This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36795C4/E84703BC91ED11E9B09E747DF8AEA228/XdGcZ_E-Y9etoa6si3eswGPp5RQ.mft
File:                     XdGcZ_E-Y9etoa6si3eswGPp5RQ.mft (raw, json)
Hash identifier:          aFt5MXGkGK6ACDOLAAgq7lfu1F4SmrzmCgyycRYa0mE=
Subject key identifier:   FE:B8:BC:F6:24:9D:F0:B5:95:0B:07:03:8D:26:95:EE:82:70:A4:DF
Authority key identifier: 5D:D1:9C:67:F1:3E:63:D7:AD:A1:AE:AC:8B:77:AC:C0:63:E9:E5:14
Certificate issuer:       /CN=F36795C4AR/serialNumber=5DD19C67F13E63D7ADA1AEAC8B77ACC063E9E514
Certificate serial:       098D
Authority info access:    rsync://rpki.afrinic.net/repository/arin/XdGcZ_E-Y9etoa6si3eswGPp5RQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36795C4/E84703BC91ED11E9B09E747DF8AEA228/XdGcZ_E-Y9etoa6si3eswGPp5RQ.mft
Manifest number:          098C
Signing time:             Sat 27 Dec 2025 01:30:35 +0000
Manifest this update:     Sat 27 Dec 2025 01:30:34 +0000
Manifest next update:     Mon 29 Dec 2025 01:30:34 +0000
Files and hashes:         1: XdGcZ_E-Y9etoa6si3eswGPp5RQ.crl (hash: TSJuKKATYQvdycNUS2YN3qm+DDyNiGP0RjceYrs8Mak=)
                          2: 85DEE92291EF11E9ABCCB07EF8AEA228.roa (hash: 3K2tDuP6LQooSlB5SsHZUahCN8ylMLHTNlp/RyDYHoc=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36795C4/E84703BC91ED11E9B09E747DF8AEA228/XdGcZ_E-Y9etoa6si3eswGPp5RQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36795C4/E84703BC91ED11E9B09E747DF8AEA228/XdGcZ_E-Y9etoa6si3eswGPp5RQ.mft
                          rsync://rpki.afrinic.net/repository/arin/XdGcZ_E-Y9etoa6si3eswGPp5RQ.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 29 Dec 2025 00:26:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2445 (0x98d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36795C4AR, serialNumber=5DD19C67F13E63D7ADA1AEAC8B77ACC063E9E514
        Validity
            Not Before: Dec 27 01:30:34 2025 GMT
            Not After : Dec 29 01:30:34 2025 GMT
        Subject: CN=694f36bb-918c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:06:42:7b:02:21:85:a8:2e:19:2b:20:b6:df:
                    fe:fa:82:43:38:1f:aa:21:65:05:16:30:3c:99:77:
                    03:b7:67:ba:88:da:7a:76:cb:02:31:f0:d2:01:91:
                    a0:62:55:72:f1:d5:0a:da:f0:23:7a:01:a7:64:dc:
                    fe:c7:ff:8c:5b:d4:9a:a4:43:06:25:21:00:4a:90:
                    7e:28:63:85:01:ec:0e:20:c9:76:27:e7:fd:ad:76:
                    49:a0:50:5d:0e:e9:a1:32:10:db:49:6a:01:35:a7:
                    44:a9:54:d3:d4:a6:cf:8d:e3:88:da:64:99:2f:33:
                    f0:14:06:b9:d8:96:2c:1d:c2:f8:5d:b3:18:42:27:
                    9b:c4:22:95:84:ca:db:14:66:e7:6d:b2:4c:04:c1:
                    e0:a5:aa:de:7a:c5:d5:6a:a2:5c:e6:6e:d5:49:a7:
                    39:8f:64:6c:a0:0a:fe:6b:58:03:84:2e:b3:df:35:
                    56:8c:2e:85:62:5e:a6:9a:68:3f:4c:9f:d5:b8:63:
                    8f:45:45:75:27:d8:87:dc:8c:74:d0:c8:cb:70:c2:
                    67:d4:e7:6c:13:65:4f:e9:0d:ac:af:12:c1:30:1a:
                    36:f4:a1:c4:9c:c4:d5:8a:b3:57:20:2a:99:6b:e7:
                    ff:46:d7:a5:90:71:84:0c:22:cf:c1:e9:b2:8d:41:
                    b7:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:B8:BC:F6:24:9D:F0:B5:95:0B:07:03:8D:26:95:EE:82:70:A4:DF
            X509v3 Authority Key Identifier:
                keyid:5D:D1:9C:67:F1:3E:63:D7:AD:A1:AE:AC:8B:77:AC:C0:63:E9:E5:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36795C4/E84703BC91ED11E9B09E747DF8AEA228/XdGcZ_E-Y9etoa6si3eswGPp5RQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/XdGcZ_E-Y9etoa6si3eswGPp5RQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36795C4/E84703BC91ED11E9B09E747DF8AEA228/XdGcZ_E-Y9etoa6si3eswGPp5RQ.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:8f:40:6b:8f:22:45:9b:63:a7:1c:c1:43:2d:4e:0a:e0:54:
         e0:47:f5:07:cc:4c:38:fb:aa:d9:58:86:93:14:91:f9:e0:f6:
         df:76:ff:ec:7c:e9:3c:c1:c8:17:a6:e8:e1:d7:49:85:24:21:
         9c:2a:5d:08:9a:d1:87:36:83:1a:bd:c6:bb:ca:05:d9:ac:85:
         c3:fd:9b:73:d4:18:2a:e7:b1:e4:ec:86:d3:25:c0:da:aa:34:
         be:64:d6:98:2f:af:c1:83:7b:6d:07:42:40:4e:94:d2:4f:a7:
         9d:71:30:39:c6:86:fe:eb:c2:ab:c1:68:b5:9b:50:0d:96:04:
         19:1f:8c:26:5e:07:50:59:33:01:a9:aa:09:e2:ac:c1:bc:ad:
         54:c3:bb:21:74:ac:05:3d:e4:2e:b1:dd:77:33:c3:f1:43:92:
         d2:ea:3c:91:60:0a:3e:b5:48:0d:e4:a4:8c:9e:2b:34:7c:b3:
         72:8c:66:5f:66:20:91:43:0f:15:bc:50:4b:15:7b:d9:8b:8b:
         24:df:b6:9e:79:47:82:10:d0:fb:94:67:fd:b1:44:d3:c9:4d:
         9a:45:c7:16:7c:0c:7d:8f:29:67:a9:95:e3:f7:19:42:f2:27:
         30:91:20:fe:0d:24:f8:be:4c:5b:c4:d0:cb:e4:8d:75:37:0b:
         58:07:fc:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 27 21:03:27 2025 by rpki-client