This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36E0972/C9BF12CE87C811EE816035264AD9E6FC/qv9F7YLc9bhYA4mULVnp0p9bwuE.mft
File:                     qv9F7YLc9bhYA4mULVnp0p9bwuE.mft (raw, json)
Hash identifier:          BlqqzYwzsZgmPz6Z6BB5/m9Qe3sS+3AkKan16T1bvf4=
Subject key identifier:   84:7B:D3:08:87:97:C0:06:74:67:FC:A8:EB:FB:B2:62:4D:F9:6F:1E
Authority key identifier: AA:FF:45:ED:82:DC:F5:B8:58:03:89:94:2D:59:E9:D2:9F:5B:C2:E1
Certificate issuer:       /CN=F36E0972AF/serialNumber=AAFF45ED82DCF5B8580389942D59E9D29F5BC2E1
Certificate serial:       030C
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/qv9F7YLc9bhYA4mULVnp0p9bwuE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36E0972/C9BF12CE87C811EE816035264AD9E6FC/qv9F7YLc9bhYA4mULVnp0p9bwuE.mft
Manifest number:          030B
Signing time:             Sat 20 Dec 2025 03:53:45 +0000
Manifest this update:     Sat 20 Dec 2025 03:53:44 +0000
Manifest next update:     Mon 22 Dec 2025 03:53:44 +0000
Files and hashes:         1: qv9F7YLc9bhYA4mULVnp0p9bwuE.crl (hash: sp9jnrphLIYdm6PCn/ZOWkldahYvN7DfegQUc2QFWX4=)
                          2: 17B6FBFE87C911EEBD3EF6264AD9E6FC.roa (hash: 5ZD1WUDmaiv05T51fwwZBTVbvUWprAEi25d+4iZwaOA=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36E0972/C9BF12CE87C811EE816035264AD9E6FC/qv9F7YLc9bhYA4mULVnp0p9bwuE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36E0972/C9BF12CE87C811EE816035264AD9E6FC/qv9F7YLc9bhYA4mULVnp0p9bwuE.mft
                          rsync://rpki.afrinic.net/repository/afrinic/qv9F7YLc9bhYA4mULVnp0p9bwuE.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 22 Dec 2025 00:06:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 780 (0x30c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36E0972AF, serialNumber=AAFF45ED82DCF5B8580389942D59E9D29F5BC2E1
        Validity
            Not Before: Dec 20 03:53:44 2025 GMT
            Not After : Dec 22 03:53:44 2025 GMT
        Subject: CN=69461dc9-4d25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:12:56:9d:ce:5e:46:54:4a:ec:21:25:cf:92:
                    95:fc:0d:73:15:c6:aa:68:61:59:59:ac:67:f0:ba:
                    18:eb:64:9e:4c:5b:e6:f2:3f:98:c3:0a:d7:09:fd:
                    ff:2c:0f:39:b9:1e:57:97:92:6c:c7:6c:04:5c:57:
                    aa:f9:87:b0:f3:a0:72:cd:de:c2:2c:3d:74:8a:f4:
                    1e:bd:b8:f0:4d:4e:f7:7b:89:e5:bb:f9:fb:74:80:
                    9d:d2:83:36:e5:67:ba:a7:5f:8a:e6:a2:1f:4f:08:
                    5c:0c:3a:ca:3f:74:37:26:a0:11:f6:b7:27:74:58:
                    96:5b:bf:e1:3f:fa:52:fb:01:51:f0:23:ec:64:99:
                    56:15:17:47:fc:cb:ce:90:58:48:2a:dd:9a:7f:07:
                    42:a2:14:32:f5:fd:ae:2a:d6:16:f6:ae:a9:c5:65:
                    8b:9b:f4:94:0f:23:2d:8c:4e:aa:52:3e:78:60:32:
                    01:92:56:c0:d1:0a:71:25:72:64:65:1f:f6:62:ee:
                    aa:6b:48:f7:63:0f:72:68:77:7d:9a:68:16:4b:08:
                    65:7f:aa:45:74:50:13:f6:94:8f:c3:90:7b:13:ea:
                    99:f7:f3:c1:6a:a0:fd:3d:be:7e:8f:07:21:52:a8:
                    8c:db:3e:0b:90:9b:1e:9a:cb:38:9a:d8:4f:a0:a7:
                    bf:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:7B:D3:08:87:97:C0:06:74:67:FC:A8:EB:FB:B2:62:4D:F9:6F:1E
            X509v3 Authority Key Identifier:
                keyid:AA:FF:45:ED:82:DC:F5:B8:58:03:89:94:2D:59:E9:D2:9F:5B:C2:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36E0972/C9BF12CE87C811EE816035264AD9E6FC/qv9F7YLc9bhYA4mULVnp0p9bwuE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/qv9F7YLc9bhYA4mULVnp0p9bwuE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E0972/C9BF12CE87C811EE816035264AD9E6FC/qv9F7YLc9bhYA4mULVnp0p9bwuE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:e4:27:ee:c2:57:6a:37:44:16:a2:b8:9c:a1:1a:b2:a4:40:
         42:f7:7b:cb:df:45:be:a1:d8:f2:1f:0b:91:2d:75:fe:fc:72:
         41:d6:78:11:58:e1:65:de:73:b4:42:a6:cf:d2:6e:e2:c5:46:
         57:10:90:b0:f4:1a:03:5e:e4:e9:64:38:12:fd:fc:8c:a6:78:
         f9:41:1f:b5:cc:23:12:21:0f:52:b3:87:a7:f9:b8:5d:17:e6:
         f6:0f:b7:04:5d:7e:0d:05:5e:1c:5d:53:78:18:b3:18:ce:18:
         91:87:b1:60:e4:da:37:74:e6:c2:94:1f:48:a5:0b:8b:d9:4d:
         18:ca:26:82:b6:89:33:68:d9:1e:1b:74:16:21:76:0b:72:4f:
         e2:8c:1b:84:9a:88:6a:0c:df:43:fa:e2:54:46:4b:ba:56:91:
         4b:c6:b7:5f:34:f5:70:75:d5:b3:45:ba:e8:35:e4:ea:ed:c6:
         b9:53:f3:3a:95:72:1d:63:eb:d9:ff:5c:47:b8:42:1e:76:d0:
         bb:54:fa:bc:ee:e6:7e:a9:3b:54:10:d8:ab:b3:7d:a5:30:1c:
         3c:18:8a:db:8f:c4:70:f7:25:e8:b9:5a:86:48:a5:c5:cc:81:
         d4:e4:69:67:62:80:61:11:bc:75:81:9f:c3:8f:07:f3:fc:73:
         2e:0d:55:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 20:31:27 2025 by rpki-client