This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3687682/ECCB3E1C009211EF94AE900D017001B1/ZoAHqf6WL0fU33c33hdQYKxavOw.mft
File:                     ZoAHqf6WL0fU33c33hdQYKxavOw.mft (raw, json)
Hash identifier:          bwla6vxW04pCd0FprxftCgIFASLqQi6/4QQk3NCdNt0=
Subject key identifier:   97:A2:75:02:8B:B0:64:CD:7A:B9:39:9D:B7:67:38:E9:96:29:44:97
Authority key identifier: 66:80:07:A9:FE:96:2F:47:D4:DF:77:37:DE:17:50:60:AC:5A:BC:EC
Certificate issuer:       /CN=F3687682AR/serialNumber=668007A9FE962F47D4DF7737DE175060AC5ABCEC
Certificate serial:       0265
Authority info access:    rsync://rpki.afrinic.net/repository/arin/ZoAHqf6WL0fU33c33hdQYKxavOw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3687682/ECCB3E1C009211EF94AE900D017001B1/ZoAHqf6WL0fU33c33hdQYKxavOw.mft
Manifest number:          0263
Signing time:             Sat 06 Dec 2025 04:12:30 +0000
Manifest this update:     Sat 06 Dec 2025 04:12:30 +0000
Manifest next update:     Mon 08 Dec 2025 04:12:30 +0000
Files and hashes:         1: ZoAHqf6WL0fU33c33hdQYKxavOw.crl (hash: FSrq0GgCLnEN70xp16U8zFkMK3Ysx5ObELIotjf6J5w=)
                          2: 4348CF92009411EF9CFF8618017001B1.roa (hash: kE7Wa2CuajfImbklB2Ig5E0X9bA3vR+6n/vZhq2Lzac=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3687682/ECCB3E1C009211EF94AE900D017001B1/ZoAHqf6WL0fU33c33hdQYKxavOw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3687682/ECCB3E1C009211EF94AE900D017001B1/ZoAHqf6WL0fU33c33hdQYKxavOw.mft
                          rsync://rpki.afrinic.net/repository/arin/ZoAHqf6WL0fU33c33hdQYKxavOw.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 08 Dec 2025 04:12:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 613 (0x265)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3687682AR, serialNumber=668007A9FE962F47D4DF7737DE175060AC5ABCEC
        Validity
            Not Before: Dec  6 04:12:30 2025 GMT
            Not After : Dec  8 04:12:30 2025 GMT
        Subject: CN=6933ad2e-45a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:41:b4:a0:ee:2e:81:de:89:ea:e0:d4:d3:89:
                    2f:ef:df:f9:c7:d1:ab:3b:27:c8:6d:da:9a:c1:8b:
                    2e:30:ce:fc:e8:6c:67:91:0f:a6:76:6f:4d:3a:fe:
                    9d:8b:72:b4:fd:50:1b:1d:b1:6a:8d:e9:b3:f7:f6:
                    1a:9c:1f:14:9e:1b:e6:80:1a:b3:04:87:8f:e6:8a:
                    55:85:4c:33:59:a5:04:d4:6b:d5:a4:f3:df:bb:18:
                    59:36:7e:76:21:47:56:b3:66:7c:d8:58:70:5e:aa:
                    ea:26:57:23:c3:da:1a:6d:ac:02:b6:96:5c:93:26:
                    72:2d:7a:4c:86:36:c5:12:bc:d8:72:bc:7d:c0:c0:
                    91:36:07:22:88:f5:9c:a7:34:e4:66:8f:9c:8b:58:
                    c2:ea:c3:94:a9:2f:e2:53:7c:8b:1e:3a:65:6a:ed:
                    92:5a:f0:08:40:32:0c:36:ca:ba:c8:3a:25:eb:35:
                    f8:bf:8a:17:9e:7d:4d:ba:1f:09:2c:c1:2b:ad:0e:
                    8a:83:19:3e:52:f8:3b:ac:45:1e:50:15:eb:d2:07:
                    48:a3:68:60:a2:f5:3d:06:73:ee:ef:76:e8:d8:4e:
                    99:2f:5d:6b:a5:cf:69:67:cd:40:71:fe:14:22:3e:
                    81:6e:fc:53:30:99:4a:0d:c5:dc:1b:72:51:55:c6:
                    cb:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:A2:75:02:8B:B0:64:CD:7A:B9:39:9D:B7:67:38:E9:96:29:44:97
            X509v3 Authority Key Identifier:
                keyid:66:80:07:A9:FE:96:2F:47:D4:DF:77:37:DE:17:50:60:AC:5A:BC:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3687682/ECCB3E1C009211EF94AE900D017001B1/ZoAHqf6WL0fU33c33hdQYKxavOw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/ZoAHqf6WL0fU33c33hdQYKxavOw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3687682/ECCB3E1C009211EF94AE900D017001B1/ZoAHqf6WL0fU33c33hdQYKxavOw.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:4a:7f:50:de:83:31:a0:02:3a:e4:76:6a:89:3f:1e:ee:02:
         84:35:ff:e4:89:18:52:0f:9b:f7:12:d0:3a:f4:67:03:e9:24:
         ad:37:de:bd:43:c9:36:34:a1:b1:2f:47:fd:67:5d:ef:53:23:
         ab:4f:ad:fa:b0:ea:64:b5:7b:e9:d3:79:d0:a1:73:45:2a:55:
         e7:7d:f2:ae:c1:cb:66:05:d8:0d:30:ed:ed:e6:5b:0a:bf:7a:
         5a:10:7d:51:c7:c5:57:01:7e:df:11:3c:e2:b2:0e:40:26:73:
         51:9e:67:1f:b8:8a:40:16:87:7c:5f:6c:27:25:cf:9d:6c:b0:
         68:62:11:c2:3f:d7:dc:4a:bc:7e:48:7b:67:5f:5c:71:47:56:
         ca:d6:d8:90:86:8c:9e:6a:94:ca:f5:ac:69:28:75:c9:41:78:
         c1:b7:6c:83:a0:11:21:ac:be:f7:ea:07:ac:91:5d:33:6f:3e:
         be:63:36:c7:53:f9:7a:8a:a1:ea:81:30:02:65:bf:d4:38:d9:
         7a:c4:38:a3:df:62:6f:b8:75:eb:c0:64:16:73:c3:f2:b2:97:
         3d:79:82:b9:d2:ab:94:00:96:4d:14:17:82:38:70:37:07:f4:
         34:02:07:43:be:e2:bd:92:df:65:f1:ec:aa:78:31:c2:c1:c9:
         c6:1e:5d:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 02:36:19 2025 by rpki-client