This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367FECC/511FD0D0EA3E11EBA62EAE39D8A014CE/cIjstS9EHLVBKRrSDIupB7vUQFI.mft
File:                     cIjstS9EHLVBKRrSDIupB7vUQFI.mft (raw, json)
Hash identifier:          c4qfE0cGzCBviNUofKJpayBOQj+MncBEktxGf/qe4mU=
Subject key identifier:   19:2E:46:F8:75:6B:2F:45:40:75:B9:0E:F7:78:F7:24:8A:4C:29:D1
Authority key identifier: 70:88:EC:B5:2F:44:1C:B5:41:29:1A:D2:0C:8B:A9:07:BB:D4:40:52
Certificate issuer:       /CN=F367FECCAR/serialNumber=7088ECB52F441CB541291AD20C8BA907BBD44052
Certificate serial:       067A
Authority info access:    rsync://rpki.afrinic.net/repository/arin/cIjstS9EHLVBKRrSDIupB7vUQFI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F367FECC/511FD0D0EA3E11EBA62EAE39D8A014CE/cIjstS9EHLVBKRrSDIupB7vUQFI.mft
Manifest number:          0678
Signing time:             Thu 18 Dec 2025 03:47:14 +0000
Manifest this update:     Thu 18 Dec 2025 03:47:07 +0000
Manifest next update:     Sat 20 Dec 2025 03:47:07 +0000
Files and hashes:         1: cIjstS9EHLVBKRrSDIupB7vUQFI.crl (hash: ORml/ANlMWTdfL/x2p588HCba9rsKb9MJK8ct/HVPHE=)
                          2: EBAB53E0EA3E11EB96CC7D3AD8A014CE.roa (hash: 8ccVEiAliBiH1WhFkoVeVW9p7ZDUf8PeWahrlb8I6+s=)
                          3: B9EDE330EA3F11EB9BDDAB3BD8A014CE.roa (hash: UpWRiY04Rhit9Uj9Y+xZz3ZrxHoCtYC3IGMvoMbSZgE=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F367FECC/511FD0D0EA3E11EBA62EAE39D8A014CE/cIjstS9EHLVBKRrSDIupB7vUQFI.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F367FECC/511FD0D0EA3E11EBA62EAE39D8A014CE/cIjstS9EHLVBKRrSDIupB7vUQFI.mft
                          rsync://rpki.afrinic.net/repository/arin/cIjstS9EHLVBKRrSDIupB7vUQFI.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 20 Dec 2025 00:26:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1658 (0x67a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F367FECCAR, serialNumber=7088ECB52F441CB541291AD20C8BA907BBD44052
        Validity
            Not Before: Dec 18 03:47:07 2025 GMT
            Not After : Dec 20 03:47:07 2025 GMT
        Subject: CN=69437942-673c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:21:81:cc:d9:39:fa:83:a4:4d:50:cb:b5:2e:
                    62:9e:9f:19:a0:52:03:26:97:60:c2:d6:2c:31:f0:
                    1e:b8:04:1e:27:c7:bb:52:30:e6:cc:2b:17:9c:44:
                    da:29:88:f7:c0:75:94:ce:65:f7:59:59:c2:96:b5:
                    10:9b:c7:53:02:94:e0:59:af:fe:bd:56:92:28:0c:
                    58:9b:61:16:ce:fd:95:09:19:b6:31:e8:2f:cf:fd:
                    42:a5:45:5a:cc:ae:96:23:bf:40:54:86:72:66:4e:
                    58:7b:be:cd:b8:22:41:a9:71:61:ad:e4:a2:89:04:
                    10:48:bf:31:e6:f4:ea:86:ad:ad:20:37:20:b1:1f:
                    84:4e:40:c8:aa:dc:94:32:0f:14:4b:3a:8d:91:6a:
                    cb:f6:6e:c1:5c:0a:ce:f7:b6:be:1f:1a:f7:01:3d:
                    53:e7:c7:7e:1a:36:9d:1b:56:85:ff:c3:92:60:4d:
                    09:92:a3:34:d1:dc:6c:39:32:b5:94:5f:59:f8:fa:
                    60:bc:ae:e2:80:73:9c:5e:5a:5e:95:aa:e1:e4:26:
                    bc:29:b6:fa:59:d7:83:d3:4e:43:84:a3:5d:14:92:
                    4a:48:d9:ad:2d:06:70:d4:dc:97:1c:7c:ca:24:28:
                    8e:38:12:84:c4:d1:e6:b4:02:65:c6:e1:c0:fc:3b:
                    a6:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:2E:46:F8:75:6B:2F:45:40:75:B9:0E:F7:78:F7:24:8A:4C:29:D1
            X509v3 Authority Key Identifier:
                keyid:70:88:EC:B5:2F:44:1C:B5:41:29:1A:D2:0C:8B:A9:07:BB:D4:40:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F367FECC/511FD0D0EA3E11EBA62EAE39D8A014CE/cIjstS9EHLVBKRrSDIupB7vUQFI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/cIjstS9EHLVBKRrSDIupB7vUQFI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367FECC/511FD0D0EA3E11EBA62EAE39D8A014CE/cIjstS9EHLVBKRrSDIupB7vUQFI.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:08:f2:67:d5:22:85:65:da:4b:52:61:ab:35:45:34:b6:0d:
         41:4a:af:95:ef:f5:a2:5a:79:76:24:71:42:1b:4e:42:ca:f3:
         a6:17:5c:a8:62:2c:57:3b:f3:d9:15:09:e3:e3:9b:1f:46:a2:
         0b:21:66:fb:73:fb:83:2d:e2:9c:a8:ab:c5:48:08:de:89:96:
         aa:80:ab:28:8d:72:c2:89:81:a2:11:0a:7c:bd:ba:03:e7:90:
         21:63:4f:bd:23:a4:5e:d7:da:b1:64:d4:db:cb:a5:a7:19:b2:
         d2:f9:8c:2c:3e:c3:d8:aa:71:f0:b1:86:78:8c:9a:4b:f7:f6:
         a6:45:f0:d7:7b:b0:e6:6f:49:19:72:85:88:24:03:57:f6:0e:
         70:b7:fb:58:81:51:89:ad:2a:dc:54:e9:34:65:76:65:22:c7:
         32:d7:43:87:43:60:10:83:4a:ce:a7:f0:a3:0f:7b:03:ac:43:
         79:d4:c4:e6:db:2f:e6:a7:bd:bf:ed:fd:69:4e:e8:6a:0c:f2:
         dd:51:41:89:5a:14:34:b8:9a:a4:08:9a:11:25:ac:bb:da:7b:
         01:d9:ef:f4:3c:46:11:c0:d4:88:d2:44:a7:48:07:35:b2:91:
         38:db:95:9b:f0:23:05:79:09:83:d5:9e:8f:e2:74:b9:66:59:
         51:8d:5c:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 18 23:09:31 2025 by rpki-client