This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3642818/9224B30A49FD11ED86901991F1222468/jq1LkUtvfJKOEv440cRAvFMJwTM.mft
File:                     jq1LkUtvfJKOEv440cRAvFMJwTM.mft (raw, json)
Hash identifier:          plcvOCJ9Saw06R6GfedwVh02yTS6T7pPvZshyVwA0U4=
Subject key identifier:   46:D0:00:F1:F4:1C:8B:56:DB:7A:34:13:FC:99:61:B8:91:2E:9D:E2
Authority key identifier: 8E:AD:4B:91:4B:6F:7C:92:8E:12:FE:38:D1:C4:40:BC:53:09:C1:33
Certificate issuer:       /CN=F3642818AF/serialNumber=8EAD4B914B6F7C928E12FE38D1C440BC5309C133
Certificate serial:       04AB
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/jq1LkUtvfJKOEv440cRAvFMJwTM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3642818/9224B30A49FD11ED86901991F1222468/jq1LkUtvfJKOEv440cRAvFMJwTM.mft
Manifest number:          04A9
Signing time:             Mon 08 Dec 2025 03:02:32 +0000
Manifest this update:     Mon 08 Dec 2025 03:02:31 +0000
Manifest next update:     Wed 10 Dec 2025 03:02:31 +0000
Files and hashes:         1: jq1LkUtvfJKOEv440cRAvFMJwTM.crl (hash: y+11Lv089sRcvZAvzerrQCNm+rP78AI0zeFnh5QwAjU=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3642818/9224B30A49FD11ED86901991F1222468/jq1LkUtvfJKOEv440cRAvFMJwTM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3642818/9224B30A49FD11ED86901991F1222468/jq1LkUtvfJKOEv440cRAvFMJwTM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/jq1LkUtvfJKOEv440cRAvFMJwTM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 10 Dec 2025 00:06:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1195 (0x4ab)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3642818AF, serialNumber=8EAD4B914B6F7C928E12FE38D1C440BC5309C133
        Validity
            Not Before: Dec  8 03:02:31 2025 GMT
            Not After : Dec 10 03:02:31 2025 GMT
        Subject: CN=69363fc8-87b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:63:ac:0c:f3:a7:bf:e0:98:3f:53:2c:c7:a3:
                    78:f0:9e:39:6d:bb:22:60:ae:15:26:ea:fc:62:f9:
                    db:d3:98:ae:86:04:55:9d:16:c0:e7:b7:26:4e:67:
                    83:82:f5:f1:e6:40:a5:fb:43:df:ce:d9:70:41:e7:
                    ee:c4:06:b9:83:30:f0:1f:05:38:e8:bc:ac:66:50:
                    f9:dd:46:b7:3f:50:a5:c0:7f:16:86:5f:ea:0a:b4:
                    ac:c8:c9:fc:cf:bd:f8:59:62:57:25:fb:cd:ea:d8:
                    b0:fa:53:22:bc:a2:53:00:1a:f5:b1:a5:ad:9a:1e:
                    02:b7:30:e7:8e:8b:92:74:be:0a:21:8e:fb:b1:1b:
                    c9:bf:56:87:5f:09:e9:fb:72:72:bb:39:82:fb:06:
                    71:7b:49:af:ad:e0:12:23:f9:48:de:2c:05:3e:e4:
                    53:3c:5a:92:8c:ca:87:6a:de:da:72:89:3d:75:89:
                    a1:40:89:67:1a:7c:f8:a5:59:69:23:93:35:e2:ce:
                    fa:04:17:9d:a1:38:fd:e9:f7:17:0e:d4:41:fe:84:
                    fb:fa:0f:dc:96:d6:40:60:06:cb:b1:9e:13:9d:40:
                    d3:89:1b:20:9a:5f:a6:f1:3e:32:ec:0e:67:25:3a:
                    03:a3:0a:44:18:e2:d5:87:e1:15:75:3f:9c:de:43:
                    ab:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:D0:00:F1:F4:1C:8B:56:DB:7A:34:13:FC:99:61:B8:91:2E:9D:E2
