This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3680C14/7707FAD65AE011E69FAE5E32F8AEA228/JlfA2qREzLm--MKoWGoOdJzqm1I.mft
File:                     JlfA2qREzLm--MKoWGoOdJzqm1I.mft (raw, json)
Hash identifier:          LFbTT1gIt7qx0Nm8n90VG1Ncvt5hQiiltrbXzunY4D8=
Subject key identifier:   4E:B1:0E:D5:2A:4B:F9:B3:EA:E9:C2:B3:BE:19:6B:E3:5D:5F:98:35
Authority key identifier: 26:57:C0:DA:A4:44:CC:B9:BE:F8:C2:A8:58:6A:0E:74:9C:EA:9B:52
Certificate issuer:       /CN=F3680C14AR/serialNumber=2657C0DAA444CCB9BEF8C2A8586A0E749CEA9B52
Certificate serial:       0DA4
Authority info access:    rsync://rpki.afrinic.net/repository/arin/JlfA2qREzLm--MKoWGoOdJzqm1I.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3680C14/7707FAD65AE011E69FAE5E32F8AEA228/JlfA2qREzLm--MKoWGoOdJzqm1I.mft
Manifest number:          0DA0
Signing time:             Sat 06 Dec 2025 01:03:06 +0000
Manifest this update:     Sat 06 Dec 2025 01:03:06 +0000
Manifest next update:     Mon 08 Dec 2025 01:03:06 +0000
Files and hashes:         1: JlfA2qREzLm--MKoWGoOdJzqm1I.crl (hash: 6tHTlSchqZf6fUAb3eSE8+GAtbZxLriBli5x3SR6Xmg=)
                          2: 4AC87CE0B11911F0830CDBDFDAE4EC9C.roa (hash: BbmEW7gIRevtuQq0qmlAx+V5iEy5gjhSfXPW6vQnAiw=)
                          3: F4602E7A7D7A11EFAF08EC65762E951A.roa (hash: haY/GuoRZps/E0T0DW+Xq+UzSC93SwDzI9EXCFdllhw=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3680C14/7707FAD65AE011E69FAE5E32F8AEA228/JlfA2qREzLm--MKoWGoOdJzqm1I.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3680C14/7707FAD65AE011E69FAE5E32F8AEA228/JlfA2qREzLm--MKoWGoOdJzqm1I.mft
                          rsync://rpki.afrinic.net/repository/arin/JlfA2qREzLm--MKoWGoOdJzqm1I.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 08 Dec 2025 00:26:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3492 (0xda4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3680C14AR, serialNumber=2657C0DAA444CCB9BEF8C2A8586A0E749CEA9B52
        Validity
            Not Before: Dec  6 01:03:06 2025 GMT
            Not After : Dec  8 01:03:06 2025 GMT
        Subject: CN=693380ca-7ceb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:d7:df:ba:ed:30:60:86:74:1d:0c:65:2f:f1:
                    2c:4d:41:5c:8c:a1:b2:30:44:a9:69:2d:0a:cb:de:
                    7e:fd:07:1f:cb:3d:8e:8d:87:a5:b0:40:1e:ff:9d:
                    7c:be:3e:84:59:47:5c:b1:4e:f2:c8:85:7d:11:2f:
                    bf:64:0d:d4:c0:ce:c5:48:28:29:34:06:32:93:22:
                    85:a4:75:cc:09:6c:70:c7:b9:a4:ee:65:d6:0a:f1:
                    3e:42:ab:60:03:fc:2c:7f:18:e3:6e:f7:37:72:8b:
                    cd:b7:94:1e:d0:b8:5b:ac:9d:8e:66:4d:9a:34:0e:
                    a7:44:2f:f1:f7:85:57:b1:67:bc:97:a6:c3:75:8b:
                    52:d9:99:56:02:a5:2f:48:86:95:f0:7e:56:d4:7a:
                    2e:57:6a:90:6d:62:d1:a1:a1:4c:3e:98:16:90:7e:
                    58:b9:6e:68:4b:f1:b2:3a:9a:98:db:b8:36:cd:28:
                    6b:c5:25:52:5d:2b:a4:dd:e3:f9:cb:4b:8c:c3:13:
                    bb:ba:87:1c:3e:de:5a:ac:45:31:34:11:91:5e:9c:
                    27:e7:c3:0c:2b:70:56:53:a3:08:31:5d:a5:b0:be:
                    4b:36:b0:e7:59:a0:5b:72:54:bc:c5:c1:4d:39:4a:
                    3f:d5:5c:d9:2a:23:65:c8:33:12:a8:bf:e9:d2:1c:
                    10:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:B1:0E:D5:2A:4B:F9:B3:EA:E9:C2:B3:BE:19:6B:E3:5D:5F:98:35
            X509v3 Authority Key Identifier:
                keyid:26:57:C0:DA:A4:44:CC:B9:BE:F8:C2:A8:58:6A:0E:74:9C:EA:9B:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3680C14/7707FAD65AE011E69FAE5E32F8AEA228/JlfA2qREzLm--MKoWGoOdJzqm1I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/JlfA2qREzLm--MKoWGoOdJzqm1I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3680C14/7707FAD65AE011E69FAE5E32F8AEA228/JlfA2qREzLm--MKoWGoOdJzqm1I.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:ae:fb:9b:c5:11:8d:fb:c3:14:15:95:08:d8:83:d3:1a:69:
         eb:7b:ab:24:44:d6:35:cc:c7:d1:d0:d7:73:e0:a3:f4:85:7d:
         e3:7d:70:bb:da:d7:41:eb:ec:c4:5d:d6:d6:13:b5:b7:5d:4d:
         2f:8c:c0:be:f6:d2:86:8d:4d:63:36:51:be:6e:4c:37:f6:7b:
         1a:d9:14:7b:ed:fa:eb:65:67:ac:9e:1f:63:59:76:1c:d4:c6:
         5c:5d:36:3f:5e:1c:73:c2:5a:fe:aa:a0:d5:d6:1a:a8:de:12:
         66:25:33:1e:9e:4a:73:a1:64:d9:f3:e8:61:57:23:a8:79:9a:
         56:d4:dd:4d:b3:16:37:99:66:6a:c3:73:0d:16:f6:e3:c9:16:
         65:dd:9e:d5:e8:21:12:c5:f2:a0:43:f1:ac:f2:c6:24:0c:d3:
         99:2f:4e:3a:e1:cd:61:89:c9:7c:39:94:90:fe:05:26:8d:8e:
         86:3c:93:2f:30:c6:9b:a6:e6:4b:2a:32:f3:43:ec:15:97:8f:
         33:44:a2:10:ca:60:95:88:79:6e:d7:6a:f0:b2:0d:4e:c3:e5:
         cb:b8:c0:b1:e8:cc:d5:9d:4a:06:a6:b8:70:3a:66:a3:60:73:
         23:9d:b9:a6:92:87:57:c3:84:14:d2:7e:71:e9:82:45:76:5a:
         b8:52:87:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 00:33:21 2025 by rpki-client