This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FBB68/EEBD11DE767311EB92548A6DF8AEA228/3e9RyKD_hVBdng5v-gInbCpVrug.mft
File:                     3e9RyKD_hVBdng5v-gInbCpVrug.mft (raw, json)
Hash identifier:          DFlV1ytv4iFAX1ltk25nuYAe8W3W4nvOd6RqSHTPs50=
Subject key identifier:   1B:29:FF:3E:BE:F8:FF:B8:B5:23:F3:EA:21:98:F9:FC:96:FB:29:64
Authority key identifier: DD:EF:51:C8:A0:FF:85:50:5D:9E:0E:6F:FA:02:27:6C:2A:55:AE:E8
Certificate issuer:       /CN=F36FBB68AR/serialNumber=DDEF51C8A0FF85505D9E0E6FFA02276C2A55AEE8
Certificate serial:       071C
Authority info access:    rsync://rpki.afrinic.net/repository/arin/3e9RyKD_hVBdng5v-gInbCpVrug.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36FBB68/EEBD11DE767311EB92548A6DF8AEA228/3e9RyKD_hVBdng5v-gInbCpVrug.mft
Manifest number:          0718
Signing time:             Sat 06 Dec 2025 02:02:35 +0000
Manifest this update:     Sat 06 Dec 2025 02:02:35 +0000
Manifest next update:     Mon 08 Dec 2025 02:02:35 +0000
Files and hashes:         1: 3e9RyKD_hVBdng5v-gInbCpVrug.crl (hash: DP8cP20AehuEETC77+3iXzDj41Q1ra0tqHT/5h84WfI=)
                          2: 8EB8874C767711EB81CF8371F8AEA228.roa (hash: a5Ya8AZMPcr4yo5onV+OXArWF7aJzeoyFelL2j6STfo=)
                          3: A8B2187C767511EBB8015C6FF8AEA228.roa (hash: +55ryPzqgEQMEpzdUbqmX7lkwQdExVhKk9NqHf4i0Lk=)
                          4: 1E3F561E8B1A11EBB0DA3D71F8AEA228.roa (hash: Cpd4zmkYKicudOUgZJe6/OaQ296nySd++X2fdJd/rUU=)
                          5: F8B4E3247D9E11EB83704925F8AEA228.roa (hash: 63CDlb9OzE0Ed+gaeo+vCDqqodWQ+GqMecV9r4cwpCQ=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36FBB68/EEBD11DE767311EB92548A6DF8AEA228/3e9RyKD_hVBdng5v-gInbCpVrug.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36FBB68/EEBD11DE767311EB92548A6DF8AEA228/3e9RyKD_hVBdng5v-gInbCpVrug.mft
                          rsync://rpki.afrinic.net/repository/arin/3e9RyKD_hVBdng5v-gInbCpVrug.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 08 Dec 2025 00:26:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1820 (0x71c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36FBB68AR, serialNumber=DDEF51C8A0FF85505D9E0E6FFA02276C2A55AEE8
        Validity
            Not Before: Dec  6 02:02:35 2025 GMT
            Not After : Dec  8 02:02:35 2025 GMT
        Subject: CN=69338ebb-1218
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:a9:8b:2a:1f:66:ac:81:1b:76:33:29:c3:a8:
                    ef:0c:f2:ec:6e:ac:11:cf:4f:c8:f5:ba:06:3c:5f:
                    44:d7:f0:75:4c:19:2a:c9:4b:48:4f:77:85:ae:c6:
                    39:ee:8e:7f:46:dd:5e:7f:34:f6:aa:a1:b2:38:e4:
                    cb:6e:71:ae:12:53:c3:65:7b:20:e4:cb:01:cc:b1:
                    01:89:18:8b:e7:ba:69:06:40:78:36:c0:82:6c:c3:
                    5d:4b:a5:15:91:d8:38:80:d4:15:3b:cd:86:55:5b:
                    f4:e8:c2:f5:c1:85:02:59:2e:78:b1:be:2b:08:74:
                    bb:14:71:92:6a:d7:fc:29:c2:ea:da:4f:91:c3:70:
                    8c:9c:a7:08:22:39:25:2d:64:da:c0:bc:1a:07:10:
                    18:41:80:71:a9:cc:07:b4:2f:04:18:0e:1c:18:ce:
                    15:37:14:d1:9f:bd:f4:de:fe:de:27:f2:08:9f:c7:
                    37:e4:00:82:e5:1e:92:bf:da:79:39:9a:c0:af:41:
                    d3:4c:53:6f:6f:f2:44:37:2c:9a:d7:e8:10:90:61:
                    f0:e1:22:8a:4e:63:04:82:0d:31:1e:b6:e1:03:8a:
                    5b:4c:69:c8:b8:7e:eb:8b:1e:d8:af:8b:aa:5b:45:
                    e6:22:5f:04:10:6f:76:e4:56:1d:35:cf:84:a0:ad:
                    bd:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:29:FF:3E:BE:F8:FF:B8:B5:23:F3:EA:21:98:F9:FC:96:FB:29:64
            X509v3 Authority Key Identifier:
                keyid:DD:EF:51:C8:A0:FF:85:50:5D:9E:0E:6F:FA:02:27:6C:2A:55:AE:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36FBB68/EEBD11DE767311EB92548A6DF8AEA228/3e9RyKD_hVBdng5v-gInbCpVrug.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/3e9RyKD_hVBdng5v-gInbCpVrug.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FBB68/EEBD11DE767311EB92548A6DF8AEA228/3e9RyKD_hVBdng5v-gInbCpVrug.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:3c:12:c3:f8:0a:2a:ab:a1:ec:c1:b4:05:91:88:8d:cd:19:
         1b:53:dc:bc:fc:61:3a:0e:2b:14:85:67:c3:f2:ce:8a:af:7d:
         d4:cd:9e:30:ef:8f:04:02:73:ab:bb:73:2d:e6:74:99:38:da:
         6b:a7:aa:eb:26:03:ec:f3:93:3b:13:62:ec:5a:27:0f:01:6d:
         2d:18:79:df:a2:3a:28:eb:09:41:c0:59:31:6b:7e:41:33:4b:
         9f:eb:98:5b:2f:3a:34:41:76:0c:83:38:ea:51:88:c5:30:5f:
         87:d7:8f:7d:b0:2e:7e:4a:2b:bb:77:9b:e4:63:6f:d3:58:bb:
         62:ca:da:f9:d7:8e:be:1e:d2:e0:58:77:8c:4f:e5:7e:86:47:
         58:51:87:8a:19:51:67:50:aa:f2:0c:01:04:ef:52:f9:ac:09:
         22:d4:3a:c9:84:7c:b5:2d:15:01:6e:76:f5:14:9b:27:74:b0:
         c0:2c:d8:fc:84:df:d0:74:fc:de:b8:6f:6c:ad:9e:65:51:2e:
         1f:d5:f3:d2:bd:b2:fa:8c:5d:20:97:33:eb:da:1d:8e:a2:22:
         76:78:c6:ff:d2:ae:aa:e6:59:4a:03:a1:0d:fa:c9:58:31:b1:
         db:ff:62:5f:53:57:ea:a1:f0:8d:66:89:a5:d1:3c:6b:91:77:
         69:59:fb:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 14:13:47 2025 by rpki-client