This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36180A1/393C4C903F5A11EF92994170762E951A/7rhFIBSnqgtH8qgONjVBJ-uwQA0.mft
File:                     7rhFIBSnqgtH8qgONjVBJ-uwQA0.mft (raw, json)
Hash identifier:          uRYkecSLwZuVlUeI6kHzXaoj3guU+GBceJcUTTHpwVQ=
Subject key identifier:   7C:0B:D1:D3:D8:6A:DE:DF:BA:7C:20:2C:9E:BE:AC:05:BE:0B:D9:3A
Authority key identifier: EE:B8:45:20:14:A7:AA:0B:47:F2:A8:0E:36:35:41:27:EB:B0:40:0D
Certificate issuer:       /CN=F36180A1AR/serialNumber=EEB8452014A7AA0B47F2A80E36354127EBB0400D
Certificate serial:       021F
Authority info access:    rsync://rpki.afrinic.net/repository/arin/7rhFIBSnqgtH8qgONjVBJ-uwQA0.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36180A1/393C4C903F5A11EF92994170762E951A/7rhFIBSnqgtH8qgONjVBJ-uwQA0.mft
Manifest number:          021D
Signing time:             Sat 20 Dec 2025 04:21:50 +0000
Manifest this update:     Sat 20 Dec 2025 04:21:49 +0000
Manifest next update:     Mon 22 Dec 2025 04:21:49 +0000
Files and hashes:         1: 7rhFIBSnqgtH8qgONjVBJ-uwQA0.crl (hash: XDs3Er8WhUJ3F8RKRc96dB6eJXFQdR13THjJ0r405jw=)
                          2: 125EF2A63F7011EFB90A2881762E951A.roa (hash: CYHaNxXH3G1/sB9APmxu1n3UtTgC5Edc0gfpDVgJNk8=)
                          3: 41A178E4429111EF8883AAAA762E951A.roa (hash: MkpjkL83C02qTlHENSDXSaJZwjQp8E4rGj/mJx7w1Cc=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36180A1/393C4C903F5A11EF92994170762E951A/7rhFIBSnqgtH8qgONjVBJ-uwQA0.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36180A1/393C4C903F5A11EF92994170762E951A/7rhFIBSnqgtH8qgONjVBJ-uwQA0.mft
                          rsync://rpki.afrinic.net/repository/arin/7rhFIBSnqgtH8qgONjVBJ-uwQA0.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 22 Dec 2025 00:26:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 543 (0x21f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36180A1AR, serialNumber=EEB8452014A7AA0B47F2A80E36354127EBB0400D
        Validity
            Not Before: Dec 20 04:21:49 2025 GMT
            Not After : Dec 22 04:21:49 2025 GMT
        Subject: CN=6946245e-ad5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:9a:d9:15:e2:00:db:d8:ea:da:9d:85:c8:ba:
                    58:f4:7b:d8:b0:23:08:d9:04:58:fe:98:f2:a9:e7:
                    b6:3a:03:2c:16:61:87:9c:f3:61:cd:08:9d:4e:25:
                    6e:5d:4b:5f:34:ba:d1:74:ee:17:24:f8:3b:4d:76:
                    e4:44:14:fa:60:db:32:de:47:3d:e4:26:7e:31:c1:
                    7f:4d:db:f4:d2:24:47:ac:78:cc:30:bf:73:05:03:
                    4f:fd:f6:63:7a:92:bc:a0:cb:3b:fe:9c:d6:8e:16:
                    a0:86:87:29:91:45:7b:11:c7:de:14:e5:ec:ea:3b:
                    f3:47:bc:d1:10:0c:2f:1d:43:43:5b:43:d6:8a:1d:
                    fb:30:e4:fc:99:5a:8a:ac:dd:6a:fb:7d:f9:dc:11:
                    95:b2:df:5f:8b:28:52:4c:48:f8:c6:23:77:4f:8f:
                    5a:24:c5:58:28:6c:fa:7a:a4:85:ee:d4:d7:0b:5b:
                    79:a8:69:43:85:11:55:a4:9f:6c:38:fc:70:2e:ec:
                    dc:5e:ae:7d:92:ea:59:d8:c7:c0:48:8e:15:d2:72:
                    bc:87:f0:48:80:da:4d:6f:f9:9b:cf:b4:3e:2f:b4:
                    dd:42:55:07:e1:c9:c2:33:c9:d2:c4:59:5f:09:69:
                    fc:54:5e:02:d7:53:52:b0:37:05:9b:40:eb:76:2c:
                    61:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:0B:D1:D3:D8:6A:DE:DF:BA:7C:20:2C:9E:BE:AC:05:BE:0B:D9:3A
            X509v3 Authority Key Identifier:
                keyid:EE:B8:45:20:14:A7:AA:0B:47:F2:A8:0E:36:35:41:27:EB:B0:40:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36180A1/393C4C903F5A11EF92994170762E951A/7rhFIBSnqgtH8qgONjVBJ-uwQA0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/7rhFIBSnqgtH8qgONjVBJ-uwQA0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36180A1/393C4C903F5A11EF92994170762E951A/7rhFIBSnqgtH8qgONjVBJ-uwQA0.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:4b:f5:42:07:a6:e7:3c:49:cb:e1:b7:ab:44:8e:fa:e7:5b:
         ca:16:99:97:07:43:39:49:da:1e:25:35:bc:a2:79:67:14:d4:
         55:d9:ef:92:27:d8:30:6b:9f:d0:7b:b0:2a:2d:9b:51:09:e2:
         43:fd:ae:91:94:4d:85:c0:77:5f:eb:fd:bf:53:ae:d4:40:15:
         98:82:19:b6:53:03:48:be:3a:b3:c4:e6:d0:43:2b:e6:0c:d3:
         be:f0:5e:a8:18:98:c5:b0:17:75:9e:29:e9:aa:fd:a4:29:80:
         0f:87:b1:ec:36:c8:ca:cb:f3:45:b8:e7:2d:25:8b:23:75:f0:
         15:59:c4:dd:80:da:d6:d1:b8:ee:9f:45:e8:0b:a6:54:80:c4:
         7f:3f:cb:44:ad:a6:59:9d:76:54:ff:6f:36:bc:c6:0c:81:b1:
         8f:a3:6b:48:d0:a4:fe:62:d6:b4:39:f0:52:c8:0f:d3:3c:fc:
         87:75:b9:7d:8d:32:1f:d5:82:81:cb:92:f1:bd:1d:61:35:eb:
         4d:ca:a9:41:75:43:2c:5a:eb:b4:6a:33:a9:80:1c:43:57:74:
         45:0d:94:3d:47:5f:fb:68:17:ae:2c:57:37:2a:90:ae:05:85:
         bf:75:c0:57:74:79:20:b7:8f:f0:e5:98:5b:f8:69:43:f0:23:
         bf:37:38:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 11:18:06 2025 by rpki-client