This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369BF27/5800DCF491EA11E9BA56927AF8AEA228/zQfXyJ7OTA-dBKGxU7vHEN8Bay0.mft
File:                     zQfXyJ7OTA-dBKGxU7vHEN8Bay0.mft (raw, json)
Hash identifier:          zqtLBUbN/PMPgfERbVXqu5iXRpncIDygOmqdvAh+txs=
Subject key identifier:   D3:8C:D1:0E:57:65:F2:8B:66:38:BD:37:88:D5:6B:53:91:42:4C:AF
Authority key identifier: CD:07:D7:C8:9E:CE:4C:0F:9D:04:A1:B1:53:BB:C7:10:DF:01:6B:2D
Certificate issuer:       /CN=F369BF27AR/serialNumber=CD07D7C89ECE4C0F9D04A1B153BBC710DF016B2D
Certificate serial:       09A1
Authority info access:    rsync://rpki.afrinic.net/repository/arin/zQfXyJ7OTA-dBKGxU7vHEN8Bay0.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F369BF27/5800DCF491EA11E9BA56927AF8AEA228/zQfXyJ7OTA-dBKGxU7vHEN8Bay0.mft
Manifest number:          0995
Signing time:             Sun 21 Dec 2025 01:29:13 +0000
Manifest this update:     Sun 21 Dec 2025 01:29:12 +0000
Manifest next update:     Tue 23 Dec 2025 01:29:12 +0000
Files and hashes:         1: zQfXyJ7OTA-dBKGxU7vHEN8Bay0.crl (hash: ZOYymSMihJSgxAVZ88v4zVN68mMD478swQoBWSqHE/o=)
                          2: C28DA6C44D5F11F089D77C8ADAE4EC9C.roa (hash: dABQoz9AGXGyoNBAetMSbs1U62SRqLiX8c5R1HY93gg=)
                          3: 1AD0D08C4D5F11F08E482186DAE4EC9C.roa (hash: OhoSn83syBewwYcLzVXxyO/+vTXDKKmwuhAAzmLRplo=)
                          4: E2B1CB3E4D5E11F0AC9C0484DAE4EC9C.roa (hash: yv5AfJmE56S5ts/c2onzn6ricd3K2oEmGaCJUOJTiXA=)
                          5: 7F9AB1CC98F711E9BABB4B76F8AEA228.roa (hash: jzZ3XEm/0+bQmIh4jXGZex7PIgjtpornzaVmedGVKeA=)
                          6: 4601A8304D5F11F0AA717286DAE4EC9C.roa (hash: O60MwYsiZd+UlKceOJ85IOxK7Q1+As/RwsVdr1Ykpjc=)
                          7: 937EE7024D6011F09A38078FDAE4EC9C.roa (hash: pbBP0ntQdVgVm+KFXqo/FvwDRupvw0CtUQRgWotDjnY=)
                          8: 318EA42098F711E9A08C1176F8AEA228.roa (hash: w0LdOEkkXXKRsW1PLK4DZkJUwY2G0SIkANImRgbjTcI=)
                          9: 3A1D58C44D6011F093A9B58CDAE4EC9C.roa (hash: R1suNQZf1mKtdv/mgrGQzmzP42VGw/+PJeTA6yPQF0w=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F369BF27/5800DCF491EA11E9BA56927AF8AEA228/zQfXyJ7OTA-dBKGxU7vHEN8Bay0.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F369BF27/5800DCF491EA11E9BA56927AF8AEA228/zQfXyJ7OTA-dBKGxU7vHEN8Bay0.mft
                          rsync://rpki.afrinic.net/repository/arin/zQfXyJ7OTA-dBKGxU7vHEN8Bay0.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 23 Dec 2025 00:26:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2465 (0x9a1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F369BF27AR, serialNumber=CD07D7C89ECE4C0F9D04A1B153BBC710DF016B2D
        Validity
            Not Before: Dec 21 01:29:12 2025 GMT
            Not After : Dec 23 01:29:12 2025 GMT
