This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3688321/9CE7374E0DFC11EFBBC58B5B017001B1/4ugF6J3fkHsrUo9CZBtP92ImmxY.mft
File:                     4ugF6J3fkHsrUo9CZBtP92ImmxY.mft (raw, json)
Hash identifier:          HTFKXow3+nJioO0vhUykLZOFgM6MK/el33JcLeWJDlo=
Subject key identifier:   FF:B6:1B:62:A0:BE:BE:97:F1:8A:88:B4:2E:60:E0:43:47:B9:68:E0
Authority key identifier: E2:E8:05:E8:9D:DF:90:7B:2B:52:8F:42:64:1B:4F:F7:62:26:9B:16
Certificate issuer:       /CN=F3688321AR/serialNumber=E2E805E89DDF907B2B528F42641B4FF762269B16
Certificate serial:       0260
Authority info access:    rsync://rpki.afrinic.net/repository/arin/4ugF6J3fkHsrUo9CZBtP92ImmxY.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3688321/9CE7374E0DFC11EFBBC58B5B017001B1/4ugF6J3fkHsrUo9CZBtP92ImmxY.mft
Manifest number:          025F
Signing time:             Sun 21 Dec 2025 04:13:07 +0000
Manifest this update:     Sun 21 Dec 2025 04:13:06 +0000
Manifest next update:     Tue 23 Dec 2025 04:13:06 +0000
Files and hashes:         1: 4ugF6J3fkHsrUo9CZBtP92ImmxY.crl (hash: mkL2ql+R8IKGZkFtWm1Gv8b0DyqZVt/NFeUJJYE843g=)
                          2: 7E32B2260DFF11EF971154F4007001B1.roa (hash: mMlz9+L3Eog8WKMUxfqqOF5aG0LcyYUooSiKu/ea8uI=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3688321/9CE7374E0DFC11EFBBC58B5B017001B1/4ugF6J3fkHsrUo9CZBtP92ImmxY.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3688321/9CE7374E0DFC11EFBBC58B5B017001B1/4ugF6J3fkHsrUo9CZBtP92ImmxY.mft
                          rsync://rpki.afrinic.net/repository/arin/4ugF6J3fkHsrUo9CZBtP92ImmxY.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 23 Dec 2025 00:26:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 608 (0x260)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3688321AR, serialNumber=E2E805E89DDF907B2B528F42641B4FF762269B16
        Validity
            Not Before: Dec 21 04:13:06 2025 GMT
            Not After : Dec 23 04:13:06 2025 GMT
        Subject: CN=694773d3-1c7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:48:f8:95:21:82:95:62:67:39:c2:f0:0d:a8:
                    5a:e7:c7:5a:48:f7:75:f1:85:10:8d:7a:05:4c:27:
                    75:04:98:b3:01:99:31:d8:66:20:89:ac:d9:07:77:
                    9e:84:49:bf:63:b9:f7:bc:a7:94:1b:81:3b:d4:41:
                    10:29:c5:fa:c5:5f:84:38:5e:f5:c0:16:cd:2a:94:
                    3a:64:d1:04:fa:cf:1b:1d:75:90:da:ef:bf:d1:34:
                    db:89:77:e8:e6:81:d7:31:3f:fc:54:41:51:5f:7d:
                    39:54:d3:45:90:b5:88:cb:00:99:45:60:b4:31:60:
                    cc:c2:b9:b9:f2:76:7b:a0:a1:96:a3:34:a5:77:f9:
                    cd:95:98:37:8f:30:cc:ff:d2:7e:d3:1a:d4:5a:9b:
                    b8:14:62:32:fd:e0:c2:f5:4d:78:c9:b9:c9:f7:b1:
                    1f:dd:3e:90:cb:fe:65:3e:dc:d2:43:df:04:4b:0b:
                    b8:71:1e:93:65:50:c4:87:22:0b:1e:f1:38:f3:68:
                    45:21:2c:ad:a8:1e:83:6d:52:6f:1b:30:48:1e:b6:
                    78:aa:c9:4f:f7:23:16:ef:50:e7:69:cd:1a:38:fa:
                    37:c7:08:f1:e8:2e:53:ab:20:af:30:30:38:67:58:
                    66:0f:45:07:0c:09:11:6d:ca:9d:88:c3:83:db:a6:
                    63:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:B6:1B:62:A0:BE:BE:97:F1:8A:88:B4:2E:60:E0:43:47:B9:68:E0
            X509v3 Authority Key Identifier:
                keyid:E2:E8:05:E8:9D:DF:90:7B:2B:52:8F:42:64:1B:4F:F7:62:26:9B:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3688321/9CE7374E0DFC11EFBBC58B5B017001B1/4ugF6J3fkHsrUo9CZBtP92ImmxY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/4ugF6J3fkHsrUo9CZBtP92ImmxY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3688321/9CE7374E0DFC11EFBBC58B5B017001B1/4ugF6J3fkHsrUo9CZBtP92ImmxY.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:94:79:e5:ac:0c:31:07:59:0f:28:3e:b0:29:53:7d:95:46:
         05:84:ac:a6:34:6b:2e:bf:5d:cb:6a:17:f9:30:b3:4a:b5:f1:
         74:81:19:03:53:01:51:e1:0a:db:db:1a:89:6c:c2:ef:d8:0e:
         8c:04:a7:b8:f2:1c:f0:63:9e:a1:12:13:f4:a8:bd:21:6c:82:
         a5:c7:5e:48:20:1c:58:6f:8c:3f:6f:fb:65:7d:ac:0c:02:5e:
         4e:88:e3:b2:ff:ba:ba:a9:15:5f:aa:aa:a3:3f:a1:8e:7a:fe:
         f2:e9:76:ae:75:30:7b:0a:08:98:f3:74:cc:a8:b5:83:f5:3b:
         90:e0:f3:e9:eb:b1:1b:04:4f:93:42:34:0f:04:b6:48:8a:c3:
         a6:1a:7e:91:65:b5:36:34:f8:a0:3b:50:aa:1a:9f:72:fd:40:
         78:a5:98:ca:5b:c2:1b:3a:6e:20:77:68:46:f4:59:8c:b0:fa:
         34:17:22:0c:92:7c:42:0d:90:d7:05:47:83:06:b4:bb:a7:14:
         45:a7:43:40:fc:36:ec:df:6d:c0:24:2d:93:bb:2d:ba:f5:fd:
         ce:3d:e0:40:cf:69:cc:28:7d:f2:d0:6b:f6:0d:cd:e9:fa:e3:
         59:3a:36:56:af:99:a5:e2:2f:ae:55:49:95:8d:b3:e3:05:59:
         75:63:b1:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 17:29:09 2025 by rpki-client