This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D8020/0AF51ABEC39911F0BBCE1889DAE4EC9C/QiUOABGQATIiltvNEo4jCi0GSmM.mft
File:                     QiUOABGQATIiltvNEo4jCi0GSmM.mft (raw, json)
Hash identifier:          +Ha47rMbFuK/UddmkRcFbU5g+8M6n/CC+jZ1v/BKFzw=
Subject key identifier:   B0:2E:0B:F0:29:69:33:CB:5A:41:7C:D2:1F:0A:D0:26:9B:67:09:49
Authority key identifier: 42:25:0E:00:11:90:01:32:22:96:DB:CD:12:8E:23:0A:2D:06:4A:63
Certificate issuer:       /CN=F36D8020AF/serialNumber=42250E00119001322296DBCD128E230A2D064A63
Certificate serial:       17
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/QiUOABGQATIiltvNEo4jCi0GSmM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36D8020/0AF51ABEC39911F0BBCE1889DAE4EC9C/QiUOABGQATIiltvNEo4jCi0GSmM.mft
Manifest number:          17
Signing time:             Mon 08 Dec 2025 05:21:33 +0000
Manifest this update:     Mon 08 Dec 2025 05:21:32 +0000
Manifest next update:     Wed 10 Dec 2025 05:21:32 +0000
Files and hashes:         1: QiUOABGQATIiltvNEo4jCi0GSmM.crl (hash: h6kN0Jy5pLzgY2zKkcsM2c/w6bJvPEKCbaGq31SnW5w=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36D8020/0AF51ABEC39911F0BBCE1889DAE4EC9C/QiUOABGQATIiltvNEo4jCi0GSmM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36D8020/0AF51ABEC39911F0BBCE1889DAE4EC9C/QiUOABGQATIiltvNEo4jCi0GSmM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/QiUOABGQATIiltvNEo4jCi0GSmM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 10 Dec 2025 00:06:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 23 (0x17)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36D8020AF, serialNumber=42250E00119001322296DBCD128E230A2D064A63
        Validity
            Not Before: Dec  8 05:21:32 2025 GMT
            Not After : Dec 10 05:21:32 2025 GMT
        Subject: CN=6936605d-0977
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:18:10:ef:d7:5e:95:93:80:94:d3:0b:63:85:
                    9c:36:85:2c:e9:28:4a:06:5a:07:8b:39:95:0b:a5:
                    61:0f:c0:d4:ae:fd:8e:84:a7:1e:23:a8:fa:a9:d7:
                    32:d9:bf:25:b7:81:c5:e9:1d:db:8b:02:8c:f8:bb:
                    9b:ad:a2:af:11:cb:f3:10:cd:b7:ec:96:a8:43:46:
                    79:1f:3d:1a:c9:d4:fe:ed:4a:c0:06:2d:fb:ef:ea:
                    a2:2b:87:80:0a:84:7c:13:c9:45:2c:a9:4d:60:06:
                    68:07:cb:26:6f:d1:53:0b:32:66:df:26:f1:9e:06:
                    03:c3:c2:34:59:f3:3e:61:d5:2f:02:8b:2e:76:ff:
                    52:a8:65:66:57:7d:6c:d5:0c:75:59:e4:4e:cf:97:
                    99:c3:6c:e5:48:e6:e9:46:ec:bf:54:a4:1b:a0:d6:
                    fe:b3:b9:dc:b6:7c:de:1e:b5:c9:b0:72:d0:06:cd:
                    b4:32:a9:3c:0a:6d:47:26:91:72:59:93:1e:6f:85:
                    62:79:b5:44:66:07:9f:96:e9:c6:7b:c4:21:93:8b:
                    74:37:26:0d:3a:81:d9:0e:f8:ca:53:fe:fe:26:78:
                    87:49:24:84:de:f3:4c:af:6b:5b:5b:42:43:fb:65:
                    7c:03:42:c5:75:b2:ff:d9:e6:27:cf:94:ff:42:c4:
                    ba:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:2E:0B:F0:29:69:33:CB:5A:41:7C:D2:1F:0A:D0:26:9B:67:09:49
            X509v3 Authority Key Identifier:
                keyid:42:25:0E:00:11:90:01:32:22:96:DB:CD:12:8E:23:0A:2D:06:4A:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36D8020/0AF51ABEC39911F0BBCE1889DAE4EC9C/QiUOABGQATIiltvNEo4jCi0GSmM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/QiUOABGQATIiltvNEo4jCi0GSmM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D8020/0AF51ABEC39911F0BBCE1889DAE4EC9C/QiUOABGQATIiltvNEo4jCi0GSmM.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:fa:38:49:44:43:76:13:c3:3c:9f:76:3a:30:6f:bd:5d:36:
         ac:39:34:14:1e:e8:40:a1:0f:37:81:ae:6a:28:4d:85:9c:6d:
         57:cd:26:9e:39:07:80:2e:78:fe:02:b4:58:d5:32:9d:b2:5e:
         ef:5b:ed:bf:7f:47:3b:50:b7:39:91:44:38:97:15:77:df:9e:
         66:a6:31:0c:56:02:05:fc:6e:14:a8:26:78:6f:da:19:3a:b9:
         0b:04:6e:cc:ff:5c:41:bb:2b:a2:9c:1c:2d:eb:ec:53:6d:4a:
         d5:78:a0:c6:8b:5d:c5:67:9c:d4:c3:64:67:21:e9:02:18:cf:
         c8:86:ef:82:89:f6:dd:4a:90:00:9a:cf:27:ba:7c:d0:3e:60:
         63:9d:e4:28:09:cf:2e:eb:27:97:6c:6a:a9:a0:fb:e5:e6:94:
         8b:49:1b:4f:a1:e9:a1:e0:21:72:7e:1a:a2:07:14:b6:57:d3:
         2b:03:e2:22:3e:9b:52:de:2a:e8:20:61:79:44:44:de:39:e6:
         4f:df:b3:b4:50:3f:18:35:bc:e7:27:04:cd:af:ea:7c:e1:dc:
         cc:9f:45:2e:28:c9:40:0e:37:de:dd:c4:d5:08:ef:49:a9:ed:
         3c:a2:9d:2d:62:b2:23:6c:a1:ee:4f:e4:0a:bc:fa:0e:55:26:
         3b:85:a9:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 8 17:16:39 2025 by rpki-client