This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3615A48/3009F118043211EEB077F65B4AD9E6FC/GS9iV_wr5XP3WbXyvfg9aar_ouc.mft
File:                     GS9iV_wr5XP3WbXyvfg9aar_ouc.mft (raw, json)
Hash identifier:          R/N1QQNt6EcYJnCQCNvryO/is7LCnIsb2jMctByVOIU=
Subject key identifier:   2B:9B:D7:22:1F:53:AD:9D:47:1C:3F:65:71:EF:9B:89:11:E9:99:27
Authority key identifier: 19:2F:62:57:FC:2B:E5:73:F7:59:B5:F2:BD:F8:3D:69:AA:FF:A2:E7
Certificate issuer:       /CN=F3615A48AR/serialNumber=192F6257FC2BE573F759B5F2BDF83D69AAFFA2E7
Certificate serial:       03B0
Authority info access:    rsync://rpki.afrinic.net/repository/arin/GS9iV_wr5XP3WbXyvfg9aar_ouc.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3615A48/3009F118043211EEB077F65B4AD9E6FC/GS9iV_wr5XP3WbXyvfg9aar_ouc.mft
Manifest number:          03AF
Signing time:             Mon 08 Dec 2025 03:28:10 +0000
Manifest this update:     Mon 08 Dec 2025 03:28:09 +0000
Manifest next update:     Wed 10 Dec 2025 03:28:09 +0000
Files and hashes:         1: GS9iV_wr5XP3WbXyvfg9aar_ouc.crl (hash: ATci7KZEi5Uqi8RqOnRn+0YA91jxbHm9J8TobM2uqoI=)
                          2: A147BE680D4211EF9356066C017001B1.roa (hash: QuPZYoQI7oZ3C2C6Xc4HwdYmjHFXWbZWWnj28DQTRz0=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3615A48/3009F118043211EEB077F65B4AD9E6FC/GS9iV_wr5XP3WbXyvfg9aar_ouc.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3615A48/3009F118043211EEB077F65B4AD9E6FC/GS9iV_wr5XP3WbXyvfg9aar_ouc.mft
                          rsync://rpki.afrinic.net/repository/arin/GS9iV_wr5XP3WbXyvfg9aar_ouc.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 10 Dec 2025 00:26:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 944 (0x3b0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3615A48AR, serialNumber=192F6257FC2BE573F759B5F2BDF83D69AAFFA2E7
        Validity
            Not Before: Dec  8 03:28:09 2025 GMT
            Not After : Dec 10 03:28:09 2025 GMT
        Subject: CN=693645ca-d84c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:dc:a3:eb:71:91:a2:a9:14:79:d3:61:dc:9f:
                    7c:1b:6c:27:ee:f2:a8:1c:19:62:38:47:4c:af:2a:
                    97:0e:b4:00:e7:ef:2c:eb:4b:b8:71:d9:19:d4:8d:
                    ea:ff:67:84:86:e6:04:ef:4a:5b:5d:e8:0a:29:9e:
                    33:c5:41:cc:ed:23:9f:e6:80:61:4b:d6:0f:21:55:
                    3c:48:38:bc:d7:3d:ec:7b:93:25:c8:fd:37:fd:00:
                    aa:ca:9c:fc:ee:4f:5e:eb:d3:08:46:a4:f5:19:0e:
                    90:c1:11:79:79:d4:86:14:36:85:81:df:77:d3:1c:
                    d6:63:4e:7b:3e:04:ff:e5:34:6f:6f:09:94:f2:6b:
                    38:df:53:c3:84:5d:14:b8:7a:51:c1:d7:1d:e2:bc:
                    d5:5b:c8:99:69:f6:94:89:ff:86:db:e3:3e:5d:05:
                    2b:5d:6f:d8:b9:86:52:27:d7:c6:a4:91:2d:1e:58:
                    57:12:6e:cb:8a:73:eb:d7:75:83:39:a2:80:e1:7f:
                    13:5d:aa:c5:5f:a4:85:c7:67:99:21:2d:bc:d8:67:
                    d8:05:e8:b5:dd:e6:6e:dc:98:2f:4a:9c:ee:8a:7d:
                    86:84:42:fa:7d:a0:1c:b3:3d:39:c5:d6:c1:6c:cd:
                    0b:03:1e:ab:10:28:1f:66:ff:47:ed:96:6a:c5:dd:
                    d0:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:9B:D7:22:1F:53:AD:9D:47:1C:3F:65:71:EF:9B:89:11:E9:99:27
