This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36B5EE7/01510A006B9111F0AF55F681DAE4EC9C/Z1y6S1C9XOiYRy1VTxcEnL3sBDk.mft
File:                     Z1y6S1C9XOiYRy1VTxcEnL3sBDk.mft (raw, json)
Hash identifier:          Ymo1aPV9qvg4DXhDXz5vfRFlRbirucPBSvW9LU3I2lw=
Subject key identifier:   09:3E:6E:A6:FF:B7:73:AC:95:43:C4:B1:7C:26:D0:69:C1:0F:C7:E3
Authority key identifier: 67:5C:BA:4B:50:BD:5C:E8:98:47:2D:55:4F:17:04:9C:BD:EC:04:39
Certificate issuer:       /CN=F36B5EE7AR/serialNumber=675CBA4B50BD5CE898472D554F17049CBDEC0439
Certificate serial:       89
Authority info access:    rsync://rpki.afrinic.net/repository/arin/Z1y6S1C9XOiYRy1VTxcEnL3sBDk.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36B5EE7/01510A006B9111F0AF55F681DAE4EC9C/Z1y6S1C9XOiYRy1VTxcEnL3sBDk.mft
Manifest number:          88
Signing time:             Sat 06 Dec 2025 05:08:16 +0000
Manifest this update:     Sat 06 Dec 2025 05:08:15 +0000
Manifest next update:     Mon 08 Dec 2025 05:08:15 +0000
Files and hashes:         1: Z1y6S1C9XOiYRy1VTxcEnL3sBDk.crl (hash: GI9rTeeCVh5lEhx5xG8sa4ES2MIwefV57Y6+Cthy0Vw=)
                          2: 38D8D2366B9211F095FD868ADAE4EC9C.roa (hash: QAj9ZVXFClZ+xgA1S3DzLLKJ/tdZw+gURdKUv7+f/hc=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36B5EE7/01510A006B9111F0AF55F681DAE4EC9C/Z1y6S1C9XOiYRy1VTxcEnL3sBDk.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36B5EE7/01510A006B9111F0AF55F681DAE4EC9C/Z1y6S1C9XOiYRy1VTxcEnL3sBDk.mft
                          rsync://rpki.afrinic.net/repository/arin/Z1y6S1C9XOiYRy1VTxcEnL3sBDk.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 08 Dec 2025 00:26:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 137 (0x89)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36B5EE7AR, serialNumber=675CBA4B50BD5CE898472D554F17049CBDEC0439
        Validity
            Not Before: Dec  6 05:08:15 2025 GMT
            Not After : Dec  8 05:08:15 2025 GMT
        Subject: CN=6933ba40-a80a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:ed:39:c6:de:d9:87:a0:fd:b0:21:2c:5c:ba:
                    23:0f:30:3e:38:ab:b9:19:8d:7c:3c:af:0c:ec:e8:
                    6b:ca:87:8d:02:83:5a:ce:f8:a7:a6:2a:7c:1a:c4:
                    d9:25:f6:fc:40:dd:43:b4:07:04:ae:8b:5f:48:d2:
                    7b:51:cc:49:3a:e1:27:81:67:0b:44:73:5a:05:a7:
                    16:ab:9a:9e:e5:d4:5b:1d:31:69:4c:a5:26:70:27:
                    32:4d:b1:32:24:b2:cb:ab:f2:a2:08:1a:7b:fa:ca:
                    24:0e:4d:55:d6:b0:b2:46:7a:48:74:4a:cc:25:79:
                    97:05:e6:6d:cc:86:92:3b:62:8a:1c:c7:f4:47:0c:
                    5f:32:3e:78:45:11:ae:87:3e:ef:03:dd:c0:42:22:
                    58:7a:f1:14:3c:53:6e:60:5b:1a:b5:f6:34:3b:89:
                    d5:29:c1:e5:d9:a0:98:16:f2:a1:6e:6b:8b:92:29:
                    3d:5f:ef:63:e3:0c:19:e3:d7:3d:8d:57:88:19:99:
                    49:e8:ad:9a:71:4e:38:e0:5a:ab:ec:18:36:be:99:
                    6a:0d:c9:15:10:0d:82:37:9a:4f:da:b1:79:57:cc:
                    eb:d0:20:c1:87:e4:72:60:ad:2a:32:26:eb:4d:25:
                    14:f5:85:53:54:0c:db:01:e7:91:38:17:10:15:6b:
                    a3:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:3E:6E:A6:FF:B7:73:AC:95:43:C4:B1:7C:26:D0:69:C1:0F:C7:E3
            X509v3 Authority Key Identifier:
                keyid:67:5C:BA:4B:50:BD:5C:E8:98:47:2D:55:4F:17:04:9C:BD:EC:04:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36B5EE7/01510A006B9111F0AF55F681DAE4EC9C/Z1y6S1C9XOiYRy1VTxcEnL3sBDk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/Z1y6S1C9XOiYRy1VTxcEnL3sBDk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B5EE7/01510A006B9111F0AF55F681DAE4EC9C/Z1y6S1C9XOiYRy1VTxcEnL3sBDk.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:fa:36:e7:97:0b:41:f2:dd:bf:d7:00:fa:3f:ff:1d:ce:c9:
         fe:82:39:36:b8:40:26:4f:7d:48:69:9c:57:71:7f:39:04:33:
         eb:0f:e2:45:bf:8e:74:9d:40:6d:b3:3d:eb:e8:48:34:45:78:
         9c:a8:d9:0c:b5:7e:43:32:b8:04:2c:07:d1:e2:af:2e:3a:1f:
         e1:8b:ee:84:61:b7:8c:fc:e5:df:b8:39:37:79:47:c9:e0:ca:
         8f:1c:68:1a:3e:ab:8f:93:dd:48:21:5e:24:4c:9e:4f:3a:60:
         55:b9:9b:18:12:3e:4e:78:4d:c2:38:6a:f9:43:1d:fa:b6:2b:
         b3:18:26:55:8c:49:42:f8:d5:46:a5:a4:16:21:0a:63:79:4b:
         2b:39:4f:c2:57:3c:e2:75:cf:ac:a1:1b:18:fc:09:c1:7c:12:
         69:14:27:27:ac:75:cb:d4:2f:66:b9:b3:56:da:90:03:da:1d:
         9c:0b:ca:2c:1f:aa:78:d7:a3:4d:53:71:38:2a:13:c5:3c:71:
         9d:c4:1a:31:4d:31:fd:72:59:87:70:1a:86:4c:e7:84:37:82:
         34:cd:89:e6:08:7d:e7:ed:98:14:5a:59:a1:4c:33:4f:37:2c:
         ee:6b:4b:f4:a5:3b:64:96:c7:45:0a:64:1d:af:a7:ab:7e:fb:
         8f:88:4c:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 16:20:53 2025 by rpki-client