This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36776F1/592DF6A2B89511EF93752D6B762E951A/oPeJf2dYfKZFs1FBAQpaoaMFf2w.mft
File:                     oPeJf2dYfKZFs1FBAQpaoaMFf2w.mft (raw, json)
Hash identifier:          G0m0U3PWjY6n3i/56KPvcn5DVl+7nsQGu1PM5Gb3j1M=
Subject key identifier:   35:AA:43:75:C9:C8:9B:26:ED:71:39:86:4E:CF:7C:8E:BF:5A:FC:8D
Authority key identifier: A0:F7:89:7F:67:58:7C:A6:45:B3:51:41:01:0A:5A:A1:A3:05:7F:6C
Certificate issuer:       /CN=F36776F1AR/serialNumber=A0F7897F67587CA645B35141010A5AA1A3057F6C
Certificate serial:       019E
Authority info access:    rsync://rpki.afrinic.net/repository/arin/oPeJf2dYfKZFs1FBAQpaoaMFf2w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36776F1/592DF6A2B89511EF93752D6B762E951A/oPeJf2dYfKZFs1FBAQpaoaMFf2w.mft
Manifest number:          0193
Signing time:             Sat 20 Dec 2025 04:46:24 +0000
Manifest this update:     Sat 20 Dec 2025 04:46:23 +0000
Manifest next update:     Mon 22 Dec 2025 04:46:23 +0000
Files and hashes:         1: oPeJf2dYfKZFs1FBAQpaoaMFf2w.crl (hash: GNZIBur1xGyambXHZDzGSnAzTR/XQgceHASs07++ThU=)
                          2: F891118CBE3711EF94207A53762E951A.roa (hash: /BSsoHmVYWT3uZmtUs29hLyCS4VFjhVXegvsldImsTY=)
                          3: F4E3CCE6C2FB11EFB2921875762E951A.roa (hash: em5+W6hV5wb4UsoaGm9yNPcphUOmzIzRc/FvZi8E2vQ=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36776F1/592DF6A2B89511EF93752D6B762E951A/oPeJf2dYfKZFs1FBAQpaoaMFf2w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36776F1/592DF6A2B89511EF93752D6B762E951A/oPeJf2dYfKZFs1FBAQpaoaMFf2w.mft
                          rsync://rpki.afrinic.net/repository/arin/oPeJf2dYfKZFs1FBAQpaoaMFf2w.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 22 Dec 2025 00:26:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 414 (0x19e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36776F1AR, serialNumber=A0F7897F67587CA645B35141010A5AA1A3057F6C
        Validity
            Not Before: Dec 20 04:46:23 2025 GMT
            Not After : Dec 22 04:46:23 2025 GMT
        Subject: CN=69462a20-d98f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:04:a2:5c:b0:81:ec:e9:5a:d9:58:97:a6:96:
                    b9:8f:c3:66:e0:9b:24:89:56:a2:05:80:3b:8f:e3:
                    1a:b3:cb:84:ad:7a:93:6e:4b:a8:01:0c:c9:a6:74:
                    23:03:2f:b8:bc:26:8d:cc:50:99:b5:09:b5:f6:31:
                    4a:c8:60:85:2d:24:38:f9:14:2d:b4:fb:26:cd:60:
                    fd:4d:ce:a3:06:5c:5a:8e:18:5b:49:c6:e7:43:68:
                    1d:aa:85:84:ca:32:70:7b:bf:70:66:1b:06:de:d7:
                    96:2a:ae:57:3c:bb:bf:a9:a6:2b:57:17:34:a3:fa:
                    42:d2:d2:02:6d:af:22:f1:ed:15:b3:3d:ed:91:ee:
                    a5:10:63:85:81:a3:32:f6:bf:53:59:3d:10:8e:c2:
                    37:18:ac:39:c5:8c:92:b0:60:5e:72:52:bb:c0:7c:
                    af:c1:bf:17:89:e9:e0:bc:23:b1:9e:bd:3b:81:30:
                    b8:b5:cb:e8:a3:9f:68:73:40:9b:75:2d:64:41:92:
                    11:b8:c6:bd:54:8d:7f:b0:cf:01:dd:ec:de:e9:a5:
                    47:73:21:7d:a7:19:19:60:b0:ab:be:95:86:16:29:
                    43:76:07:c2:04:8e:12:62:2b:a2:22:85:b0:e1:ab:
                    e1:52:62:5c:c4:ba:3f:f9:35:94:5c:04:20:0c:0f:
