This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362BDD7/0906697C856211EFA57A1F9D762E951A/XVYlaiSdVkdfD-NKQoSmTFIsD7Q.mft
File:                     XVYlaiSdVkdfD-NKQoSmTFIsD7Q.mft (raw, json)
Hash identifier:          OfX88BFUXS3I5lUJNhID6tWGWLhjUEpXMRAiGOJLNt0=
Subject key identifier:   AD:03:D3:1F:50:D8:16:A4:73:66:D2:59:DC:97:A6:35:E0:AC:92:10
Authority key identifier: 5D:56:25:6A:24:9D:56:47:5F:0F:E3:4A:42:84:A6:4C:52:2C:0F:B4
Certificate issuer:       /CN=F362BDD7AR/serialNumber=5D56256A249D56475F0FE34A4284A64C522C0FB4
Certificate serial:       01D4
Authority info access:    rsync://rpki.afrinic.net/repository/arin/XVYlaiSdVkdfD-NKQoSmTFIsD7Q.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F362BDD7/0906697C856211EFA57A1F9D762E951A/XVYlaiSdVkdfD-NKQoSmTFIsD7Q.mft
Manifest number:          01D2
Signing time:             Fri 02 Jan 2026 04:52:09 +0000
Manifest this update:     Fri 02 Jan 2026 04:52:08 +0000
Manifest next update:     Sun 04 Jan 2026 04:52:08 +0000
Files and hashes:         1: XVYlaiSdVkdfD-NKQoSmTFIsD7Q.crl (hash: o1XsymFcglBGobPh3xP6mbFJZVicqHdIS+Z+OlGoAzE=)
                          2: D60958CC856B11EFBE85FB5B762E951A.roa (hash: Pw5u5L+ZQ+31t8q31EOek7HdK9TGe6sXHf0Pw/O4YD4=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F362BDD7/0906697C856211EFA57A1F9D762E951A/XVYlaiSdVkdfD-NKQoSmTFIsD7Q.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F362BDD7/0906697C856211EFA57A1F9D762E951A/XVYlaiSdVkdfD-NKQoSmTFIsD7Q.mft
                          rsync://rpki.afrinic.net/repository/arin/XVYlaiSdVkdfD-NKQoSmTFIsD7Q.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 04 Jan 2026 04:52:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 468 (0x1d4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F362BDD7AR, serialNumber=5D56256A249D56475F0FE34A4284A64C522C0FB4
        Validity
            Not Before: Jan  2 04:52:08 2026 GMT
            Not After : Jan  4 04:52:08 2026 GMT
        Subject: CN=69574ef9-7bbc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:2a:c9:0a:e1:8b:6d:e6:30:9b:65:85:75:e9:
                    3c:05:06:89:92:eb:db:df:59:bb:f6:f1:de:df:71:
                    47:df:a4:16:b7:d0:1f:3a:f1:bf:db:20:d5:0c:fa:
                    a8:fd:ba:7c:97:91:a7:8f:36:41:b1:9e:2c:61:be:
                    a2:16:10:15:76:22:f4:c6:fe:ac:9d:6f:d8:6c:52:
                    86:4b:26:86:c1:6b:d9:e2:86:c7:40:3f:8f:15:4f:
                    bb:92:9d:5f:7c:e5:c7:12:4f:83:65:06:c5:df:98:
                    30:5d:87:c8:aa:bc:e2:8f:85:36:dc:84:ed:82:65:
                    93:e9:db:1c:ad:bb:45:2b:bb:d8:72:98:4d:92:24:
                    6c:cb:5a:58:90:75:b6:58:00:ca:c0:6c:74:28:ab:
                    29:b6:1c:5d:ba:63:07:b9:71:19:ed:87:7a:a4:b7:
                    e1:5a:65:14:73:a3:81:2c:e5:b8:af:c4:d8:1c:64:
                    06:69:77:f1:9c:94:a6:b0:0a:eb:25:11:5a:c9:29:
                    31:8f:38:fa:40:2f:15:e5:df:7b:49:c1:87:59:d7:
                    67:4d:bb:3f:58:e6:03:5d:46:23:61:02:a2:bc:d9:
                    68:e1:e7:da:c9:f9:c4:87:d9:86:aa:c3:5e:59:89:
                    e6:a3:84:e8:38:5f:7c:88:7b:86:be:da:79:8f:12:
                    b4:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:03:D3:1F:50:D8:16:A4:73:66:D2:59:DC:97:A6:35:E0:AC:92:10
            X509v3 Authority Key Identifier:
                keyid:5D:56:25:6A:24:9D:56:47:5F:0F:E3:4A:42:84:A6:4C:52:2C:0F:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F362BDD7/0906697C856211EFA57A1F9D762E951A/XVYlaiSdVkdfD-NKQoSmTFIsD7Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/XVYlaiSdVkdfD-NKQoSmTFIsD7Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362BDD7/0906697C856211EFA57A1F9D762E951A/XVYlaiSdVkdfD-NKQoSmTFIsD7Q.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:88:fc:da:d4:65:c2:59:ce:da:9c:c0:76:99:a4:1d:1d:ef:
         00:38:48:64:09:f0:f8:d9:20:9b:b8:b4:43:e2:f3:dd:d9:33:
         33:b5:b2:ce:02:a5:b1:a2:cf:8d:54:4f:85:0d:c4:eb:23:49:
         5e:a3:18:e4:c0:bf:19:d9:5e:9d:0e:6d:9c:81:e7:bc:aa:bf:
         af:cd:aa:6f:a4:15:f5:af:e5:ad:51:37:28:bf:88:56:bf:9e:
         1c:4e:87:c6:c3:62:d9:ec:3b:39:64:81:1c:7f:c5:f1:37:73:
         f1:5c:96:ae:a4:8a:b0:a3:a1:6c:4e:e8:06:1a:2c:2c:52:bc:
         41:ce:b5:9f:dd:03:9b:b7:43:3d:ad:e3:c1:82:00:4f:e4:dc:
         de:8a:89:08:37:20:02:e7:d8:f7:77:98:0f:d2:37:80:6e:4b:
         d7:ae:33:83:e0:cb:f0:73:90:8f:17:07:28:ed:8d:2a:81:cd:
         8a:9d:4f:d1:37:ba:f3:cb:53:ab:dd:5b:9b:df:e0:fd:b4:bb:
         1b:68:6a:8b:87:77:d4:f2:cd:0f:a8:19:ee:aa:45:9e:bc:fc:
         04:20:8a:73:1e:f6:23:5b:30:02:c1:25:ec:f1:33:2b:b4:64:
         94:9d:ef:18:40:62:a1:e0:dc:ed:dc:7a:3f:e4:7c:ed:1d:1a:
         74:49:75:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jan 3 03:58:21 2026 by rpki-client