This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F366DC11/995946BC967811EA8799955AF8AEA228/f570NrMeWSCJBjwebEN80sP-oEs.mft
File:                     f570NrMeWSCJBjwebEN80sP-oEs.mft (raw, json)
Hash identifier:          g0JPRfVkA76nUZ3KbftpGBjYWEpbpPH7beg40KtQps0=
Subject key identifier:   05:3C:B0:07:18:CC:DA:59:F2:7A:FB:9D:08:C9:2E:55:02:3F:50:C6
Authority key identifier: 7F:9E:F4:36:B3:1E:59:20:89:06:3C:1E:6C:43:7C:D2:C3:FE:A0:4B
Certificate issuer:       /CN=F366DC11AR/serialNumber=7F9EF436B31E592089063C1E6C437CD2C3FEA04B
Certificate serial:       0836
Authority info access:    rsync://rpki.afrinic.net/repository/arin/f570NrMeWSCJBjwebEN80sP-oEs.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F366DC11/995946BC967811EA8799955AF8AEA228/f570NrMeWSCJBjwebEN80sP-oEs.mft
Manifest number:          0832
Signing time:             Fri 19 Dec 2025 01:50:21 +0000
Manifest this update:     Fri 19 Dec 2025 01:50:20 +0000
Manifest next update:     Sun 21 Dec 2025 01:50:20 +0000
Files and hashes:         1: f570NrMeWSCJBjwebEN80sP-oEs.crl (hash: mC/GYfImpfRUcnSTPPVr7ddP2odtg4vX8cmnkxJ3Rsc=)
                          2: AC4E8162494411EC8CA9436BD8A014CE.roa (hash: b3n4slgOS/MlasvqZ+C1CqSsBm6+jMSAotZwP76nH4w=)
                          3: 73CF35D0B0D611ECA0847BBD5A40D577.roa (hash: 5YOdoaN/nTrUVBHfwF7bO4BngZbRv1YMgLNCZWSSDi0=)
                          4: 1EB2FC3C808E11EF9FE834B8762E951A.roa (hash: 8WICMpU1EnHwLaB230BzQWko4F3WLir8PQtyYVCg1ig=)
                          5: F71135A8967811EA89ED085BF8AEA228.roa (hash: mQ+To7RHNAESk5YJPSceRlTNZT8t40xisQ1Ad1mdyds=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F366DC11/995946BC967811EA8799955AF8AEA228/f570NrMeWSCJBjwebEN80sP-oEs.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F366DC11/995946BC967811EA8799955AF8AEA228/f570NrMeWSCJBjwebEN80sP-oEs.mft
                          rsync://rpki.afrinic.net/repository/arin/f570NrMeWSCJBjwebEN80sP-oEs.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 21 Dec 2025 00:26:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2102 (0x836)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F366DC11AR, serialNumber=7F9EF436B31E592089063C1E6C437CD2C3FEA04B
        Validity
            Not Before: Dec 19 01:50:20 2025 GMT
            Not After : Dec 21 01:50:20 2025 GMT
        Subject: CN=6944af5d-1b0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:c5:29:67:fc:24:f0:26:93:38:7d:fc:be:2e:
                    d6:03:c1:dd:07:39:11:c1:5d:aa:dd:aa:98:30:25:
                    da:5f:d0:b9:76:f0:38:19:12:69:47:11:18:a0:16:
                    95:a7:b9:c8:f8:b0:3c:28:dd:ef:6e:48:3b:4e:41:
                    a3:6f:49:f7:48:d8:30:8a:57:fb:70:c9:71:62:a4:
                    44:26:4c:a2:c5:36:45:54:9b:0d:ae:26:ac:de:64:
                    88:ef:d4:95:df:8a:35:f8:f4:49:64:e4:30:ad:69:
                    9a:2d:f3:e5:ff:dd:9d:68:7c:ea:44:45:38:90:c0:
                    0b:74:92:3b:c3:b9:ba:3e:7f:5c:5c:78:e9:40:d0:
                    79:cb:92:8c:b2:da:4e:ce:37:db:e8:f5:f6:7b:d5:
                    3e:4f:55:a1:d3:e9:5d:f4:e3:c0:fe:5a:44:e3:f8:
                    a7:aa:69:90:d3:96:06:a8:e9:16:26:bd:96:a4:4b:
                    20:a6:4d:df:1f:82:c7:80:5b:8c:32:d3:43:67:15:
                    15:fa:0b:8c:5d:f0:a8:85:55:71:fe:c6:9a:33:c9:
                    84:cd:a4:60:3c:bb:e4:cc:ed:7f:3e:3f:4b:ea:b0:
                    36:f2:fd:70:f9:99:2d:cb:c1:60:c8:64:a0:28:13:
                    79:4f:65:6b:e9:cb:0e:7a:25:5a:6a:98:9f:51:2b:
                    12:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:3C:B0:07:18:CC:DA:59:F2:7A:FB:9D:08:C9:2E:55:02:3F:50:C6
            X509v3 Authority Key Identifier:
                keyid:7F:9E:F4:36:B3:1E:59:20:89:06:3C:1E:6C:43:7C:D2:C3:FE:A0:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F366DC11/995946BC967811EA8799955AF8AEA228/f570NrMeWSCJBjwebEN80sP-oEs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/f570NrMeWSCJBjwebEN80sP-oEs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F366DC11/995946BC967811EA8799955AF8AEA228/f570NrMeWSCJBjwebEN80sP-oEs.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d1:12:38:97:f8:47:eb:88:5b:5e:a5:37:3a:4c:af:0e:a8:d2:
         06:25:2c:e5:7b:f6:be:f6:04:be:32:61:a9:c4:ff:0a:71:ce:
         e1:d7:93:24:49:fa:01:5f:27:8d:12:7f:79:44:5b:5a:cd:35:
         b8:15:43:01:83:ba:62:ee:5b:63:7a:9e:d7:7a:9c:04:8f:cb:
         fa:0c:e1:bd:66:c9:06:03:c7:7c:74:9e:d2:ec:79:fb:4f:a1:
         4e:8a:d2:e7:14:f3:f5:b9:51:86:1f:31:1a:80:a2:61:97:10:
         b2:2a:42:aa:95:fe:34:15:21:9d:31:d4:16:06:b8:cb:0e:70:
         de:22:51:d5:72:71:4d:6b:53:ad:78:9e:89:f9:4f:9a:4b:4e:
         4a:a7:e4:a4:00:0d:33:80:59:0d:17:3c:1e:eb:97:c1:8b:26:
         5e:2f:bd:1b:41:7f:86:12:50:18:b1:d3:67:e7:0c:15:0e:82:
         38:29:fe:94:66:29:47:fd:75:d8:2c:3f:78:44:ea:5f:02:21:
         18:bf:d9:3d:ac:1e:20:bf:40:27:b2:06:4c:79:70:ea:44:dc:
         c7:f8:2c:6a:03:93:df:c9:d9:80:5c:9c:9e:e4:41:70:68:77:
         fa:f0:2c:85:f9:38:d0:5a:b0:ea:14:1a:79:77:28:d3:57:65:
         ef:0d:69:02
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgICCDYwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NkRDMTFBUjExMC8GA1UEBRMoN0Y5RUY0MzZCMzFFNTkyMDg5MDYzQzFFNkM0MzdD
RDJDM0ZFQTA0QjAeFw0yNTEyMTkwMTUwMjBaFw0yNTEyMjEwMTUwMjBaMBgxFjAU
BgNVBAMTDTY5NDRhZjVkLTFiMGUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDWxSln/CTwJpM4ffy+LtYDwd0HORHBXardqpgwJdpf0Ll28DgZEmlHERig
FpWnucj4sDwo3e9uSDtOQaNvSfdI2DCKV/twyXFipEQmTKLFNkVUmw2uJqzeZIjv
1JXfijX49Elk5DCtaZot8+X/3Z1ofOpERTiQwAt0kjvDubo+f1xceOlA0HnLkoyy
2k7ON9vo9fZ71T5PVaHT6V3048D+WkTj+KeqaZDTlgao6RYmvZakSyCmTd8fgseA
W4wy00NnFRX6C4xd8KiFVXH+xpozyYTNpGA8u+TM7X8+P0vqsDby/XD5mS3LwWDI
ZKAoE3lPZWvpyw56JVpqmJ9RKxJJAgMBAAGjggK1MIICsTAdBgNVHQ4EFgQUBTyw
BxjM2lnyevudCMkuVQI/UMYwHwYDVR0jBBgwFoAUf570NrMeWSCJBjwebEN80sP+
oEswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjZEQzExLzk5NTk0NkJDOTY3ODExRUE4Nzk5OTU1QUY4QUVBMjI4L2Y1NzBO
ck1lV1NDSkJqd2ViRU44MHNQLW9Fcy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L2Y1NzBOck1lV1NDSkJqd2ViRU44MHNQLW9Fcy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEFBQcw
C4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl
cG9zaXRvcnkvRjM2NkRDMTEvOTk1OTQ2QkM5Njc4MTFFQTg3OTk5NTVBRjhBRUEy
MjgvZjU3ME5yTWVXU0NKQmp3ZWJFTjgwc1Atb0VzLm1mdDA1BggrBgEFBQcwDYYp
aHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA
AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQDREjiX+EfriFtepTc6TK8OqNIGJSzle/a+
9gS+MmGpxP8Kcc7h15MkSfoBXyeNEn95RFtazTW4FUMBg7pi7ltjep7XepwEj8v6
DOG9ZskGA8d8dJ7S7Hn7T6FOitLnFPP1uVGGHzEagKJhlxCyKkKqlf40FSGdMdQW
BrjLDnDeIlHVcnFNa1OteJ6J+U+aS05Kp+SkAA0zgFkNFzwe65fBiyZeL70bQX+G
ElAYsdNn5wwVDoI4Kf6UZilH/XXYLD94ROpfAiEYv9k9rB4gv0AnsgZMeXDqRNzH
+CxqA5PfydmAXJye5EFwaHf68CyF+TjQWrDqFBp5dyjTV2XvDWkC
-----END CERTIFICATE-----
Generated at Fri Dec 19 22:08:18 2025 by rpki-client