This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367F26D/2D5854E870B911E9B7123D3FF8AEA228/qxmWRhn_hTQ8wJEYBnOorFKGEPQ.mft
File:                     qxmWRhn_hTQ8wJEYBnOorFKGEPQ.mft (raw, json)
Hash identifier:          BRvSkM0JydKfJG9wx3DIT6WZlIRMSRvh1bWIoJJWSYA=
Subject key identifier:   83:DB:CA:BD:AE:9A:A3:DA:D4:08:AE:30:6A:39:C4:BF:FE:41:ED:04
Authority key identifier: AB:19:96:46:19:FF:85:34:3C:C0:91:18:06:73:A8:AC:52:86:10:F4
Certificate issuer:       /CN=F367F26DAF/serialNumber=AB19964619FF85343CC091180673A8AC528610F4
Certificate serial:       09E7
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/qxmWRhn_hTQ8wJEYBnOorFKGEPQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F367F26D/2D5854E870B911E9B7123D3FF8AEA228/qxmWRhn_hTQ8wJEYBnOorFKGEPQ.mft
Manifest number:          09D2
Signing time:             Sun 21 Dec 2025 01:18:45 +0000
Manifest this update:     Sun 21 Dec 2025 01:18:44 +0000
Manifest next update:     Tue 23 Dec 2025 01:18:44 +0000
Files and hashes:         1: qxmWRhn_hTQ8wJEYBnOorFKGEPQ.crl (hash: J6Fqh+tDSs3h7eDIs8xFSLSn0Lq9CuQYKzW/UH4DKXk=)
                          2: 20289B309D8511EF8A56A467762E951A.roa (hash: G5InreV+s/mDjPnREuW/+fXZ42uW0S7SWpUVDZ23oTk=)
                          3: 7CFBEB4A8FA211F08D1E5FBCDAE4EC9C.roa (hash: f8ypJFzZi/+69BhBnv9bsOOJoTGmoh2yg/JFPVO+hyE=)
                          4: 60610198296211EF83AE3D3D7DDC24C2.roa (hash: UBGAw16NrChSPv8tNag0KqvL7//5uXFEiv/3dqV73Kw=)
                          5: D9AFC14C980311EE9C9EE232D25BE465.roa (hash: 3wIsUAj1b7QA8gDWmN43Tp1fe+wx4WBvqsu3o9Runpg=)
                          6: E44691A42F3211F09C2DD1BADAE4EC9C.roa (hash: lrbHcWPiIcB8N+/jAI7IqmQFwQtonM2D4rkcMKVtlnQ=)
                          7: DD377C8CECC311EE9147A3C0775412E6.roa (hash: NLvAngBkDWgdSocM3OP6MpCBbIBTpSnwK++fJeiXNgI=)
                          8: 877BAA2435EF11EE9AA840814AD9E6FC.roa (hash: L7v+Fkk6UZ4vZun6DcXrXQzXhAefHfj4VaNVSBn4npk=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F367F26D/2D5854E870B911E9B7123D3FF8AEA228/qxmWRhn_hTQ8wJEYBnOorFKGEPQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F367F26D/2D5854E870B911E9B7123D3FF8AEA228/qxmWRhn_hTQ8wJEYBnOorFKGEPQ.mft
                          rsync://rpki.afrinic.net/repository/afrinic/qxmWRhn_hTQ8wJEYBnOorFKGEPQ.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 23 Dec 2025 00:06:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2535 (0x9e7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F367F26DAF, serialNumber=AB19964619FF85343CC091180673A8AC528610F4
        Validity
            Not Before: Dec 21 01:18:44 2025 GMT
            Not After : Dec 23 01:18:44 2025 GMT
        Subject: CN=69474af5-67ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:11:3c:2a:49:49:e4:72:69:2e:c2:ea:07:ef:
