This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369BF27/5800DCF491EA11E9BA56927AF8AEA228/zQfXyJ7OTA-dBKGxU7vHEN8Bay0.mft
File:                     zQfXyJ7OTA-dBKGxU7vHEN8Bay0.mft (raw, json)
Hash identifier:          CPNFB0JXWmQvOF7nHqz/6k9EcTvjHeShBr5dyIKaR1Y=
Subject key identifier:   70:F6:1B:11:31:4D:F3:16:87:FC:0D:AA:DE:37:EE:E2:6E:95:E3:13
Authority key identifier: CD:07:D7:C8:9E:CE:4C:0F:9D:04:A1:B1:53:BB:C7:10:DF:01:6B:2D
Certificate issuer:       /CN=F369BF27AR/serialNumber=CD07D7C89ECE4C0F9D04A1B153BBC710DF016B2D
Certificate serial:       0992
Authority info access:    rsync://rpki.afrinic.net/repository/arin/zQfXyJ7OTA-dBKGxU7vHEN8Bay0.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F369BF27/5800DCF491EA11E9BA56927AF8AEA228/zQfXyJ7OTA-dBKGxU7vHEN8Bay0.mft
Manifest number:          0986
Signing time:             Sat 06 Dec 2025 01:29:42 +0000
Manifest this update:     Sat 06 Dec 2025 01:29:41 +0000
Manifest next update:     Mon 08 Dec 2025 01:29:41 +0000
Files and hashes:         1: zQfXyJ7OTA-dBKGxU7vHEN8Bay0.crl (hash: 7qpFXtEs7cm0CDrGY1LcAtZomOpAQoePSDnaTHbPcmA=)
                          2: C28DA6C44D5F11F089D77C8ADAE4EC9C.roa (hash: dABQoz9AGXGyoNBAetMSbs1U62SRqLiX8c5R1HY93gg=)
                          3: 1AD0D08C4D5F11F08E482186DAE4EC9C.roa (hash: OhoSn83syBewwYcLzVXxyO/+vTXDKKmwuhAAzmLRplo=)
                          4: E2B1CB3E4D5E11F0AC9C0484DAE4EC9C.roa (hash: yv5AfJmE56S5ts/c2onzn6ricd3K2oEmGaCJUOJTiXA=)
                          5: 7F9AB1CC98F711E9BABB4B76F8AEA228.roa (hash: jzZ3XEm/0+bQmIh4jXGZex7PIgjtpornzaVmedGVKeA=)
                          6: 4601A8304D5F11F0AA717286DAE4EC9C.roa (hash: O60MwYsiZd+UlKceOJ85IOxK7Q1+As/RwsVdr1Ykpjc=)
                          7: 937EE7024D6011F09A38078FDAE4EC9C.roa (hash: pbBP0ntQdVgVm+KFXqo/FvwDRupvw0CtUQRgWotDjnY=)
                          8: 318EA42098F711E9A08C1176F8AEA228.roa (hash: w0LdOEkkXXKRsW1PLK4DZkJUwY2G0SIkANImRgbjTcI=)
                          9: 3A1D58C44D6011F093A9B58CDAE4EC9C.roa (hash: R1suNQZf1mKtdv/mgrGQzmzP42VGw/+PJeTA6yPQF0w=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F369BF27/5800DCF491EA11E9BA56927AF8AEA228/zQfXyJ7OTA-dBKGxU7vHEN8Bay0.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F369BF27/5800DCF491EA11E9BA56927AF8AEA228/zQfXyJ7OTA-dBKGxU7vHEN8Bay0.mft
                          rsync://rpki.afrinic.net/repository/arin/zQfXyJ7OTA-dBKGxU7vHEN8Bay0.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 08 Dec 2025 00:26:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2450 (0x992)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F369BF27AR, serialNumber=CD07D7C89ECE4C0F9D04A1B153BBC710DF016B2D
        Validity
            Not Before: Dec  6 01:29:41 2025 GMT
            Not After : Dec  8 01:29:41 2025 GMT
        Subject: CN=69338706-f1d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:39:47:fe:ed:d5:ed:92:6b:16:93:15:46:07:
                    09:03:8c:21:57:37:1d:90:f4:23:99:a6:0e:cf:42:
                    37:f3:77:1e:10:bd:6d:04:23:d2:4d:35:ad:9f:dd:
                    bc:1c:3d:39:80:16:ac:ba:c0:63:8c:61:2f:a5:2d:
                    a9:69:e3:df:f4:55:21:a9:31:3e:b3:95:b6:03:4e:
                    65:81:91:8d:69:5a:96:3d:66:d7:1e:cf:cd:d6:fc:
                    6e:c5:7c:3e:7e:c1:f9:42:66:7c:3a:86:dd:a3:dd:
                    ff:e2:a9:2a:b8:49:28:b1:f7:c8:db:ef:51:9c:c8:
                    87:4c:b3:39:b9:5e:43:f3:57:2f:43:9e:e0:dc:9c:
                    f2:ea:a6:d8:33:7d:ab:b4:3c:11:48:25:65:a7:ec:
                    b5:1e:e2:c8:34:ce:d2:72:32:72:df:e9:84:ba:67:
                    4f:89:44:8e:ce:a3:b5:6a:1a:4f:88:8f:1a:f9:f9:
