This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36180A1/393C4C903F5A11EF92994170762E951A/7rhFIBSnqgtH8qgONjVBJ-uwQA0.mft
File:                     7rhFIBSnqgtH8qgONjVBJ-uwQA0.mft (raw, json)
Hash identifier:          Ywx02l+N/Wh11Ba/2EvVMc+sDWW4WPKhZ7EgQzKR0tw=
Subject key identifier:   8B:30:94:7F:9C:AA:1F:2C:C0:7A:A4:70:05:4B:EC:2F:D8:89:18:67
Authority key identifier: EE:B8:45:20:14:A7:AA:0B:47:F2:A8:0E:36:35:41:27:EB:B0:40:0D
Certificate issuer:       /CN=F36180A1AR/serialNumber=EEB8452014A7AA0B47F2A80E36354127EBB0400D
Certificate serial:       0212
Authority info access:    rsync://rpki.afrinic.net/repository/arin/7rhFIBSnqgtH8qgONjVBJ-uwQA0.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36180A1/393C4C903F5A11EF92994170762E951A/7rhFIBSnqgtH8qgONjVBJ-uwQA0.mft
Manifest number:          0210
Signing time:             Sun 07 Dec 2025 04:19:15 +0000
Manifest this update:     Sun 07 Dec 2025 04:19:15 +0000
Manifest next update:     Tue 09 Dec 2025 04:19:15 +0000
Files and hashes:         1: 7rhFIBSnqgtH8qgONjVBJ-uwQA0.crl (hash: wI33AqbTNuqIsyK9RSzIzyBk3osv3ievQd6ET/vzgwg=)
                          2: 125EF2A63F7011EFB90A2881762E951A.roa (hash: CYHaNxXH3G1/sB9APmxu1n3UtTgC5Edc0gfpDVgJNk8=)
                          3: 41A178E4429111EF8883AAAA762E951A.roa (hash: MkpjkL83C02qTlHENSDXSaJZwjQp8E4rGj/mJx7w1Cc=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36180A1/393C4C903F5A11EF92994170762E951A/7rhFIBSnqgtH8qgONjVBJ-uwQA0.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36180A1/393C4C903F5A11EF92994170762E951A/7rhFIBSnqgtH8qgONjVBJ-uwQA0.mft
                          rsync://rpki.afrinic.net/repository/arin/7rhFIBSnqgtH8qgONjVBJ-uwQA0.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 09 Dec 2025 00:26:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 530 (0x212)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36180A1AR, serialNumber=EEB8452014A7AA0B47F2A80E36354127EBB0400D
        Validity
            Not Before: Dec  7 04:19:15 2025 GMT
            Not After : Dec  9 04:19:15 2025 GMT
        Subject: CN=69350043-338d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:01:a3:14:af:a9:34:dd:d1:d0:e3:eb:82:38:
                    04:78:98:6b:01:d9:5f:7b:21:02:e7:20:53:13:75:
                    e1:de:b7:36:b2:9a:3d:bc:10:d1:41:48:56:09:a9:
                    b3:02:38:a5:50:25:6f:24:6e:05:f3:28:3b:90:00:
                    83:b1:f0:84:72:8f:8e:d2:ae:8c:b1:eb:dd:ea:46:
                    54:89:d2:5f:2d:8a:4b:01:bb:8a:38:cb:f4:76:7e:
                    7b:8a:c0:d0:be:de:c1:63:93:34:1e:e5:2a:01:17:
                    44:d1:77:20:c5:99:f0:fd:9a:94:bf:35:6a:4e:00:
                    35:f9:80:d1:dd:35:14:04:f0:70:41:13:0a:f9:e6:
                    cf:f3:fd:37:84:19:4e:a2:7d:41:64:ef:a3:69:94:
                    88:50:77:3c:33:d3:b4:4b:8d:08:c1:9e:8c:a0:72:
                    04:da:65:11:8f:48:3b:bd:14:49:33:e8:f7:12:ad:
                    ce:4a:83:b0:13:96:95:d6:4e:ca:6a:f8:f8:ae:82:
                    4a:01:f6:2f:e6:3c:00:21:af:d7:76:4d:62:cc:2a:
                    cb:b5:b4:fa:79:ce:ce:7e:c3:ca:12:e3:01:99:ce:
                    e2:9e:5d:47:9e:a3:2e:c5:18:b6:dc:b7:5d:9d:7f:
                    f6:41:1f:96:a6:2b:a7:5d:f7:f5:cf:c7:a6:c5:55:
                    14:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:30:94:7F:9C:AA:1F:2C:C0:7A:A4:70:05:4B:EC:2F:D8:89:18:67
            X509v3 Authority Key Identifier:
                keyid:EE:B8:45:20:14:A7:AA:0B:47:F2:A8:0E:36:35:41:27:EB:B0:40:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36180A1/393C4C903F5A11EF92994170762E951A/7rhFIBSnqgtH8qgONjVBJ-uwQA0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/7rhFIBSnqgtH8qgONjVBJ-uwQA0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36180A1/393C4C903F5A11EF92994170762E951A/7rhFIBSnqgtH8qgONjVBJ-uwQA0.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:0e:9c:83:00:c7:91:5f:29:ca:da:6e:d2:d5:a6:0d:99:16:
         ee:c8:4c:90:9c:07:1c:84:97:21:61:e4:cc:ce:e0:bb:02:57:
         1f:42:2a:4a:44:75:29:c9:61:d4:02:2b:dc:d2:ab:59:62:2c:
         db:92:bc:0d:4f:b3:38:91:56:bf:27:47:a2:13:a6:8d:2b:48:
         80:1f:5b:66:76:ce:81:ec:16:5b:ef:fa:24:cb:d6:f0:1c:5b:
         2f:d6:c9:bd:c3:ec:e4:cb:90:97:2d:01:6f:c9:e1:a9:62:e8:
         93:7d:cd:e0:44:17:8f:cb:dc:28:dc:a1:cc:e1:62:fb:e1:1e:
         69:ea:64:5a:59:c9:33:b4:78:74:7a:58:4b:70:7c:03:61:26:
         dd:27:0e:95:c1:f8:1c:80:73:ce:f8:8f:62:42:5e:9d:96:10:
         bd:4e:a4:bc:af:b6:b3:34:07:cb:62:4a:bb:50:47:fa:58:9e:
         9e:e6:b6:66:86:f6:13:63:69:eb:da:7b:e1:2f:9a:79:93:8a:
         5d:e8:07:c7:80:42:82:9a:4e:40:70:12:12:82:16:db:0c:8e:
         c5:bf:15:3a:0a:b2:ab:55:6f:1c:65:aa:f8:85:c0:37:4a:c3:
         19:2e:ea:89:be:66:04:0a:12:66:e1:56:db:bd:0c:c7:30:a0:
         c2:e5:87:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 06:33:55 2025 by rpki-client