                    66:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:AA:43:75:C9:C8:9B:26:ED:71:39:86:4E:CF:7C:8E:BF:5A:FC:8D
            X509v3 Authority Key Identifier:
                keyid:A0:F7:89:7F:67:58:7C:A6:45:B3:51:41:01:0A:5A:A1:A3:05:7F:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36776F1/592DF6A2B89511EF93752D6B762E951A/oPeJf2dYfKZFs1FBAQpaoaMFf2w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/oPeJf2dYfKZFs1FBAQpaoaMFf2w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36776F1/592DF6A2B89511EF93752D6B762E951A/oPeJf2dYfKZFs1FBAQpaoaMFf2w.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:6f:d8:03:c7:87:a2:29:e2:94:cb:29:68:b5:76:1d:e7:b4:
         19:41:47:ef:7d:c1:4a:fe:90:0e:49:c6:22:52:d3:c2:41:24:
         d2:c8:7b:37:18:7a:86:70:81:3a:e4:8e:4e:48:c2:89:c7:64:
         07:71:48:19:f5:5e:07:4b:35:60:6d:c5:4e:2f:a4:f5:e3:05:
         df:41:ff:22:ee:19:07:a5:55:e3:33:25:8e:68:52:5d:a2:98:
         4f:da:9f:a4:c3:11:b8:72:b0:a8:11:f4:b0:3c:89:e2:e3:1a:
         1a:21:dd:f6:4b:9b:e6:3c:e3:27:42:e4:0a:09:a6:2f:12:b3:
         ca:9e:9a:cf:f5:76:98:36:18:95:c1:c1:25:5e:14:2d:13:4d:
         a8:8e:c8:56:ac:f1:75:82:82:04:80:08:dc:f8:67:f0:80:5e:
         2f:7d:6d:87:32:8b:fa:1a:14:64:5b:fc:30:91:2e:94:e7:81:
         0b:27:57:e0:e5:7a:68:3f:38:9e:37:01:03:db:8f:66:5c:75:
         bf:c3:bb:48:9b:a5:16:de:a1:b1:0d:68:52:a7:94:60:d7:23:
         7d:82:75:67:52:0b:26:0b:cd:f1:44:9d:05:a8:d5:b0:5e:e0:
         66:28:44:ff:aa:3f:27:85:c3:9d:a4:54:7d:03:97:ae:c2:64:
         c3:26:7f:c2
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgICAZ4wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
Nzc2RjFBUjExMC8GA1UEBRMoQTBGNzg5N0Y2NzU4N0NBNjQ1QjM1MTQxMDEwQTVB
QTFBMzA1N0Y2QzAeFw0yNTEyMjAwNDQ2MjNaFw0yNTEyMjIwNDQ2MjNaMBgxFjAU
BgNVBAMTDTY5NDYyYTIwLWQ5OGYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDVBKJcsIHs6VrZWJemlrmPw2bgmySJVqIFgDuP4xqzy4StepNuS6gBDMmm
dCMDL7i8Jo3MUJm1CbX2MUrIYIUtJDj5FC20+ybNYP1NzqMGXFqOGFtJxudDaB2q
hYTKMnB7v3BmGwbe15Yqrlc8u7+ppitXFzSj+kLS0gJtryLx7RWzPe2R7qUQY4WB
ozL2v1NZPRCOwjcYrDnFjJKwYF5yUrvAfK/BvxeJ6eC8I7GevTuBMLi1y+ijn2hz
QJt1LWRBkhG4xr1UjX+wzwHd7N7ppUdzIX2nGRlgsKu+lYYWKUN2B8IEjhJiK6Ii
hbDhq+FSYlzEuj/5NZRcBCAMD2ZRAgMBAAGjggK1MIICsTAdBgNVHQ4EFgQUNapD
dcnImybtcTmGTs98jr9a/I0wHwYDVR0jBBgwFoAUoPeJf2dYfKZFs1FBAQpaoaMF
f2wwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjc3NkYxLzU5MkRGNkEyQjg5NTExRUY5Mzc1MkQ2Qjc2MkU5NTFBL29QZUpm
MmRZZktaRnMxRkJBUXBhb2FNRmYydy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L29QZUpmMmRZZktaRnMxRkJBUXBhb2FNRmYydy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEFBQcw
C4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl
cG9zaXRvcnkvRjM2Nzc2RjEvNTkyREY2QTJCODk1MTFFRjkzNzUyRDZCNzYyRTk1
MUEvb1BlSmYyZFlmS1pGczFGQkFRcGFvYU1GZjJ3Lm1mdDA1BggrBgEFBQcwDYYp
aHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA
AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCNb9gDx4eiKeKUyylotXYd57QZQUfvfcFK
/pAOScYiUtPCQSTSyHs3GHqGcIE65I5OSMKJx2QHcUgZ9V4HSzVgbcVOL6T14wXf
Qf8i7hkHpVXjMyWOaFJdophP2p+kwxG4crCoEfSwPIni4xoaId32S5vmPOMnQuQK
CaYvErPKnprP9XaYNhiVwcElXhQtE02ojshWrPF1goIEgAjc+GfwgF4vfW2HMov6
GhRkW/wwkS6U54ELJ1fg5XpoPzieNwED249mXHW/w7tIm6UW3qGxDWhSp5Rg1yN9
gnVnUgsmC83xRJ0FqNWwXuBmKET/qj8nhcOdpFR9A5euwmTDJn/C
-----END CERTIFICATE-----
Generated at Sat Dec 20 13:15:36 2025 by rpki-client