This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F365BC44/892D49C6F61811ECBE1B38AFF1222468/LQAVTmAKZArDKjKF2c6fxQqUGrM.mft
File:                     LQAVTmAKZArDKjKF2c6fxQqUGrM.mft (raw, json)
Hash identifier:          j+vsmhEqw6iKg5TaDkjdV3eMyUV045OVldHVgzycSbM=
Subject key identifier:   C4:6D:F0:34:2C:0E:72:3D:AE:F7:E4:A1:70:8E:F4:35:3D:7E:BD:25
Authority key identifier: 2D:00:15:4E:60:0A:64:0A:C3:2A:32:85:D9:CE:9F:C5:0A:94:1A:B3
Certificate issuer:       /CN=F365BC44AF/serialNumber=2D00154E600A640AC32A3285D9CE9FC50A941AB3
Certificate serial:       051E
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/LQAVTmAKZArDKjKF2c6fxQqUGrM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F365BC44/892D49C6F61811ECBE1B38AFF1222468/LQAVTmAKZArDKjKF2c6fxQqUGrM.mft
Manifest number:          0518
Signing time:             Mon 08 Dec 2025 02:49:45 +0000
Manifest this update:     Mon 08 Dec 2025 02:49:44 +0000
Manifest next update:     Wed 10 Dec 2025 02:49:44 +0000
Files and hashes:         1: LQAVTmAKZArDKjKF2c6fxQqUGrM.crl (hash: J2e5+fR8UUkt/x5FH5I9Nxn/4Q7D89NMpxQj4uG5pIA=)
                          2: 5AD2351EF62211ECA5384CCEF1222468.roa (hash: O2TbmJ0oluer0UrOj7dugRw2nzmfuIBjrJGzVgObtfc=)
                          3: 441FBD96F62211ECAEA706CEF1222468.roa (hash: eOgo72NBB1TzX9MDNE5guVogIR1WbLYMRiu06PhqwRs=)
                          4: AEB3FD70F61811ECA343ACAFF1222468.roa (hash: yr8c8nv1fl6R2/dpv4d+UEGlhaBD6Mc7GC6CbBKlwUE=)
                          5: 92592E3EF62211ECB1890ECFF1222468.roa (hash: r+2CApErk9WQshLvMZh/1Yeo8KK9DMqaF9+XKRWgW4w=)
                          6: 76C25FA6F62211ECA4A5A1CEF1222468.roa (hash: bltEFXn7G4T8us2DT/CcL4lO2ojz0kPAbTbNgBQhLGQ=)
                          7: C977373AF61811ECAE6C16B0F1222468.roa (hash: I6EVPppAZg4DBAMr2DMZolkT3ClI2lJdmUjSbTKJ71k=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F365BC44/892D49C6F61811ECBE1B38AFF1222468/LQAVTmAKZArDKjKF2c6fxQqUGrM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F365BC44/892D49C6F61811ECBE1B38AFF1222468/LQAVTmAKZArDKjKF2c6fxQqUGrM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/LQAVTmAKZArDKjKF2c6fxQqUGrM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 10 Dec 2025 00:06:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1310 (0x51e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F365BC44AF, serialNumber=2D00154E600A640AC32A3285D9CE9FC50A941AB3
        Validity
            Not Before: Dec  8 02:49:44 2025 GMT
            Not After : Dec 10 02:49:44 2025 GMT
        Subject: CN=69363cc9-e431
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:a7:47:ef:28:ec:b1:c9:41:57:2f:da:bf:ff:
                    d6:73:fa:02:62:82:a3:43:e9:06:13:24:88:5b:16:
                    09:6c:4a:67:f0:83:10:b2:3a:ae:ab:55:7a:db:ed:
                    d2:d5:7a:ec:e6:ea:12:a9:51:0e:0f:de:a3:c3:51:
                    d9:e5:91:2c:21:60:5e:7b:fe:01:04:5a:fd:96:ae:
                    e7:56:5d:25:f3:14:9f:cd:11:72:ac:57:06:7e:ae:
                    ca:04:6f:79:33:04:9f:bc:e1:92:71:31:aa:46:cf:
                    4e:3b:d6:4d:c5:35:0f:54:7e:c2:01:6e:85:01:f8:
                    c8:b3:b0:88:31:97:2a:a0:29:23:04:d6:6e:43:56:
                    69:a4:1e:bb:97:a3:9c:1e:7d:43:47:d7:d1:96:b3:
                    0d:76:65:e7:8b:11:53:2b:69:68:3a:8a:86:05:05:
                    d2:18:d7:d5:d2:c5:bf:33:d7:62:bf:c7:d7:91:6e:
                    67:21:67:ae:e5:a4:ad:5c:9c:41:5a:4e:d5:bf:75:
                    f9:44:0b:48:dd:83:8c:88:93:5e:41:90:46:4c:21:
                    71:48:88:72:8b:88:4a:79:0f:80:8a:56:59:f7:32:
                    5d:85:63:d2:6a:39:69:07:f0:fa:b7:f5:7b:18:ee:
                    dc:76:f2:2b:f0:ba:e4:b7:fb:1f:ce:25:9e:8c:9b:
                    09:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:6D:F0:34:2C:0E:72:3D:AE:F7:E4:A1:70:8E:F4:35:3D:7E:BD:25
            X509v3 Authority Key Identifier:
                keyid:2D:00:15:4E:60:0A:64:0A:C3:2A:32:85:D9:CE:9F:C5:0A:94:1A:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F365BC44/892D49C6F61811ECBE1B38AFF1222468/LQAVTmAKZArDKjKF2c6fxQqUGrM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/LQAVTmAKZArDKjKF2c6fxQqUGrM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F365BC44/892D49C6F61811ECBE1B38AFF1222468/LQAVTmAKZArDKjKF2c6fxQqUGrM.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:35:34:88:92:62:81:22:13:21:3d:a9:a8:da:b9:3a:7e:90:
         9f:89:00:ff:cd:ad:f0:dc:6b:ad:6e:f2:4b:6a:13:f5:15:ff:
         6b:64:7e:9b:56:31:c5:44:bf:45:a6:7b:9a:47:60:ed:a9:fb:
         27:32:2a:46:ab:c0:85:16:c5:b8:cd:52:75:76:c9:03:d7:26:
         a2:43:93:23:bb:f0:2a:9a:ea:7c:3c:0f:cb:53:26:46:ac:d3:
         65:70:b3:d3:a1:1c:90:b5:6b:63:ab:2f:4e:1d:6a:48:d7:f8:
         94:b1:38:b2:01:de:3b:30:d3:3c:09:92:e2:d8:b3:ed:38:a7:
         af:ff:bb:b4:6c:b1:cb:fe:63:9a:e9:0a:e4:ce:f6:db:68:07:
         12:e1:d3:31:28:dd:dc:67:75:32:10:32:03:23:6b:eb:01:a5:
         c6:8d:6b:33:d4:d1:51:f1:e6:a7:e6:7b:e4:6c:3f:8d:92:dd:
         0c:53:45:8a:9d:6c:30:f6:9e:58:0f:99:79:7d:9b:47:16:7f:
         41:20:77:fe:30:8a:51:ba:88:fc:20:2d:e3:c3:93:37:92:52:
         ae:5c:e1:c9:a5:53:a1:33:f0:20:ff:86:81:57:da:2c:55:35:
         49:28:96:f0:7e:7a:3d:73:1e:15:10:69:9d:ac:6c:85:87:2c:
         41:76:5e:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 8 17:26:47 2025 by rpki-client