This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3695A2A/8EF5357CC42E11EE997AFD4F775412E6/xnb_y0MsW4UkFfxjuJTFJwUpOaQ.mft
File:                     xnb_y0MsW4UkFfxjuJTFJwUpOaQ.mft (raw, json)
Hash identifier:          U3LOgEs1JZ7a7k5zlRSNsgugjiY1Rp5cY0XA8XcpqoY=
Subject key identifier:   21:30:4E:FF:A3:35:79:7F:BE:39:2C:92:4B:B1:B1:7F:1F:AF:85:4A
Authority key identifier: C6:76:FF:CB:43:2C:5B:85:24:15:FC:63:B8:94:C5:27:05:29:39:A4
Certificate issuer:       /CN=F3695A2AAR/serialNumber=C676FFCB432C5B852415FC63B894C527052939A4
Certificate serial:       02B2
Authority info access:    rsync://rpki.afrinic.net/repository/arin/xnb_y0MsW4UkFfxjuJTFJwUpOaQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3695A2A/8EF5357CC42E11EE997AFD4F775412E6/xnb_y0MsW4UkFfxjuJTFJwUpOaQ.mft
Manifest number:          02B0
Signing time:             Sat 06 Dec 2025 04:03:25 +0000
Manifest this update:     Sat 06 Dec 2025 04:03:25 +0000
Manifest next update:     Mon 08 Dec 2025 04:03:25 +0000
Files and hashes:         1: xnb_y0MsW4UkFfxjuJTFJwUpOaQ.crl (hash: w/nfHM3SEVJ+NLZ1t+79F/XSdgMsdPItefCrexioZ2E=)
                          2: 6FFF2C08413411EFA7FB5A60762E951A.roa (hash: iN5LnQR83/zdvQSHnZNsxLnJVE/qt/FcoEST3TDCqcY=)
                          3: A98258D0404C11EFA55BD559762E951A.roa (hash: FlBCIPwQ4YkejGviFEaWQJchhPbjvvwNsjpap4nCAeQ=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3695A2A/8EF5357CC42E11EE997AFD4F775412E6/xnb_y0MsW4UkFfxjuJTFJwUpOaQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3695A2A/8EF5357CC42E11EE997AFD4F775412E6/xnb_y0MsW4UkFfxjuJTFJwUpOaQ.mft
                          rsync://rpki.afrinic.net/repository/arin/xnb_y0MsW4UkFfxjuJTFJwUpOaQ.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 08 Dec 2025 04:03:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 690 (0x2b2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3695A2AAR, serialNumber=C676FFCB432C5B852415FC63B894C527052939A4
        Validity
            Not Before: Dec  6 04:03:25 2025 GMT
            Not After : Dec  8 04:03:25 2025 GMT
        Subject: CN=6933ab0d-060f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:5a:21:93:11:96:06:af:3e:a2:fd:d3:14:2f:
                    c9:8d:c3:f6:ea:45:2f:fd:ed:11:db:ed:db:26:b2:
                    72:e4:23:74:33:07:3d:43:0e:4c:ab:71:1d:b2:50:
                    8a:21:72:36:98:f8:65:d4:86:a3:3c:11:7b:5e:17:
                    28:e7:e9:ef:7c:6a:39:a7:d3:0e:cc:bb:07:6c:91:
                    35:07:e3:13:3f:a7:59:26:ae:f8:29:98:db:34:d2:
                    47:a5:52:14:ca:63:6f:0a:cd:2a:c9:db:78:d3:b9:
                    29:b5:14:f4:a7:25:e5:c1:74:c9:8d:76:51:b1:63:
                    f2:d0:58:c8:4c:e3:52:de:e5:e0:5e:b8:43:9e:05:
                    e7:8e:78:f8:d4:6a:2b:37:e2:b1:ba:d9:3e:ba:7b:
                    2c:16:c1:54:d2:21:16:70:69:1b:83:7a:9d:1a:b6:
                    eb:48:bf:38:0f:c1:40:89:94:f1:8f:be:62:6f:25:
                    2c:0d:cf:c9:95:40:5c:f4:6b:c1:21:01:cb:2a:34:
                    73:7d:79:df:fa:78:4a:df:b3:cd:cd:d3:89:93:3d:
                    d3:44:bc:d0:54:6e:fe:7d:75:c8:d4:03:85:24:33:
                    58:99:d4:36:37:38:da:af:f8:61:0c:83:21:c8:2d:
                    8f:69:41:de:46:25:1c:d6:d1:5b:95:94:0d:0f:5e:
                    40:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:30:4E:FF:A3:35:79:7F:BE:39:2C:92:4B:B1:B1:7F:1F:AF:85:4A
            X509v3 Authority Key Identifier:
                keyid:C6:76:FF:CB:43:2C:5B:85:24:15:FC:63:B8:94:C5:27:05:29:39:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3695A2A/8EF5357CC42E11EE997AFD4F775412E6/xnb_y0MsW4UkFfxjuJTFJwUpOaQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/xnb_y0MsW4UkFfxjuJTFJwUpOaQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3695A2A/8EF5357CC42E11EE997AFD4F775412E6/xnb_y0MsW4UkFfxjuJTFJwUpOaQ.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:2f:30:00:c1:2b:4f:2e:e2:42:6e:ee:88:98:c6:71:25:6d:
         4f:fa:3f:bd:6f:4d:b3:84:67:5d:0b:52:ba:e5:b5:8b:45:bd:
         24:b6:6c:28:b7:2f:5a:c5:63:db:cb:a5:b1:df:e2:49:0f:a0:
         f8:87:d5:91:fe:3b:15:3f:96:e0:6d:64:22:86:14:67:ce:40:
         17:95:70:43:79:9b:a0:b4:52:a4:34:b8:86:c8:01:d5:f7:b2:
         10:a5:07:99:d1:fd:12:a2:0a:60:74:61:5b:bb:de:c0:40:bd:
         02:02:fb:62:07:2a:69:d9:71:20:3a:1c:55:1b:02:4a:5f:ba:
         8d:08:81:39:ea:ad:02:18:7b:c8:1c:22:17:4c:f1:76:23:a1:
         e5:74:bf:04:f9:8e:50:69:e8:c1:cb:f6:80:a6:03:e6:46:73:
         41:2a:1a:61:47:4f:b0:b4:b7:1f:39:96:14:a5:ac:a4:5b:e4:
         5f:4d:07:06:8e:a3:df:fd:9e:89:1d:43:14:7a:41:43:8a:81:
         da:d6:4f:86:56:11:16:37:94:51:e9:c1:7b:ff:41:b3:af:f6:
         3c:16:f5:af:1d:40:e1:4e:f2:12:81:c9:7c:89:9b:d4:ca:ed:
         2a:e8:1a:eb:38:e1:58:7c:8f:7e:47:ea:c3:95:07:26:ca:02:
         2e:1a:cc:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 04:57:15 2025 by rpki-client