This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36B49FA/B54484521C1C11E69F7C750CF8AEA228/xPPi6r3p45Aa27wxyfJTXN47HG8.mft
File:                     xPPi6r3p45Aa27wxyfJTXN47HG8.mft (raw, json)
Hash identifier:          sNTES7gbQqslJW2rK9N1U5jTkM5xrPHFB3EsG7R8yUw=
Subject key identifier:   0C:28:49:38:1E:95:A8:EB:18:AB:C4:64:9B:AE:38:CC:3E:B0:54:A8
Authority key identifier: C4:F3:E2:EA:BD:E9:E3:90:1A:DB:BC:31:C9:F2:53:5C:DE:3B:1C:6F
Certificate issuer:       /CN=F36B49FAAR/serialNumber=C4F3E2EABDE9E3901ADBBC31C9F2535CDE3B1C6F
Certificate serial:       0DE8
Authority info access:    rsync://rpki.afrinic.net/repository/arin/xPPi6r3p45Aa27wxyfJTXN47HG8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36B49FA/B54484521C1C11E69F7C750CF8AEA228/xPPi6r3p45Aa27wxyfJTXN47HG8.mft
Manifest number:          0DE8
Signing time:             Sat 06 Dec 2025 01:01:43 +0000
Manifest this update:     Sat 06 Dec 2025 01:01:42 +0000
Manifest next update:     Mon 08 Dec 2025 01:01:42 +0000
Files and hashes:         1: xPPi6r3p45Aa27wxyfJTXN47HG8.crl (hash: l0IyiOK2WTZLUdiCRj516KI5oeYb2CsgH8ip3wybvWM=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36B49FA/B54484521C1C11E69F7C750CF8AEA228/xPPi6r3p45Aa27wxyfJTXN47HG8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36B49FA/B54484521C1C11E69F7C750CF8AEA228/xPPi6r3p45Aa27wxyfJTXN47HG8.mft
                          rsync://rpki.afrinic.net/repository/arin/xPPi6r3p45Aa27wxyfJTXN47HG8.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 08 Dec 2025 00:26:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3560 (0xde8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36B49FAAR, serialNumber=C4F3E2EABDE9E3901ADBBC31C9F2535CDE3B1C6F
        Validity
            Not Before: Dec  6 01:01:42 2025 GMT
            Not After : Dec  8 01:01:42 2025 GMT
        Subject: CN=69338077-cf59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:86:77:e9:3e:d1:02:5b:6b:95:b6:f7:83:0d:
                    93:f5:4f:91:1e:2f:f7:34:79:97:03:b9:5c:ee:e9:
                    1d:4a:12:9d:e6:2d:77:b6:9b:04:1e:62:d9:17:05:
                    df:a0:2e:08:ba:c9:c1:f3:af:3c:cb:57:a3:75:d2:
                    bf:33:c8:27:6f:71:db:74:8f:41:29:04:43:59:9f:
                    7d:0a:24:98:ef:73:40:c3:d9:11:91:d1:5d:ce:ac:
                    3d:bf:a0:ab:a4:c5:7a:2e:b0:c1:5f:a1:0b:7c:9d:
                    f7:80:fd:bf:6d:30:05:ee:5f:df:a1:af:29:df:d9:
                    a7:70:20:61:f2:f0:fd:d7:91:91:09:d2:16:07:24:
                    33:c0:6d:fd:84:f7:b4:36:5f:c5:f9:00:38:d3:05:
                    f3:17:46:5c:ea:f7:b2:f3:07:05:48:7c:17:82:2c:
                    1c:3c:bd:b7:de:7a:c9:b0:3d:42:ef:92:64:18:22:
                    5a:6a:d6:65:de:f7:80:95:8c:b0:88:f4:01:97:2d:
                    a5:a8:d0:1a:76:6e:aa:03:d2:7d:23:a0:f6:6f:31:
                    33:c3:e3:54:f6:c1:c3:ce:09:9d:fc:58:3c:2e:f0:
                    1a:67:ef:e5:f5:8e:6d:92:df:84:3a:70:79:0d:1e:
                    71:b6:2b:fb:3b:ac:db:6a:e3:1b:05:49:de:a9:05:
                    bd:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:28:49:38:1E:95:A8:EB:18:AB:C4:64:9B:AE:38:CC:3E:B0:54:A8
            X509v3 Authority Key Identifier:
