This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F361D299/9D80DF78C85B11E6B829DA67F8AEA228/9oceOJrqQ9-1MdFNS_bAEdOm1IA.mft
File:                     9oceOJrqQ9-1MdFNS_bAEdOm1IA.mft (raw, json)
Hash identifier:          YBzwKiOJVBfE0TlpJLH0Q3Cj711HUR6wz2h/VjnfQMI=
Subject key identifier:   B1:24:9E:A6:65:5D:91:9A:9A:44:BE:30:3F:9C:67:78:3F:9A:F6:2C
Authority key identifier: F6:87:1E:38:9A:EA:43:DF:B5:31:D1:4D:4B:F6:C0:11:D3:A6:D4:80
Certificate issuer:       /CN=F361D299AR/serialNumber=F6871E389AEA43DFB531D14D4BF6C011D3A6D480
Certificate serial:       0D17
Authority info access:    rsync://rpki.afrinic.net/repository/arin/9oceOJrqQ9-1MdFNS_bAEdOm1IA.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F361D299/9D80DF78C85B11E6B829DA67F8AEA228/9oceOJrqQ9-1MdFNS_bAEdOm1IA.mft
Manifest number:          0D28
Signing time:             Sat 06 Dec 2025 01:07:10 +0000
Manifest this update:     Sat 06 Dec 2025 01:07:09 +0000
Manifest next update:     Mon 08 Dec 2025 01:07:09 +0000
Files and hashes:         1: 9oceOJrqQ9-1MdFNS_bAEdOm1IA.crl (hash: Ce5kVMjjQnx+YDDOEGJiSQEjoftsht1I+owkdzo+7UA=)
                          2: 9602703EF4F511EFB099CDB5762E951A.roa (hash: qISfxBRfXwveVBfmScYlezjIVFsZHVW0rkfxNlst1oA=)
                          3: 0809CD56F2A511EF9A1CF353762E951A.roa (hash: 4iGumIvcUo97EFB8blys/rxgOUPw+Tx3jCeD20ZEIcg=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F361D299/9D80DF78C85B11E6B829DA67F8AEA228/9oceOJrqQ9-1MdFNS_bAEdOm1IA.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F361D299/9D80DF78C85B11E6B829DA67F8AEA228/9oceOJrqQ9-1MdFNS_bAEdOm1IA.mft
                          rsync://rpki.afrinic.net/repository/arin/9oceOJrqQ9-1MdFNS_bAEdOm1IA.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 08 Dec 2025 00:26:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3351 (0xd17)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F361D299AR, serialNumber=F6871E389AEA43DFB531D14D4BF6C011D3A6D480
        Validity
            Not Before: Dec  6 01:07:09 2025 GMT
            Not After : Dec  8 01:07:09 2025 GMT
        Subject: CN=693381be-ea9f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:7c:49:57:1c:9f:f5:cc:67:b1:a9:e1:1a:39:
                    4d:02:e2:7f:f4:fc:83:9b:f1:a3:24:28:07:83:35:
                    3c:69:74:f6:a9:73:95:31:94:48:5f:19:2b:98:61:
                    fa:b5:57:c7:15:d6:7a:e8:5d:c4:da:d4:83:e6:12:
                    c4:58:c1:84:dd:a5:50:de:ab:e9:41:46:8c:b8:91:
                    78:17:c5:24:02:b6:14:2f:d9:cf:bf:21:5a:2f:36:
                    9e:16:1e:1f:38:a4:ec:ec:ee:fb:74:1f:78:98:b9:
                    34:b0:5b:e1:aa:02:ab:68:fc:ce:37:d7:85:e8:2f:
                    11:fd:b0:9c:df:4a:4c:de:d8:6c:3c:d9:5e:99:a5:
                    84:27:5c:cf:b4:c7:4a:17:db:4a:cb:f3:aa:1a:56:
                    e6:66:51:20:6e:7e:59:f8:8f:1a:d1:e0:72:bc:be:
                    c8:e6:b8:0e:b6:9b:af:48:54:66:79:2e:3f:1a:87:
                    7a:a1:f7:ac:26:65:8a:8d:15:c0:64:ed:4d:d4:71:
                    8f:51:24:f2:3f:05:c2:57:63:1b:01:a2:bc:6d:75:
                    90:1f:d3:c4:ab:71:9e:26:a3:8e:5a:8c:6d:30:59:
                    76:be:c7:a0:72:6f:23:a6:31:18:40:a4:47:d2:1a:
                    38:dd:fe:5b:56:e1:8a:fe:14:ea:04:6b:ec:ad:04:
                    8d:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:24:9E:A6:65:5D:91:9A:9A:44:BE:30:3F:9C:67:78:3F:9A:F6:2C
            X509v3 Authority Key Identifier:
                keyid:F6:87:1E:38:9A:EA:43:DF:B5:31:D1:4D:4B:F6:C0:11:D3:A6:D4:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F361D299/9D80DF78C85B11E6B829DA67F8AEA228/9oceOJrqQ9-1MdFNS_bAEdOm1IA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/9oceOJrqQ9-1MdFNS_bAEdOm1IA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F361D299/9D80DF78C85B11E6B829DA67F8AEA228/9oceOJrqQ9-1MdFNS_bAEdOm1IA.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:31:1e:59:e5:c5:a0:98:db:4d:6f:2c:21:95:28:58:95:91:
         14:6b:b9:26:0a:53:14:d8:82:50:d8:e0:0e:dd:9a:ca:3d:80:
         29:14:16:ac:23:09:b0:2c:0d:6b:e9:8f:cb:92:92:09:49:18:
         6d:1a:a2:94:82:e2:01:35:bb:e5:3c:f6:1c:dd:0e:a4:5d:1f:
         ae:ac:ac:89:26:db:c3:c2:81:94:f0:12:cf:c9:4a:eb:7f:a3:
         62:c2:65:d1:0f:4d:08:04:a8:ea:c5:a2:7d:13:42:c9:8e:18:
         c6:f3:c0:b9:6b:d2:c0:8d:f8:f8:2e:19:93:40:ba:27:41:c5:
         f1:51:74:de:58:e3:40:12:0b:69:e6:02:f5:f3:4d:49:fc:53:
         85:ba:39:5e:63:5e:04:34:2d:01:13:ea:2e:a6:05:3f:bc:24:
         e1:c8:f8:71:65:1e:5a:f2:53:90:1c:9a:88:1a:4b:07:6e:ff:
         70:c0:38:35:9b:52:18:51:64:71:e0:2d:69:62:13:32:1a:6b:
         9d:2d:33:45:40:7a:c9:eb:7a:7d:74:8d:79:1b:6d:40:dd:ad:
         4f:ab:29:4d:8d:6e:91:fd:2c:71:6a:41:fc:f6:61:5f:86:3b:
         08:7c:5a:8f:bd:e3:d1:d7:80:06:58:cd:6f:f6:c2:47:25:51:
         f5:44:99:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 19:42:22 2025 by rpki-client