This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F364321A/493E462EBCDA11EDA1FB0FB0F1222468/kz9w25gXuEj4wIYagksQEX3FGSw.mft
File:                     kz9w25gXuEj4wIYagksQEX3FGSw.mft (raw, json)
Hash identifier:          m8cUNuil9Vl34A9O2AfvnfwX6XOlDRAUHJqb1gJioMM=
Subject key identifier:   12:BC:48:C4:F8:E0:9C:36:A9:09:9E:95:18:00:CF:42:61:52:C9:7E
Authority key identifier: 93:3F:70:DB:98:17:B8:48:F8:C0:86:1A:82:4B:10:11:7D:C5:19:2C
Certificate issuer:       /CN=F364321AAR/serialNumber=933F70DB9817B848F8C0861A824B10117DC5192C
Certificate serial:       043B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/kz9w25gXuEj4wIYagksQEX3FGSw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F364321A/493E462EBCDA11EDA1FB0FB0F1222468/kz9w25gXuEj4wIYagksQEX3FGSw.mft
Manifest number:          042B
Signing time:             Sun 21 Dec 2025 03:18:34 +0000
Manifest this update:     Sun 21 Dec 2025 03:18:33 +0000
Manifest next update:     Tue 23 Dec 2025 03:18:33 +0000
Files and hashes:         1: kz9w25gXuEj4wIYagksQEX3FGSw.crl (hash: VVVnu5rHbzLFbjcgX+nniQlDpO+SZx4dF9KPfXXwPQk=)
                          2: B104EE44D53311EE8BE4F36C775412E6.roa (hash: RqxwUBj2Bc+OGaTDdk4x7to8RcdRWFqstSwOVMh1no8=)
                          3: 1E005EBCD53811EEA636DE73775412E6.roa (hash: NZukzj3sWyjYLO9ToCsVsgQAC/kq2Oo6mzyBtHQWmD8=)
                          4: 8ED6BADCD53311EEB2A2C36C775412E6.roa (hash: 4/E5JqKYHi82tnNDpVDrDiMaVaUcTpYsZcy/yA05uhA=)
                          5: 0DEEF6F0D53311EEB556F46B775412E6.roa (hash: P5ibcWLG9H1Kur9SCsMbIiX3jBWNN4xNF46xx72YQHI=)
                          6: A5A2959EDD3D11EEBAF174B7775412E6.roa (hash: ODN6UQwLRLuCmMW2LaPD2vWq9D+bquTGny4/1fInMQE=)
                          7: E5662DD4A17A11EEAB16F955D25BE465.roa (hash: nQB8uEKFdXSZvidfMMlhgfBX43bi5bFfOgAaXmAWfUM=)
                          8: 64C2AA52D53411EEB69B076E775412E6.roa (hash: ApnKXgX4qtwCc4Ec2u4PHGuX3hUujQ6rhZ5C7rafC04=)
                          9: 6DD19D16D53311EE8136926C775412E6.roa (hash: v2hwM/LETMN1QLgipB8E8B+3kZLiPan/2yTGEjfAszc=)
                          10: 4FFFB85ED53311EE9E536E6C775412E6.roa (hash: D+tEjQwBXIivLTAaXT7TthK1xPvy3VJOqpaVsbM3hVk=)
                          11: 3F0DCC84D53811EE9F160874775412E6.roa (hash: ZQcO3DmU3Brb6BRvD6IVWLlf8rwN0CI8i4MNTEzPGK0=)
                          12: BCD1ADAAD53511EEA3B22470775412E6.roa (hash: d12Kr2qwAhbDBscwoutPKxlu3aElunyjg9Yu2LBeVsw=)
                          13: E4B0AF5CDD3B11EE8C72BDB4775412E6.roa (hash: 0arozNRt9JTjzBkDd/i9r9NcNES2kthw5/x77T8UhJo=)
                          14: DF52896AD53711EE84074A73775412E6.roa (hash: uIa+9vsGlaMu/Injc/vzOUtcnqp2BVTquSWUrb4Yn00=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F364321A/493E462EBCDA11EDA1FB0FB0F1222468/kz9w25gXuEj4wIYagksQEX3FGSw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F364321A/493E462EBCDA11EDA1FB0FB0F1222468/kz9w25gXuEj4wIYagksQEX3FGSw.mft
                          rsync://rpki.afrinic.net/repository/arin/kz9w25gXuEj4wIYagksQEX3FGSw.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 23 Dec 2025 03:18:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1083 (0x43b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F364321AAR, serialNumber=933F70DB9817B848F8C0861A824B10117DC5192C
