This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36AA888/4B72B378886111E9A00E0863F8AEA228/5I3aEvfbQDWUF4ykuO1G5mKvjsw.mft
File:                     5I3aEvfbQDWUF4ykuO1G5mKvjsw.mft (raw, json)
Hash identifier:          XOf2pyYE9G88smV1M3GSaGvtFSd1qOqA9l7/ChR8+wU=
Subject key identifier:   A0:B0:03:0D:38:8D:78:2A:74:F4:47:B4:FD:10:CB:34:BA:AE:AD:38
Authority key identifier: E4:8D:DA:12:F7:DB:40:35:94:17:8C:A4:B8:ED:46:E6:62:AF:8E:CC
Certificate issuer:       /CN=F36AA888AR/serialNumber=E48DDA12F7DB403594178CA4B8ED46E662AF8ECC
Certificate serial:       0988
Authority info access:    rsync://rpki.afrinic.net/repository/arin/5I3aEvfbQDWUF4ykuO1G5mKvjsw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36AA888/4B72B378886111E9A00E0863F8AEA228/5I3aEvfbQDWUF4ykuO1G5mKvjsw.mft
Manifest number:          0987
Signing time:             Sat 06 Dec 2025 01:26:55 +0000
Manifest this update:     Sat 06 Dec 2025 01:26:55 +0000
Manifest next update:     Mon 08 Dec 2025 01:26:55 +0000
Files and hashes:         1: 5I3aEvfbQDWUF4ykuO1G5mKvjsw.crl (hash: 8GIcJSBtUjlPka7ItIFvervTEB+QdDLAlPDf2ZQcBRs=)
                          2: 58B26BA4886211E99B31DD63F8AEA228.roa (hash: nvT/Y3DEz1TX+5D/zLT7HQfvvtuHBy4pd0aYSFdPAvg=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36AA888/4B72B378886111E9A00E0863F8AEA228/5I3aEvfbQDWUF4ykuO1G5mKvjsw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36AA888/4B72B378886111E9A00E0863F8AEA228/5I3aEvfbQDWUF4ykuO1G5mKvjsw.mft
                          rsync://rpki.afrinic.net/repository/arin/5I3aEvfbQDWUF4ykuO1G5mKvjsw.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 08 Dec 2025 00:26:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2440 (0x988)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36AA888AR, serialNumber=E48DDA12F7DB403594178CA4B8ED46E662AF8ECC
        Validity
            Not Before: Dec  6 01:26:55 2025 GMT
            Not After : Dec  8 01:26:55 2025 GMT
        Subject: CN=6933865f-5dad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:51:1a:f0:e1:a8:2a:2b:d8:42:a5:fc:12:72:
                    e4:84:0a:b0:6d:81:c0:d5:cf:ac:63:c5:83:c3:be:
                    b8:2a:da:f7:14:fc:51:73:f2:82:59:af:12:c3:95:
                    48:39:8d:4f:7c:d6:d9:c8:cd:2e:24:76:76:52:8c:
                    dc:14:b3:ee:29:9b:31:c6:2b:7e:ce:ad:99:31:d5:
                    10:52:ff:72:79:84:e2:13:cc:1f:50:80:f6:98:96:
                    e3:6d:59:cc:e2:67:98:ca:81:5e:96:ab:a6:26:eb:
                    bc:a3:73:b3:cc:fb:99:65:b1:c4:7b:9f:97:7d:93:
                    31:4c:cf:66:ff:fe:12:d8:3c:b8:f0:23:cc:f1:b7:
                    0f:7c:20:1c:c4:97:e7:b1:2b:7d:8f:2a:e5:68:ea:
                    cd:50:e8:70:07:40:b3:a8:7c:ac:a2:86:0e:94:52:
                    c6:82:51:fa:58:d2:fc:19:83:d9:48:d6:3c:39:ce:
                    77:01:48:42:3e:c9:ad:05:7e:38:07:81:56:68:60:
                    40:7d:e4:f4:7f:5b:21:8e:e3:2f:22:54:06:8d:a7:
                    4b:34:88:05:39:e2:fa:bc:59:6b:66:6c:3a:22:b4:
                    f5:54:8b:bb:8b:ba:f2:97:c4:73:ec:8a:79:9a:21:
                    09:e6:cc:46:49:0e:e5:9b:be:0c:e8:7a:85:5b:7c:
                    7c:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:B0:03:0D:38:8D:78:2A:74:F4:47:B4:FD:10:CB:34:BA:AE:AD:38
            X509v3 Authority Key Identifier:
                keyid:E4:8D:DA:12:F7:DB:40:35:94:17:8C:A4:B8:ED:46:E6:62:AF:8E:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36AA888/4B72B378886111E9A00E0863F8AEA228/5I3aEvfbQDWUF4ykuO1G5mKvjsw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/5I3aEvfbQDWUF4ykuO1G5mKvjsw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36AA888/4B72B378886111E9A00E0863F8AEA228/5I3aEvfbQDWUF4ykuO1G5mKvjsw.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:1a:2e:d0:a6:b3:c3:24:dd:58:e4:f4:24:a2:d0:81:fa:b8:
         23:7a:90:cb:2b:f4:90:41:ba:ce:38:52:50:eb:a1:c2:00:87:
         08:0e:c6:25:ec:75:c0:0a:39:97:15:33:18:9f:06:ca:5c:92:
         79:00:d8:d0:fd:d9:84:df:bb:51:77:db:88:c5:23:7b:ec:3e:
         c1:2d:d4:7f:b3:2a:fd:d5:91:97:c9:7c:2f:34:6f:ea:6f:5d:
         47:68:d2:dc:d0:d7:6b:3a:29:c3:75:72:6a:0b:63:c2:1f:c0:
         f9:bf:d2:3d:66:c9:c9:28:01:0f:4b:a9:49:23:db:71:9d:80:
         6a:b9:e6:ea:07:72:db:86:8b:fc:56:69:a1:c4:3f:67:c9:66:
         25:8a:50:51:68:a2:1d:74:c6:ab:ae:7d:f5:ed:7a:1a:d5:8d:
         f8:bf:c4:ef:3f:98:d5:2a:be:e5:96:be:db:c0:3e:16:c7:6b:
         bb:e6:5b:26:24:99:c9:7e:a8:4c:2c:28:86:9f:6c:c0:d4:55:
         12:79:73:5d:0e:c3:66:26:60:6c:a1:37:d1:6c:89:0c:d4:31:
         a8:a5:ea:c2:33:8d:55:34:f7:46:15:8b:d6:d3:32:b0:84:47:
         2c:f0:6d:64:84:72:c2:f8:8d:53:31:f9:94:e8:c7:44:a1:a9:
         74:02:41:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 01:55:13 2025 by rpki-client