This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3654A44/2DA756809CA511EDB40FF399F1222468/FsdOc5XcId2ESiKgESgWEhp19JI.mft
File:                     FsdOc5XcId2ESiKgESgWEhp19JI.mft (raw, json)
Hash identifier:          nGYauYR0yx0xtWLZU4S0G9OW4ve//EClSKtf97GSg4Y=
Subject key identifier:   A6:9D:F4:DE:AC:91:DD:48:3F:9D:D7:D9:B9:76:E0:6C:F2:14:6C:B6
Authority key identifier: 16:C7:4E:73:95:DC:21:DD:84:4A:22:A0:11:28:16:12:1A:75:F4:92
Certificate issuer:       /CN=F3654A44AR/serialNumber=16C74E7395DC21DD844A22A0112816121A75F492
Certificate serial:       044C
Authority info access:    rsync://rpki.afrinic.net/repository/arin/FsdOc5XcId2ESiKgESgWEhp19JI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3654A44/2DA756809CA511EDB40FF399F1222468/FsdOc5XcId2ESiKgESgWEhp19JI.mft
Manifest number:          0449
Signing time:             Sat 20 Dec 2025 03:14:19 +0000
Manifest this update:     Sat 20 Dec 2025 03:14:18 +0000
Manifest next update:     Mon 22 Dec 2025 03:14:18 +0000
Files and hashes:         1: FsdOc5XcId2ESiKgESgWEhp19JI.crl (hash: QN6tHxoXmcwNdUyiWClu9VR6GWQ16boL7nrsaK5v/yw=)
                          2: CF8B10CE1DB711EFA609B0217DDC24C2.roa (hash: cUUrYIHHPxFgWnYQbOftBzdS94Gj26Vr5vz5884oWrA=)
                          3: 148381D41DB811EF83D02FF17CDC24C2.roa (hash: BiZPcXyEyPmGn8AwAntxiM0fpA7+k3wSNcu8/0aEYDQ=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3654A44/2DA756809CA511EDB40FF399F1222468/FsdOc5XcId2ESiKgESgWEhp19JI.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3654A44/2DA756809CA511EDB40FF399F1222468/FsdOc5XcId2ESiKgESgWEhp19JI.mft
                          rsync://rpki.afrinic.net/repository/arin/FsdOc5XcId2ESiKgESgWEhp19JI.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 22 Dec 2025 03:14:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1100 (0x44c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3654A44AR, serialNumber=16C74E7395DC21DD844A22A0112816121A75F492
        Validity
            Not Before: Dec 20 03:14:18 2025 GMT
            Not After : Dec 22 03:14:18 2025 GMT
        Subject: CN=6946148b-6695
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:e5:84:a4:81:63:86:a8:d4:16:0d:a5:bd:23:
                    22:99:c2:ea:5d:86:f4:84:75:6f:a0:04:31:88:d1:
                    61:07:c2:61:35:be:39:2c:45:ca:b6:e8:e8:0a:04:
                    1e:c3:87:0c:83:d2:c1:44:5f:8e:78:72:ad:c8:62:
                    92:27:eb:11:d8:56:7e:1e:7a:38:8f:98:5b:19:3a:
                    1d:a7:1b:c3:de:f3:ce:3a:71:65:1d:b5:f9:bc:3c:
                    a3:1c:a6:0a:af:31:6e:48:a5:73:36:b9:45:78:51:
                    aa:65:12:66:02:3f:70:93:c5:96:fe:bc:df:b6:52:
                    51:65:40:48:9b:d9:23:b8:ce:a9:32:b2:0a:fe:58:
                    e3:66:fb:6c:b4:57:55:68:5f:d9:09:ad:77:7c:90:
                    29:3e:85:80:7a:d8:0d:f4:63:36:d1:8a:01:b3:99:
                    88:d9:a5:9d:97:3d:d9:b1:74:f2:c2:c9:91:38:87:
                    c7:48:40:14:e3:fc:46:54:14:dc:72:93:d7:67:0b:
                    af:02:7d:db:06:1d:5f:cf:6c:64:4e:be:0d:f4:58:
                    08:15:1f:ad:ea:a7:21:fa:c7:86:fc:e9:b8:5d:13:
                    22:4c:4c:c3:1b:56:f2:64:2e:06:a0:e4:6e:b4:aa:
                    56:f0:3e:5c:c3:e6:68:29:fa:10:8d:55:ef:8c:1a:
