This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D5C19/6D11B7167BA711E9B091553CF8AEA228/QOQ11_MUFa_OV9DelQm3hi-WClc.mft
File:                     QOQ11_MUFa_OV9DelQm3hi-WClc.mft (raw, json)
Hash identifier:          +/htZMESsmlhsFDpLCtUb34acZPHumG6frYqrWJB408=
Subject key identifier:   CD:51:BD:A2:A1:5E:65:91:38:C5:32:45:2C:FB:01:4F:70:04:C4:4D
Authority key identifier: 40:E4:35:D7:F3:14:15:AF:CE:57:D0:DE:95:09:B7:86:2F:96:0A:57
Certificate issuer:       /CN=F36D5C19AF/serialNumber=40E435D7F31415AFCE57D0DE9509B7862F960A57
Certificate serial:       099B
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/QOQ11_MUFa_OV9DelQm3hi-WClc.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36D5C19/6D11B7167BA711E9B091553CF8AEA228/QOQ11_MUFa_OV9DelQm3hi-WClc.mft
Manifest number:          0998
Signing time:             Sun 07 Dec 2025 01:21:03 +0000
Manifest this update:     Sun 07 Dec 2025 01:21:02 +0000
Manifest next update:     Tue 09 Dec 2025 01:21:02 +0000
Files and hashes:         1: QOQ11_MUFa_OV9DelQm3hi-WClc.crl (hash: PBVfTyLLCVyDqJr/8VZOGdpCfaqz64+tDC6Zrcveti0=)
                          2: DD1E8AE47BAB11E98D80B33FF8AEA228.roa (hash: BTzcxln9lknQk/0gio9sglyD4baCdk8/WR9c29o94Hk=)
                          3: 881335FA7BAA11E9A046BD3EF8AEA228.roa (hash: OkMDhpXF8khmK7w80DsO5vKxDjM8RKk6XbZwgTPRn50=)
                          4: 54220D207BAA11E9BEE08A3EF8AEA228.roa (hash: 6mAfvCPcBikixr82UHSocOCucUOi7FCh+gOmIS/+gHs=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36D5C19/6D11B7167BA711E9B091553CF8AEA228/QOQ11_MUFa_OV9DelQm3hi-WClc.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36D5C19/6D11B7167BA711E9B091553CF8AEA228/QOQ11_MUFa_OV9DelQm3hi-WClc.mft
                          rsync://rpki.afrinic.net/repository/afrinic/QOQ11_MUFa_OV9DelQm3hi-WClc.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 09 Dec 2025 00:06:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2459 (0x99b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36D5C19AF, serialNumber=40E435D7F31415AFCE57D0DE9509B7862F960A57
        Validity
            Not Before: Dec  7 01:21:02 2025 GMT
            Not After : Dec  9 01:21:02 2025 GMT
        Subject: CN=6934d67f-29f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:cf:89:6b:60:45:77:2b:67:2c:00:33:72:15:
                    a2:43:68:8c:45:85:b2:73:e1:f6:49:5c:68:20:d9:
                    1c:9e:0b:18:04:88:87:aa:8d:82:71:67:02:45:25:
                    d0:79:cc:92:11:d5:7b:9c:98:80:c5:90:0d:98:a9:
                    89:ae:54:37:d9:fa:91:e0:ba:84:07:98:db:da:0d:
                    6b:a2:ae:8f:f3:be:78:a8:83:f3:7d:da:28:6b:e7:
                    61:86:17:39:5f:dd:f7:cb:f3:3e:60:21:9f:b3:4b:
                    22:29:00:98:0e:1a:81:a9:9c:0c:9c:d7:24:78:71:
                    e1:5e:05:29:af:e2:00:f7:64:4e:ce:86:23:78:7f:
                    48:b0:e9:c1:61:64:5f:82:58:95:3f:68:3c:b6:76:
                    ec:65:ac:be:50:ef:83:c6:75:18:4b:98:d1:1c:83:
                    9a:23:3e:5c:c5:46:2b:76:cd:cf:0e:14:ea:b7:50:
                    7f:1d:e4:51:e5:2d:7b:a7:4f:c6:81:ee:08:d7:2e:
                    a7:fc:16:92:2b:47:53:b6:46:3d:b2:ee:e8:40:d3:
                    2e:97:9b:11:98:ac:39:64:8e:ca:1d:ea:60:24:d4:
                    01:40:1e:3f:eb:71:02:0d:35:c4:73:a4:e7:1b:9d:
                    cb:1b:d7:a2:59:e1:9b:99:8c:f6:5a:49:5e:e2:86:
                    19:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:51:BD:A2:A1:5E:65:91:38:C5:32:45:2C:FB:01:4F:70:04:C4:4D
            X509v3 Authority Key Identifier:
                keyid:40:E4:35:D7:F3:14:15:AF:CE:57:D0:DE:95:09:B7:86:2F:96:0A:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36D5C19/6D11B7167BA711E9B091553CF8AEA228/QOQ11_MUFa_OV9DelQm3hi-WClc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/QOQ11_MUFa_OV9DelQm3hi-WClc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D5C19/6D11B7167BA711E9B091553CF8AEA228/QOQ11_MUFa_OV9DelQm3hi-WClc.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:e2:ac:83:fb:4c:e0:cb:d3:70:26:c7:11:3b:6f:ae:45:b9:
         ba:41:e1:af:7c:1a:56:56:a4:5d:31:ff:ea:e7:01:8b:64:30:
         cb:0f:ea:eb:18:f6:8c:fb:bd:07:ad:ef:de:1c:3c:86:a9:59:
         ae:81:c6:58:a8:da:53:d5:ed:03:ac:a5:a3:5e:97:af:65:88:
         12:7c:c2:b1:63:51:7b:c9:18:86:c0:8b:91:a1:a6:2a:d5:9e:
         d7:ac:22:68:63:af:76:73:08:fd:14:1d:7c:d3:45:dc:4d:65:
         9d:1c:51:1f:b7:32:a5:a1:ae:13:27:b2:8e:78:d4:ef:8b:a6:
         94:57:f4:a2:55:bb:cb:53:76:df:3d:c1:51:f8:76:d4:6f:74:
         d2:66:cd:74:f4:6f:f4:3f:c7:79:cc:92:64:32:cd:0c:79:da:
         5f:b8:72:a9:96:ff:e7:73:4d:52:10:51:30:9c:5c:64:a9:ab:
         c1:2a:a8:c9:76:43:59:aa:e5:13:21:fd:f4:e0:d5:1b:91:7a:
         78:88:46:23:fb:3e:93:ab:c7:8c:a7:25:bb:35:00:fc:4c:71:
         bc:0d:85:2f:be:95:8b:5d:93:87:3d:ee:87:ea:9b:5d:00:24:
         e6:76:03:36:19:94:d8:cb:d8:a3:19:d9:18:2b:da:4b:5c:32:
         e2:9e:b1:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 06:08:28 2025 by rpki-client