This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D2FA4/3425FC804CEA11F0948EF79BDAE4EC9C/QSHSjgu56v7gIAP5I6x0DCb1g2Q.mft
File:                     QSHSjgu56v7gIAP5I6x0DCb1g2Q.mft (raw, json)
Hash identifier:          OitYCL0sq48XnRF0ECcb4cWevCyIf8tuLOxWaqVhu20=
Subject key identifier:   74:2F:4E:CC:CF:1B:F0:85:FA:F5:70:A1:C0:D6:31:27:A2:1F:43:3C
Authority key identifier: 41:21:D2:8E:0B:B9:EA:FE:E0:20:03:F9:23:AC:74:0C:26:F5:83:64
Certificate issuer:       /CN=F36D2FA4AR/serialNumber=4121D28E0BB9EAFEE02003F923AC740C26F58364
Certificate serial:       B5
Authority info access:    rsync://rpki.afrinic.net/repository/arin/QSHSjgu56v7gIAP5I6x0DCb1g2Q.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36D2FA4/3425FC804CEA11F0948EF79BDAE4EC9C/QSHSjgu56v7gIAP5I6x0DCb1g2Q.mft
Manifest number:          B3
Signing time:             Sat 06 Dec 2025 05:01:42 +0000
Manifest this update:     Sat 06 Dec 2025 05:01:41 +0000
Manifest next update:     Mon 08 Dec 2025 05:01:41 +0000
Files and hashes:         1: QSHSjgu56v7gIAP5I6x0DCb1g2Q.crl (hash: 9PhidrpzzphBs58meT630jiLi+a+4TshZW4EXYW2doQ=)
                          2: DD733EA6501911F081EC1BD5DAE4EC9C.roa (hash: pTSTw7CMzw5Tzo3x06Bd0K5rfFXqGfOJjDBXR7lNILg=)
                          3: 702497F0502311F0A0A1EC91DAE4EC9C.roa (hash: TKThQssce2usSG8fqrLv7uZqNWwbS2fbqTY3b7wi6xo=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36D2FA4/3425FC804CEA11F0948EF79BDAE4EC9C/QSHSjgu56v7gIAP5I6x0DCb1g2Q.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36D2FA4/3425FC804CEA11F0948EF79BDAE4EC9C/QSHSjgu56v7gIAP5I6x0DCb1g2Q.mft
                          rsync://rpki.afrinic.net/repository/arin/QSHSjgu56v7gIAP5I6x0DCb1g2Q.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 08 Dec 2025 00:26:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 181 (0xb5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36D2FA4AR, serialNumber=4121D28E0BB9EAFEE02003F923AC740C26F58364
        Validity
            Not Before: Dec  6 05:01:41 2025 GMT
            Not After : Dec  8 05:01:41 2025 GMT
        Subject: CN=6933b8b5-2cfb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:7a:5a:c0:ce:76:22:41:f0:68:31:6e:8e:a0:
                    26:3c:b2:89:2d:cc:37:30:30:ca:6b:05:13:35:b6:
                    e5:70:42:c4:e4:56:31:69:ec:5c:b1:ce:e0:bc:bf:
                    36:a8:27:73:d4:cd:81:2d:c1:bf:4d:85:ec:bb:85:
                    5e:03:5d:35:5b:55:64:a8:f6:13:1b:77:ea:2b:d9:
                    d7:f7:1c:18:c0:57:7d:cc:ec:49:06:28:94:0e:9a:
                    3e:68:d8:f8:27:0c:7c:a5:40:93:8e:09:1f:dc:5a:
                    31:60:a0:33:1d:02:0d:2b:ea:91:3d:f4:17:27:0f:
                    ce:ad:53:c0:b1:b6:0c:8d:fd:72:53:f1:c1:67:08:
                    08:7d:a9:86:99:c5:be:07:16:e5:44:a1:69:fe:f9:
                    2f:91:a4:e7:a4:54:b5:91:8d:97:51:80:8b:d4:37:
                    32:e4:57:52:b2:d8:c7:da:99:5d:0b:92:e5:23:96:
                    a9:44:8a:f9:a7:17:4c:2b:cb:ad:35:dc:60:9a:10:
                    2c:52:42:1b:10:13:0e:f9:9d:90:72:51:8b:6a:1a:
                    c6:13:62:6a:14:82:59:5e:f2:f0:65:4d:e6:b2:70:
                    a9:0a:dd:74:25:b4:ff:fe:c7:9a:52:bb:36:47:0f:
                    85:3a:b4:53:7e:9b:6f:e2:ae:b8:62:c8:5b:6b:29:
                    5c:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:2F:4E:CC:CF:1B:F0:85:FA:F5:70:A1:C0:D6:31:27:A2:1F:43:3C
            X509v3 Authority Key Identifier:
                keyid:41:21:D2:8E:0B:B9:EA:FE:E0:20:03:F9:23:AC:74:0C:26:F5:83:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36D2FA4/3425FC804CEA11F0948EF79BDAE4EC9C/QSHSjgu56v7gIAP5I6x0DCb1g2Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/QSHSjgu56v7gIAP5I6x0DCb1g2Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D2FA4/3425FC804CEA11F0948EF79BDAE4EC9C/QSHSjgu56v7gIAP5I6x0DCb1g2Q.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:13:a4:a5:2e:90:7f:51:2a:13:98:4c:bd:a9:d1:1a:db:00:
         22:0c:bc:02:52:3f:8a:19:9e:f2:19:81:1c:62:b6:4d:ec:42:
         41:45:da:ae:fb:9f:58:e6:7b:72:3c:12:33:d6:a3:73:52:36:
         cf:09:f3:f5:60:69:a0:3c:6f:57:1f:a1:e1:b6:62:d8:eb:7e:
         e2:52:1d:72:05:bb:d7:94:70:f4:63:a2:11:53:d0:90:ee:0e:
         90:28:ca:80:ad:24:54:14:fd:01:09:d9:9a:4c:81:15:04:69:
         05:ad:e0:ef:39:87:01:f3:31:fb:95:3d:72:ed:37:dd:f8:96:
         43:ba:fe:9e:c6:56:b7:d1:67:ab:64:2e:3e:ba:dc:54:45:56:
         ae:2b:b6:41:48:05:fd:79:c5:20:ef:d3:72:48:ad:1b:0b:72:
         0d:49:29:0f:6b:1f:bc:5e:30:05:20:e8:e6:9e:fa:e7:f0:0d:
         eb:ae:a4:fd:19:03:c6:2b:e2:9c:cd:92:19:a4:a8:08:39:68:
         23:23:8c:72:c2:95:67:b7:fa:1f:f9:4a:67:5f:bf:da:87:a3:
         b8:fa:20:2a:6d:89:0a:9f:62:ee:ea:cf:b3:5f:c5:de:3a:40:
         0a:a6:d6:c9:3d:39:95:f4:6f:43:82:2d:f9:9a:9a:41:4f:8a:
         7f:3c:1d:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 16:03:46 2025 by rpki-client