This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3674008/5AB769C4473D11EE98B378664AD9E6FC/Abb7gSoUrvQLoDsWWv79W3SkZpY.mft
File:                     Abb7gSoUrvQLoDsWWv79W3SkZpY.mft (raw, json)
Hash identifier:          iWLaCKowvq4aYWIsDIMr3VCpFBHvhMW3fOOncXrpyWc=
Subject key identifier:   DB:17:B7:0D:AD:7E:40:8D:3C:39:8E:0D:B5:34:A8:1D:CB:CE:07:1C
Authority key identifier: 01:B6:FB:81:2A:14:AE:F4:0B:A0:3B:16:5A:FE:FD:5B:74:A4:66:96
Certificate issuer:       /CN=F3674008AR/serialNumber=01B6FB812A14AEF40BA03B165AFEFD5B74A46696
Certificate serial:       0358
Authority info access:    rsync://rpki.afrinic.net/repository/arin/Abb7gSoUrvQLoDsWWv79W3SkZpY.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3674008/5AB769C4473D11EE98B378664AD9E6FC/Abb7gSoUrvQLoDsWWv79W3SkZpY.mft
Manifest number:          0357
Signing time:             Sat 06 Dec 2025 03:45:00 +0000
Manifest this update:     Sat 06 Dec 2025 03:44:59 +0000
Manifest next update:     Mon 08 Dec 2025 03:44:59 +0000
Files and hashes:         1: Abb7gSoUrvQLoDsWWv79W3SkZpY.crl (hash: //KzoGbfHDk+xYQBmNfbSG9xg85sk+2b1rE4Cf4nFC0=)
                          2: 61E8A95475A111EFAC7BA279762E951A.roa (hash: iAiWDX2k6dKqGfuzfdFuo/QfCsfKMTY5hEty8a1QfDk=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3674008/5AB769C4473D11EE98B378664AD9E6FC/Abb7gSoUrvQLoDsWWv79W3SkZpY.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3674008/5AB769C4473D11EE98B378664AD9E6FC/Abb7gSoUrvQLoDsWWv79W3SkZpY.mft
                          rsync://rpki.afrinic.net/repository/arin/Abb7gSoUrvQLoDsWWv79W3SkZpY.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 08 Dec 2025 00:26:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 856 (0x358)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3674008AR, serialNumber=01B6FB812A14AEF40BA03B165AFEFD5B74A46696
        Validity
            Not Before: Dec  6 03:44:59 2025 GMT
            Not After : Dec  8 03:44:59 2025 GMT
        Subject: CN=6933a6bc-bde2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:cd:19:76:24:db:98:9d:58:b6:f6:3f:8a:63:
                    e4:9f:5b:37:ca:8b:2a:f7:4d:7b:b3:7e:63:00:98:
                    2d:5d:b0:00:b2:76:0f:03:06:7b:fe:4f:d0:2e:f6:
                    b5:7c:b0:fa:c8:57:c8:b4:32:fa:43:16:bc:a7:73:
                    35:fb:72:79:ad:ff:e9:df:56:48:a9:06:a9:d7:a7:
                    fd:2e:18:b2:8e:95:dd:c7:9a:3e:1a:0d:8e:9e:5d:
                    4a:84:f5:01:25:1a:34:30:05:ba:bb:ce:10:13:ec:
                    eb:60:87:51:d9:20:ea:f6:98:4b:ce:ff:ab:ab:e9:
                    41:00:27:a4:51:51:29:fd:87:ac:84:ac:a1:d0:9d:
                    8f:ad:86:0d:88:4d:ee:5e:65:26:7d:59:e0:bd:0f:
                    c8:27:8a:0d:69:5e:6f:13:21:71:ee:26:1a:dd:92:
                    36:20:05:d5:e6:44:97:ba:7e:1d:73:08:b9:9b:c7:
                    40:86:f2:8f:85:07:07:96:c5:a7:ee:6d:cb:b5:57:
                    ea:ee:39:a4:b8:42:38:b2:95:47:ca:1d:11:7c:a9:
                    70:14:49:5f:33:1e:b5:29:57:c1:5c:05:fb:92:c2:
                    6d:dd:f3:4c:ef:44:45:61:72:00:1e:b3:26:de:21:
                    4f:74:e9:85:e3:d8:fa:38:eb:c5:ba:b9:06:53:13:
                    1c:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:17:B7:0D:AD:7E:40:8D:3C:39:8E:0D:B5:34:A8:1D:CB:CE:07:1C
            X509v3 Authority Key Identifier:
                keyid:01:B6:FB:81:2A:14:AE:F4:0B:A0:3B:16:5A:FE:FD:5B:74:A4:66:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3674008/5AB769C4473D11EE98B378664AD9E6FC/Abb7gSoUrvQLoDsWWv79W3SkZpY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/Abb7gSoUrvQLoDsWWv79W3SkZpY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3674008/5AB769C4473D11EE98B378664AD9E6FC/Abb7gSoUrvQLoDsWWv79W3SkZpY.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:7a:c5:09:46:e5:b8:53:f0:4c:71:f5:1f:40:1c:c6:a0:57:
         74:74:03:2a:d2:eb:ca:ce:6a:2e:1d:7a:0b:c7:9c:04:29:06:
         c7:e7:d9:de:93:8b:48:59:aa:64:61:6e:df:f7:bb:fa:ed:b8:
         7b:d8:8b:91:d1:5e:88:5e:86:4a:78:cc:7d:88:a4:70:ee:f1:
         a7:a4:02:dd:7a:a4:37:96:01:53:04:a8:aa:8a:74:4c:05:b6:
         8a:47:af:49:9e:de:03:7b:52:3c:4d:bf:c4:0d:39:53:25:8b:
         2a:4a:94:84:39:af:cc:f4:0f:ea:bb:ab:9c:67:d0:4c:54:39:
         f7:1f:c1:bd:e4:6f:06:7a:98:00:66:00:30:e5:64:8e:e1:b3:
         08:1a:55:81:94:73:84:d2:17:9e:09:af:29:12:b2:89:26:60:
         52:72:f6:89:47:6b:af:7d:af:ab:2f:35:cf:8b:e2:ea:c5:74:
         bd:32:b5:e8:79:e7:14:02:f4:1d:6c:84:c6:47:b9:b0:65:df:
         0f:2e:2e:03:19:18:01:04:bd:5b:02:9c:43:bf:d2:c0:1a:3f:
         28:ce:3a:43:fa:71:93:d9:8c:54:f6:47:ff:db:6c:d0:02:9f:
         21:d5:a9:b8:04:4f:3c:78:5c:36:9a:a6:24:24:d1:d1:bd:14:
         57:0c:d7:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 22:41:56 2025 by rpki-client