This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D2FA4/3425FC804CEA11F0948EF79BDAE4EC9C/QSHSjgu56v7gIAP5I6x0DCb1g2Q.mft
File:                     QSHSjgu56v7gIAP5I6x0DCb1g2Q.mft (raw, json)
Hash identifier:          otsjxDTyS7iY5abzbrBie9PJgvlh9EmA+S6W7yTjnDg=
Subject key identifier:   88:EA:39:9F:29:5E:84:6C:B0:A5:18:90:35:8D:88:DB:C1:D9:AE:26
Authority key identifier: 41:21:D2:8E:0B:B9:EA:FE:E0:20:03:F9:23:AC:74:0C:26:F5:83:64
Certificate issuer:       /CN=F36D2FA4AR/serialNumber=4121D28E0BB9EAFEE02003F923AC740C26F58364
Certificate serial:       C3
Authority info access:    rsync://rpki.afrinic.net/repository/arin/QSHSjgu56v7gIAP5I6x0DCb1g2Q.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36D2FA4/3425FC804CEA11F0948EF79BDAE4EC9C/QSHSjgu56v7gIAP5I6x0DCb1g2Q.mft
Manifest number:          C1
Signing time:             Sat 20 Dec 2025 05:00:56 +0000
Manifest this update:     Sat 20 Dec 2025 05:00:55 +0000
Manifest next update:     Mon 22 Dec 2025 05:00:55 +0000
Files and hashes:         1: QSHSjgu56v7gIAP5I6x0DCb1g2Q.crl (hash: Pu3uYn60UP2/Kw0jeRtPOuhxsjIzZyjnZQqbP49f520=)
                          2: DD733EA6501911F081EC1BD5DAE4EC9C.roa (hash: pTSTw7CMzw5Tzo3x06Bd0K5rfFXqGfOJjDBXR7lNILg=)
                          3: 702497F0502311F0A0A1EC91DAE4EC9C.roa (hash: TKThQssce2usSG8fqrLv7uZqNWwbS2fbqTY3b7wi6xo=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36D2FA4/3425FC804CEA11F0948EF79BDAE4EC9C/QSHSjgu56v7gIAP5I6x0DCb1g2Q.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36D2FA4/3425FC804CEA11F0948EF79BDAE4EC9C/QSHSjgu56v7gIAP5I6x0DCb1g2Q.mft
                          rsync://rpki.afrinic.net/repository/arin/QSHSjgu56v7gIAP5I6x0DCb1g2Q.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 22 Dec 2025 05:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 195 (0xc3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36D2FA4AR, serialNumber=4121D28E0BB9EAFEE02003F923AC740C26F58364
        Validity
            Not Before: Dec 20 05:00:55 2025 GMT
            Not After : Dec 22 05:00:55 2025 GMT
        Subject: CN=69462d87-8227
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:5e:6c:b1:92:cf:ab:e8:3c:82:fc:e1:21:8d:
                    7e:70:dd:5f:db:61:d6:55:a2:94:2e:88:42:c4:be:
                    f6:9b:74:4c:ce:b4:5e:29:6d:a6:03:89:01:9e:95:
                    57:c2:4d:10:5a:3f:44:a7:97:4e:87:e2:33:0a:ad:
                    a7:5d:f2:5e:ae:dd:12:ea:73:06:6f:b5:d7:46:02:
                    97:aa:c3:b7:ed:b6:8d:22:0e:20:e2:68:25:34:c9:
                    f8:3a:d4:84:fe:c0:6b:0f:10:f5:bc:b6:d4:db:5f:
                    af:31:31:d8:ce:e3:c0:f1:3f:6e:fe:68:34:56:56:
                    82:68:34:d8:64:47:0e:9c:5f:39:08:7d:c3:49:21:
                    20:19:ca:32:43:01:7c:37:a0:24:00:90:d1:74:cf:
                    7e:88:25:15:dc:dc:32:26:6f:8f:33:aa:8b:ab:aa:
                    c9:5f:62:41:d0:31:e6:fd:7a:89:14:6a:d1:fa:f5:
                    d4:df:36:c7:a5:2e:d1:c5:ab:f6:18:9c:37:05:b6:
                    82:11:1b:8a:ca:e7:e6:21:58:2b:2a:37:22:35:87:
                    ff:bc:80:cd:64:b3:ce:7b:23:cc:d7:eb:4b:f7:a6:
                    4f:f5:44:82:6e:a1:47:74:cf:98:46:3f:9b:88:49:
                    0f:53:62:b2:96:93:e9:56:c0:3a:ad:3c:69:41:59:
                    94:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:EA:39:9F:29:5E:84:6C:B0:A5:18:90:35:8D:88:DB:C1:D9:AE:26
            X509v3 Authority Key Identifier:
                keyid:41:21:D2:8E:0B:B9:EA:FE:E0:20:03:F9:23:AC:74:0C:26:F5:83:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36D2FA4/3425FC804CEA11F0948EF79BDAE4EC9C/QSHSjgu56v7gIAP5I6x0DCb1g2Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/QSHSjgu56v7gIAP5I6x0DCb1g2Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D2FA4/3425FC804CEA11F0948EF79BDAE4EC9C/QSHSjgu56v7gIAP5I6x0DCb1g2Q.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:ef:af:01:0c:ca:97:37:72:22:1c:4b:00:55:c4:3f:c7:00:
         7f:ea:88:bd:68:4f:29:f2:05:30:16:1c:32:10:b9:d7:95:51:
         d1:be:7e:a0:09:ff:b6:5a:3f:24:a6:e4:55:f8:9f:7d:e2:55:
         fe:38:62:6f:05:7f:d9:f0:4f:5a:a1:c7:4e:9d:51:a8:dc:dc:
         a2:6c:cd:3d:d0:89:61:20:ab:7f:cc:eb:ea:33:b6:01:f5:34:
         16:b3:61:a9:79:61:db:6b:31:00:35:88:5c:05:8f:1e:d2:6d:
         6c:fe:2e:91:e5:dd:2f:4e:62:6b:22:27:d7:e1:d1:cf:bc:bd:
         ea:68:b3:fc:f3:71:88:f7:be:61:64:41:29:88:94:25:99:c4:
         2b:17:5c:90:95:b6:6a:b7:2d:fe:10:4f:77:b9:79:1b:83:92:
         49:43:70:67:7f:9b:4e:07:84:bb:b0:c7:1a:c2:48:24:3c:c6:
         fd:2a:2c:6d:68:ff:89:60:c0:df:05:60:c0:81:1f:94:76:32:
         b7:cb:4e:fa:f4:9f:23:29:f2:a4:ce:1e:ab:6d:af:3c:c2:39:
         d0:cd:82:17:00:62:f4:7e:0f:a9:0e:32:97:59:37:03:85:29:
         63:c5:85:a7:95:d5:d4:e4:24:dd:27:ab:05:ab:e5:ca:c4:c6:
         1e:37:76:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 01:51:47 2025 by rpki-client