This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36AC63A/0A48C3D240C311EEBF0E47434AD9E6FC/XVF78Pc5Gfdta8kSUmnO62DdUyw.mft
File:                     XVF78Pc5Gfdta8kSUmnO62DdUyw.mft (raw, json)
Hash identifier:          Pf5GzS9Bwm7mb7cFIFCcWlzFjUIogwxVUpwIokfuUMA=
Subject key identifier:   30:D3:F8:84:76:37:32:84:27:91:CB:1B:C7:2F:54:32:22:EC:56:36
Authority key identifier: 5D:51:7B:F0:F7:39:19:F7:6D:6B:C9:12:52:69:CE:EB:60:DD:53:2C
Certificate issuer:       /CN=F36AC63AAR/serialNumber=5D517BF0F73919F76D6BC9125269CEEB60DD532C
Certificate serial:       036C
Authority info access:    rsync://rpki.afrinic.net/repository/arin/XVF78Pc5Gfdta8kSUmnO62DdUyw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36AC63A/0A48C3D240C311EEBF0E47434AD9E6FC/XVF78Pc5Gfdta8kSUmnO62DdUyw.mft
Manifest number:          0368
Signing time:             Sat 06 Dec 2025 03:42:57 +0000
Manifest this update:     Sat 06 Dec 2025 03:42:56 +0000
Manifest next update:     Mon 08 Dec 2025 03:42:56 +0000
Files and hashes:         1: XVF78Pc5Gfdta8kSUmnO62DdUyw.crl (hash: YFWBGAl48db7L1l/RR2/f6/5U9I8QiHAaPzyW62t4so=)
                          2: 698E9F34419411EEACB6225E4AD9E6FC.roa (hash: Do8surr/Om2q4tT9UI+z5gRxR2ztOA+6DaMkNjqE0sI=)
                          3: 2848E24A419F11EE84EBC77E4AD9E6FC.roa (hash: 31vEi8mw6ILLVWMlSZQg7FufWrxLwP4Iw+HRKtKDgR0=)
                          4: B47043E640C611EE86E5AE4E4AD9E6FC.roa (hash: UWusm55Cxzo56WDe90pWaCjCCJ7TZM8kcbllrJbesr4=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36AC63A/0A48C3D240C311EEBF0E47434AD9E6FC/XVF78Pc5Gfdta8kSUmnO62DdUyw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36AC63A/0A48C3D240C311EEBF0E47434AD9E6FC/XVF78Pc5Gfdta8kSUmnO62DdUyw.mft
                          rsync://rpki.afrinic.net/repository/arin/XVF78Pc5Gfdta8kSUmnO62DdUyw.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 08 Dec 2025 00:26:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 876 (0x36c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36AC63AAR, serialNumber=5D517BF0F73919F76D6BC9125269CEEB60DD532C
        Validity
            Not Before: Dec  6 03:42:56 2025 GMT
            Not After : Dec  8 03:42:56 2025 GMT
        Subject: CN=6933a641-bc65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:cc:99:a0:30:d6:11:5d:30:5f:ad:6a:30:f1:
                    80:db:db:06:fc:f3:2d:67:5b:20:02:f7:1b:86:68:
                    35:f4:51:91:20:0a:37:fe:e7:9b:6a:d2:31:b2:14:
                    7d:1c:e0:95:2f:e6:78:50:6a:6d:a3:b9:bb:94:20:
                    4f:17:71:d5:64:dc:51:04:4d:36:38:76:9f:e7:e5:
                    f3:77:6f:fc:34:d8:d0:23:a9:b7:20:83:68:ea:ed:
                    3f:6c:b2:0c:43:af:7e:35:80:62:7e:59:2b:81:40:
                    97:38:40:b6:ed:cb:44:6d:d3:2f:a3:07:36:26:4a:
                    a4:b7:bb:83:d3:92:7b:51:e1:aa:fa:2e:02:61:0c:
                    11:d2:c9:34:00:95:67:05:60:e8:8b:9f:7c:de:1d:
                    fb:3f:d8:07:1c:3c:d4:a5:7f:5b:36:39:39:0d:9c:
                    a7:df:eb:9f:84:e3:41:fb:33:51:08:f2:8a:22:c1:
                    d1:4f:c8:46:57:f2:60:e3:a2:8a:52:4f:67:65:16:
                    a0:87:a1:2e:ea:ce:42:1d:79:25:d0:1e:46:c4:be:
                    4c:44:e1:70:62:24:99:0b:b5:b8:25:28:c9:d3:95:
                    50:22:c6:6f:4d:e5:09:7a:c0:3d:0d:c6:39:a4:58:
                    35:19:94:9d:c7:f8:71:a5:e7:8d:51:c9:af:72:3b:
                    67:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:D3:F8:84:76:37:32:84:27:91:CB:1B:C7:2F:54:32:22:EC:56:36
            X509v3 Authority Key Identifier:
                keyid:5D:51:7B:F0:F7:39:19:F7:6D:6B:C9:12:52:69:CE:EB:60:DD:53:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36AC63A/0A48C3D240C311EEBF0E47434AD9E6FC/XVF78Pc5Gfdta8kSUmnO62DdUyw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/XVF78Pc5Gfdta8kSUmnO62DdUyw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36AC63A/0A48C3D240C311EEBF0E47434AD9E6FC/XVF78Pc5Gfdta8kSUmnO62DdUyw.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:2f:61:eb:ae:94:ff:88:14:3f:25:aa:72:7b:1b:2e:8b:17:
         9c:5c:b1:e8:83:05:2c:fe:a8:21:33:1c:a1:fd:3c:50:39:58:
         a2:c4:81:74:4f:1f:61:eb:42:92:ab:44:e7:44:de:5a:80:b5:
         48:c3:a8:3f:0a:28:6f:4f:06:1b:b5:f3:fd:65:35:46:4c:23:
         4d:64:72:53:7b:ef:59:5b:0c:28:76:6f:bb:4b:2e:6c:4d:03:
         5d:ca:11:4d:51:a9:5a:17:f3:00:f9:c5:1e:b7:85:3d:db:e1:
         fb:86:c5:bb:44:8c:09:d2:91:e7:5b:54:74:e4:b2:9a:f6:0b:
         4d:6b:a7:0d:f7:63:36:96:3c:48:7d:59:a1:11:f8:7e:da:90:
         a9:7a:7f:02:5d:19:0d:bd:18:42:d1:55:1d:6a:66:81:b3:07:
         77:ff:6f:f2:09:ae:bd:6e:56:6d:1d:67:f9:4b:cc:ac:cb:1c:
         5a:8a:71:cb:63:a2:90:53:f7:6c:cd:2e:f7:86:04:6b:18:d8:
         7c:f4:da:d8:ab:c9:b5:f1:3a:cb:f6:5c:8d:a0:23:1c:4e:1a:
         bb:2a:30:77:1c:35:f5:ba:dc:1c:2c:94:4f:7f:9a:02:0a:bd:
         c0:a3:15:32:b6:a9:25:f9:20:3c:f3:ec:84:f3:94:61:7f:c2:
         7c:9c:57:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 00:38:29 2025 by rpki-client