                    8e:86:36:da:57:ab:a9:26:a7:82:27:28:5d:d2:59:
                    b4:e0:14:3d:d5:e6:1f:4e:78:b5:3c:40:2d:e3:3e:
                    e6:8e:bd:1b:a9:7e:74:30:7c:0f:a5:ac:4e:77:71:
                    ec:45:d4:8a:55:a4:67:a1:5c:3b:e4:ef:59:94:a0:
                    03:5a:ce:63:c1:0c:a3:25:7e:e9:3d:3d:a5:02:2a:
                    f5:0c:70:b8:23:b7:a6:d2:77:40:0e:e3:03:c3:f5:
                    37:d6:6c:a9:31:9a:9f:f7:fe:8f:f1:49:52:96:f8:
                    08:45:04:2c:47:84:81:fd:50:37:8a:a6:fb:a3:2e:
                    e2:94:51:b4:36:fc:7c:c3:2d:f7:bf:02:4a:42:bd:
                    41:fa:46:40:c2:0e:b0:63:ec:2e:39:04:38:81:9e:
                    b7:e1:29:51:d0:de:c9:4a:6c:a2:27:ae:55:c0:99:
                    a8:36:4b:34:c3:87:04:1f:65:2f:b3:18:3e:4e:5a:
                    9a:6e:86:37:a4:64:a1:90:fd:b3:65:38:4e:8d:02:
                    6d:52:ed:fb:90:87:5c:a6:42:40:bd:a7:36:20:dc:
                    ca:e8:ed:c9:c7:28:7c:e2:67:5a:2d:f0:1b:13:48:
                    bb:2d:d3:a6:e9:69:e3:8b:6c:57:e2:c8:10:c5:7d:
                    75:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:DB:CA:BD:AE:9A:A3:DA:D4:08:AE:30:6A:39:C4:BF:FE:41:ED:04
            X509v3 Authority Key Identifier:
                keyid:AB:19:96:46:19:FF:85:34:3C:C0:91:18:06:73:A8:AC:52:86:10:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F367F26D/2D5854E870B911E9B7123D3FF8AEA228/qxmWRhn_hTQ8wJEYBnOorFKGEPQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/qxmWRhn_hTQ8wJEYBnOorFKGEPQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367F26D/2D5854E870B911E9B7123D3FF8AEA228/qxmWRhn_hTQ8wJEYBnOorFKGEPQ.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:3c:fe:d4:5c:a0:27:77:9f:2e:24:ef:1e:28:a0:34:a2:cf:
         b4:c1:62:1c:24:91:07:1d:9f:c4:ba:a3:31:32:9c:9d:26:f2:
         3c:38:15:3c:a8:58:28:31:13:78:2e:13:a8:9c:05:fe:fb:5a:
         fc:28:c3:73:23:46:51:23:46:2f:9e:a0:d2:59:0d:f7:26:95:
         03:d9:ae:38:57:d9:9e:cd:74:ca:08:0c:c5:e1:f2:e6:e7:b2:
         2b:93:b5:9c:2a:1c:f6:07:68:e6:23:37:18:3d:94:f5:6c:dc:
         4a:18:b2:e2:b2:61:f2:22:8b:dd:ef:8c:d2:cd:2a:2f:d3:b3:
         93:fd:4d:12:f1:9d:68:2f:0c:14:05:b3:5f:06:06:fa:ce:e1:
         49:2f:cb:90:d0:b6:7c:9d:00:d2:89:d5:b9:67:8a:47:90:f9:
         d8:f3:48:d5:7b:05:e7:f1:0f:ed:1a:ec:42:2a:e8:b6:07:62:
         52:1b:75:30:57:db:f0:a6:86:95:e8:3c:66:46:38:d7:03:b0:
         74:44:fb:6e:69:29:ec:70:a7:78:4f:b9:fa:b1:36:2f:8c:ac:
         a6:d9:50:16:9f:b2:67:91:ce:c7:ff:fc:ed:13:b7:4b:3c:b6:
         97:0a:b7:f7:d2:a3:95:85:01:1e:d0:4d:a5:8c:a0:5d:46:d9:
         47:a0:e7:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 04:10:30 2025 by rpki-client