This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F361D299/9D80DF78C85B11E6B829DA67F8AEA228/9oceOJrqQ9-1MdFNS_bAEdOm1IA.mft
File:                     9oceOJrqQ9-1MdFNS_bAEdOm1IA.mft (raw, json)
Hash identifier:          XjOS+QpCgChiUewjcDXA9NOUhJL43Q8BpvMx5Llc/Kg=
Subject key identifier:   6D:93:52:92:C9:1A:22:D3:88:62:4E:0D:69:ED:DA:A2:B7:4C:26:D8
Authority key identifier: F6:87:1E:38:9A:EA:43:DF:B5:31:D1:4D:4B:F6:C0:11:D3:A6:D4:80
Certificate issuer:       /CN=F361D299AR/serialNumber=F6871E389AEA43DFB531D14D4BF6C011D3A6D480
Certificate serial:       0D26
Authority info access:    rsync://rpki.afrinic.net/repository/arin/9oceOJrqQ9-1MdFNS_bAEdOm1IA.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F361D299/9D80DF78C85B11E6B829DA67F8AEA228/9oceOJrqQ9-1MdFNS_bAEdOm1IA.mft
Manifest number:          0D37
Signing time:             Sun 21 Dec 2025 01:06:52 +0000
Manifest this update:     Sun 21 Dec 2025 01:06:51 +0000
Manifest next update:     Tue 23 Dec 2025 01:06:51 +0000
Files and hashes:         1: 9oceOJrqQ9-1MdFNS_bAEdOm1IA.crl (hash: Ffkkm5gcLi9ngPVGjRrqrmc9K+c96SZE2/+8vhcgx6g=)
                          2: 9602703EF4F511EFB099CDB5762E951A.roa (hash: qISfxBRfXwveVBfmScYlezjIVFsZHVW0rkfxNlst1oA=)
                          3: 0809CD56F2A511EF9A1CF353762E951A.roa (hash: 4iGumIvcUo97EFB8blys/rxgOUPw+Tx3jCeD20ZEIcg=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F361D299/9D80DF78C85B11E6B829DA67F8AEA228/9oceOJrqQ9-1MdFNS_bAEdOm1IA.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F361D299/9D80DF78C85B11E6B829DA67F8AEA228/9oceOJrqQ9-1MdFNS_bAEdOm1IA.mft
                          rsync://rpki.afrinic.net/repository/arin/9oceOJrqQ9-1MdFNS_bAEdOm1IA.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 23 Dec 2025 00:26:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3366 (0xd26)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F361D299AR, serialNumber=F6871E389AEA43DFB531D14D4BF6C011D3A6D480
        Validity
            Not Before: Dec 21 01:06:51 2025 GMT
            Not After : Dec 23 01:06:51 2025 GMT
        Subject: CN=6947482b-a007
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:e5:df:13:77:72:13:be:09:39:72:bb:fd:50:
                    93:b4:41:65:f9:06:20:85:75:1c:28:fd:05:7d:29:
                    eb:84:31:cb:c7:8f:3a:36:d6:e5:08:c7:01:58:4f:
                    78:57:48:55:40:2c:d6:fd:0a:93:35:a1:eb:59:22:
                    88:b3:f0:66:5e:ef:1e:25:04:21:af:68:c5:1f:61:
                    88:d1:0b:74:51:c0:9e:ec:26:d1:c8:26:f3:9e:5f:
                    cf:b4:63:12:1e:7a:b9:77:49:f2:f8:b6:bb:e5:c8:
                    2b:e6:82:7b:7f:2e:63:35:b6:a3:73:01:ce:22:c4:
                    1b:6b:92:ec:45:a1:f7:66:04:bf:e8:70:e1:ea:0d:
                    ac:9c:d3:58:8c:4a:89:75:96:27:5b:bf:2c:17:22:
                    0f:a4:e5:3c:05:32:75:ba:60:70:fc:0b:8e:76:01:
                    e0:e9:b0:07:34:29:ff:14:98:cd:2f:d2:f1:18:e1:
                    d9:aa:68:e9:e6:c8:44:fa:9a:40:57:33:03:1d:1f:
                    21:84:68:1a:ac:64:54:a6:9c:01:7b:c9:a6:8b:0e:
                    fe:89:5b:dd:d9:63:96:cf:1b:cf:23:ab:c9:97:fb:
                    2c:8e:84:d6:ec:67:b4:7f:e9:f5:75:17:cc:a2:b6:
                    70:9f:6a:6e:51:a5:51:13:17:6d:bf:e6:94:2e:4b:
