This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F364E67C/8220BE6A291611E994A1E365F8AEA228/cS7kbM8TKAh_Lj8oZXYRjBBpuX0.mft
File:                     cS7kbM8TKAh_Lj8oZXYRjBBpuX0.mft (raw, json)
Hash identifier:          VRkxS6fzi6ZmJruINN5OI/OdYi6ajVpo4KjV4XJN0x4=
Subject key identifier:   DA:09:1D:9C:C9:34:84:F3:BC:BB:75:E9:A0:7D:C3:18:8E:DD:9B:08
Authority key identifier: 71:2E:E4:6C:CF:13:28:08:7F:2E:3F:28:65:76:11:8C:10:69:B9:7D
Certificate issuer:       /CN=F364E67CAR/serialNumber=712EE46CCF1328087F2E3F286576118C1069B97D
Certificate serial:       09FF
Authority info access:    rsync://rpki.afrinic.net/repository/arin/cS7kbM8TKAh_Lj8oZXYRjBBpuX0.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F364E67C/8220BE6A291611E994A1E365F8AEA228/cS7kbM8TKAh_Lj8oZXYRjBBpuX0.mft
Manifest number:          09FE
Signing time:             Sat 06 Dec 2025 01:16:47 +0000
Manifest this update:     Sat 06 Dec 2025 01:16:46 +0000
Manifest next update:     Mon 08 Dec 2025 01:16:46 +0000
Files and hashes:         1: cS7kbM8TKAh_Lj8oZXYRjBBpuX0.crl (hash: MHjTxP6q2R73yVxaO0yu3jH/HlFf7fFezFdVIJoGBrA=)
                          2: 8506A5F2291811E9A5145C67F8AEA228.roa (hash: e7GGX/SmpzChmh64zBM/POWgME/v0x9TPuUkVYW9+Pg=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F364E67C/8220BE6A291611E994A1E365F8AEA228/cS7kbM8TKAh_Lj8oZXYRjBBpuX0.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F364E67C/8220BE6A291611E994A1E365F8AEA228/cS7kbM8TKAh_Lj8oZXYRjBBpuX0.mft
                          rsync://rpki.afrinic.net/repository/arin/cS7kbM8TKAh_Lj8oZXYRjBBpuX0.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 08 Dec 2025 00:26:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2559 (0x9ff)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F364E67CAR, serialNumber=712EE46CCF1328087F2E3F286576118C1069B97D
        Validity
            Not Before: Dec  6 01:16:46 2025 GMT
            Not After : Dec  8 01:16:46 2025 GMT
        Subject: CN=693383ff-0ae7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:60:97:9a:60:2c:d8:f2:08:43:c6:6c:25:fe:
                    60:4a:b8:82:7d:fb:e0:8f:4b:0f:77:9d:2e:31:77:
                    20:af:bd:7c:da:59:d2:b4:f3:46:68:90:c9:65:71:
                    92:a0:03:4c:3d:b3:57:d8:5d:f5:cc:c6:3f:d7:12:
                    66:09:f5:a9:eb:ee:e2:41:8d:bb:63:ef:fa:d9:13:
                    cd:95:09:04:8d:8a:9d:76:9e:09:8d:72:34:99:a9:
                    ba:1c:55:c7:d1:af:94:81:81:34:3e:61:8b:d7:ff:
                    b8:96:f0:29:91:8e:22:23:7b:e6:ae:a6:3e:dd:9a:
                    84:ac:78:87:87:ef:79:23:af:70:22:3e:b8:86:03:
                    1f:f8:a9:e4:b8:2c:e2:33:70:56:10:a7:30:d1:8b:
                    6d:4b:84:89:01:61:26:ee:5c:64:7c:ba:4e:60:75:
                    3b:3f:33:03:88:b2:49:f0:39:0f:41:1a:c1:87:e7:
                    f5:51:60:bb:3c:a3:a7:bc:af:e1:23:5e:bc:a6:aa:
                    5a:e1:54:f2:0f:1a:81:af:86:26:92:71:38:54:6e:
                    08:4f:4f:af:f8:f0:1a:96:00:cd:2a:22:90:e8:8d:
                    e8:11:7e:42:dc:09:d1:0a:72:de:49:cd:e8:e1:64:
                    02:d2:34:92:13:29:65:e6:33:bf:bd:a8:5e:ff:a0:
                    4f:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:09:1D:9C:C9:34:84:F3:BC:BB:75:E9:A0:7D:C3:18:8E:DD:9B:08
            X509v3 Authority Key Identifier:
                keyid:71:2E:E4:6C:CF:13:28:08:7F:2E:3F:28:65:76:11:8C:10:69:B9:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F364E67C/8220BE6A291611E994A1E365F8AEA228/cS7kbM8TKAh_Lj8oZXYRjBBpuX0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/cS7kbM8TKAh_Lj8oZXYRjBBpuX0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F364E67C/8220BE6A291611E994A1E365F8AEA228/cS7kbM8TKAh_Lj8oZXYRjBBpuX0.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:88:07:d4:d9:31:43:2d:19:7e:53:47:d3:cb:4e:07:0e:07:
         97:5b:a4:f8:bb:4f:a6:ab:a1:7d:ae:98:7c:c7:93:f3:31:fa:
         a8:3d:2c:ec:71:80:01:14:4e:ba:bf:1d:73:80:04:e9:d3:e2:
         cb:a4:de:8c:a7:34:93:04:d0:38:68:ed:27:06:ad:42:d5:29:
         a8:c9:89:e7:ca:1a:33:54:e7:5e:02:61:99:18:63:5b:0e:76:
         48:57:6d:3c:e8:f4:6f:79:62:fe:e1:44:75:f0:4c:ef:17:7b:
         8c:37:10:a5:e2:2c:51:ab:43:e4:7c:e0:53:b4:98:11:55:70:
         ce:58:5e:b1:e8:29:ba:c5:b3:b5:f5:84:47:1e:c9:3e:1a:20:
         b9:25:df:ee:27:c9:48:12:25:02:6a:0f:12:0b:82:ee:b1:6b:
         c7:55:96:61:fa:e9:42:e1:fe:8b:97:15:88:13:ec:e8:a4:01:
         54:31:03:74:e6:ff:98:29:8c:19:9c:c0:63:af:fb:4e:d0:ba:
         f5:1e:03:c6:4c:8f:de:a8:20:bd:4d:62:6a:cd:f8:3e:68:07:
         29:99:65:74:8d:23:2e:47:cd:7b:39:5a:6f:7b:9b:92:3b:69:
         00:10:74:77:70:c6:66:e0:c1:aa:30:ba:c1:69:73:3f:c5:46:
         e5:60:34:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 13:55:38 2025 by rpki-client