            X509v3 Authority Key Identifier:
                keyid:8E:AD:4B:91:4B:6F:7C:92:8E:12:FE:38:D1:C4:40:BC:53:09:C1:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3642818/9224B30A49FD11ED86901991F1222468/jq1LkUtvfJKOEv440cRAvFMJwTM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/jq1LkUtvfJKOEv440cRAvFMJwTM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3642818/9224B30A49FD11ED86901991F1222468/jq1LkUtvfJKOEv440cRAvFMJwTM.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:b6:cb:df:8b:25:e0:d6:6a:a4:b6:a1:93:42:c8:c3:0c:91:
         de:4a:91:91:1f:a0:7c:84:4d:b8:80:13:ae:bc:e7:50:81:72:
         ba:b7:35:95:75:e1:64:bd:01:07:22:0e:bd:56:0c:15:ed:40:
         2d:b9:a9:28:19:00:64:34:6f:53:5a:5d:a7:76:f0:9e:ac:1e:
         9f:bf:1f:31:0a:d9:ee:57:a5:b6:0f:ab:7b:f9:84:01:15:1e:
         5c:e4:4d:4d:e7:a2:85:05:33:ad:d9:f6:8b:3e:fd:9f:0a:61:
         90:ca:67:4e:b0:0d:7b:e9:e5:e0:af:7c:02:81:0a:8e:2a:8c:
         1b:3e:a3:3f:e8:ec:42:84:09:dc:a5:af:be:42:d7:94:aa:37:
         84:cb:dd:71:18:4e:23:c7:2e:83:11:79:99:14:fd:e3:5b:a2:
         2c:9b:28:ce:00:dc:1c:e3:39:9d:a6:4a:62:cc:d3:17:9e:57:
         1c:6a:13:73:d0:59:68:a4:e6:66:29:5e:7c:fd:87:e1:de:9f:
         a4:d5:61:35:ed:30:91:0b:e2:f6:45:13:0b:13:1c:2b:be:20:
         8a:e8:06:a5:13:87:10:0e:03:7c:82:50:df:2c:c0:46:bc:03:
         64:5e:7c:77:66:b5:2f:81:83:09:27:38:76:f9:7a:b5:d0:84:
         37:d5:03:f5
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICBKswDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NDI4MThBRjExMC8GA1UEBRMoOEVBRDRCOTE0QjZGN0M5MjhFMTJGRTM4RDFDNDQw
QkM1MzA5QzEzMzAeFw0yNTEyMDgwMzAyMzFaFw0yNTEyMTAwMzAyMzFaMBgxFjAU
BgNVBAMTDTY5MzYzZmM4LTg3YjYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCzY6wM86e/4Jg/UyzHo3jwnjltuyJgrhUm6vxi+dvTmK6GBFWdFsDntyZO
Z4OC9fHmQKX7Q9/O2XBB5+7EBrmDMPAfBTjovKxmUPndRrc/UKXAfxaGX+oKtKzI
yfzPvfhZYlcl+83q2LD6UyK8olMAGvWxpa2aHgK3MOeOi5J0vgohjvuxG8m/Vodf
Cen7cnK7OYL7BnF7Sa+t4BIj+UjeLAU+5FM8WpKMyodq3tpyiT11iaFAiWcafPil
WWkjkzXizvoEF52hOP3p9xcO1EH+hPv6D9yW1kBgBsuxnhOdQNOJGyCaX6bxPjLs
DmclOgOjCkQY4tWH4RV1P5zeQ6s1AgMBAAGjggK4MIICtDAdBgNVHQ4EFgQURtAA
8fQci1bbejQT/JlhuJEuneIwHwYDVR0jBBgwFoAUjq1LkUtvfJKOEv440cRAvFMJ
wTMwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjQyODE4LzkyMjRCMzBBNDlGRDExRUQ4NjkwMTk5MUYxMjIyNDY4L2pxMUxr
VXR2ZkpLT0V2NDQwY1JBdkZNSndUTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2pxMUxrVXR2ZkpLT0V2NDQwY1JBdkZNSndUTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2NDI4MTgvOTIyNEIzMEE0OUZEMTFFRDg2OTAxOTkxRjEy
MjI0NjgvanExTGtVdHZmSktPRXY0NDBjUkF2Rk1Kd1RNLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCPtsvfiyXg1mqktqGTQsjDDJHeSpGR
H6B8hE24gBOuvOdQgXK6tzWVdeFkvQEHIg69VgwV7UAtuakoGQBkNG9TWl2ndvCe
rB6fvx8xCtnuV6W2D6t7+YQBFR5c5E1N56KFBTOt2faLPv2fCmGQymdOsA176eXg
r3wCgQqOKowbPqM/6OxChAncpa++QteUqjeEy91xGE4jxy6DEXmZFP3jW6IsmyjO
ANwc4zmdpkpizNMXnlccahNz0FlopOZmKV58/Yfh3p+k1WE17TCRC+L2RRMLExwr
viCK6AalE4cQDgN8glDfLMBGvANkXnx3ZrUvgYMJJzh2+Xq10IQ31QP1
-----END CERTIFICATE-----
Generated at Mon Dec 8 17:25:10 2025 by rpki-client