This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F364B494/21A3A3DC329411EDBA0A1CA5F1222468/5vz7Am63dRX-jOZ3NMPehbNHlM4.mft
File:                     5vz7Am63dRX-jOZ3NMPehbNHlM4.mft (raw, json)
Hash identifier:          BEa4sAtDLb6kw0xV3yHOFg3S94DD2Af2g2cnYNAWGew=
Subject key identifier:   E0:59:05:CA:20:6C:8D:FC:20:72:FE:57:6B:09:8B:1E:F8:FF:68:F2
Authority key identifier: E6:FC:FB:02:6E:B7:75:15:FE:8C:E6:77:34:C3:DE:85:B3:47:94:CE
Certificate issuer:       /CN=F364B494AR/serialNumber=E6FCFB026EB77515FE8CE67734C3DE85B34794CE
Certificate serial:       04D9
Authority info access:    rsync://rpki.afrinic.net/repository/arin/5vz7Am63dRX-jOZ3NMPehbNHlM4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F364B494/21A3A3DC329411EDBA0A1CA5F1222468/5vz7Am63dRX-jOZ3NMPehbNHlM4.mft
Manifest number:          04D6
Signing time:             Mon 22 Dec 2025 03:00:38 +0000
Manifest this update:     Mon 22 Dec 2025 03:00:37 +0000
Manifest next update:     Wed 24 Dec 2025 03:00:37 +0000
Files and hashes:         1: 5vz7Am63dRX-jOZ3NMPehbNHlM4.crl (hash: 3Zgu3fbUfa06oeEfHiH4b9wcHEAd2GrKJCdZ07yAyKE=)
                          2: 7B1E3742329411ED85B500A6F1222468.roa (hash: H5xP/HWqk0d0tKDdVP+EXloFCCYYmFeM+bWTt3xejHU=)
                          3: 89ADBC0E9C0411EDA24A6ACEF1222468.roa (hash: ow8ir81flbNHVBLg5yUrN3ne9ibeNSQNsB7V7L6/qCE=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F364B494/21A3A3DC329411EDBA0A1CA5F1222468/5vz7Am63dRX-jOZ3NMPehbNHlM4.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F364B494/21A3A3DC329411EDBA0A1CA5F1222468/5vz7Am63dRX-jOZ3NMPehbNHlM4.mft
                          rsync://rpki.afrinic.net/repository/arin/5vz7Am63dRX-jOZ3NMPehbNHlM4.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 24 Dec 2025 00:26:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1241 (0x4d9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F364B494AR, serialNumber=E6FCFB026EB77515FE8CE67734C3DE85B34794CE
        Validity
            Not Before: Dec 22 03:00:37 2025 GMT
            Not After : Dec 24 03:00:37 2025 GMT
        Subject: CN=6948b456-9c07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:35:d7:a1:1d:6b:dc:42:f6:b6:3d:19:ce:fa:
                    ab:c9:c6:10:13:5a:4d:1a:57:18:31:16:b1:39:1d:
                    01:50:b3:79:b1:5d:44:d3:ca:1c:a3:17:92:bd:1a:
                    4b:2c:cd:cc:ee:82:19:7e:08:d0:62:0b:f8:9f:c5:
                    22:c7:41:68:d4:56:20:17:67:98:a1:94:6c:ea:67:
                    4e:c7:49:09:cd:5d:6c:34:28:c5:ef:f6:57:cb:7c:
                    00:15:9a:75:70:3d:6c:b4:22:50:63:89:a9:f1:4d:
                    8a:25:d9:0a:d4:a0:95:40:59:40:99:0a:0b:f7:c0:
                    f6:b1:83:7a:f2:3f:cf:1c:7e:a7:25:c2:33:d8:3a:
                    5a:c5:3d:fd:de:af:7d:1c:2d:cd:a8:0c:23:0d:f3:
                    0a:6f:9e:13:25:79:33:1b:1b:6a:ae:f9:45:df:81:
                    84:fb:ce:3f:dd:46:04:4b:89:22:96:13:0d:78:d7:
                    55:01:0b:97:b3:66:a9:d4:3d:1b:47:8d:03:b3:9b:
                    8d:6d:e4:0b:c6:4c:aa:42:4b:a9:6c:d6:27:6c:ca:
                    a1:1e:13:6b:4a:59:04:b6:03:dd:81:8d:8e:8e:23:
                    6a:8c:1b:98:7a:f7:32:dc:d3:0e:77:79:40:5b:4a:
                    73:f3:14:2f:37:74:af:1f:f7:9f:59:47:cf:88:4f:
                    2c:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:59:05:CA:20:6C:8D:FC:20:72:FE:57:6B:09:8B:1E:F8:FF:68:F2
            X509v3 Authority Key Identifier:
                keyid:E6:FC:FB:02:6E:B7:75:15:FE:8C:E6:77:34:C3:DE:85:B3:47:94:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F364B494/21A3A3DC329411EDBA0A1CA5F1222468/5vz7Am63dRX-jOZ3NMPehbNHlM4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/5vz7Am63dRX-jOZ3NMPehbNHlM4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F364B494/21A3A3DC329411EDBA0A1CA5F1222468/5vz7Am63dRX-jOZ3NMPehbNHlM4.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:b0:3a:41:66:76:bf:fd:cf:65:7e:f8:c6:ef:25:dc:3d:f9:
         d9:69:e6:23:d4:da:88:8a:05:2f:73:bd:c5:5a:86:8d:d4:ad:
         dc:e0:3e:29:ce:38:d4:4b:c5:33:f5:b8:97:91:31:5f:12:99:
         5a:ba:1b:52:fa:d6:dd:2c:f6:41:7b:b0:95:36:98:55:3c:06:
         0f:8a:b2:29:3a:91:99:be:8d:86:2a:f6:cb:03:0b:01:aa:e5:
         12:f3:3a:ac:c6:2d:09:1f:68:ae:b1:41:37:eb:48:99:4c:48:
         b1:20:5f:db:3e:91:70:d8:f0:a7:7b:2c:7c:36:34:3e:04:2a:
         4c:ca:35:92:c3:4d:30:e6:6e:ab:b3:fa:89:a2:2e:d7:f8:58:
         c9:37:b7:56:02:1b:64:a4:bc:a7:8e:53:67:9c:ff:37:85:4c:
         c7:83:e1:b2:b0:cd:20:2e:2f:8e:64:f5:b0:9d:b4:62:1e:43:
         99:64:0c:e0:7d:47:5a:64:6e:e1:fc:3c:58:22:31:ec:e1:59:
         fb:13:cf:f0:5f:0f:ae:f3:0f:4c:84:c3:aa:c5:6f:ac:cb:99:
         a9:ee:2a:33:fd:0a:05:f9:89:c8:ad:02:57:e0:43:fa:c7:8b:
         26:8d:b9:f7:9c:10:e2:42:50:ce:49:17:c0:53:c8:ec:69:57:
         74:80:3d:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 11:34:25 2025 by rpki-client