This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3628DDE/BF78233A369E11E9A7D5E220F8AEA228/QrWM7qosEujy3JjWRMIM-BzhzgU.mft
File:                     QrWM7qosEujy3JjWRMIM-BzhzgU.mft (raw, json)
Hash identifier:          BKA4c+bkOOj//Ugi69J7pZZ13GH8JXcAJRfqhNsgfZA=
Subject key identifier:   15:FF:15:A6:B2:15:E3:04:F9:60:51:22:0B:C4:A9:2F:0C:D9:B9:3D
Authority key identifier: 42:B5:8C:EE:AA:2C:12:E8:F2:DC:98:D6:44:C2:0C:F8:1C:E1:CE:05
Certificate issuer:       /CN=F3628DDEAF/serialNumber=42B58CEEAA2C12E8F2DC98D644C20CF81CE1CE05
Certificate serial:       09F8
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/QrWM7qosEujy3JjWRMIM-BzhzgU.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3628DDE/BF78233A369E11E9A7D5E220F8AEA228/QrWM7qosEujy3JjWRMIM-BzhzgU.mft
Manifest number:          09F4
Signing time:             Sun 07 Dec 2025 01:17:05 +0000
Manifest this update:     Sun 07 Dec 2025 01:17:05 +0000
Manifest next update:     Tue 09 Dec 2025 01:17:05 +0000
Files and hashes:         1: QrWM7qosEujy3JjWRMIM-BzhzgU.crl (hash: efbCtqVOb8owM4saLrma6wCyiD/XaVQAxBCcj4BjlJ0=)
                          2: 1119CD76DFD311EB88361B37F8AEA228.roa (hash: 4I2Xxy2pBMpErR6JgtR0kZIJe7vFEf1qAmaSQyw+k7I=)
                          3: F539AC2ADFD211EBB0D1FD36F8AEA228.roa (hash: eXFh4emIQs516bgW52azXjxVc2VVoIN8dsu/3Z+Sdok=)
                          4: EE5F2E50369E11E98EDB1621F8AEA228.roa (hash: weMqKqZKyHm0tyqjfHAxnqGFkomIgwidKnm2Dpx5xnA=)
                          5: 14DA972C369F11E9A85A3C21F8AEA228.roa (hash: rRgU+4tFqjCwv3sj5zK6L+vCSIEp2/0zfXQO2ATh2MM=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3628DDE/BF78233A369E11E9A7D5E220F8AEA228/QrWM7qosEujy3JjWRMIM-BzhzgU.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3628DDE/BF78233A369E11E9A7D5E220F8AEA228/QrWM7qosEujy3JjWRMIM-BzhzgU.mft
                          rsync://rpki.afrinic.net/repository/afrinic/QrWM7qosEujy3JjWRMIM-BzhzgU.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 09 Dec 2025 00:06:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2552 (0x9f8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3628DDEAF, serialNumber=42B58CEEAA2C12E8F2DC98D644C20CF81CE1CE05
        Validity
            Not Before: Dec  7 01:17:05 2025 GMT
            Not After : Dec  9 01:17:05 2025 GMT
        Subject: CN=6934d591-6560
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:3e:e4:fe:f9:85:c0:f3:c0:9e:84:4d:80:66:
                    5d:ff:31:b9:0c:44:f9:c2:70:71:f6:58:58:37:83:
                    06:4f:d2:d1:cf:4e:06:18:8a:eb:9a:07:0e:ba:36:
                    b2:2e:b6:64:41:10:69:72:db:29:50:a1:5c:fe:bf:
                    bf:53:20:d7:cf:f1:a3:2e:a1:0e:1e:65:7c:c4:6e:
                    94:c4:05:20:ed:b1:87:b7:03:ed:59:b8:e1:67:08:
                    8b:3f:2e:cd:46:23:c9:8f:e1:ee:fd:60:1e:89:f1:
                    fc:35:b7:66:a1:c4:97:1d:48:85:05:ae:c6:c7:19:
                    ed:c8:4a:a1:61:d5:56:1a:42:a3:28:8a:2c:41:17:
                    28:6d:ee:bb:8e:0a:12:f0:18:56:99:3d:38:5f:0e:
                    78:d5:88:91:19:57:e2:d5:b7:76:84:f4:f6:c6:51:
                    6c:c5:f0:3d:9e:7e:72:24:53:13:ac:bb:e0:cd:9a:
                    0f:e9:5e:64:e3:fb:be:13:55:4a:e5:2a:67:1b:07:
                    0d:fa:95:03:e0:d4:4c:97:b6:5b:01:73:f1:eb:8e:
                    2a:49:62:33:64:df:64:65:58:31:58:23:03:c7:4e:
                    86:03:28:ff:a9:b3:36:8d:3e:3c:a1:a3:b0:07:84:
                    df:79:cf:86:8e:eb:cd:8a:b6:94:01:4e:64:73:ce:
                    e5:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:FF:15:A6:B2:15:E3:04:F9:60:51:22:0B:C4:A9:2F:0C:D9:B9:3D
            X509v3 Authority Key Identifier:
                keyid:42:B5:8C:EE:AA:2C:12:E8:F2:DC:98:D6:44:C2:0C:F8:1C:E1:CE:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3628DDE/BF78233A369E11E9A7D5E220F8AEA228/QrWM7qosEujy3JjWRMIM-BzhzgU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/QrWM7qosEujy3JjWRMIM-BzhzgU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3628DDE/BF78233A369E11E9A7D5E220F8AEA228/QrWM7qosEujy3JjWRMIM-BzhzgU.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:7f:04:ba:21:af:c0:b7:99:3d:5e:36:d7:be:2d:23:de:c1:
         53:e2:e2:1d:76:88:33:16:9d:82:83:62:ea:0e:ae:61:03:16:
         a0:9e:d0:1e:60:52:aa:00:94:d9:ab:24:48:e3:ea:d4:0f:fc:
         11:cb:80:3a:9f:7c:49:6c:cf:7b:c8:25:19:fd:1d:ea:da:8c:
         db:2c:13:36:d2:35:ad:8f:d0:8a:61:58:77:8f:b5:68:34:6a:
         cf:17:89:35:bf:27:cc:43:ce:b8:9c:26:65:54:d1:78:65:20:
         3b:51:ca:a0:53:bf:e7:25:e1:ac:22:a6:99:1b:bb:11:21:99:
         15:17:5b:56:7b:6d:23:c6:75:1e:de:20:65:7d:ee:45:15:67:
         c9:c8:2b:4f:b6:6e:64:be:6e:56:70:61:20:a1:83:89:de:f9:
         ab:9e:d1:92:3f:8d:7b:ef:cf:2e:e2:75:d1:16:f5:4f:b4:d1:
         d4:dc:a2:dd:47:41:bb:a2:29:e1:09:67:4f:a8:bc:6e:19:f6:
         fe:f3:77:6d:ba:d2:2f:2b:af:d8:b3:14:4d:2a:f0:37:c0:d0:
         6e:3d:0c:f9:c6:55:5b:11:73:84:30:71:ef:50:c2:fe:1c:6b:
         0c:ce:d3:7a:f2:2c:84:e3:3b:90:cf:33:64:80:60:fd:75:47:
         28:47:d4:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 06:35:15 2025 by rpki-client