This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F364FE7F/8CEFCC7490B811EDBCC9A5ECF1222468/QQJpBJisN4v_7-4nvGlfkaEjv0M.mft
File:                     QQJpBJisN4v_7-4nvGlfkaEjv0M.mft (raw, json)
Hash identifier:          UQ3XhvdCKvic2IUdubXUGT4uGikHOxXlXNIXl//3OVY=
Subject key identifier:   94:26:62:DF:78:34:16:18:F6:3C:94:7F:F4:F5:3D:6F:6B:31:DD:90
Authority key identifier: 41:02:69:04:98:AC:37:8B:FF:EF:EE:27:BC:69:5F:91:A1:23:BF:43
Certificate issuer:       /CN=F364FE7FAF/serialNumber=4102690498AC378BFFEFEE27BC695F91A123BF43
Certificate serial:       0455
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/QQJpBJisN4v_7-4nvGlfkaEjv0M.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F364FE7F/8CEFCC7490B811EDBCC9A5ECF1222468/QQJpBJisN4v_7-4nvGlfkaEjv0M.mft
Manifest number:          0450
Signing time:             Sat 06 Dec 2025 03:11:00 +0000
Manifest this update:     Sat 06 Dec 2025 03:10:59 +0000
Manifest next update:     Mon 08 Dec 2025 03:10:59 +0000
Files and hashes:         1: QQJpBJisN4v_7-4nvGlfkaEjv0M.crl (hash: edHJgi1SXO3/HW1+lfxM+8fHsAoYm/zDhvv+IKachGE=)
                          2: 9093EBECEA8211EE9446CC99775412E6.roa (hash: DcDH5wFQnVUfU26v4luxsXa3eW9biUwnVqKcce51e3I=)
                          3: 87CF258C2DA511F09658F3D7DAE4EC9C.roa (hash: VWlaDjgTjpyuACktZVZWNtbFZ4HkyIqtY/A3o1MKtyU=)
                          4: E5FD19E037C111F08C089ADBDAE4EC9C.roa (hash: WSTUjBXRVuiAIXxXadMdKCjmnxqyjMHAgKMrm2ZTNkA=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F364FE7F/8CEFCC7490B811EDBCC9A5ECF1222468/QQJpBJisN4v_7-4nvGlfkaEjv0M.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F364FE7F/8CEFCC7490B811EDBCC9A5ECF1222468/QQJpBJisN4v_7-4nvGlfkaEjv0M.mft
                          rsync://rpki.afrinic.net/repository/afrinic/QQJpBJisN4v_7-4nvGlfkaEjv0M.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 08 Dec 2025 03:10:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1109 (0x455)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F364FE7FAF, serialNumber=4102690498AC378BFFEFEE27BC695F91A123BF43
        Validity
            Not Before: Dec  6 03:10:59 2025 GMT
            Not After : Dec  8 03:10:59 2025 GMT
        Subject: CN=69339ec3-eef5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:81:ae:76:52:0b:76:6e:70:c5:f0:c4:56:cc:
                    9e:b8:34:4e:69:03:e0:c8:0c:e7:dd:48:64:21:cb:
                    eb:e3:fc:b3:1a:c1:e6:6c:0e:fa:f5:4b:ed:40:99:
                    b2:01:b6:26:9e:40:50:dc:1f:61:e1:6d:11:99:5c:
                    c4:51:a6:b9:b5:c0:46:ba:95:dd:8e:1a:1a:d1:b3:
                    7b:79:57:c8:2a:ab:d9:46:45:f6:70:47:11:f4:88:
                    80:31:45:c8:70:64:95:ed:ea:8a:cd:e8:62:07:0c:
                    cb:76:a9:4c:db:5e:78:60:ea:70:b3:3b:27:20:98:
                    3f:f1:f8:ad:8d:12:87:d3:a1:63:7b:61:27:b8:8f:
                    0e:7c:5c:34:09:e4:82:7b:d8:ec:ce:3e:4a:63:69:
                    4e:25:e4:74:fc:c9:a0:ba:da:63:08:aa:79:ed:d1:
                    bb:8b:49:a4:ae:eb:c3:af:ca:7e:8a:f8:54:ce:37:
                    f0:ec:a9:34:f5:9f:c9:3a:b8:28:84:89:1a:a8:2e:
                    fe:55:af:2c:b6:ad:75:b9:7e:a9:a9:6e:f0:ae:5d:
                    0c:70:b6:9d:af:3a:8f:a5:dd:c3:44:42:17:ed:e9:
                    b8:73:c1:ec:eb:04:6b:14:69:cd:d4:03:a8:3b:6f:
                    d2:46:12:8a:08:44:2b:d5:02:b1:3b:34:05:6c:1e:
                    6e:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:26:62:DF:78:34:16:18:F6:3C:94:7F:F4:F5:3D:6F:6B:31:DD:90
            X509v3 Authority Key Identifier:
                keyid:41:02:69:04:98:AC:37:8B:FF:EF:EE:27:BC:69:5F:91:A1:23:BF:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F364FE7F/8CEFCC7490B811EDBCC9A5ECF1222468/QQJpBJisN4v_7-4nvGlfkaEjv0M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/QQJpBJisN4v_7-4nvGlfkaEjv0M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F364FE7F/8CEFCC7490B811EDBCC9A5ECF1222468/QQJpBJisN4v_7-4nvGlfkaEjv0M.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:e7:26:48:f2:be:a2:75:db:a2:26:da:b3:1a:2c:5b:52:09:
         25:e3:4d:6f:93:49:37:12:05:bf:47:c8:89:b8:1b:0e:7a:da:
         d7:ef:f0:9b:a8:04:70:92:bd:d3:9d:2c:f3:49:97:54:80:be:
         72:d7:d0:0d:36:3b:7e:6f:f0:07:28:4a:64:7e:77:bd:bd:97:
         ee:88:a9:a2:59:90:04:01:da:93:a7:03:9b:25:8e:af:93:d1:
         cf:50:96:42:1b:fd:36:33:46:92:f6:b1:85:7e:af:aa:03:57:
         11:28:57:0a:a6:01:55:ca:d0:dc:51:0d:3d:bf:f1:da:ff:2a:
         3c:1f:d8:44:20:25:41:a9:53:54:f2:e7:0b:ad:bb:99:60:db:
         70:0b:bb:9e:f6:a3:76:59:04:b7:ba:35:98:e5:d6:f3:04:8f:
         b1:39:1d:1f:37:5a:c1:97:a7:3c:51:a0:31:17:4e:6a:0b:56:
         44:28:ac:f3:14:a9:af:4a:a4:57:07:be:c7:f9:e2:3c:ac:c8:
         e4:7e:54:2e:ca:9f:6c:07:2d:9b:ea:44:4a:64:a4:11:0c:22:
         03:2f:6c:a2:47:d3:18:b8:ca:78:3b:7c:6e:e8:6d:84:4f:cb:
         bb:4c:a2:6e:bf:52:2f:e0:f6:af:53:fe:4f:4d:70:a4:11:6d:
         d0:6d:ff:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 02:18:35 2025 by rpki-client