        Subject: CN=69474d68-1aef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:3a:e5:c5:b4:37:7e:c1:19:eb:4e:af:bc:39:
                    5a:35:82:49:f7:07:5f:ca:46:e8:7e:09:64:7e:45:
                    59:00:0c:2a:7c:f2:2c:2d:63:19:95:75:99:63:78:
                    ad:12:53:d2:78:0b:28:a8:c7:fe:ce:3a:3d:48:0c:
                    96:f3:84:e1:19:81:1e:3b:55:2e:e0:5d:03:14:9d:
                    77:58:a6:64:5e:6e:37:85:61:c8:68:2d:2b:62:51:
                    51:bb:90:36:e4:55:8a:33:a4:90:8a:d0:77:51:31:
                    73:f5:3f:5a:0a:69:fa:06:74:20:75:e0:5b:0c:97:
                    d6:c9:3e:fd:d6:1e:01:ee:f4:8d:dd:b1:e0:1b:82:
                    d0:21:6f:71:bf:52:84:5f:2e:fa:b1:8c:cc:6f:7f:
                    d9:38:a2:ba:57:e8:35:b6:eb:28:a5:3f:f5:c6:d0:
                    c9:83:68:b1:57:0b:12:03:4f:d3:be:91:4f:c9:7b:
                    73:30:1e:52:87:8d:ba:2c:97:94:61:cf:8c:b6:8d:
                    10:5a:e9:b1:05:9e:4c:7e:ae:eb:bd:c9:a2:d1:fa:
                    97:e7:a8:e7:a1:67:ab:52:e2:38:10:d6:20:f3:3e:
                    ac:2f:51:1f:c0:5b:b8:9d:eb:68:b5:97:3d:ec:09:
                    27:e7:d2:0e:21:3b:f1:68:d5:fb:02:e1:7a:85:54:
                    42:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:8C:D1:0E:57:65:F2:8B:66:38:BD:37:88:D5:6B:53:91:42:4C:AF
            X509v3 Authority Key Identifier:
                keyid:CD:07:D7:C8:9E:CE:4C:0F:9D:04:A1:B1:53:BB:C7:10:DF:01:6B:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F369BF27/5800DCF491EA11E9BA56927AF8AEA228/zQfXyJ7OTA-dBKGxU7vHEN8Bay0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/zQfXyJ7OTA-dBKGxU7vHEN8Bay0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369BF27/5800DCF491EA11E9BA56927AF8AEA228/zQfXyJ7OTA-dBKGxU7vHEN8Bay0.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:cb:52:c6:2d:e2:cd:46:7c:45:ea:9a:38:73:0f:a8:cb:26:
         6d:08:b4:c9:86:69:42:ea:7d:98:3b:2a:69:eb:27:06:f5:a9:
         7c:72:7f:34:76:27:14:da:0c:32:26:79:c0:ac:96:11:02:f5:
         93:11:09:c1:52:da:c3:a1:67:3d:cf:54:e1:16:4d:14:59:c1:
         b5:07:4c:6f:1c:87:02:b7:46:a1:61:8a:95:f2:ec:8e:32:5e:
         b4:c9:ca:a8:ca:ef:01:f0:c2:0f:70:1b:3f:cd:ce:49:17:73:
         60:16:10:29:1d:b8:cb:c1:a3:d1:3a:dc:08:0b:3c:e0:d9:42:
         ba:d4:1d:da:dc:e4:d2:b4:4b:66:78:69:fe:05:86:1d:83:81:
         ca:3a:fb:e6:bc:50:d1:ea:60:31:cb:93:ae:a0:0b:7e:f6:d3:
         00:3a:4c:07:60:17:67:9d:a6:f5:0a:56:ae:6a:ca:42:99:3a:
         0d:dc:d7:b9:93:3b:7f:5e:48:1f:0f:84:78:ad:0e:b3:5e:e4:
         b5:f3:26:86:f8:5c:9c:b9:63:b7:2b:f0:3c:33:e8:bf:d6:89:
         0e:9e:99:e3:51:ca:27:5b:f5:45:02:83:fb:e1:7c:d9:57:1e:
         fb:fa:a6:75:4b:33:55:c1:1e:97:be:93:18:2f:6a:21:ba:2a:
         6b:0e:7b:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 07:23:28 2025 by rpki-client