This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3654A44/2DA756809CA511EDB40FF399F1222468/FsdOc5XcId2ESiKgESgWEhp19JI.mft
File:                     FsdOc5XcId2ESiKgESgWEhp19JI.mft (raw, json)
Hash identifier:          hQV4huL3DjHP4MhzXJRansNREAcX0rKog8AUikJXYVk=
Subject key identifier:   45:A5:28:43:AB:60:89:1C:07:36:37:B0:E7:75:9E:CF:63:65:64:37
Authority key identifier: 16:C7:4E:73:95:DC:21:DD:84:4A:22:A0:11:28:16:12:1A:75:F4:92
Certificate issuer:       /CN=F3654A44AR/serialNumber=16C74E7395DC21DD844A22A0112816121A75F492
Certificate serial:       043E
Authority info access:    rsync://rpki.afrinic.net/repository/arin/FsdOc5XcId2ESiKgESgWEhp19JI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3654A44/2DA756809CA511EDB40FF399F1222468/FsdOc5XcId2ESiKgESgWEhp19JI.mft
Manifest number:          043B
Signing time:             Sat 06 Dec 2025 03:14:30 +0000
Manifest this update:     Sat 06 Dec 2025 03:14:29 +0000
Manifest next update:     Mon 08 Dec 2025 03:14:29 +0000
Files and hashes:         1: FsdOc5XcId2ESiKgESgWEhp19JI.crl (hash: a+l+1kjng8oU4JtwuctYz7QLDAz71IfLztqpBpNtvJg=)
                          2: CF8B10CE1DB711EFA609B0217DDC24C2.roa (hash: cUUrYIHHPxFgWnYQbOftBzdS94Gj26Vr5vz5884oWrA=)
                          3: 148381D41DB811EF83D02FF17CDC24C2.roa (hash: BiZPcXyEyPmGn8AwAntxiM0fpA7+k3wSNcu8/0aEYDQ=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3654A44/2DA756809CA511EDB40FF399F1222468/FsdOc5XcId2ESiKgESgWEhp19JI.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3654A44/2DA756809CA511EDB40FF399F1222468/FsdOc5XcId2ESiKgESgWEhp19JI.mft
                          rsync://rpki.afrinic.net/repository/arin/FsdOc5XcId2ESiKgESgWEhp19JI.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 08 Dec 2025 03:14:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1086 (0x43e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3654A44AR, serialNumber=16C74E7395DC21DD844A22A0112816121A75F492
        Validity
            Not Before: Dec  6 03:14:29 2025 GMT
            Not After : Dec  8 03:14:29 2025 GMT
        Subject: CN=69339f96-b940
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:c7:84:5d:a7:04:9d:ae:ad:b6:7d:5d:5e:c5:
                    4a:ce:5e:ae:16:6e:da:bf:56:92:db:86:ec:3a:8c:
                    b3:98:63:b2:6e:30:b5:63:7e:dd:e3:9e:9c:5b:ca:
                    dc:b0:3d:54:d6:01:2f:8b:bb:18:63:12:bf:a8:e0:
                    0b:e8:78:4c:ab:78:57:6f:c6:14:34:a1:fa:12:67:
                    4e:14:a0:f8:1d:87:57:c9:5f:48:a5:6e:46:66:58:
                    f6:be:b0:20:8d:27:7c:8c:f7:50:49:ae:5c:a4:26:
                    b2:3d:38:a1:05:aa:4f:c2:60:01:74:a5:dc:1b:e5:
                    04:2c:3f:b7:c2:9a:2f:93:3a:9f:e0:9d:08:62:38:
                    a4:f2:43:91:9a:ac:bc:98:4d:63:bd:1b:4d:59:9c:
                    08:d8:1d:68:11:b8:78:81:a6:ee:40:e2:a7:bd:dc:
                    be:dc:8f:de:db:5b:65:a5:e2:0b:25:45:69:1f:65:
                    24:d1:93:7a:37:b2:16:f3:c1:04:b8:3f:85:47:ec:
                    62:f5:46:d4:37:16:38:80:0f:5d:89:35:76:c7:c2:
                    99:8d:55:d6:15:fe:45:83:5c:b7:0f:45:fc:8c:d5:
                    84:44:6e:4b:d3:82:f0:da:fd:81:b5:00:08:5d:d0:
                    59:c1:da:b2:09:32:aa:71:61:97:3b:c0:89:f1:01:
                    0f:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:A5:28:43:AB:60:89:1C:07:36:37:B0:E7:75:9E:CF:63:65:64:37
            X509v3 Authority Key Identifier:
                keyid:16:C7:4E:73:95:DC:21:DD:84:4A:22:A0:11:28:16:12:1A:75:F4:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3654A44/2DA756809CA511EDB40FF399F1222468/FsdOc5XcId2ESiKgESgWEhp19JI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/FsdOc5XcId2ESiKgESgWEhp19JI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3654A44/2DA756809CA511EDB40FF399F1222468/FsdOc5XcId2ESiKgESgWEhp19JI.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:7c:bc:c0:4d:6d:82:e5:32:6b:c7:f5:a2:50:16:35:52:e7:
         62:4d:be:70:2a:47:9f:8f:0a:bd:8a:40:e8:32:7e:07:98:4c:
         b9:b1:a8:13:f7:4f:55:5d:31:a9:dc:41:ca:c6:93:fe:5d:07:
         77:0b:14:5a:07:a7:0c:5a:04:e7:cf:af:3c:b8:f4:b4:cc:d4:
         67:cc:95:70:b7:76:03:42:ab:d7:16:ce:4a:85:7f:04:0b:05:
         50:fa:11:90:a8:4f:ca:3c:28:a8:8c:80:aa:15:92:b2:6e:a1:
         5f:89:3f:66:76:0f:ef:ec:5e:dc:ad:80:d2:0c:b0:07:2d:61:
         38:59:fb:ff:1f:e4:43:ea:8b:b0:bf:00:35:b7:e9:ee:96:9c:
         d9:8e:b4:2d:44:7f:ca:d2:f1:09:e6:24:29:7e:8f:e7:88:b9:
         10:8a:a5:fa:14:7d:f1:90:af:8a:85:7c:7d:84:63:a0:a2:cd:
         47:3b:9d:25:6f:73:28:38:9f:fc:0c:18:1f:02:68:27:21:b9:
         7c:e7:78:54:ff:80:a1:a2:06:b9:9e:33:59:02:25:f5:9b:e3:
         f5:32:d2:3d:2a:fe:c5:7c:93:79:fd:ed:93:44:31:7e:5f:8e:
         44:ba:9b:5a:36:cf:87:07:a0:6a:ed:ff:2b:36:7e:88:51:e9:
         11:b2:d6:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 03:55:44 2025 by rpki-client