This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FF546/872A395091ED11E9976B227DF8AEA228/zQg69dJxoPLdqw8VC-sAXzipRrE.mft
File:                     zQg69dJxoPLdqw8VC-sAXzipRrE.mft (raw, json)
Hash identifier:          LgSXA5G3YurfPgDpwzYowEJ9bsUG+REzVBfdQo509sw=
Subject key identifier:   66:81:66:50:AD:25:1D:D3:D6:4E:FF:C9:A4:33:F6:10:C7:24:54:72
Authority key identifier: CD:08:3A:F5:D2:71:A0:F2:DD:AB:0F:15:0B:EB:00:5F:38:A9:46:B1
Certificate issuer:       /CN=F36FF546AF/serialNumber=CD083AF5D271A0F2DDAB0F150BEB005F38A946B1
Certificate serial:       098F
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/zQg69dJxoPLdqw8VC-sAXzipRrE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36FF546/872A395091ED11E9976B227DF8AEA228/zQg69dJxoPLdqw8VC-sAXzipRrE.mft
Manifest number:          098D
Signing time:             Sat 27 Dec 2025 01:30:10 +0000
Manifest this update:     Sat 27 Dec 2025 01:30:09 +0000
Manifest next update:     Mon 29 Dec 2025 01:30:09 +0000
Files and hashes:         1: zQg69dJxoPLdqw8VC-sAXzipRrE.crl (hash: Qgk90+lGCBlXG7S3sT0DppEX6P+ldVdB6w7T4q/UJFY=)
                          2: 1C0D37FA91F011E9AE72377FF8AEA228.roa (hash: 1FCw+Y3uXimIvmrFhMWwVuIRqYo1LXHBTvbNdEsq7eQ=)
                          3: FB654B0091EF11E99DA90E7FF8AEA228.roa (hash: nhD+pe2BQnxbsRGwyft8O4mm+dCir5b5n7iU0KS6i3g=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36FF546/872A395091ED11E9976B227DF8AEA228/zQg69dJxoPLdqw8VC-sAXzipRrE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36FF546/872A395091ED11E9976B227DF8AEA228/zQg69dJxoPLdqw8VC-sAXzipRrE.mft
                          rsync://rpki.afrinic.net/repository/afrinic/zQg69dJxoPLdqw8VC-sAXzipRrE.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 29 Dec 2025 00:06:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2447 (0x98f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36FF546AF, serialNumber=CD083AF5D271A0F2DDAB0F150BEB005F38A946B1
        Validity
            Not Before: Dec 27 01:30:09 2025 GMT
            Not After : Dec 29 01:30:09 2025 GMT
        Subject: CN=694f36a2-45ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:ab:9d:3f:08:02:aa:9d:c3:7e:50:be:b4:bb:
                    32:c1:a6:5f:96:24:9b:8f:15:3b:b1:5a:eb:68:1b:
                    bb:5d:b6:ce:17:86:de:85:6d:50:01:63:20:6f:dc:
                    79:62:ca:dc:39:61:90:a9:b5:18:38:31:ad:a2:e1:
                    17:a5:53:f7:60:22:46:dc:18:2b:68:74:41:17:c3:
                    92:99:2d:3c:7d:96:c8:9d:a7:c2:93:e8:37:c8:ee:
                    4e:5f:45:cc:1d:09:39:72:84:e0:ce:49:68:05:67:
                    7c:75:6e:c6:ca:0a:8f:38:59:b5:f2:23:c7:3d:a5:
                    05:bf:71:4e:b5:fb:a9:5f:6b:a2:bb:e9:5d:e1:f5:
                    80:72:69:a6:79:67:63:25:53:39:be:b6:cc:9c:2c:
                    e1:e4:e4:f8:cf:0e:8f:dd:06:49:31:5f:eb:21:c5:
                    c0:22:41:9d:a9:14:30:f1:43:a9:cb:1c:57:54:45:
                    9c:2b:99:43:55:04:f3:b6:7d:50:f1:c8:33:c7:b4:
                    eb:49:63:94:8f:b9:2c:17:7a:4d:47:fe:69:ab:46:
                    90:22:04:2d:fb:36:24:1b:10:05:df:9e:ea:06:08:
                    15:1e:a8:86:b2:d6:9d:58:ac:ae:00:b0:f0:dd:11:
                    d6:61:26:31:65:d2:9f:8f:38:4c:85:f7:42:28:af:
                    86:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:81:66:50:AD:25:1D:D3:D6:4E:FF:C9:A4:33:F6:10:C7:24:54:72
            X509v3 Authority Key Identifier:
                keyid:CD:08:3A:F5:D2:71:A0:F2:DD:AB:0F:15:0B:EB:00:5F:38:A9:46:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36FF546/872A395091ED11E9976B227DF8AEA228/zQg69dJxoPLdqw8VC-sAXzipRrE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/zQg69dJxoPLdqw8VC-sAXzipRrE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FF546/872A395091ED11E9976B227DF8AEA228/zQg69dJxoPLdqw8VC-sAXzipRrE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:06:3a:8a:96:36:f3:12:36:c5:d3:29:39:30:ca:21:64:63:
         49:79:1d:c6:3b:3f:ad:24:e7:7e:03:1b:59:25:01:d1:6c:54:
         96:d3:20:74:47:96:6e:62:d9:49:d8:85:1f:c1:4a:96:bc:0b:
         c7:f0:b4:fc:c3:1c:8b:9d:bd:90:09:32:9d:9c:29:06:00:6f:
         5e:0e:35:65:5d:80:71:7d:a1:4d:5d:8a:9f:69:a5:84:0f:45:
         8b:7e:68:54:2c:e0:80:e6:40:8a:90:a0:d2:9b:8a:58:29:41:
         23:ed:1b:a8:7d:91:e8:4b:20:40:99:1a:d1:be:cb:19:88:56:
         71:5d:72:e7:77:99:27:c8:d3:db:7c:83:6d:e8:df:2d:0f:b8:
         78:04:b5:e6:ce:19:21:d1:7f:b1:2c:a7:5d:93:7c:28:5c:27:
         44:26:c5:6f:94:28:f0:96:04:74:ef:87:33:f1:6a:50:f5:53:
         01:d8:cd:fe:88:cd:34:81:33:cd:e0:72:44:0f:66:16:ab:90:
         cc:33:d1:83:24:05:d7:1b:fc:4d:9c:4a:04:0f:ab:64:b7:d6:
         c7:39:3b:e3:44:4b:7f:04:fd:13:47:00:d2:f1:f5:21:e3:38:
         b5:f9:b2:ca:65:e5:d0:11:e5:a2:71:2e:57:68:dc:09:fb:9c:
         24:3f:a0:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 27 17:49:59 2025 by rpki-client