This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F4A1/A61F3BB83F5C11EF9D4CC77E762E951A/gl2wNPq0N6iajdJEBqtygseLYro.mft
File:                     gl2wNPq0N6iajdJEBqtygseLYro.mft (raw, json)
Hash identifier:          xvS4yIiMRi+WgpCKFLFAVSERbTvvINnFuzN3SdNK/rc=
Subject key identifier:   7E:36:2C:85:FB:29:42:C5:7D:BA:00:B0:FB:87:BB:BC:C7:88:9F:C2
Authority key identifier: 82:5D:B0:34:FA:B4:37:A8:9A:8D:D2:44:06:AB:72:82:C7:8B:62:BA
Certificate issuer:       /CN=F368F4A1AR/serialNumber=825DB034FAB437A89A8DD24406AB7282C78B62BA
Certificate serial:       0220
Authority info access:    rsync://rpki.afrinic.net/repository/arin/gl2wNPq0N6iajdJEBqtygseLYro.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F4A1/A61F3BB83F5C11EF9D4CC77E762E951A/gl2wNPq0N6iajdJEBqtygseLYro.mft
Manifest number:          0218
Signing time:             Sat 06 Dec 2025 04:22:49 +0000
Manifest this update:     Sat 06 Dec 2025 04:22:49 +0000
Manifest next update:     Mon 08 Dec 2025 04:22:49 +0000
Files and hashes:         1: gl2wNPq0N6iajdJEBqtygseLYro.crl (hash: Ky7cn3hfSeN1r+UzIDVi7GCPcr4sO6umDVf/inTEGJs=)
                          2: A11224BE49CA11EF9C401F91762E951A.roa (hash: KDj2Lzc4dz6ze7gmYdXtI25bUBjs8RYx75qbzXwadro=)
                          3: FFBD17A449C911EF9BD0848C762E951A.roa (hash: 1q6DfjzPCakdGBa3y25kmYy0lgCV4qqQEYn4uXM0n0g=)
                          4: EC0AAE60435711EFB8E0D6BA762E951A.roa (hash: CywE6U5JIpUptFBIfv36q/lnpSHgsnnC42/YpAaW+DI=)
                          5: B6688076435611EFAB2BE6B1762E951A.roa (hash: 9tse/mxNJXfyu1H3gIXX1krLQVJ31qcACHPTQWNjpxU=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F4A1/A61F3BB83F5C11EF9D4CC77E762E951A/gl2wNPq0N6iajdJEBqtygseLYro.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F4A1/A61F3BB83F5C11EF9D4CC77E762E951A/gl2wNPq0N6iajdJEBqtygseLYro.mft
                          rsync://rpki.afrinic.net/repository/arin/gl2wNPq0N6iajdJEBqtygseLYro.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 08 Dec 2025 00:26:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 544 (0x220)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F4A1AR, serialNumber=825DB034FAB437A89A8DD24406AB7282C78B62BA
        Validity
            Not Before: Dec  6 04:22:49 2025 GMT
            Not After : Dec  8 04:22:49 2025 GMT
        Subject: CN=6933af99-fc0d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:be:f2:f8:a0:4a:4c:9b:40:3d:95:3b:65:07:
                    4a:06:59:9e:80:19:4d:49:da:48:59:fe:7c:52:78:
                    a5:e9:b9:cd:db:9b:23:d3:d5:d2:4c:42:b5:23:00:
                    c8:ab:8a:42:b6:db:cf:35:26:be:f7:f3:fb:3e:39:
                    0d:c7:00:dd:21:8b:a7:88:61:1d:83:43:2d:fa:9c:
                    d5:d2:6d:67:0d:9b:26:0a:1b:bc:51:e2:b8:41:d9:
                    a7:82:4b:9f:dd:bd:b6:84:a7:5a:05:02:8c:7f:2a:
                    9c:c6:e3:46:93:96:de:2f:83:d8:5c:11:18:cc:02:
                    79:89:6d:b9:a2:53:4d:ed:b8:24:4e:18:2c:bd:71:
                    24:d0:2e:75:75:90:0a:b7:f2:63:b7:e8:51:2c:0d:
                    77:d5:29:e2:f8:a3:53:5d:06:d3:c3:db:06:7b:9b:
                    b4:a6:fa:20:fa:c1:35:8a:0a:ce:a6:75:25:df:a3:
                    69:e1:6b:60:11:3f:ea:a2:55:b1:a5:f7:4c:08:f3:
                    3b:03:a1:6d:bc:6b:d5:cb:0f:8e:15:4e:e8:f9:30:
                    ea:e3:67:cb:ec:5d:92:b4:8c:6a:f5:19:57:9f:e3:
                    7c:0c:d5:8f:b8:77:7a:e4:e0:3d:22:bf:73:cb:5a:
                    84:68:26:bd:b7:66:94:1b:20:6f:39:b1:67:cf:f2:
                    e0:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:36:2C:85:FB:29:42:C5:7D:BA:00:B0:FB:87:BB:BC:C7:88:9F:C2
            X509v3 Authority Key Identifier:
                keyid:82:5D:B0:34:FA:B4:37:A8:9A:8D:D2:44:06:AB:72:82:C7:8B:62:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F4A1/A61F3BB83F5C11EF9D4CC77E762E951A/gl2wNPq0N6iajdJEBqtygseLYro.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/gl2wNPq0N6iajdJEBqtygseLYro.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F4A1/A61F3BB83F5C11EF9D4CC77E762E951A/gl2wNPq0N6iajdJEBqtygseLYro.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:e1:bd:81:b6:e2:41:09:68:f6:8f:81:76:c3:c8:8d:64:a8:
         1b:ca:0a:ad:43:50:89:e0:a6:a8:85:28:2d:c7:09:61:06:e3:
         87:24:39:07:5a:42:80:be:eb:be:2b:b1:1f:dc:3f:90:47:d4:
         62:4f:94:48:48:06:0a:31:08:88:4a:9b:60:df:c2:69:3c:22:
         db:32:2c:29:00:06:02:57:25:1d:f5:80:22:d2:bd:65:7f:1c:
         ed:cd:62:be:1c:f3:0c:e5:07:7e:b6:71:2e:72:b8:fd:9d:14:
         dc:8e:93:ec:5d:dd:bc:8f:00:3d:c6:c1:5d:8d:37:18:fd:07:
         d0:f7:83:71:f2:28:f3:50:08:68:97:fb:93:a0:b0:cf:33:de:
         1f:26:2c:77:ca:03:d4:86:5a:88:ed:73:a4:5e:1e:c3:da:21:
         02:c3:57:b8:20:6f:53:0a:0e:29:51:e5:3b:61:e9:bc:cd:84:
         91:82:2b:dc:bb:6a:6a:00:c0:d3:95:3b:d9:0d:ca:bf:f8:30:
         ce:93:61:1e:92:49:35:47:2f:b2:8c:c0:c3:ed:f8:24:b1:99:
         08:20:f5:7f:f5:5f:f5:be:25:8b:14:24:af:56:72:20:cb:60:
         8a:20:ce:91:43:cd:ba:61:9c:5e:6a:58:d3:d7:66:29:23:a2:
         05:7c:2f:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 22:41:08 2025 by rpki-client