This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F365E0EF/4AFF94D6DAAE11EC98B8F0D3F1222468/3IJjhe1IHHwjMIBE24nEU5kq3E8.mft
File:                     3IJjhe1IHHwjMIBE24nEU5kq3E8.mft (raw, json)
Hash identifier:          iMTxuHN8qTcSeUfx+/QuRGEe06dHmhNGQLM7PQ6jcpQ=
Subject key identifier:   F7:CB:94:58:6F:22:B9:71:24:11:8B:60:CF:55:E7:49:7D:83:87:49
Authority key identifier: DC:82:63:85:ED:48:1C:7C:23:30:80:44:DB:89:C4:53:99:2A:DC:4F
Certificate issuer:       /CN=F365E0EFAR/serialNumber=DC826385ED481C7C23308044DB89C453992ADC4F
Certificate serial:       0538
Authority info access:    rsync://rpki.afrinic.net/repository/arin/3IJjhe1IHHwjMIBE24nEU5kq3E8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F365E0EF/4AFF94D6DAAE11EC98B8F0D3F1222468/3IJjhe1IHHwjMIBE24nEU5kq3E8.mft
Manifest number:          0536
Signing time:             Sat 06 Dec 2025 02:45:37 +0000
Manifest this update:     Sat 06 Dec 2025 02:45:36 +0000
Manifest next update:     Mon 08 Dec 2025 02:45:36 +0000
Files and hashes:         1: 3IJjhe1IHHwjMIBE24nEU5kq3E8.crl (hash: cYc3j1TS2ucFoHzXOnljF6+n+rpA1hthc6gIK7AHCU0=)
                          2: DAB5B58871A111EF9A6AEC6F762E951A.roa (hash: YivpnequhZt8XqJ2qMGWn/m6KFZdSXQEvVcrsKtKSmY=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F365E0EF/4AFF94D6DAAE11EC98B8F0D3F1222468/3IJjhe1IHHwjMIBE24nEU5kq3E8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F365E0EF/4AFF94D6DAAE11EC98B8F0D3F1222468/3IJjhe1IHHwjMIBE24nEU5kq3E8.mft
                          rsync://rpki.afrinic.net/repository/arin/3IJjhe1IHHwjMIBE24nEU5kq3E8.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 08 Dec 2025 00:26:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1336 (0x538)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F365E0EFAR, serialNumber=DC826385ED481C7C23308044DB89C453992ADC4F
        Validity
            Not Before: Dec  6 02:45:36 2025 GMT
            Not After : Dec  8 02:45:36 2025 GMT
        Subject: CN=693398d0-1cd4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:c5:1d:ec:5a:e4:99:0b:aa:02:a0:ab:34:b7:
                    21:cc:37:b9:91:e0:6f:a8:f0:ea:79:4e:82:00:1d:
                    96:dc:af:cc:1f:d9:e5:35:4b:c5:8e:46:e3:af:58:
                    bb:a6:e5:00:42:97:81:b9:23:51:59:fe:6a:6b:66:
                    e8:6c:34:c2:b9:f0:8d:c7:a3:99:0c:2e:39:d8:2a:
                    e9:92:61:e7:75:00:3e:f0:5e:1c:fc:a4:2f:56:03:
                    31:7a:47:89:02:96:d0:a0:ae:0f:c7:45:a4:81:34:
                    75:f3:b1:db:c2:cb:a1:b0:24:2c:3d:f0:9a:24:92:
                    2b:f4:02:03:e7:49:09:c9:b4:14:9d:40:38:96:86:
                    72:e6:a9:37:9d:fd:b5:8f:b2:30:ae:25:7c:d8:26:
                    33:f0:63:c6:c3:3a:e8:22:c6:01:cf:4b:70:93:8e:
                    b2:39:3b:9e:06:43:92:21:f0:9d:9f:fa:13:cd:06:
                    08:a8:de:76:30:c5:58:fd:72:37:94:f1:53:17:0d:
                    63:7c:06:d3:32:08:7f:53:ac:06:e2:96:71:92:03:
                    22:ea:2e:d6:12:95:18:ab:cd:42:59:98:68:a4:8f:
                    5d:df:b8:3e:58:58:75:bf:5b:2f:18:48:6a:6d:5c:
                    6c:9e:68:f9:db:fd:07:42:0a:28:68:59:01:f6:59:
                    73:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:CB:94:58:6F:22:B9:71:24:11:8B:60:CF:55:E7:49:7D:83:87:49
            X509v3 Authority Key Identifier:
                keyid:DC:82:63:85:ED:48:1C:7C:23:30:80:44:DB:89:C4:53:99:2A:DC:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F365E0EF/4AFF94D6DAAE11EC98B8F0D3F1222468/3IJjhe1IHHwjMIBE24nEU5kq3E8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/3IJjhe1IHHwjMIBE24nEU5kq3E8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F365E0EF/4AFF94D6DAAE11EC98B8F0D3F1222468/3IJjhe1IHHwjMIBE24nEU5kq3E8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:45:76:ac:00:52:c5:ea:b6:72:53:98:1b:75:3d:8b:85:50:
         8d:1e:a7:31:62:77:d2:1c:27:4f:03:ea:9c:27:9b:80:79:2b:
         3b:3c:7c:ae:a9:b0:aa:5d:b1:83:2d:8c:6d:06:f4:46:2c:90:
         b7:77:46:dc:9e:4a:cf:61:b5:bb:e0:d0:43:b8:e0:c9:d5:67:
         7a:56:e4:88:48:c2:f8:35:99:5e:6b:6a:ac:c3:ad:a9:88:62:
         e9:38:d5:73:96:93:0e:52:18:32:6d:b5:69:dc:1b:90:e3:d8:
         47:ba:35:cb:f8:b4:3b:fa:c1:ee:3b:0d:25:ca:7d:9c:6d:bd:
         61:51:bf:01:45:8d:69:3a:ba:2f:c7:4c:22:eb:22:e9:99:31:
         a2:ab:67:87:90:b2:59:51:b3:37:ee:f2:c8:9e:1b:69:38:7a:
         89:ca:99:ff:b4:9e:6e:46:21:3a:f1:27:e7:ec:1c:98:8d:32:
         3f:00:39:91:db:dc:6c:2b:61:72:56:da:9e:42:72:1e:e6:a5:
         1e:de:b7:a5:69:28:65:27:22:f5:25:7f:73:29:7c:42:83:6b:
         72:fc:1a:5d:aa:53:09:ba:f5:c9:fc:92:48:f7:ca:37:23:fb:
         80:d0:75:7e:ea:90:ee:3c:fd:fd:4d:7a:ea:6b:fc:bc:37:6b:
         74:0a:7a:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 13:56:37 2025 by rpki-client