This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362793F/065D4DBAA64311EF8B4D3E8B762E951A/2qhy_5oERGtxio2fR1VL-lgbOg4.mft
File:                     2qhy_5oERGtxio2fR1VL-lgbOg4.mft (raw, json)
Hash identifier:          l/6UuHF0SuE0O4tJBJ5e0xZbRoqFCAWJibON0xdgV9c=
Subject key identifier:   01:0E:9E:01:D3:C5:CD:F2:BB:03:D8:16:4E:1E:D2:48:EF:B8:6C:96
Authority key identifier: DA:A8:72:FF:9A:04:44:6B:71:8A:8D:9F:47:55:4B:FA:58:1B:3A:0E
Certificate issuer:       /CN=F362793FAF/serialNumber=DAA872FF9A04446B718A8D9F47554BFA581B3A0E
Certificate serial:       01BD
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/2qhy_5oERGtxio2fR1VL-lgbOg4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F362793F/065D4DBAA64311EF8B4D3E8B762E951A/2qhy_5oERGtxio2fR1VL-lgbOg4.mft
Manifest number:          01A9
Signing time:             Mon 08 Dec 2025 04:41:08 +0000
Manifest this update:     Mon 08 Dec 2025 04:41:08 +0000
Manifest next update:     Wed 10 Dec 2025 04:41:08 +0000
Files and hashes:         1: 2qhy_5oERGtxio2fR1VL-lgbOg4.crl (hash: jI5qLVvRP41teo+lHtENuey7/dpxOKEXKNFZlo6k5XQ=)
                          2: 7D874958B87D11EFB3643257762E951A.roa (hash: onul5/YLBBz+YGmXUqj+3gM9pVUef26/bXQij1jV9rY=)
                          3: 3D775376B87D11EFAB4FF956762E951A.roa (hash: b6euF38rD57vl3/+UQug0tSlMLOGy1TjPgA9WLcJx/k=)
                          4: 5A3BE2FAB87E11EF981C545D762E951A.roa (hash: iiNCcB7diX0XVv+jA4F51IRnj9i5QGDFj/H4TV2LPnA=)
                          5: 8BF912DCB8C311EFBA768387762E951A.roa (hash: 4MzJryMeE1qGlBnjDKdwaAv93aYiFWEXltRxjKpruGs=)
                          6: 378108EEB87E11EF81427D5B762E951A.roa (hash: pvxHcsYPa0Lv9jDaQ8hW3DYwerAD0pRgtEnW8FTTQOg=)
                          7: B3D4A0FAB87D11EF99011259762E951A.roa (hash: pJknO3SfyaIF7Mf7TXt63Y5B2q/zY499L4XbyGAJGWw=)
                          8: 5C024D8CB87D11EFB7C42257762E951A.roa (hash: NFBzy2Yi/mXJiGIrYLnb6yECZlLOSbsf4t2bOiNIZd8=)
                          9: 98F59802B87D11EFBDAE0659762E951A.roa (hash: McIOupeXZ3ZuHvVifTjAnpDUlUDytTyutBT9QiQDcHw=)
                          10: FC601FE8B87D11EFB11B5D5B762E951A.roa (hash: kMhymzWCs2TuT+6gLYGn8unjH29vHiUNHpcIxz2N4+Y=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F362793F/065D4DBAA64311EF8B4D3E8B762E951A/2qhy_5oERGtxio2fR1VL-lgbOg4.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F362793F/065D4DBAA64311EF8B4D3E8B762E951A/2qhy_5oERGtxio2fR1VL-lgbOg4.mft
                          rsync://rpki.afrinic.net/repository/afrinic/2qhy_5oERGtxio2fR1VL-lgbOg4.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 10 Dec 2025 00:06:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 445 (0x1bd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F362793FAF, serialNumber=DAA872FF9A04446B718A8D9F47554BFA581B3A0E
        Validity
            Not Before: Dec  8 04:41:08 2025 GMT
