This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F365BC44/892D49C6F61811ECBE1B38AFF1222468/LQAVTmAKZArDKjKF2c6fxQqUGrM.mft
File:                     LQAVTmAKZArDKjKF2c6fxQqUGrM.mft (raw, json)
Hash identifier:          0WSBFfKl3rgshn/FGnr0rnH8zqMwtsg8C806TcNV6GY=
Subject key identifier:   4B:20:00:AD:52:7B:A1:CA:38:63:5A:94:6C:59:3F:7E:DC:49:F4:1A
Authority key identifier: 2D:00:15:4E:60:0A:64:0A:C3:2A:32:85:D9:CE:9F:C5:0A:94:1A:B3
Certificate issuer:       /CN=F365BC44AF/serialNumber=2D00154E600A640AC32A3285D9CE9FC50A941AB3
Certificate serial:       0533
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/LQAVTmAKZArDKjKF2c6fxQqUGrM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F365BC44/892D49C6F61811ECBE1B38AFF1222468/LQAVTmAKZArDKjKF2c6fxQqUGrM.mft
Manifest number:          052D
Signing time:             Mon 29 Dec 2025 02:51:30 +0000
Manifest this update:     Mon 29 Dec 2025 02:51:29 +0000
Manifest next update:     Wed 31 Dec 2025 02:51:29 +0000
Files and hashes:         1: LQAVTmAKZArDKjKF2c6fxQqUGrM.crl (hash: MlUiyBCAzCt/kNkQE784MaiYrXCmCOhUDphpOd7PuEg=)
                          2: 5AD2351EF62211ECA5384CCEF1222468.roa (hash: O2TbmJ0oluer0UrOj7dugRw2nzmfuIBjrJGzVgObtfc=)
                          3: 441FBD96F62211ECAEA706CEF1222468.roa (hash: eOgo72NBB1TzX9MDNE5guVogIR1WbLYMRiu06PhqwRs=)
                          4: AEB3FD70F61811ECA343ACAFF1222468.roa (hash: yr8c8nv1fl6R2/dpv4d+UEGlhaBD6Mc7GC6CbBKlwUE=)
                          5: 92592E3EF62211ECB1890ECFF1222468.roa (hash: r+2CApErk9WQshLvMZh/1Yeo8KK9DMqaF9+XKRWgW4w=)
                          6: 76C25FA6F62211ECA4A5A1CEF1222468.roa (hash: bltEFXn7G4T8us2DT/CcL4lO2ojz0kPAbTbNgBQhLGQ=)
                          7: C977373AF61811ECAE6C16B0F1222468.roa (hash: I6EVPppAZg4DBAMr2DMZolkT3ClI2lJdmUjSbTKJ71k=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F365BC44/892D49C6F61811ECBE1B38AFF1222468/LQAVTmAKZArDKjKF2c6fxQqUGrM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F365BC44/892D49C6F61811ECBE1B38AFF1222468/LQAVTmAKZArDKjKF2c6fxQqUGrM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/LQAVTmAKZArDKjKF2c6fxQqUGrM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 31 Dec 2025 02:51:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1331 (0x533)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F365BC44AF, serialNumber=2D00154E600A640AC32A3285D9CE9FC50A941AB3
        Validity
            Not Before: Dec 29 02:51:29 2025 GMT
            Not After : Dec 31 02:51:29 2025 GMT
        Subject: CN=6951ecb2-b689
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:a6:6c:e2:38:77:04:a3:83:33:f3:a9:cd:e2:
                    13:f6:3c:8b:f0:a5:75:c9:8d:a5:73:ac:e7:e0:ae:
                    e2:d1:d8:96:6a:f4:61:f1:20:1c:01:ca:ef:2a:f7:
                    45:4a:6a:fb:41:36:92:ee:83:e2:45:fb:eb:58:35:
                    0f:92:e3:1c:29:80:d2:64:f0:32:51:83:5f:22:96:
                    12:44:98:e4:c5:62:c4:c7:82:75:ef:65:58:87:c2:
                    35:5d:07:e4:2d:49:de:b7:ef:b9:90:5e:6d:5c:5d:
                    c8:32:39:d4:4e:69:d3:2f:2b:59:f0:3f:88:b6:94:
                    c5:66:30:b5:fd:86:5a:d5:72:13:45:d9:66:f8:40:
                    51:ea:d5:93:82:50:26:1a:bc:cb:09:37:d8:26:3d:
                    50:db:bb:2f:b4:3d:70:bd:ed:1d:91:9a:fc:57:41:
                    23:4c:03:77:51:3f:a8:d0:e9:d5:f6:00:fd:96:d4:
                    57:56:ee:7d:eb:cc:25:12:e5:29:ca:4e:d1:70:19:
                    6f:ae:d3:2d:f4:df:be:d1:ee:f6:e8:3e:19:14:75:
                    47:72:d2:49:11:f8:2d:4d:f9:90:bb:1a:50:09:28:
                    8d:43:ff:a3:8c:05:25:32:4c:f5:eb:7a:12:9e:7c:
                    66:5f:dd:d8:72:b5:1b:22:07:fb:86:89:7b:ba:f0:
                    f1:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:20:00:AD:52:7B:A1:CA:38:63:5A:94:6C:59:3F:7E:DC:49:F4:1A
            X509v3 Authority Key Identifier:
                keyid:2D:00:15:4E:60:0A:64:0A:C3:2A:32:85:D9:CE:9F:C5:0A:94:1A:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F365BC44/892D49C6F61811ECBE1B38AFF1222468/LQAVTmAKZArDKjKF2c6fxQqUGrM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/LQAVTmAKZArDKjKF2c6fxQqUGrM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F365BC44/892D49C6F61811ECBE1B38AFF1222468/LQAVTmAKZArDKjKF2c6fxQqUGrM.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:b1:dd:8d:90:62:d4:ec:e4:79:a2:35:35:e7:f0:6e:ce:16:
         87:d2:4e:71:db:9f:d7:3c:32:b2:fd:93:f9:d9:4a:87:4f:84:
         53:c7:8a:f1:6c:b2:08:d1:2c:f5:f1:21:ab:2d:23:16:e8:63:
         a9:4a:f2:28:d0:c1:20:50:ef:38:16:b4:48:4a:82:e7:78:ca:
         a9:8f:28:c0:9f:77:f5:e3:62:7d:f4:99:db:7f:90:e2:07:c8:
         d7:10:19:7f:44:50:3a:cb:8f:cb:09:f6:64:b5:ad:1a:92:52:
         65:fa:18:79:c4:41:c7:14:0a:9b:f8:d3:5d:72:00:05:d6:f9:
         95:51:72:5d:c2:5e:b2:7e:8f:6c:3b:33:67:0c:e2:33:ae:67:
         e2:61:5f:22:22:38:91:ca:13:aa:63:95:b4:8c:72:24:26:40:
         f6:a5:80:26:51:c8:e8:4f:1f:6a:b5:04:d7:20:b8:30:a2:a8:
         03:0b:25:f1:bf:63:bd:99:69:7f:03:30:32:7b:82:c1:a9:40:
         ca:5f:0a:05:5b:79:88:2b:5a:6e:51:22:8c:38:a3:a2:8a:19:
         d3:e2:21:35:5c:3c:8b:92:bc:68:1a:39:d1:9e:5b:f9:85:a2:
         bd:9a:b9:4b:37:d8:dc:f4:60:87:2b:96:a0:aa:8c:37:b4:47:
         4a:51:6b:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 30 01:31:44 2025 by rpki-client