This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369FA36/AD43F906813911E9928B381AF8AEA228/xfhhSKRBFqYpLACKCbTnW4vZ2h0.mft
File:                     xfhhSKRBFqYpLACKCbTnW4vZ2h0.mft (raw, json)
Hash identifier:          QGS7wzCrIYPU919z15eQNq8MXCZkvXw5pfAr8D48Mds=
Subject key identifier:   2D:98:06:CE:BE:E7:AC:B3:AC:5F:21:25:89:39:80:A0:90:7A:69:85
Authority key identifier: C5:F8:61:48:A4:41:16:A6:29:2C:00:8A:09:B4:E7:5B:8B:D9:DA:1D
Certificate issuer:       /CN=F369FA36AR/serialNumber=C5F86148A44116A6292C008A09B4E75B8BD9DA1D
Certificate serial:       09B5
Authority info access:    rsync://rpki.afrinic.net/repository/arin/xfhhSKRBFqYpLACKCbTnW4vZ2h0.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F369FA36/AD43F906813911E9928B381AF8AEA228/xfhhSKRBFqYpLACKCbTnW4vZ2h0.mft
Manifest number:          09AA
Signing time:             Fri 19 Dec 2025 01:23:48 +0000
Manifest this update:     Fri 19 Dec 2025 01:23:47 +0000
Manifest next update:     Sun 21 Dec 2025 01:23:47 +0000
Files and hashes:         1: xfhhSKRBFqYpLACKCbTnW4vZ2h0.crl (hash: u11dX/Ji1loNnfKPkw2wv6M4WUUR+2jJDhqKhk4lmoM=)
                          2: D4B109C4B0AF11EF94AB2EA4762E951A.roa (hash: Dru2mYr5BfjKlr8vM+NaW5CnYd2mn2FHYHVMnOlP6ow=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F369FA36/AD43F906813911E9928B381AF8AEA228/xfhhSKRBFqYpLACKCbTnW4vZ2h0.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F369FA36/AD43F906813911E9928B381AF8AEA228/xfhhSKRBFqYpLACKCbTnW4vZ2h0.mft
                          rsync://rpki.afrinic.net/repository/arin/xfhhSKRBFqYpLACKCbTnW4vZ2h0.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 21 Dec 2025 00:26:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2485 (0x9b5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F369FA36AR, serialNumber=C5F86148A44116A6292C008A09B4E75B8BD9DA1D
        Validity
            Not Before: Dec 19 01:23:47 2025 GMT
            Not After : Dec 21 01:23:47 2025 GMT
        Subject: CN=6944a924-50f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:49:a2:3c:71:11:92:f8:f8:4b:a0:9c:8d:c6:
                    64:f7:55:eb:6d:88:12:f7:8d:81:82:47:ee:d9:60:
                    1b:5b:09:6a:ab:14:8a:ac:08:0c:fc:f0:3a:72:8d:
                    85:ff:de:47:2e:36:78:80:31:5a:0d:79:7c:0f:0e:
                    3b:15:ed:4b:88:25:5a:7c:fe:8d:12:03:07:11:10:
                    5d:19:9e:07:44:5c:0e:6a:cf:44:7a:e3:b0:e7:cc:
                    d7:68:12:c4:cc:d6:a8:aa:5c:2f:2c:1a:47:c7:99:
                    7d:2f:08:eb:2a:14:93:63:11:22:1e:16:08:22:32:
                    a3:9c:fd:82:4f:82:eb:5a:c2:09:f0:f4:cc:ca:6d:
                    ff:d7:61:ef:90:3c:1a:96:93:97:c0:14:d6:b0:40:
                    0e:ff:ca:be:5c:d1:12:8c:21:d1:e5:4d:83:63:38:
                    8e:60:8c:48:70:52:f7:36:62:5a:be:83:dc:e6:69:
                    41:fd:ec:7a:1a:e8:a1:8f:b3:7a:08:f5:14:90:57:
                    92:88:15:79:d6:36:d8:9e:b1:70:da:ac:76:38:46:
                    7a:ce:0e:41:87:7c:f7:3a:5e:32:3a:f4:a8:49:6d:
                    8e:2b:8b:1c:e0:e9:f7:fb:c1:8b:0e:b8:aa:be:bc:
                    4e:54:e9:b6:cd:c8:eb:b2:8b:ee:5d:f2:75:d6:d2:
                    73:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:98:06:CE:BE:E7:AC:B3:AC:5F:21:25:89:39:80:A0:90:7A:69:85
            X509v3 Authority Key Identifier:
                keyid:C5:F8:61:48:A4:41:16:A6:29:2C:00:8A:09:B4:E7:5B:8B:D9:DA:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F369FA36/AD43F906813911E9928B381AF8AEA228/xfhhSKRBFqYpLACKCbTnW4vZ2h0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/xfhhSKRBFqYpLACKCbTnW4vZ2h0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369FA36/AD43F906813911E9928B381AF8AEA228/xfhhSKRBFqYpLACKCbTnW4vZ2h0.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:5d:49:55:38:fe:df:7e:f9:04:5c:d7:5b:a8:61:fb:99:50:
         ab:b9:37:93:b2:89:d8:06:3d:ab:0e:90:92:4a:e0:49:dc:79:
         17:51:00:46:c6:32:be:68:3b:ba:35:38:44:4b:5c:df:30:8d:
         4a:b8:c2:f0:63:31:25:85:28:b6:7c:22:45:07:38:f3:01:92:
         aa:12:b7:47:b3:7c:c1:82:4d:03:4c:cc:c5:8e:8d:ff:8f:ce:
         70:1a:af:9f:d3:eb:2c:32:bc:18:13:c7:7d:c2:f0:6b:3a:a7:
         a3:6b:02:6e:c1:38:54:fd:a7:aa:58:5a:20:87:cf:6c:e2:48:
         2c:0a:4c:f9:c2:e0:8e:64:18:e4:dc:8f:dd:04:ad:e4:a1:d7:
         8c:d2:f0:57:34:e5:7e:64:06:3f:5c:02:5d:bf:5b:89:84:1e:
         11:5f:24:d5:4e:a3:0a:98:af:af:96:79:44:39:14:a9:a9:ce:
         b2:b5:8c:78:a6:de:3a:9a:b9:81:8e:ec:3c:a7:f2:4b:72:56:
         92:54:ff:70:4e:ec:01:cd:fc:f7:64:51:64:26:52:89:1e:f6:
         a3:d7:03:1b:dd:ff:73:3e:2d:7c:bf:de:7e:46:33:7c:68:88:
         92:7a:a5:8d:55:50:80:0b:e8:67:89:ef:b9:73:cf:63:16:56:
         27:1a:4d:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 12:54:20 2025 by rpki-client