This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3656177/8F51AB8E83BF11E681ABEC37F8AEA228/ARf_NlB776Kb324d58jVMKSepOM.mft
File:                     ARf_NlB776Kb324d58jVMKSepOM.mft (raw, json)
Hash identifier:          qGClBVqp/xNjMppjl9ABm/vCCBWlfRN3xhfp3l72Itk=
Subject key identifier:   11:C1:36:CD:32:99:54:FA:43:DA:75:B4:95:3F:C3:4B:4E:AE:A5:46
Authority key identifier: 01:17:FF:36:50:7B:EF:A2:9B:DF:6E:1D:E7:C8:D5:30:A4:9E:A4:E3
Certificate issuer:       /CN=F3656177AF/serialNumber=0117FF36507BEFA29BDF6E1DE7C8D530A49EA4E3
Certificate serial:       0D83
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/ARf_NlB776Kb324d58jVMKSepOM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3656177/8F51AB8E83BF11E681ABEC37F8AEA228/ARf_NlB776Kb324d58jVMKSepOM.mft
Manifest number:          0D81
Signing time:             Sat 27 Dec 2025 01:05:35 +0000
Manifest this update:     Sat 27 Dec 2025 01:05:34 +0000
Manifest next update:     Mon 29 Dec 2025 01:05:34 +0000
Files and hashes:         1: ARf_NlB776Kb324d58jVMKSepOM.crl (hash: TTep20bnlVb1dYGThu8BICVqNG9mXOa88CMGcNzw8+s=)
                          2: B638C7E6C8C711E997C29757F8AEA228.roa (hash: EisbOpC1Y+D87WQCpz01JdeRv1C7VPmD55bEQs7AK5Y=)
                          3: 7DB93F0EC8C711E9BC304257F8AEA228.roa (hash: UV0937nnVyRu+QQ+Af7r5v4ImK92QTguDEzt+VyalNw=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3656177/8F51AB8E83BF11E681ABEC37F8AEA228/ARf_NlB776Kb324d58jVMKSepOM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3656177/8F51AB8E83BF11E681ABEC37F8AEA228/ARf_NlB776Kb324d58jVMKSepOM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/ARf_NlB776Kb324d58jVMKSepOM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 29 Dec 2025 00:06:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3459 (0xd83)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3656177AF, serialNumber=0117FF36507BEFA29BDF6E1DE7C8D530A49EA4E3
        Validity
            Not Before: Dec 27 01:05:34 2025 GMT
            Not After : Dec 29 01:05:34 2025 GMT
        Subject: CN=694f30df-58c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:bc:98:7d:4b:61:84:69:f7:10:fa:10:48:3e:
                    8c:ea:b6:dd:4d:c7:c8:52:6c:2a:26:32:cf:3e:a7:
                    e0:fb:5c:8f:0a:c9:08:44:2e:b7:75:ba:39:0d:7c:
                    56:de:89:6e:d7:39:cc:f0:ac:52:0d:2b:03:50:8c:
                    64:7c:97:ee:06:13:87:9a:76:d7:11:18:60:d3:91:
                    20:2f:1b:52:05:18:d0:b2:fd:06:74:c6:07:e0:bb:
                    e2:df:70:5e:98:9c:c5:99:58:f4:ea:18:f6:4a:13:
                    f2:cc:4c:be:da:77:8d:e9:20:89:a4:06:8d:c6:31:
                    51:49:9b:32:5a:50:42:68:1b:d8:4b:69:59:a6:55:
                    98:e3:1e:b8:4e:b2:1d:b4:55:14:0f:39:da:80:99:
                    b2:3e:0d:fb:50:31:03:66:44:68:79:9c:cb:eb:42:
                    89:c5:ce:8f:ff:46:c8:ea:31:f7:50:ad:39:12:5e:
                    e8:f0:57:0e:07:1c:51:ef:48:60:4e:be:d5:53:d9:
                    d9:f9:08:f5:d9:b0:0f:2f:b5:0e:8d:29:05:9f:46:
                    2d:a4:2d:87:13:0d:55:39:27:db:74:b0:96:40:43:
                    ef:2c:44:32:96:e7:20:29:2b:79:f2:94:50:9f:30:
                    fb:5b:8b:da:7e:fe:7d:f1:c5:35:6e:1c:3d:fe:a6:
                    e3:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:C1:36:CD:32:99:54:FA:43:DA:75:B4:95:3F:C3:4B:4E:AE:A5:46
            X509v3 Authority Key Identifier:
                keyid:01:17:FF:36:50:7B:EF:A2:9B:DF:6E:1D:E7:C8:D5:30:A4:9E:A4:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3656177/8F51AB8E83BF11E681ABEC37F8AEA228/ARf_NlB776Kb324d58jVMKSepOM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/ARf_NlB776Kb324d58jVMKSepOM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3656177/8F51AB8E83BF11E681ABEC37F8AEA228/ARf_NlB776Kb324d58jVMKSepOM.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:0d:32:2e:11:b7:2f:67:81:5f:91:25:2a:fc:88:cd:a6:fb:
         f1:61:ba:71:b1:86:ce:c3:50:02:60:f7:0a:5f:42:d7:13:2e:
         47:5d:b3:a4:4f:e5:90:9d:30:ee:00:e7:5e:a3:5e:1d:a0:65:
         9f:a7:7f:d9:dd:61:22:84:69:e9:2c:36:28:5b:c6:8a:bb:33:
         7d:3e:be:3b:0e:df:02:01:17:c6:d8:b3:80:a6:2b:27:c7:8f:
         f0:9b:16:db:91:36:39:60:62:3e:4b:3b:47:d6:5c:05:d9:69:
         f2:59:b8:dd:f8:5d:0a:74:cf:d4:57:85:ad:80:55:0a:ff:b1:
         f6:9a:ca:89:7a:7b:8d:f1:49:d3:ff:bb:61:76:77:a4:94:2b:
         15:44:45:58:60:d2:73:4c:08:30:db:e0:74:0b:83:36:2b:ba:
         c5:72:e2:fc:8f:7d:05:90:71:5c:18:86:76:82:54:f7:32:a4:
         8d:d0:81:ab:b5:02:40:40:70:3d:23:e8:da:75:07:c7:06:9a:
         0b:26:18:00:e3:72:ad:eb:fd:14:6f:ae:9e:6f:18:cb:0f:c7:
         e1:80:31:b8:8a:f1:78:3f:a9:51:8f:5a:bb:f4:be:ed:30:24:
         56:4b:15:ea:5b:c0:8c:1b:c9:c8:ad:aa:6b:40:85:8b:92:7f:
         b8:38:d8:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 27 04:04:31 2025 by rpki-client