This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3651254/CD02A612C85311E69198EA57F8AEA228/HUPkHQHPhf-UD2YG4WRhR9hyiyg.mft
File:                     HUPkHQHPhf-UD2YG4WRhR9hyiyg.mft (raw, json)
Hash identifier:          xzMd8fVH5QK1g+21OO94cGPdfPwv4p+T6KGBs/dhHXE=
Subject key identifier:   5A:A9:44:9D:CB:E5:00:C9:83:6D:1D:CD:4B:6A:77:21:0C:89:36:28
Authority key identifier: 1D:43:E4:1D:01:CF:85:FF:94:0F:66:06:E1:64:61:47:D8:72:8B:28
Certificate issuer:       /CN=F3651254AR/serialNumber=1D43E41D01CF85FF940F6606E1646147D8728B28
Certificate serial:       0D18
Authority info access:    rsync://rpki.afrinic.net/repository/arin/HUPkHQHPhf-UD2YG4WRhR9hyiyg.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3651254/CD02A612C85311E69198EA57F8AEA228/HUPkHQHPhf-UD2YG4WRhR9hyiyg.mft
Manifest number:          1090
Signing time:             Sun 07 Dec 2025 01:03:40 +0000
Manifest this update:     Sun 07 Dec 2025 01:03:39 +0000
Manifest next update:     Tue 09 Dec 2025 01:03:39 +0000
Files and hashes:         1: HUPkHQHPhf-UD2YG4WRhR9hyiyg.crl (hash: yCaRPGRDVjPikv40nGNmtBgVD6CPZpOFT69l1LfQQqc=)
                          2: 14F1F27CD8C911E686B23863F8AEA228.roa (hash: bStN1pwltgaw97ERqptdQwfCi/altyvUGhKkmY10fFU=)
                          3: 15F71ABA3D8811ED90C4A0C3F1222468.roa (hash: ZIWSZmc0YyiPZ33NmPw3XzXebX+VO4+zLCYTtQFl6w8=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3651254/CD02A612C85311E69198EA57F8AEA228/HUPkHQHPhf-UD2YG4WRhR9hyiyg.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3651254/CD02A612C85311E69198EA57F8AEA228/HUPkHQHPhf-UD2YG4WRhR9hyiyg.mft
                          rsync://rpki.afrinic.net/repository/arin/HUPkHQHPhf-UD2YG4WRhR9hyiyg.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 09 Dec 2025 00:26:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3352 (0xd18)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3651254AR, serialNumber=1D43E41D01CF85FF940F6606E1646147D8728B28
        Validity
            Not Before: Dec  7 01:03:39 2025 GMT
            Not After : Dec  9 01:03:39 2025 GMT
        Subject: CN=6934d26c-3134
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:ee:9f:dc:6d:93:28:24:34:37:56:9d:fd:b9:
                    ff:69:45:ef:8f:b8:8c:a4:00:d3:cf:9f:8c:6a:18:
                    7c:94:11:46:4d:0b:3e:09:5b:84:a2:97:92:f0:6c:
                    4f:ac:7a:bb:54:17:20:7d:03:82:ce:0c:80:a7:04:
                    6b:13:ae:fd:e8:78:5e:39:d2:40:6b:17:ba:7d:de:
                    71:2a:53:2b:c7:25:3b:a7:a8:47:94:f9:21:0b:1b:
                    a4:ee:a8:02:a5:8f:10:c6:45:7b:48:68:06:10:9e:
                    94:c9:71:20:46:7d:b6:70:9c:ea:55:63:4c:b7:be:
                    5a:54:7e:94:cf:d6:4e:7a:9b:fb:b5:8b:45:31:c0:
                    81:e5:c6:96:e6:d5:a4:c1:22:ff:49:a9:bd:53:35:
                    b0:f2:62:a7:c6:7e:58:bf:28:4b:ed:00:cc:be:35:
                    21:e1:79:6e:96:63:df:de:f0:17:2b:f2:8f:2e:9b:
                    f1:ab:14:38:73:09:79:2a:75:c5:3c:fb:c8:22:da:
                    b0:b4:ac:b2:eb:38:6f:fd:5b:80:b3:a9:48:81:95:
                    32:e0:4f:70:a5:5d:5b:0b:30:3a:7c:58:0c:5b:93:
                    b7:79:c4:1f:7d:ba:da:4a:52:a5:8f:13:68:58:c2:
                    cd:af:2f:71:5b:51:f4:77:96:0f:f6:00:b3:45:f2:
                    53:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:A9:44:9D:CB:E5:00:C9:83:6D:1D:CD:4B:6A:77:21:0C:89:36:28
            X509v3 Authority Key Identifier:
                keyid:1D:43:E4:1D:01:CF:85:FF:94:0F:66:06:E1:64:61:47:D8:72:8B:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3651254/CD02A612C85311E69198EA57F8AEA228/HUPkHQHPhf-UD2YG4WRhR9hyiyg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/HUPkHQHPhf-UD2YG4WRhR9hyiyg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3651254/CD02A612C85311E69198EA57F8AEA228/HUPkHQHPhf-UD2YG4WRhR9hyiyg.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:47:05:d2:b0:26:ea:ce:47:37:c1:91:29:e3:cc:11:b3:ad:
         1b:98:f1:ad:9b:38:5b:76:41:55:0f:17:57:15:72:46:50:9b:
         ab:ad:d4:50:2b:8c:24:cc:89:61:8d:92:f2:9f:ac:a7:cc:d5:
         e0:65:80:55:18:aa:2a:b5:2d:84:47:04:d1:29:c7:ee:c3:39:
         83:08:d4:83:d1:b1:d0:6c:00:24:a6:86:64:ff:29:4d:1a:63:
         ca:b1:03:21:11:2f:8f:c9:7d:9f:8c:9e:4f:c8:40:e9:fc:78:
         11:c7:a4:ff:94:41:bc:b1:9c:ae:f4:da:20:d0:cd:80:d4:b0:
         c6:98:dc:6c:38:ff:8d:10:c2:d8:e9:8f:14:41:7d:35:5a:44:
         ba:ec:fc:3e:03:3c:6d:85:e1:b2:a3:34:1b:a6:10:2d:63:a4:
         f7:f9:89:ec:17:35:74:1a:4f:73:e8:bb:30:9e:c5:5a:f2:37:
         c7:f9:fc:f3:42:6c:a4:a6:f6:58:28:7a:81:e8:4d:bc:e0:79:
         29:6c:0f:47:be:be:ac:26:78:c0:33:77:7f:02:7c:81:cb:00:
         59:04:31:d3:97:c2:cd:53:b5:b4:e8:21:1d:95:d3:e8:37:4f:
         9c:09:9c:e9:8c:0f:54:d9:c9:42:ae:cf:83:84:7e:25:29:14:
         b8:1a:d6:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 03:31:47 2025 by rpki-client