This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368C55F/E7F7D708436F11F0A0CE9AD6DAE4EC9C/q_pChsdioMCKr3ukYyEsmmY3wE4.mft
File:                     q_pChsdioMCKr3ukYyEsmmY3wE4.mft (raw, json)
Hash identifier:          Sdpfij8Rfdqr3cKF1Ll1ZeTkG4A/96NwTA/VnyVfnHA=
Subject key identifier:   44:35:47:5B:EF:28:85:F9:3D:C5:7F:71:0B:5C:CC:20:24:11:1B:32
Authority key identifier: AB:FA:42:86:C7:62:A0:C0:8A:AF:7B:A4:63:21:2C:9A:66:37:C0:4E
Certificate issuer:       /CN=F368C55FAF/serialNumber=ABFA4286C762A0C08AAF7BA463212C9A6637C04E
Certificate serial:       C5
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/q_pChsdioMCKr3ukYyEsmmY3wE4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368C55F/E7F7D708436F11F0A0CE9AD6DAE4EC9C/q_pChsdioMCKr3ukYyEsmmY3wE4.mft
Manifest number:          C3
Signing time:             Mon 08 Dec 2025 04:58:25 +0000
Manifest this update:     Mon 08 Dec 2025 04:58:25 +0000
Manifest next update:     Wed 10 Dec 2025 04:58:25 +0000
Files and hashes:         1: q_pChsdioMCKr3ukYyEsmmY3wE4.crl (hash: MnkXERV1dVjw7WncQmzaSpAfngxAeLRHLxMsjhaGcF0=)
                          2: 2DDF6242785211F09C627F97DAE4EC9C.roa (hash: KfVx4XuHxXdT/lIKs1z90Wbx+SIasU2oTwGygVCCqkU=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368C55F/E7F7D708436F11F0A0CE9AD6DAE4EC9C/q_pChsdioMCKr3ukYyEsmmY3wE4.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368C55F/E7F7D708436F11F0A0CE9AD6DAE4EC9C/q_pChsdioMCKr3ukYyEsmmY3wE4.mft
                          rsync://rpki.afrinic.net/repository/afrinic/q_pChsdioMCKr3ukYyEsmmY3wE4.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 10 Dec 2025 00:06:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 197 (0xc5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368C55FAF, serialNumber=ABFA4286C762A0C08AAF7BA463212C9A6637C04E
        Validity
            Not Before: Dec  8 04:58:25 2025 GMT
            Not After : Dec 10 04:58:25 2025 GMT
        Subject: CN=69365af1-e90b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:08:f8:72:90:7f:30:1f:6d:4a:2b:1a:e8:22:
                    bb:36:e8:94:4a:4d:e1:64:1f:d4:6d:72:9a:ca:da:
                    1b:e7:34:31:0d:f7:df:ef:72:3f:84:da:50:65:5c:
                    ac:35:78:37:3e:89:72:9a:ee:ff:dc:40:70:c1:ad:
                    e8:1b:e0:16:bd:47:35:da:e5:88:8f:20:f5:c0:36:
                    45:0e:b5:e1:62:0e:af:df:0d:96:3d:f7:f0:95:41:
                    49:e3:08:d2:4b:50:82:d9:65:91:23:76:2a:38:a9:
                    f6:6a:26:cd:97:16:79:78:f1:56:97:73:c2:81:17:
                    be:ae:c6:52:2c:ef:66:f7:4c:a0:69:b2:8c:26:5a:
                    7c:95:15:82:fe:b9:e8:b4:b7:c8:1d:a1:ed:20:a6:
                    67:da:90:3e:56:33:20:6e:04:a0:4c:05:01:91:9a:
                    20:9f:54:57:7e:66:7e:27:7d:56:95:6d:4e:ae:d3:
                    25:4e:ad:be:c2:2e:8e:6b:16:f6:9f:d4:2f:3e:cc:
                    f8:26:52:e1:f3:3a:50:7e:8e:d3:8e:82:e5:76:09:
                    29:fd:70:43:ab:a0:af:73:f3:9c:6b:31:13:bd:42:
                    22:09:f5:09:f0:c5:84:29:e3:10:29:4f:43:01:a3:
                    b6:a1:88:a7:10:b4:62:1f:dc:ea:b5:74:e5:17:f7:
                    e5:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:35:47:5B:EF:28:85:F9:3D:C5:7F:71:0B:5C:CC:20:24:11:1B:32
            X509v3 Authority Key Identifier:
                keyid:AB:FA:42:86:C7:62:A0:C0:8A:AF:7B:A4:63:21:2C:9A:66:37:C0:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368C55F/E7F7D708436F11F0A0CE9AD6DAE4EC9C/q_pChsdioMCKr3ukYyEsmmY3wE4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/q_pChsdioMCKr3ukYyEsmmY3wE4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368C55F/E7F7D708436F11F0A0CE9AD6DAE4EC9C/q_pChsdioMCKr3ukYyEsmmY3wE4.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:7d:8e:1a:8f:36:6e:61:10:76:df:74:a3:e2:5c:82:78:c5:
         fa:88:30:98:c1:b8:5c:b5:72:51:d7:57:88:77:31:5f:c4:c7:
         2e:8c:c5:aa:f3:b6:f1:91:1f:f0:83:9f:30:f2:51:48:87:51:
         a0:d7:e3:5f:41:67:59:c1:32:b3:9c:40:1d:37:d6:bd:70:b3:
         93:34:7a:74:a7:b5:31:c6:44:d8:9b:61:07:ff:ab:7f:d2:22:
         f1:a5:96:9e:f8:ad:47:7c:10:26:29:1e:48:f3:5e:2a:7a:60:
         59:b3:c1:a6:f8:85:0a:b5:10:2f:89:02:56:0a:40:85:1d:90:
         02:ff:2f:a2:3d:18:e4:a5:8b:ec:84:ce:47:71:e6:b6:d9:69:
         39:cd:be:71:c2:61:17:3a:0f:24:ec:ef:7d:d7:3f:7a:90:09:
         d1:9a:7f:ef:e3:56:65:5b:3b:a9:41:67:3d:3e:88:1c:a6:a0:
         d8:c1:0b:4c:a9:1b:e4:8b:66:fe:33:25:ea:c0:9b:c2:28:c8:
         a9:30:5e:c8:3b:65:25:9f:84:de:b4:ce:b1:ba:ef:68:55:0a:
         ea:f7:aa:09:5b:a9:92:2f:b6:c5:1e:80:ff:d3:61:2f:47:27:
         d5:1f:83:28:bb:17:7b:8d:d4:09:ff:0b:bb:29:0c:d9:40:da:
         3e:71:ec:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 8 17:04:30 2025 by rpki-client