                    5a:87:a9:d4:c8:0b:da:fc:da:10:13:c7:36:7f:18:
                    80:6d:06:71:a7:fe:57:ef:4a:34:e6:79:f4:15:4f:
                    8c:9a:e0:f7:59:51:8d:92:e9:18:df:f2:f1:3a:4f:
                    8b:bb:b6:9c:b8:c3:df:1c:a6:41:13:25:be:c5:f7:
                    4a:da:4f:49:61:3d:31:a6:5f:14:6d:9d:a5:ad:ed:
                    f1:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:F6:1B:11:31:4D:F3:16:87:FC:0D:AA:DE:37:EE:E2:6E:95:E3:13
            X509v3 Authority Key Identifier:
                keyid:CD:07:D7:C8:9E:CE:4C:0F:9D:04:A1:B1:53:BB:C7:10:DF:01:6B:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F369BF27/5800DCF491EA11E9BA56927AF8AEA228/zQfXyJ7OTA-dBKGxU7vHEN8Bay0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/zQfXyJ7OTA-dBKGxU7vHEN8Bay0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369BF27/5800DCF491EA11E9BA56927AF8AEA228/zQfXyJ7OTA-dBKGxU7vHEN8Bay0.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:3e:18:27:49:6a:28:e6:fa:5c:13:00:3d:ae:de:5e:46:5d:
         d4:e7:f9:cb:e9:7d:b1:57:df:f0:3d:41:27:33:c2:f7:e9:40:
         34:ae:a9:0f:e1:9b:f6:1a:a6:a9:fc:7a:80:04:3a:f0:16:e2:
         77:f9:09:72:30:c3:d9:9e:69:95:71:fe:1c:7d:c3:bd:25:c0:
         58:87:0f:6d:d3:c4:c3:22:4d:84:67:ae:ae:2b:80:2e:c6:db:
         35:8a:fd:3a:b9:63:aa:a2:1f:34:fb:bd:ee:a3:79:41:0d:3e:
         0e:ad:20:e8:c2:43:85:29:4e:8c:2d:57:cf:27:59:95:e5:c4:
         33:ea:38:fc:c2:41:3a:b5:8f:aa:0b:ce:00:1d:e3:8a:b3:ec:
         ec:97:a0:5a:a4:98:55:e0:5c:bf:fd:99:f9:46:61:ca:73:e0:
         37:eb:07:ff:00:52:a6:fc:85:d2:88:69:6b:70:e3:ca:0a:05:
         8d:3f:61:8a:e6:e7:f4:8e:22:31:ae:79:59:c2:04:46:88:38:
         da:3a:96:f7:02:5f:62:46:8e:08:d0:d8:35:c8:08:e7:49:6a:
         82:17:66:bb:3c:0e:3f:73:ad:ba:19:43:06:39:43:e7:2f:b5:
         74:51:e7:9b:e5:13:cb:0e:31:1e:7f:16:60:16:ef:97:f3:d0:
         71:02:16:2b
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgICCZIwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
OUJGMjdBUjExMC8GA1UEBRMoQ0QwN0Q3Qzg5RUNFNEMwRjlEMDRBMUIxNTNCQkM3
MTBERjAxNkIyRDAeFw0yNTEyMDYwMTI5NDFaFw0yNTEyMDgwMTI5NDFaMBgxFjAU
BgNVBAMTDTY5MzM4NzA2LWYxZDAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCbOUf+7dXtkmsWkxVGBwkDjCFXNx2Q9COZpg7PQjfzdx4QvW0EI9JNNa2f
3bwcPTmAFqy6wGOMYS+lLalp49/0VSGpMT6zlbYDTmWBkY1pWpY9Ztcez83W/G7F
fD5+wflCZnw6ht2j3f/iqSq4SSix98jb71GcyIdMszm5XkPzVy9DnuDcnPLqptgz
fau0PBFIJWWn7LUe4sg0ztJyMnLf6YS6Z0+JRI7Oo7VqGk+Ijxr5+VqHqdTIC9r8
2hATxzZ/GIBtBnGn/lfvSjTmefQVT4ya4PdZUY2S6Rjf8vE6T4u7tpy4w98cpkET
Jb7F90raT0lhPTGmXxRtnaWt7fELAgMBAAGjggK1MIICsTAdBgNVHQ4EFgQUcPYb
ETFN8xaH/A2q3jfu4m6V4xMwHwYDVR0jBBgwFoAUzQfXyJ7OTA+dBKGxU7vHEN8B
ay0wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjlCRjI3LzU4MDBEQ0Y0OTFFQTExRTlCQTU2OTI3QUY4QUVBMjI4L3pRZlh5
SjdPVEEtZEJLR3hVN3ZIRU44QmF5MC5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L3pRZlh5SjdPVEEtZEJLR3hVN3ZIRU44QmF5MC5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEFBQcw
C4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl
cG9zaXRvcnkvRjM2OUJGMjcvNTgwMERDRjQ5MUVBMTFFOUJBNTY5MjdBRjhBRUEy
MjgvelFmWHlKN09UQS1kQktHeFU3dkhFTjhCYXkwLm1mdDA1BggrBgEFBQcwDYYp
aHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA
AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBzPhgnSWoo5vpcEwA9rt5eRl3U5/nL6X2x
V9/wPUEnM8L36UA0rqkP4Zv2Gqap/HqABDrwFuJ3+QlyMMPZnmmVcf4cfcO9JcBY
hw9t08TDIk2EZ66uK4Auxts1iv06uWOqoh80+73uo3lBDT4OrSDowkOFKU6MLVfP
J1mV5cQz6jj8wkE6tY+qC84AHeOKs+zsl6BapJhV4Fy//Zn5RmHKc+A36wf/AFKm
/IXSiGlrcOPKCgWNP2GK5uf0jiIxrnlZwgRGiDjaOpb3Al9iRo4I0Ng1yAjnSWqC
F2a7PA4/c626GUMGOUPnL7V0Ueeb5RPLDjEefxZgFu+X89BxAhYr
-----END CERTIFICATE-----
Generated at Sat Dec 6 23:25:38 2025 by rpki-client