                keyid:C4:F3:E2:EA:BD:E9:E3:90:1A:DB:BC:31:C9:F2:53:5C:DE:3B:1C:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36B49FA/B54484521C1C11E69F7C750CF8AEA228/xPPi6r3p45Aa27wxyfJTXN47HG8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/xPPi6r3p45Aa27wxyfJTXN47HG8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B49FA/B54484521C1C11E69F7C750CF8AEA228/xPPi6r3p45Aa27wxyfJTXN47HG8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:60:87:b7:04:d6:ad:03:eb:9d:2f:86:09:fe:40:a3:88:47:
         7e:74:9d:a9:13:a4:d4:d4:4a:91:0b:35:09:72:20:22:3a:40:
         65:84:42:74:f5:ca:f8:22:d8:e9:47:f4:2b:99:c6:75:c4:bf:
         3c:6a:01:f3:bd:fe:45:77:10:9a:e0:ac:69:7e:1f:7f:7c:82:
         73:5f:3d:83:89:c5:d5:99:a4:e5:1e:e1:90:e0:56:71:82:69:
         95:29:e1:d0:a8:a4:e1:61:fd:11:62:ea:ea:48:32:a8:2c:59:
         76:30:6b:b1:0c:7d:4c:d7:31:c0:d7:f7:74:61:2f:cd:bf:e7:
         03:38:24:f3:3a:8f:53:2e:91:39:73:66:f0:88:5c:a1:94:e4:
         e9:0f:71:d8:fa:56:24:16:04:e2:e2:d7:84:d5:ec:17:a2:b8:
         64:32:51:b2:3c:04:a2:fb:2e:ba:33:0f:af:85:8b:0e:e3:e2:
         ea:0e:ba:f8:1b:4a:2b:46:f4:65:99:31:26:56:f4:2a:8a:2d:
         e6:b0:de:3f:8e:e1:08:84:c5:e2:9a:5e:de:21:ec:d5:7d:47:
         63:7e:4b:24:75:8b:dc:db:ea:6f:79:85:40:05:d3:ea:11:4b:
         a2:21:64:d6:50:87:fe:a9:49:94:53:29:c6:4f:b7:e6:6f:92:
         62:ea:b6:1e
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgICDegwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QjQ5RkFBUjExMC8GA1UEBRMoQzRGM0UyRUFCREU5RTM5MDFBREJCQzMxQzlGMjUz
NUNERTNCMUM2RjAeFw0yNTEyMDYwMTAxNDJaFw0yNTEyMDgwMTAxNDJaMBgxFjAU
BgNVBAMTDTY5MzM4MDc3LWNmNTkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDhhnfpPtECW2uVtveDDZP1T5EeL/c0eZcDuVzu6R1KEp3mLXe2mwQeYtkX
Bd+gLgi6ycHzrzzLV6N10r8zyCdvcdt0j0EpBENZn30KJJjvc0DD2RGR0V3OrD2/
oKukxXousMFfoQt8nfeA/b9tMAXuX9+hrynf2adwIGHy8P3XkZEJ0hYHJDPAbf2E
97Q2X8X5ADjTBfMXRlzq97LzBwVIfBeCLBw8vbfeesmwPULvkmQYIlpq1mXe94CV
jLCI9AGXLaWo0Bp2bqoD0n0joPZvMTPD41T2wcPOCZ38WDwu8Bpn7+X1jm2S34Q6
cHkNHnG2K/s7rNtq4xsFSd6pBb2vAgMBAAGjggK1MIICsTAdBgNVHQ4EFgQUDChJ
OB6VqOsYq8Rkm644zD6wVKgwHwYDVR0jBBgwFoAUxPPi6r3p45Aa27wxyfJTXN47
HG8wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkI0OUZBL0I1NDQ4NDUyMUMxQzExRTY5RjdDNzUwQ0Y4QUVBMjI4L3hQUGk2
cjNwNDVBYTI3d3h5ZkpUWE40N0hHOC5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L3hQUGk2cjNwNDVBYTI3d3h5ZkpUWE40N0hHOC5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEFBQcw
C4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl
cG9zaXRvcnkvRjM2QjQ5RkEvQjU0NDg0NTIxQzFDMTFFNjlGN0M3NTBDRjhBRUEy
MjgveFBQaTZyM3A0NUFhMjd3eHlmSlRYTjQ3SEc4Lm1mdDA1BggrBgEFBQcwDYYp
aHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA
AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAwYIe3BNatA+udL4YJ/kCjiEd+dJ2pE6TU
1EqRCzUJciAiOkBlhEJ09cr4ItjpR/QrmcZ1xL88agHzvf5FdxCa4Kxpfh9/fIJz
Xz2DicXVmaTlHuGQ4FZxgmmVKeHQqKThYf0RYurqSDKoLFl2MGuxDH1M1zHA1/d0
YS/Nv+cDOCTzOo9TLpE5c2bwiFyhlOTpD3HY+lYkFgTi4teE1ewXorhkMlGyPASi
+y66Mw+vhYsO4+LqDrr4G0orRvRlmTEmVvQqii3msN4/juEIhMXiml7eIezVfUdj
fkskdYvc2+pveYVABdPqEUuiIWTWUIf+qUmUUynGT7fmb5Ji6rYe
-----END CERTIFICATE-----
Generated at Sun Dec 7 00:59:09 2025 by rpki-client