This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36B95DE/1138F8B2CA5E11EA93FAF884F8AEA228/PuGjQpUbwSAiYnHzC4UKh356oZs.mft
File:                     PuGjQpUbwSAiYnHzC4UKh356oZs.mft (raw, json)
Hash identifier:          r6ds/9LFgK1h/uDlIrppejncqSm8TTa2b2k7jgfB9x0=
Subject key identifier:   36:6F:0E:6F:3D:68:D2:E6:16:0A:32:90:A3:D5:9E:84:CB:38:3B:BF
Authority key identifier: 3E:E1:A3:42:95:1B:C1:20:22:62:71:F3:0B:85:0A:87:7E:7A:A1:9B
Certificate issuer:       /CN=F36B95DEAR/serialNumber=3EE1A342951BC120226271F30B850A877E7AA19B
Certificate serial:       07E7
Authority info access:    rsync://rpki.afrinic.net/repository/arin/PuGjQpUbwSAiYnHzC4UKh356oZs.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36B95DE/1138F8B2CA5E11EA93FAF884F8AEA228/PuGjQpUbwSAiYnHzC4UKh356oZs.mft
Manifest number:          07E4
Signing time:             Sat 06 Dec 2025 01:53:16 +0000
Manifest this update:     Sat 06 Dec 2025 01:53:15 +0000
Manifest next update:     Mon 08 Dec 2025 01:53:15 +0000
Files and hashes:         1: PuGjQpUbwSAiYnHzC4UKh356oZs.crl (hash: hMZW8vjtMF5IIVh3yUU3ldqbFZA5NW1JsSwuGcpCz9M=)
                          2: 2AAAA51ACA5F11EAB07F4086F8AEA228.roa (hash: 9lpPgbRATZcc3ZHLRlyfVXyO2KMqQ5Z59ZWuFR9owTA=)
                          3: D0C0ABF8CA5E11EAB567CE85F8AEA228.roa (hash: ynXcFOQd3R7EbSd50GZihRiiSJvK2sTmwunIuzMYoks=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36B95DE/1138F8B2CA5E11EA93FAF884F8AEA228/PuGjQpUbwSAiYnHzC4UKh356oZs.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36B95DE/1138F8B2CA5E11EA93FAF884F8AEA228/PuGjQpUbwSAiYnHzC4UKh356oZs.mft
                          rsync://rpki.afrinic.net/repository/arin/PuGjQpUbwSAiYnHzC4UKh356oZs.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 08 Dec 2025 00:26:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2023 (0x7e7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36B95DEAR, serialNumber=3EE1A342951BC120226271F30B850A877E7AA19B
        Validity
            Not Before: Dec  6 01:53:15 2025 GMT
            Not After : Dec  8 01:53:15 2025 GMT
        Subject: CN=69338c8c-5580
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:5d:53:8a:7e:37:69:3e:27:d5:e5:1b:b3:d6:
                    6f:d7:80:0a:d7:9b:bd:1e:8b:7a:37:12:df:f2:a9:
                    f7:fe:87:a1:d8:c5:62:59:ef:c5:eb:8f:39:fd:57:
                    42:85:0b:b4:f3:1e:f0:4a:b3:47:f2:cb:7d:da:b0:
                    59:62:bb:4a:ef:35:23:77:3c:fc:b1:80:e4:ae:1d:
                    01:65:83:30:96:74:63:34:44:39:be:83:ac:d6:e9:
                    ed:c8:2f:e4:84:f9:a5:c3:b9:15:1c:a1:d8:fb:e4:
                    b9:7f:b0:c0:ae:38:1e:9e:30:ab:31:96:c4:68:fd:
                    a8:20:d0:ae:b6:a3:5d:88:48:cb:de:14:01:ed:bf:
                    07:10:92:57:d5:bd:fc:5b:0c:db:93:2e:23:7a:fb:
                    d6:6c:02:2b:78:e4:de:4b:bb:c9:18:db:94:37:2c:
                    84:d1:20:53:1d:0e:31:4c:82:a0:16:a1:d7:e3:ba:
                    09:1b:98:44:53:58:f9:82:c7:5a:2b:83:1e:78:60:
                    2c:55:fa:2a:29:9e:64:16:68:5f:dd:bb:3d:dc:70:
                    8e:00:cb:ae:ce:03:7f:42:1f:01:52:5d:75:a6:f9:
                    b0:1f:86:94:8f:f8:bc:65:22:a0:f6:64:94:5a:63:
                    0d:c3:12:fd:1d:05:6d:6f:a8:a5:ea:6d:1b:71:79:
                    ce:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:6F:0E:6F:3D:68:D2:E6:16:0A:32:90:A3:D5:9E:84:CB:38:3B:BF
            X509v3 Authority Key Identifier:
                keyid:3E:E1:A3:42:95:1B:C1:20:22:62:71:F3:0B:85:0A:87:7E:7A:A1:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36B95DE/1138F8B2CA5E11EA93FAF884F8AEA228/PuGjQpUbwSAiYnHzC4UKh356oZs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/PuGjQpUbwSAiYnHzC4UKh356oZs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B95DE/1138F8B2CA5E11EA93FAF884F8AEA228/PuGjQpUbwSAiYnHzC4UKh356oZs.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:6e:b6:67:9c:14:08:b9:43:2f:1e:a1:ca:7b:cc:43:84:b8:
         e9:52:8e:bb:79:17:6e:d4:28:08:a9:bb:5f:51:d0:4a:29:66:
         78:81:0b:6f:63:8b:5b:bc:ea:0a:5a:3e:33:c9:e0:e7:71:6b:
         a3:e5:8e:35:d7:a3:d7:5b:d2:6c:9c:27:ad:d1:16:53:7c:83:
         9e:e4:58:18:27:0a:ec:77:40:69:bc:f5:72:85:1e:85:30:4b:
         c2:e5:fc:c4:51:01:53:83:ce:49:94:88:4b:91:c1:88:25:ab:
         93:66:45:c5:da:26:a2:3a:41:16:84:10:95:ea:fe:a8:11:c5:
         3b:3c:96:de:5e:5b:4c:1d:c9:ae:b1:96:61:04:6b:16:d3:7e:
         b4:c4:0d:36:be:0d:f1:d2:7d:30:18:ee:85:67:55:b3:76:b0:
         2e:c4:d0:9f:ba:72:c9:10:f7:c6:d1:41:7f:08:60:56:3f:a7:
         49:7f:57:dc:b9:2f:84:e1:bf:38:88:a9:3b:58:08:13:33:ed:
         a9:78:2e:c0:1b:86:32:69:45:ab:5c:e9:18:47:60:a7:ae:66:
         2d:7e:4a:c4:30:4e:33:38:46:c8:ce:0c:f2:21:ba:7a:d8:1d:
         fe:ce:56:19:bc:c8:b3:66:cd:06:9b:b6:00:d7:40:0a:8e:b6:
         01:d6:ed:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 01:54:32 2025 by rpki-client