            Not After : Dec 10 04:41:08 2025 GMT
        Subject: CN=693656e4-6dc6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:df:58:c4:8e:bc:12:89:7b:c8:16:4e:a6:74:
                    37:31:0b:85:4a:1e:c2:d8:32:be:f2:f0:57:b2:c7:
                    99:1e:c5:49:fc:a9:ec:ea:24:a3:e4:9f:18:dd:a4:
                    ce:fb:71:3f:a5:5a:b9:8a:74:7f:e8:48:0e:c8:a2:
                    ec:59:eb:9c:60:06:ce:14:92:00:27:07:74:45:aa:
                    cc:73:bd:3b:e6:92:3b:f1:f4:13:48:7a:22:e7:08:
                    06:7f:e4:44:ca:65:f8:a6:7a:77:58:c8:b5:51:d2:
                    b5:65:c2:ca:82:f7:ff:42:12:07:bb:77:2a:8b:c2:
                    f5:a7:cf:d5:b8:fd:02:54:b9:66:3b:74:68:44:60:
                    e6:c1:95:51:25:fb:ac:5d:4b:97:ca:7a:06:8d:41:
                    d1:58:31:33:79:50:85:79:ef:49:2e:e4:7d:6c:8e:
                    cc:3a:1e:63:6e:5a:1c:76:0f:6a:8a:5b:40:17:11:
                    6a:02:f5:29:88:61:8b:ac:b0:ba:42:83:8b:0a:ce:
                    ca:4e:91:83:7c:71:07:a8:e8:51:93:82:00:37:92:
                    0e:2f:45:8c:34:71:ea:2f:54:80:b5:c3:ff:83:f7:
                    48:8b:e4:8a:b7:19:7a:f5:33:54:43:58:d5:ed:6e:
                    18:2c:98:ef:10:1c:83:14:dd:8c:7c:f1:49:79:d7:
                    8c:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:0E:9E:01:D3:C5:CD:F2:BB:03:D8:16:4E:1E:D2:48:EF:B8:6C:96
            X509v3 Authority Key Identifier:
                keyid:DA:A8:72:FF:9A:04:44:6B:71:8A:8D:9F:47:55:4B:FA:58:1B:3A:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F362793F/065D4DBAA64311EF8B4D3E8B762E951A/2qhy_5oERGtxio2fR1VL-lgbOg4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/2qhy_5oERGtxio2fR1VL-lgbOg4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362793F/065D4DBAA64311EF8B4D3E8B762E951A/2qhy_5oERGtxio2fR1VL-lgbOg4.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:15:1a:6e:cd:2b:e4:21:22:78:cc:ec:d5:77:0f:a8:27:86:
         95:fc:30:b4:cc:aa:bd:fe:f8:ce:26:78:11:d5:08:df:34:9c:
         73:f9:19:85:16:6d:55:79:18:4a:54:72:f7:5a:2d:d9:f8:6a:
         15:1d:a8:4c:03:5e:2a:f3:f7:b5:b1:21:d1:4e:3e:4d:f3:b8:
         78:3d:0b:bb:29:2a:e5:91:88:df:45:6a:9d:f5:6d:59:8b:43:
         dd:2b:32:e2:49:c5:c0:0a:c7:e7:1d:2f:cc:cc:17:18:01:a0:
         fa:0a:32:8e:70:c7:15:f9:26:38:f7:39:e0:3d:20:48:83:9c:
         b3:e3:0a:14:f9:ed:2d:07:bb:bb:29:3f:68:1f:3b:23:f7:28:
         67:db:c9:76:44:aa:be:ca:19:b4:a2:b0:23:d5:87:98:cd:74:
         cd:2f:7a:99:f4:37:46:f7:83:61:43:0c:16:e1:04:35:fd:9c:
         70:c4:01:0d:6c:75:54:4f:1d:91:2f:65:80:7a:e0:61:b2:02:
         f3:20:e9:aa:b9:83:20:da:1a:67:4e:2d:b2:28:0a:aa:46:98:
         82:8f:8c:4e:bd:8c:e4:da:d8:c9:09:5e:4b:d8:cb:b4:30:5c:
         59:d0:b2:6a:b6:dc:7a:fd:48:25:7d:75:4b:05:fa:d3:33:d7:
         db:c5:ce:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 8 17:04:47 2025 by rpki-client