This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367426A/71A5B18428DC11ED99FF3D8FF1222468/G0qwtyDYObeamJIyOw-r7ZZwWqI.mft
File:                     G0qwtyDYObeamJIyOw-r7ZZwWqI.mft (raw, json)
Hash identifier:          njdW2SPjFdirOl2QTrLIIK3vh36cIPRl+K1xz+6HND8=
Subject key identifier:   B3:5F:4B:DF:F7:E9:0C:76:CA:6A:93:50:47:31:32:D2:33:E7:30:82
Authority key identifier: 1B:4A:B0:B7:20:D8:39:B7:9A:98:92:32:3B:0F:AB:ED:96:70:5A:A2
Certificate issuer:       /CN=F367426AAF/serialNumber=1B4AB0B720D839B79A9892323B0FABED96705AA2
Certificate serial:       04E1
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/G0qwtyDYObeamJIyOw-r7ZZwWqI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F367426A/71A5B18428DC11ED99FF3D8FF1222468/G0qwtyDYObeamJIyOw-r7ZZwWqI.mft
Manifest number:          04DB
Signing time:             Mon 08 Dec 2025 02:56:36 +0000
Manifest this update:     Mon 08 Dec 2025 02:56:36 +0000
Manifest next update:     Wed 10 Dec 2025 02:56:36 +0000
Files and hashes:         1: G0qwtyDYObeamJIyOw-r7ZZwWqI.crl (hash: 0FuLw4zN8okRZ3bea4ws8xOc3yblwZe7BFUWu/rjY84=)
                          2: D9ED8CAC6EB311EF96086184762E951A.roa (hash: 6w3a+eg92q7dxLHTR3vq9vXUwlds4W9m99UG/J3eEsM=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F367426A/71A5B18428DC11ED99FF3D8FF1222468/G0qwtyDYObeamJIyOw-r7ZZwWqI.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F367426A/71A5B18428DC11ED99FF3D8FF1222468/G0qwtyDYObeamJIyOw-r7ZZwWqI.mft
                          rsync://rpki.afrinic.net/repository/afrinic/G0qwtyDYObeamJIyOw-r7ZZwWqI.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 10 Dec 2025 00:06:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1249 (0x4e1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F367426AAF, serialNumber=1B4AB0B720D839B79A9892323B0FABED96705AA2
        Validity
            Not Before: Dec  8 02:56:36 2025 GMT
            Not After : Dec 10 02:56:36 2025 GMT
        Subject: CN=69363e64-e3e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:af:d7:27:80:c6:84:db:39:83:50:29:f8:5b:
                    0a:96:86:4e:f0:c2:84:0a:83:27:e1:c7:b0:9c:6a:
                    0c:ba:42:e8:ee:30:f6:ec:f2:99:cc:29:e1:65:6a:
                    8a:cc:f9:49:aa:d3:26:0d:bd:12:c4:bb:57:8e:1b:
                    78:c0:b2:3a:b8:ec:8b:7e:3e:bf:79:27:15:a9:cd:
                    1c:3e:5a:ef:e3:aa:dd:d6:57:a3:52:e8:ca:53:65:
                    d5:ae:81:76:2c:49:6e:a2:7c:7a:d9:a1:85:10:ce:
                    80:e5:7c:05:48:7d:ba:69:00:1c:29:05:16:46:c5:
                    5a:93:2a:32:ae:cc:b9:e9:b0:68:24:20:18:0b:81:
                    4d:19:bf:ef:40:e1:d1:3e:3d:7f:3c:0a:98:87:82:
                    ea:d4:b4:27:3e:1a:3f:2a:6e:cf:fe:1d:9b:4b:8c:
                    d0:c8:41:34:60:4b:f3:12:73:7f:37:34:76:c8:48:
                    8e:a3:84:1c:8e:4e:70:24:21:7b:01:0e:d1:4e:6b:
                    e4:e3:3e:10:b9:ca:6a:d6:ff:a7:78:19:55:43:30:
                    c1:3d:24:ab:4c:07:c0:40:0d:41:c6:d3:24:97:ab:
                    b9:94:11:e1:17:ec:da:17:a6:9d:12:1b:6f:e0:7d:
                    84:f4:52:3b:9c:ae:64:95:74:f6:f7:8c:9c:6e:4d:
                    9b:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:5F:4B:DF:F7:E9:0C:76:CA:6A:93:50:47:31:32:D2:33:E7:30:82
            X509v3 Authority Key Identifier:
                keyid:1B:4A:B0:B7:20:D8:39:B7:9A:98:92:32:3B:0F:AB:ED:96:70:5A:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F367426A/71A5B18428DC11ED99FF3D8FF1222468/G0qwtyDYObeamJIyOw-r7ZZwWqI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/G0qwtyDYObeamJIyOw-r7ZZwWqI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367426A/71A5B18428DC11ED99FF3D8FF1222468/G0qwtyDYObeamJIyOw-r7ZZwWqI.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:8c:5e:d5:cd:c0:04:cd:6c:5b:4d:64:ce:10:c4:cc:dd:77:
         b3:8e:fc:4d:8f:97:b0:ed:b3:74:3b:94:64:1d:1b:60:d0:75:
         40:d6:0a:2f:29:79:c4:49:14:62:d7:10:89:67:90:f0:f3:fb:
         11:0b:dd:5c:3d:c8:b6:06:7a:0a:96:f7:dd:b1:a2:ab:b0:68:
         8e:e5:9f:1f:d9:fc:74:5c:98:a5:f4:83:d4:3d:bc:64:3c:15:
         cd:93:84:b3:8d:e2:7d:11:f9:eb:c7:c0:d0:69:69:1d:03:5e:
         98:74:d6:ed:d6:ec:4b:d5:07:48:ed:6f:34:4e:44:5a:6c:bb:
         bd:3e:21:e1:87:bf:d8:5b:a5:7e:ae:c0:c4:93:03:86:23:cc:
         71:00:3e:dc:63:48:72:f2:6a:2b:4c:e7:8d:b0:f7:de:83:26:
         fe:1e:d2:41:06:b7:76:91:09:a1:e3:4f:5e:95:14:75:1d:f9:
         f3:61:4e:31:63:75:65:ec:00:35:c5:49:91:93:bf:8d:b1:e9:
         69:07:4d:63:a0:7f:9f:3f:eb:c7:e2:51:3a:ff:57:98:89:14:
         b1:a3:d1:05:77:02:b5:ad:7a:7f:c2:51:75:44:21:b0:4b:db:
         a6:31:35:2e:29:0f:d0:e8:a7:ce:84:c9:09:c0:fc:84:5f:2a:
         e1:10:ca:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 8 17:19:13 2025 by rpki-client