This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36EEB6B/142F9550DCDB11EFACCA1A7A762E951A/-0jt8CFBI-P1CPl-PyqK-V2JNXk.mft
File:                     -0jt8CFBI-P1CPl-PyqK-V2JNXk.mft (raw, json)
Hash identifier:          PZ2dvTG53cpiecioDl7j5UgFPImBZh4GWgyxYDNxREw=
Subject key identifier:   E7:C0:53:9E:B2:C6:CF:97:60:51:C6:15:E8:57:EE:62:B0:B4:FD:AE
Authority key identifier: FB:48:ED:F0:21:41:23:E3:F5:08:F9:7E:3F:2A:8A:F9:5D:89:35:79
Certificate issuer:       /CN=F36EEB6BAR/serialNumber=FB48EDF0214123E3F508F97E3F2A8AF95D893579
Certificate serial:       0142
Authority info access:    rsync://rpki.afrinic.net/repository/arin/-0jt8CFBI-P1CPl-PyqK-V2JNXk.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36EEB6B/142F9550DCDB11EFACCA1A7A762E951A/-0jt8CFBI-P1CPl-PyqK-V2JNXk.mft
Manifest number:          0141
Signing time:             Sat 06 Dec 2025 04:51:03 +0000
Manifest this update:     Sat 06 Dec 2025 04:51:03 +0000
Manifest next update:     Mon 08 Dec 2025 04:51:03 +0000
Files and hashes:         1: -0jt8CFBI-P1CPl-PyqK-V2JNXk.crl (hash: nqcBxXiO04AB+JQHJ/0tXNZzXzqUHJgX4ClsLIX3VOU=)
                          2: 6DA243DEDCE111EF81D2DCA3762E951A.roa (hash: WNGwoowengyDdO9xPLt8TfFNLhgBtMLoD0A1CFD7WaM=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36EEB6B/142F9550DCDB11EFACCA1A7A762E951A/-0jt8CFBI-P1CPl-PyqK-V2JNXk.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36EEB6B/142F9550DCDB11EFACCA1A7A762E951A/-0jt8CFBI-P1CPl-PyqK-V2JNXk.mft
                          rsync://rpki.afrinic.net/repository/arin/-0jt8CFBI-P1CPl-PyqK-V2JNXk.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 08 Dec 2025 04:51:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 322 (0x142)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36EEB6BAR, serialNumber=FB48EDF0214123E3F508F97E3F2A8AF95D893579
        Validity
            Not Before: Dec  6 04:51:03 2025 GMT
            Not After : Dec  8 04:51:03 2025 GMT
        Subject: CN=6933b637-f4dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:49:ac:9d:88:7e:dc:d7:95:c3:0c:10:c0:d3:
                    7e:ff:70:5c:a3:56:35:80:a6:8c:be:33:67:6e:3f:
                    ef:42:5a:b4:f6:00:a9:44:8e:1d:34:66:e3:f3:3d:
                    59:5e:4a:30:3f:d3:42:24:cd:0e:32:66:c8:eb:54:
                    be:f1:d3:1b:e7:0f:b7:3f:13:e1:72:3e:f3:d3:e9:
                    e1:e7:c6:1e:6a:21:72:a5:83:d7:be:b7:c2:f9:60:
                    ea:43:56:cd:4c:1c:df:4f:db:f9:08:3f:d0:3f:aa:
                    e9:e4:0a:e1:3f:f5:ed:8e:34:bc:64:f2:53:61:a8:
                    05:51:1d:50:37:35:87:44:03:26:6b:40:57:67:60:
                    dd:49:2f:c7:88:13:3a:a2:38:fa:7c:6e:03:4e:ba:
                    d2:9c:70:81:3f:bb:87:2b:15:c7:81:0f:a0:ca:74:
                    32:5e:db:b3:aa:d9:5e:6e:d4:de:19:a1:5b:99:af:
                    d8:75:cf:6d:13:5a:26:56:d8:0c:06:6d:03:56:03:
                    e4:13:35:03:71:68:2c:96:a3:26:d6:c7:9c:0d:be:
                    f1:4d:0c:07:c0:19:b7:1f:c3:4b:0e:7f:13:ab:f3:
                    e5:16:0a:fe:c1:1d:88:19:7b:ca:e1:d6:44:8e:d9:
                    80:cd:55:07:91:08:70:2d:43:6f:1c:3b:91:57:80:
                    57:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:C0:53:9E:B2:C6:CF:97:60:51:C6:15:E8:57:EE:62:B0:B4:FD:AE
            X509v3 Authority Key Identifier:
                keyid:FB:48:ED:F0:21:41:23:E3:F5:08:F9:7E:3F:2A:8A:F9:5D:89:35:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36EEB6B/142F9550DCDB11EFACCA1A7A762E951A/-0jt8CFBI-P1CPl-PyqK-V2JNXk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/-0jt8CFBI-P1CPl-PyqK-V2JNXk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36EEB6B/142F9550DCDB11EFACCA1A7A762E951A/-0jt8CFBI-P1CPl-PyqK-V2JNXk.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:07:dc:ff:45:f3:aa:99:1a:93:4d:76:20:bc:7e:b4:f2:be:
         cb:8d:8b:66:8f:d9:3b:d9:18:bc:37:91:08:38:5c:00:69:ca:
         2a:76:ed:16:76:9e:c2:b8:00:ba:34:5b:c0:cd:70:30:5c:86:
         37:b4:11:73:ba:e6:f6:d0:2e:81:97:9d:ad:7f:2b:75:1f:59:
         33:a1:b6:92:3b:52:2c:21:8f:bc:fc:95:dc:af:e3:6e:7c:75:
         53:53:b1:f6:98:77:00:ab:43:c5:ca:b8:45:53:88:5a:83:7f:
         10:57:06:99:f4:7a:9b:2e:e1:d8:e0:e3:28:87:49:67:ad:f7:
         e7:78:5e:67:35:8f:7a:47:41:fd:56:a7:e5:10:23:9d:cd:c0:
         cf:76:22:ae:df:78:a8:9b:bd:14:65:4a:c3:dd:31:50:5d:24:
         17:3a:d7:8d:92:ac:b0:51:bd:c9:a8:c7:bc:76:0c:3f:a6:78:
         c7:77:0b:3f:b1:49:d8:45:1d:4e:e9:0d:0b:e9:7d:2b:29:98:
         1b:49:fd:de:2c:5a:c6:78:8f:12:cb:c8:00:8d:56:ed:f6:f8:
         8c:11:47:88:84:d0:8a:6c:ac:26:39:44:19:45:a6:cd:68:c5:
         13:88:20:2e:61:3f:23:f1:a7:b7:cd:78:39:b8:85:81:c3:fc:
         8c:7d:82:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 06:17:57 2025 by rpki-client