                    8b:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:93:52:92:C9:1A:22:D3:88:62:4E:0D:69:ED:DA:A2:B7:4C:26:D8
            X509v3 Authority Key Identifier:
                keyid:F6:87:1E:38:9A:EA:43:DF:B5:31:D1:4D:4B:F6:C0:11:D3:A6:D4:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F361D299/9D80DF78C85B11E6B829DA67F8AEA228/9oceOJrqQ9-1MdFNS_bAEdOm1IA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/9oceOJrqQ9-1MdFNS_bAEdOm1IA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F361D299/9D80DF78C85B11E6B829DA67F8AEA228/9oceOJrqQ9-1MdFNS_bAEdOm1IA.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:a1:d1:78:da:c8:b3:bf:e0:30:7d:34:28:84:d9:84:a8:83:
         36:3b:61:c6:36:7b:88:a5:11:d9:9f:de:39:c3:3d:87:94:a5:
         35:0e:48:cd:3b:8c:46:64:67:b2:f3:93:f0:36:53:1e:a7:88:
         a4:57:e0:99:51:4c:66:6c:d0:64:b7:1b:9c:3a:87:6d:b8:37:
         67:32:3f:ce:9f:45:6d:4e:6f:9e:8f:2f:86:30:de:c2:bc:e4:
         ab:2e:a7:f4:bb:37:c9:ed:72:6e:df:d6:ab:f1:e7:24:9e:db:
         dd:f7:22:cd:cd:08:03:b3:0d:da:ce:e0:4d:cb:97:ba:b1:29:
         b6:48:7e:a9:a7:b0:d7:a4:98:ca:e4:35:91:fb:4d:b4:9d:67:
         38:81:3f:74:4a:08:b7:6f:54:8e:74:87:fa:93:52:3c:03:44:
         e1:18:ab:8c:dd:74:f5:68:86:ae:4f:e7:fa:d9:5f:89:c3:0d:
         0a:64:7b:ff:32:25:ec:f6:6e:58:2e:38:62:a7:d5:e7:e4:03:
         5c:b9:fe:3c:bb:40:d6:db:8b:4d:d5:43:cd:05:31:33:19:15:
         9a:72:c0:4d:a2:91:e8:4d:85:7e:59:59:b0:80:1a:80:f8:8b:
         18:89:ab:92:8c:66:7a:01:89:b5:be:da:6d:22:be:20:d0:47:
         97:af:8b:f4
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgICDSYwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
MUQyOTlBUjExMC8GA1UEBRMoRjY4NzFFMzg5QUVBNDNERkI1MzFEMTRENEJGNkMw
MTFEM0E2RDQ4MDAeFw0yNTEyMjEwMTA2NTFaFw0yNTEyMjMwMTA2NTFaMBgxFjAU
BgNVBAMTDTY5NDc0ODJiLWEwMDcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDe5d8Td3ITvgk5crv9UJO0QWX5BiCFdRwo/QV9KeuEMcvHjzo21uUIxwFY
T3hXSFVALNb9CpM1oetZIoiz8GZe7x4lBCGvaMUfYYjRC3RRwJ7sJtHIJvOeX8+0
YxIeerl3SfL4trvlyCvmgnt/LmM1tqNzAc4ixBtrkuxFofdmBL/ocOHqDayc01iM
Sol1lidbvywXIg+k5TwFMnW6YHD8C452AeDpsAc0Kf8UmM0v0vEY4dmqaOnmyET6
mkBXMwMdHyGEaBqsZFSmnAF7yaaLDv6JW93ZY5bPG88jq8mX+yyOhNbsZ7R/6fV1
F8yitnCfam5RpVETF22/5pQuS4s/AgMBAAGjggK1MIICsTAdBgNVHQ4EFgQUbZNS
kskaItOIYk4Nae3aordMJtgwHwYDVR0jBBgwFoAU9oceOJrqQ9+1MdFNS/bAEdOm
1IAwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjFEMjk5LzlEODBERjc4Qzg1QjExRTZCODI5REE2N0Y4QUVBMjI4LzlvY2VP
SnJxUTktMU1kRk5TX2JBRWRPbTFJQS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
LzlvY2VPSnJxUTktMU1kRk5TX2JBRWRPbTFJQS5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEFBQcw
C4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl
cG9zaXRvcnkvRjM2MUQyOTkvOUQ4MERGNzhDODVCMTFFNkI4MjlEQTY3RjhBRUEy
MjgvOW9jZU9KcnFROS0xTWRGTlNfYkFFZE9tMUlBLm1mdDA1BggrBgEFBQcwDYYp
aHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA
AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCDodF42sizv+AwfTQohNmEqIM2O2HGNnuI
pRHZn945wz2HlKU1DkjNO4xGZGey85PwNlMep4ikV+CZUUxmbNBktxucOodtuDdn
Mj/On0VtTm+ejy+GMN7CvOSrLqf0uzfJ7XJu39ar8eckntvd9yLNzQgDsw3azuBN
y5e6sSm2SH6pp7DXpJjK5DWR+020nWc4gT90Sgi3b1SOdIf6k1I8A0ThGKuM3XT1
aIauT+f62V+Jww0KZHv/MiXs9m5YLjhip9Xn5ANcuf48u0DW24tN1UPNBTEzGRWa
csBNopHoTYV+WVmwgBqA+IsYiauSjGZ6AYm1vtptIr4g0EeXr4v0
-----END CERTIFICATE-----
Generated at Sun Dec 21 07:18:16 2025 by rpki-client