This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3690C51/C742F386A67F11EFBA546082762E951A/HWc407_GEdh98N50A9JdoPZOseA.mft
File:                     HWc407_GEdh98N50A9JdoPZOseA.mft (raw, json)
Hash identifier:          OKYeVvTeZKGqUjW8myd77jyOBUCn1Rf+efzLahvUHPE=
Subject key identifier:   F5:C1:E1:13:BF:AD:21:B3:0E:D2:23:55:34:5D:E3:CB:B2:8A:27:0F
Authority key identifier: 1D:67:38:D3:BF:C6:11:D8:7D:F0:DE:74:03:D2:5D:A0:F6:4E:B1:E0
Certificate issuer:       /CN=F3690C51AR/serialNumber=1D6738D3BFC611D87DF0DE7403D25DA0F64EB1E0
Certificate serial:       0192
Authority info access:    rsync://rpki.afrinic.net/repository/arin/HWc407_GEdh98N50A9JdoPZOseA.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3690C51/C742F386A67F11EFBA546082762E951A/HWc407_GEdh98N50A9JdoPZOseA.mft
Manifest number:          018E
Signing time:             Sun 07 Dec 2025 04:40:08 +0000
Manifest this update:     Sun 07 Dec 2025 04:40:07 +0000
Manifest next update:     Tue 09 Dec 2025 04:40:07 +0000
Files and hashes:         1: HWc407_GEdh98N50A9JdoPZOseA.crl (hash: BnIztYW7JfinaJjCMeXUhRURfoE+elcyOohnJgxxKfs=)
                          2: 315F293AEEF411EF81CB7343762E951A.roa (hash: V4KjGZgIPKcP1/MjXCNEypEICjJinDEh0PjdL2zARpk=)
                          3: 6B46698EEEEE11EF911C519D762E951A.roa (hash: Tu4GUApjh+qdeFTI+yn4KBIGDwp03a2AGvdYk9j0K9w=)
                          4: B68CCC76A68211EFA7605193762E951A.roa (hash: hVK4/Rx1S8B8kokV3evOakeSn1xgDl+NOOvc1/7Zypc=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3690C51/C742F386A67F11EFBA546082762E951A/HWc407_GEdh98N50A9JdoPZOseA.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3690C51/C742F386A67F11EFBA546082762E951A/HWc407_GEdh98N50A9JdoPZOseA.mft
                          rsync://rpki.afrinic.net/repository/arin/HWc407_GEdh98N50A9JdoPZOseA.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 09 Dec 2025 00:26:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 402 (0x192)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3690C51AR, serialNumber=1D6738D3BFC611D87DF0DE7403D25DA0F64EB1E0
        Validity
            Not Before: Dec  7 04:40:07 2025 GMT
            Not After : Dec  9 04:40:07 2025 GMT
        Subject: CN=69350528-7f81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:f0:d3:f1:2f:1e:48:eb:75:04:12:f5:5b:9a:
                    f1:8e:d9:c5:f3:b7:be:18:95:ee:77:e0:dd:90:eb:
                    f0:8a:e2:58:e2:97:d1:41:d0:3b:34:f5:7e:e2:7a:
                    0a:a1:58:87:28:7a:cf:09:8f:db:04:ea:dc:e3:21:
                    a3:66:8e:1f:25:8c:d5:cf:d5:fa:2e:cb:a1:a8:fb:
                    40:76:4e:75:4d:fa:f3:51:c3:a6:ad:ff:ff:a3:eb:
                    ce:9c:80:f7:a7:94:d7:42:02:cf:a1:f5:3c:16:37:
                    3b:b6:d5:6c:72:57:78:78:48:19:e2:96:b4:7a:a8:
                    16:a3:57:c0:b4:b2:52:02:29:ef:69:69:47:4b:17:
                    9b:8c:f5:2c:19:67:a1:13:18:27:bb:fc:c9:9e:da:
                    a2:8a:ad:3a:f5:f1:c2:0b:fb:59:87:c2:4f:4b:78:
                    91:c9:19:78:c3:b8:d9:fd:90:1a:70:c8:f2:20:a3:
                    52:33:f3:da:15:96:b6:a1:fa:dc:52:e4:9a:32:11:
                    10:94:0b:fa:29:70:75:29:12:33:6c:d0:ed:d5:a7:
                    c7:dc:36:c3:0e:e7:1d:44:80:0f:ac:49:d1:e8:ce:
                    c2:3b:48:26:e6:de:f2:f6:c6:b1:41:d9:54:a0:18:
                    f5:32:ff:20:16:1d:08:71:3f:a8:e8:5b:e6:d7:83:
                    0b:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:C1:E1:13:BF:AD:21:B3:0E:D2:23:55:34:5D:E3:CB:B2:8A:27:0F
            X509v3 Authority Key Identifier:
                keyid:1D:67:38:D3:BF:C6:11:D8:7D:F0:DE:74:03:D2:5D:A0:F6:4E:B1:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3690C51/C742F386A67F11EFBA546082762E951A/HWc407_GEdh98N50A9JdoPZOseA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/HWc407_GEdh98N50A9JdoPZOseA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3690C51/C742F386A67F11EFBA546082762E951A/HWc407_GEdh98N50A9JdoPZOseA.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:71:df:a1:21:8e:3d:88:7a:07:e5:2b:53:26:bc:6d:6b:c7:
         f8:b4:f8:38:79:18:d0:d1:d4:3a:55:c2:c7:37:87:f5:1a:38:
         25:69:72:c6:5d:94:58:4a:1e:00:e7:37:ca:7c:e5:cb:66:06:
         0a:1c:c0:9a:2d:ce:c5:cc:b5:c8:d2:16:2f:28:a1:4f:c4:4a:
         04:52:49:79:50:2f:e4:6a:9c:3c:a3:74:38:a6:28:b0:a0:27:
         92:ee:49:8b:52:9a:32:a1:72:08:8b:ab:bc:c4:a0:06:62:55:
         d8:d1:98:7b:ac:b9:f6:e4:41:1b:bb:a9:e8:c6:4a:8a:f9:8f:
         99:15:c5:18:7e:39:9a:74:44:14:2f:9b:53:a5:ee:0c:28:95:
         16:4a:dd:2d:ce:8a:2b:52:c3:65:63:cf:e1:07:88:3a:63:af:
         fb:ac:76:ce:43:ef:03:14:65:94:33:d7:41:62:cb:66:e2:cd:
         82:83:96:86:95:8b:66:cb:72:5e:6e:66:42:b2:a4:fd:4c:be:
         2e:9f:a0:27:d7:10:e8:d9:9e:15:ea:e9:b3:a5:23:12:de:59:
         bf:20:94:66:52:b7:ba:67:50:88:29:49:7f:2e:71:d7:5b:13:
         43:f2:ee:1d:a1:33:cd:8c:b9:e4:67:13:50:1f:bb:1e:d3:24:
         f2:c6:1f:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 11:30:54 2025 by rpki-client