        Validity
            Not Before: Dec 21 03:18:33 2025 GMT
            Not After : Dec 23 03:18:33 2025 GMT
        Subject: CN=6947670a-72c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:7c:d7:70:54:13:6e:45:54:0f:85:05:47:13:
                    83:e3:8a:1b:03:75:2e:d8:f9:a6:c4:33:7d:2a:56:
                    39:f8:19:26:64:95:91:2d:b3:ab:1b:7e:19:a0:d8:
                    c3:85:f6:f7:a2:66:3e:7a:98:d5:8b:79:3b:00:1f:
                    e3:dc:ef:74:10:84:c1:9f:15:49:c2:2b:0d:b8:5c:
                    9b:fe:1a:48:e5:f2:82:8a:a5:32:bc:93:79:fc:da:
                    f2:02:bf:29:9a:13:ce:5e:b1:6f:1c:36:21:a1:c8:
                    83:43:d2:d3:06:49:1b:a2:41:04:af:8d:29:85:d6:
                    74:52:de:ea:cc:83:e2:8a:d2:ce:0c:5b:dc:60:d9:
                    1c:43:ba:c7:bb:55:03:c5:4e:c0:f3:91:46:25:e4:
                    2b:3a:e9:52:e8:34:36:ba:82:4f:3a:a9:e4:c2:9a:
                    72:1d:ed:f1:48:5a:0f:c8:bd:2b:e0:66:a1:0b:98:
                    a5:02:db:d3:b8:06:cf:0d:4e:83:8c:f4:3a:e1:eb:
                    32:c3:75:09:e7:9c:33:7d:8b:4a:3f:73:cc:70:c9:
                    0e:db:15:ea:fb:3a:2b:35:11:f0:5d:c1:74:1a:89:
                    19:8e:59:67:4e:fd:01:c2:ba:1c:fc:9f:ba:46:1b:
                    d0:1e:bd:50:07:39:eb:21:06:bb:56:d9:94:7e:61:
                    3c:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:BC:48:C4:F8:E0:9C:36:A9:09:9E:95:18:00:CF:42:61:52:C9:7E
            X509v3 Authority Key Identifier:
                keyid:93:3F:70:DB:98:17:B8:48:F8:C0:86:1A:82:4B:10:11:7D:C5:19:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F364321A/493E462EBCDA11EDA1FB0FB0F1222468/kz9w25gXuEj4wIYagksQEX3FGSw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/kz9w25gXuEj4wIYagksQEX3FGSw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F364321A/493E462EBCDA11EDA1FB0FB0F1222468/kz9w25gXuEj4wIYagksQEX3FGSw.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:c5:a3:17:87:07:13:d2:a2:4a:d8:d6:37:8f:1d:96:1a:fd:
         48:35:eb:ec:75:9b:79:b5:86:0d:b8:da:20:98:59:8b:57:ea:
         80:3b:cf:69:00:99:58:ec:4b:4a:e0:1e:87:ce:ce:e2:f5:6d:
         45:f6:cd:0b:d1:ad:94:d4:cb:94:df:84:13:da:2b:18:29:5a:
         25:4b:de:ef:40:8c:c6:ba:21:ad:35:1d:53:0f:0a:46:de:32:
         5e:9b:e5:f2:1e:52:cc:21:5f:62:c2:d4:3f:5a:23:fd:d4:41:
         3d:cd:d1:ad:7e:3b:fc:ee:ef:7a:c9:db:2c:80:34:b5:13:18:
         ba:4a:7b:1e:eb:b4:b8:62:9e:40:e1:08:53:17:6d:21:4f:b5:
         45:69:ae:14:aa:68:9f:b0:bf:78:2f:92:e4:06:4f:52:a4:ed:
         d2:4e:40:57:79:0c:3f:dd:91:3d:de:cb:41:a7:3e:36:08:aa:
         0d:07:ef:e9:f8:20:ad:74:b0:5a:18:55:4a:4a:ec:79:b4:86:
         b5:9f:87:b5:f7:77:45:8a:c4:81:bb:9f:49:90:94:77:6c:7e:
         ef:5d:d7:d4:9f:80:17:e3:f9:f5:3d:87:03:d5:03:6a:18:50:
         93:fa:78:f8:14:4b:e2:54:a5:b5:9f:c5:08:37:ce:69:a9:58:
         1b:13:5c:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 02:07:06 2025 by rpki-client