                    3d:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:9D:F4:DE:AC:91:DD:48:3F:9D:D7:D9:B9:76:E0:6C:F2:14:6C:B6
            X509v3 Authority Key Identifier:
                keyid:16:C7:4E:73:95:DC:21:DD:84:4A:22:A0:11:28:16:12:1A:75:F4:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3654A44/2DA756809CA511EDB40FF399F1222468/FsdOc5XcId2ESiKgESgWEhp19JI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/FsdOc5XcId2ESiKgESgWEhp19JI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3654A44/2DA756809CA511EDB40FF399F1222468/FsdOc5XcId2ESiKgESgWEhp19JI.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:d3:ec:2d:9c:d9:39:57:15:da:27:9f:f8:da:ce:79:0b:96:
         8a:f6:e3:77:cb:fa:e2:a1:d0:86:1f:f9:6c:88:39:11:04:c5:
         27:60:62:3f:f7:75:85:7d:0b:24:f4:a8:68:5b:76:70:19:df:
         92:25:a7:15:b6:ef:fb:95:e2:13:ba:71:4f:63:9a:67:e8:a8:
         18:07:76:f8:85:db:d4:c7:37:91:01:ca:54:56:97:d6:04:57:
         ba:c0:67:0c:26:9e:74:40:dd:06:a8:3d:b6:21:ec:2b:df:d0:
         ed:82:4d:5b:8b:e1:ad:21:86:dd:db:6b:75:55:59:26:97:f5:
         a0:d5:84:47:c5:54:cd:31:38:b9:73:3c:ac:d6:ef:f9:52:2c:
         d4:54:e6:2f:96:73:27:d5:29:3a:33:4a:5b:d1:39:0f:64:da:
         d5:6a:fe:9a:18:44:cd:a0:23:e5:64:22:be:5b:52:d1:be:16:
         d9:94:6d:c3:cb:5a:ac:ea:2d:95:3f:79:5f:42:37:0e:93:27:
         52:71:15:d6:48:4f:ca:f1:0f:e5:26:e9:5b:c5:21:8e:86:8e:
         ee:bd:bb:86:ed:b6:0e:48:be:fe:b0:2d:60:2b:fd:5c:02:83:
         a0:73:3e:ea:11:cd:9f:20:ad:27:86:50:0f:01:91:c6:1b:4e:
         a9:3d:09:1a
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgICBEwwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NTRBNDRBUjExMC8GA1UEBRMoMTZDNzRFNzM5NURDMjFERDg0NEEyMkEwMTEyODE2
MTIxQTc1RjQ5MjAeFw0yNTEyMjAwMzE0MThaFw0yNTEyMjIwMzE0MThaMBgxFjAU
BgNVBAMTDTY5NDYxNDhiLTY2OTUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC95YSkgWOGqNQWDaW9IyKZwupdhvSEdW+gBDGI0WEHwmE1vjksRcq26OgK
BB7DhwyD0sFEX454cq3IYpIn6xHYVn4eejiPmFsZOh2nG8Pe8846cWUdtfm8PKMc
pgqvMW5IpXM2uUV4UaplEmYCP3CTxZb+vN+2UlFlQEib2SO4zqkysgr+WONm+2y0
V1VoX9kJrXd8kCk+hYB62A30YzbRigGzmYjZpZ2XPdmxdPLCyZE4h8dIQBTj/EZU
FNxyk9dnC68CfdsGHV/PbGROvg30WAgVH63qpyH6x4b86bhdEyJMTMMbVvJkLgag
5G60qlbwPlzD5mgp+hCNVe+MGj1/AgMBAAGjggK1MIICsTAdBgNVHQ4EFgQUpp30
3qyR3Ug/ndfZuXbgbPIUbLYwHwYDVR0jBBgwFoAUFsdOc5XcId2ESiKgESgWEhp1
9JIwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjU0QTQ0LzJEQTc1NjgwOUNBNTExRURCNDBGRjM5OUYxMjIyNDY4L0ZzZE9j
NVhjSWQyRVNpS2dFU2dXRWhwMTlKSS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L0ZzZE9jNVhjSWQyRVNpS2dFU2dXRWhwMTlKSS5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEFBQcw
C4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl
cG9zaXRvcnkvRjM2NTRBNDQvMkRBNzU2ODA5Q0E1MTFFREI0MEZGMzk5RjEyMjI0
NjgvRnNkT2M1WGNJZDJFU2lLZ0VTZ1dFaHAxOUpJLm1mdDA1BggrBgEFBQcwDYYp
aHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA
AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBW0+wtnNk5VxXaJ5/42s55C5aK9uN3y/ri
odCGH/lsiDkRBMUnYGI/93WFfQsk9KhoW3ZwGd+SJacVtu/7leITunFPY5pn6KgY
B3b4hdvUxzeRAcpUVpfWBFe6wGcMJp50QN0GqD22Iewr39Dtgk1bi+GtIYbd22t1
VVkml/Wg1YRHxVTNMTi5czys1u/5UizUVOYvlnMn1Sk6M0pb0TkPZNrVav6aGETN
oCPlZCK+W1LRvhbZlG3Dy1qs6i2VP3lfQjcOkydScRXWSE/K8Q/lJulbxSGOho7u
vbuG7bYOSL7+sC1gK/1cAoOgcz7qEc2fIK0nhlAPAZHGG06pPQka
-----END CERTIFICATE-----
Generated at Sun Dec 21 04:07:24 2025 by rpki-client