            X509v3 Authority Key Identifier:
                keyid:19:2F:62:57:FC:2B:E5:73:F7:59:B5:F2:BD:F8:3D:69:AA:FF:A2:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3615A48/3009F118043211EEB077F65B4AD9E6FC/GS9iV_wr5XP3WbXyvfg9aar_ouc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/GS9iV_wr5XP3WbXyvfg9aar_ouc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3615A48/3009F118043211EEB077F65B4AD9E6FC/GS9iV_wr5XP3WbXyvfg9aar_ouc.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:10:f5:74:8f:b1:47:25:10:f9:9f:0e:45:73:ee:33:49:ef:
         71:ba:71:28:27:79:61:3a:7b:2c:c6:4d:b9:62:5a:22:ae:46:
         e5:63:79:ae:ee:31:f1:84:07:bf:af:83:9d:f9:e0:6b:75:d0:
         94:3b:cc:e6:0b:b3:2e:63:ff:67:60:e9:80:25:2a:a9:81:6a:
         58:ce:42:a1:e3:a7:82:08:3b:3b:d6:38:a2:51:bb:78:6a:2b:
         12:aa:3f:fb:06:b3:b9:40:a6:fc:da:ca:d5:2a:d4:45:39:b7:
         11:23:e8:01:23:1d:77:8d:e5:3a:c3:70:f4:52:0e:16:1e:4c:
         49:34:c5:4a:ed:6a:22:af:af:c6:fa:37:ab:18:32:22:ec:1f:
         57:79:06:9f:6f:da:43:09:d7:c9:7e:94:b5:71:ed:13:37:b4:
         cf:bd:86:e9:fa:53:77:dc:74:c6:a2:6c:fb:23:c1:45:6e:94:
         78:8d:2e:a9:60:70:5f:9d:a5:1b:0a:f9:ea:68:3d:2a:9b:be:
         43:2e:1e:d1:29:cc:f1:55:1d:0f:5e:6f:29:3d:2b:51:38:08:
         e4:a6:d4:e0:aa:49:86:fd:5a:8a:17:dd:bc:13:77:5c:93:c8:
         36:01:8a:c7:ac:61:e3:79:97:04:f1:3a:e0:2b:ff:8a:2c:91:
         40:fb:9c:91
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgICA7AwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
MTVBNDhBUjExMC8GA1UEBRMoMTkyRjYyNTdGQzJCRTU3M0Y3NTlCNUYyQkRGODNE
NjlBQUZGQTJFNzAeFw0yNTEyMDgwMzI4MDlaFw0yNTEyMTAwMzI4MDlaMBgxFjAU
BgNVBAMTDTY5MzY0NWNhLWQ4NGMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDX3KPrcZGiqRR502Hcn3wbbCfu8qgcGWI4R0yvKpcOtADn7yzrS7hx2RnU
jer/Z4SG5gTvSltd6AopnjPFQcztI5/mgGFL1g8hVTxIOLzXPex7kyXI/Tf9AKrK
nPzuT17r0whGpPUZDpDBEXl51IYUNoWB33fTHNZjTns+BP/lNG9vCZTyazjfU8OE
XRS4elHB1x3ivNVbyJlp9pSJ/4bb4z5dBStdb9i5hlIn18akkS0eWFcSbsuKc+vX
dYM5ooDhfxNdqsVfpIXHZ5khLbzYZ9gF6LXd5m7cmC9KnO6KfYaEQvp9oByzPTnF
1sFszQsDHqsQKB9m/0ftlmrF3dCXAgMBAAGjggK1MIICsTAdBgNVHQ4EFgQUK5vX
Ih9TrZ1HHD9lce+biRHpmScwHwYDVR0jBBgwFoAUGS9iV/wr5XP3WbXyvfg9aar/
oucwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjE1QTQ4LzMwMDlGMTE4MDQzMjExRUVCMDc3RjY1QjRBRDlFNkZDL0dTOWlW
X3dyNVhQM1diWHl2Zmc5YWFyX291Yy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L0dTOWlWX3dyNVhQM1diWHl2Zmc5YWFyX291Yy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEFBQcw
C4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl
cG9zaXRvcnkvRjM2MTVBNDgvMzAwOUYxMTgwNDMyMTFFRUIwNzdGNjVCNEFEOUU2
RkMvR1M5aVZfd3I1WFAzV2JYeXZmZzlhYXJfb3VjLm1mdDA1BggrBgEFBQcwDYYp
aHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA
AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCSEPV0j7FHJRD5nw5Fc+4zSe9xunEoJ3lh
Onssxk25YloirkblY3mu7jHxhAe/r4Od+eBrddCUO8zmC7MuY/9nYOmAJSqpgWpY
zkKh46eCCDs71jiiUbt4aisSqj/7BrO5QKb82srVKtRFObcRI+gBIx13jeU6w3D0
Ug4WHkxJNMVK7Woir6/G+jerGDIi7B9XeQafb9pDCdfJfpS1ce0TN7TPvYbp+lN3
3HTGomz7I8FFbpR4jS6pYHBfnaUbCvnqaD0qm75DLh7RKczxVR0PXm8pPStROAjk
ptTgqkmG/VqKF928E3dck8g2AYrHrGHjeZcE8TrgK/+KLJFA+5yR
-----END CERTIFICATE-----
Generated at Mon Dec 8 20:56:32 2025 by rpki-client