3:ac:25:9c:c6:17:fe:3a:63:03:
         79:ed:9c:47:95:04:4d:7a:a0:7e:1a:e6:3b:9c:16:4a:bf:41:
         c7:00:97:a5:ab:21:eb:e7:f8:f2:4d:6f:0e:c9:30:55:3d:4e:
         72:2f:ce:bb
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICAywwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NTk3MkFBRjExMC8GA1UEBRMoMzAyNDM1MEQzNDA5MjA4MkI5MEI1M0VBM0Q5QkZE
QjhFNzQ1MUQ1QTAeFw0yNTEyMjUwMzUwMjNaFw0yNTEyMjcwMzUwMjNaMBgxFjAU
BgNVBAMTDTY5NGNiNDgwLWY3ZTQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCvszUl2l9qOmhBiDLeVqA3hIdF0ePNY1t3YK6/WYkwO+YB8ChwIJ2QmgkN
ZmcGj1CfWIz66DPW151eb8WQuOuJR5fBJioXeGIXLVQGLCPoDZI4LKmexxCBajdX
eLwejEaqvl49PHCNwOxHBjSn33/W9us9tS5/gNV8JPi7G+0jRS/bOEokTI67ZOnA
17NvEFiNL6yxrJ9D/FyfpmFEEuQ21KSYrym2maLKW4NVZmSc+4f5lAWTg937TSt/
mSKScJVW1wSM/h+szsoAdw0hyo3PoGv7vVqSKngV01YDTp29ECMo7nz0FXJyfvQf
rraba3YK/1Xrir323rSfkp3OTJyBAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUL4mq
QaPoRgUdIxWRAcfsX5Eu/X4wHwYDVR0jBBgwFoAUMCQ1DTQJIIK5C1PqPZv9uOdF
HVowDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjU5NzJBLzJFQTMxRkQ2NzdFNDExRUU5NjMxMkQ4ODRBRDlFNkZDL01DUTFE
VFFKSUlLNUMxUHFQWnY5dU9kRkhWby5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL01DUTFEVFFKSUlLNUMxUHFQWnY5dU9kRkhWby5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2NTk3MkEvMkVBMzFGRDY3N0U0MTFFRTk2MzEyRDg4NEFE
OUU2RkMvTUNRMURUUUpJSUs1QzFQcVBadjl1T2RGSFZvLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAOtLvW+eT3uVru7OFwTXp6Ha5HBQ+O
ogpCceNmiswtSN0UawC1A9trUVBKnY+dpG1izXip+jf/T9L80UPzj/dIa6BOKKRb
OG8HaLu3A3jYlefcHLbYNvkusodwSJC5B8MLnnABSTZ7i4HZsTKZPSSIduayJ4p3
S0BUOBqProKjwzU8+wBHhkfuL2bhsvz1KYTM23wDAQ9Uc5V3FIlEHk+nTZ9jbSNm
Jr5IgIzcGA4j5E3mXSvJugXC1Ae9lg6p4MI7cKnbuv7o1vqbPxftCcOsJZzGF/46
YwN57ZxHlQRNeqB+GuY7nBZKv0HHAJelqyHr5/jyTW8OyTBVPU5yL867
-----END CERTIFICATE-----
Generated at Thu Dec 25 07:23:57 2025 by rpki-client