This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F364379D/502A97D4BF3D11EDB8DB40F1F1222468/-sDqJCqAq1tZab-mHdXZlLIVbrU.mft
File:                     -sDqJCqAq1tZab-mHdXZlLIVbrU.mft (raw, json)
Hash identifier:          nbZPr9e6FSdmuKjQNmBbdH4yQr3yOXWKd8eLsLNemck=
Subject key identifier:   BE:C2:D0:E2:C1:6D:0A:37:93:F5:6F:48:B1:10:4E:57:4D:9C:B5:E1
Authority key identifier: FA:C0:EA:24:2A:80:AB:5B:59:69:BF:A6:1D:D5:D9:94:B2:15:6E:B5
Certificate issuer:       /CN=F364379DAR/serialNumber=FAC0EA242A80AB5B5969BFA61DD5D994B2156EB5
Certificate serial:       0423
Authority info access:    rsync://rpki.afrinic.net/repository/arin/-sDqJCqAq1tZab-mHdXZlLIVbrU.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F364379D/502A97D4BF3D11EDB8DB40F1F1222468/-sDqJCqAq1tZab-mHdXZlLIVbrU.mft
Manifest number:          041F
Signing time:             Thu 25 Dec 2025 03:20:11 +0000
Manifest this update:     Thu 25 Dec 2025 03:20:10 +0000
Manifest next update:     Sat 27 Dec 2025 03:20:10 +0000
Files and hashes:         1: -sDqJCqAq1tZab-mHdXZlLIVbrU.crl (hash: RA8NYS8VLaNO+2Fh0mtNKMhzU4cwHNpif3h3yFeRSHU=)
                          2: C838A4D646CD11F0B8C628B5DAE4EC9C.roa (hash: RTdZvWYUXJmf/Li5OHmQzr8WCYMhMf0ZpwZGPZXQQ+o=)
                          3: A696AAEC46CA11F0B0F691A0DAE4EC9C.roa (hash: xB7HU00jvjBw/6JgiS40uDAO/7+ErDQc10oiyq65hjE=)
                          4: 3561E70246C911F0B48FB997DAE4EC9C.roa (hash: hvGUR7BeqJ6MTLBaAk0vWcFdQF+l1z7VmRPb0Tpc0aQ=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F364379D/502A97D4BF3D11EDB8DB40F1F1222468/-sDqJCqAq1tZab-mHdXZlLIVbrU.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F364379D/502A97D4BF3D11EDB8DB40F1F1222468/-sDqJCqAq1tZab-mHdXZlLIVbrU.mft
                          rsync://rpki.afrinic.net/repository/arin/-sDqJCqAq1tZab-mHdXZlLIVbrU.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 27 Dec 2025 00:26:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1059 (0x423)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F364379DAR, serialNumber=FAC0EA242A80AB5B5969BFA61DD5D994B2156EB5
        Validity
            Not Before: Dec 25 03:20:10 2025 GMT
            Not After : Dec 27 03:20:10 2025 GMT
        Subject: CN=694cad6b-da40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:23:1b:44:b1:c1:f0:6e:25:cb:27:13:0f:52:
                    e1:99:6d:7a:20:18:da:a6:b1:97:8c:cb:39:50:0f:
                    4c:2c:cd:71:40:05:67:99:70:18:36:39:29:78:b2:
                    7e:03:e6:9e:03:8c:33:6c:15:65:da:dd:5c:5c:5a:
                    4e:12:0e:da:df:e5:7e:19:ab:25:d4:83:80:4a:12:
                    14:fb:c1:30:72:24:6b:a0:18:7c:62:cc:63:81:5b:
                    0e:7e:f6:52:10:62:3a:a2:a6:ba:69:b1:5c:f4:bc:
                    57:8d:46:d8:4f:ed:0c:1e:68:97:4e:55:7c:9f:8a:
                    97:c4:ab:70:46:fe:db:3b:d0:b9:85:57:f2:6e:5d:
                    00:2a:50:5d:56:8b:85:6a:14:2d:ec:da:92:53:06:
                    6a:85:11:7c:d3:f9:4b:4c:c6:e8:c3:e9:ce:97:b6:
                    8f:59:7a:a2:c2:24:64:01:3c:19:07:d5:84:0d:ee:
                    c0:8d:34:6b:99:fe:6e:6b:4b:3e:b8:40:cc:25:0b:
                    36:7b:89:a2:03:ab:fa:5b:38:c4:50:44:9a:ad:79:
                    e9:92:60:6b:24:16:12:e3:7a:29:bf:b7:72:04:dd:
                    94:ee:7d:92:9e:d2:68:96:b2:73:d3:c6:17:13:31:
                    9c:0d:02:6e:df:5e:52:21:8e:e9:ff:1f:13:2d:33:
                    ee:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:C2:D0:E2:C1:6D:0A:37:93:F5:6F:48:B1:10:4E:57:4D:9C:B5:E1
            X509v3 Authority Key Identifier:
                keyid:FA:C0:EA:24:2A:80:AB:5B:59:69:BF:A6:1D:D5:D9:94:B2:15:6E:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F364379D/502A97D4BF3D11EDB8DB40F1F1222468/-sDqJCqAq1tZab-mHdXZlLIVbrU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/-sDqJCqAq1tZab-mHdXZlLIVbrU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F364379D/502A97D4BF3D11EDB8DB40F1F1222468/-sDqJCqAq1tZab-mHdXZlLIVbrU.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:95:bb:a5:36:cf:5e:45:2d:44:6e:ce:fa:ee:21:e4:75:9b:
         4b:3d:0e:cd:75:bb:d7:65:fd:d3:ff:d8:e3:d0:91:52:bb:75:
         e7:5a:4f:8d:47:d7:2a:16:c5:68:ae:73:fa:95:00:3e:40:d6:
         4d:cd:67:44:b1:e2:f7:87:32:f6:c9:4f:c9:f6:a1:e8:e8:6f:
         b7:0c:ad:f7:b1:c4:27:1a:22:f2:60:8c:ab:a0:37:49:0f:00:
         42:7a:14:f9:ac:a3:2b:2c:48:7e:e6:a2:62:4f:67:c1:48:be:
         9b:d1:97:68:a2:c6:ab:4d:7f:46:d2:07:ae:bf:0f:88:2d:80:
         20:91:1f:df:24:19:e3:8f:fd:93:83:db:2f:49:08:11:66:2a:
         0d:23:0e:82:ca:2e:e3:ac:dc:5c:5b:37:f7:0a:d0:1e:b2:bd:
         94:3b:5d:aa:96:b2:70:da:e5:3e:57:cf:51:eb:2c:17:dc:f6:
         a8:2e:b6:36:5e:e7:c1:8e:15:b1:b7:9c:74:b0:01:3e:69:5b:
         26:2a:00:78:22:69:39:93:54:dd:90:9b:9e:6f:c9:b9:43:73:
         e2:d5:a7:6a:2b:d6:0a:69:cb:93:bb:5a:d0:75:67:b1:1c:4a:
         f7:23:5a:b5:5b:39:29:a1:17:7f:bb:50:b9:d4:8a:30:6a:fc:
         cd:47:f0:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 26 00:17:10 2025 by rpki-client