This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367CC68/6A7B0164D35D11F0899EA597DAE4EC9C/rKnJvrvo0Jl8Bk4vs4_-KbOZBz0.mft
File:                     rKnJvrvo0Jl8Bk4vs4_-KbOZBz0.mft (raw, json)
Hash identifier:          WrDbWzeEvccp+ozv1SOcFZebE9XbPryugMss2n2u3c4=
Subject key identifier:   B0:7C:CA:D9:BA:9F:E3:18:07:B2:2F:52:D4:15:4F:75:D8:1E:AD:B6
Authority key identifier: AC:A9:C9:BE:BB:E8:D0:99:7C:06:4E:2F:B3:8F:FE:29:B3:99:07:3D
Certificate issuer:       /CN=F367CC68AR/serialNumber=ACA9C9BEBBE8D0997C064E2FB38FFE29B399073D
Certificate serial:       13
Authority info access:    rsync://rpki.afrinic.net/repository/arin/rKnJvrvo0Jl8Bk4vs4_-KbOZBz0.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F367CC68/6A7B0164D35D11F0899EA597DAE4EC9C/rKnJvrvo0Jl8Bk4vs4_-KbOZBz0.mft
Manifest number:          11
Signing time:             Fri 19 Dec 2025 05:24:16 +0000
Manifest this update:     Fri 19 Dec 2025 05:24:15 +0000
Manifest next update:     Sun 21 Dec 2025 05:24:15 +0000
Files and hashes:         1: rKnJvrvo0Jl8Bk4vs4_-KbOZBz0.crl (hash: K9q6WbUabeFF86wsW+/enF5csU5H9PDt6S3DUqANVRs=)
                          2: 39DB806ED61011F0A851DDF5DAE4EC9C.roa (hash: 693hBAqPFjyvxLxbrZO7JySj88IG1EEhuYzl+bnEQlU=)
                          3: 27867604D60F11F09BCF4AEFDAE4EC9C.roa (hash: vyygcPvaqmQG6OPI3dGtJ+FnuE3p2w/6vDUlsFy2p2s=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F367CC68/6A7B0164D35D11F0899EA597DAE4EC9C/rKnJvrvo0Jl8Bk4vs4_-KbOZBz0.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F367CC68/6A7B0164D35D11F0899EA597DAE4EC9C/rKnJvrvo0Jl8Bk4vs4_-KbOZBz0.mft
                          rsync://rpki.afrinic.net/repository/arin/rKnJvrvo0Jl8Bk4vs4_-KbOZBz0.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 21 Dec 2025 00:26:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 19 (0x13)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F367CC68AR, serialNumber=ACA9C9BEBBE8D0997C064E2FB38FFE29B399073D
        Validity
            Not Before: Dec 19 05:24:15 2025 GMT
            Not After : Dec 21 05:24:15 2025 GMT
        Subject: CN=6944e180-2438
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:af:79:e7:4f:dd:6b:79:b7:04:3e:11:b7:f6:
                    6d:25:ff:ca:62:f1:eb:99:99:4b:41:dc:60:7e:67:
                    7f:28:86:8e:a7:d2:65:3e:90:d0:e3:1d:84:50:9a:
                    f1:fc:dc:ca:d2:19:6d:ef:6b:50:20:50:5a:b6:a4:
                    1c:2c:9f:a6:1a:d6:16:f9:54:0d:46:75:3b:c8:eb:
                    19:84:90:42:ae:42:ba:a9:cd:4c:3a:b3:36:d8:85:
                    7f:84:07:05:6d:7e:e0:f5:5e:e6:79:73:ff:60:47:
                    ae:c2:14:ca:08:cc:43:1a:56:5a:2b:c4:0a:9e:20:
                    27:d6:1c:f4:f0:76:d7:c2:75:c4:dc:17:f6:5a:67:
                    30:af:48:69:ab:88:df:49:f2:4f:f4:84:78:57:06:
                    c3:98:74:a0:02:c9:88:d6:c0:8a:a0:79:fc:a4:6d:
                    11:9d:af:dc:fa:b0:85:48:47:2f:c8:d0:ef:9f:94:
                    3b:bf:36:e2:6f:a2:b8:a0:e6:d1:8e:aa:1e:21:dc:
                    33:b9:11:5e:d4:8f:0d:cf:0e:0d:18:53:36:7d:79:
                    fe:84:70:f7:f3:f5:18:4c:3f:84:90:ac:3b:b7:bd:
                    a9:69:f3:f3:cb:36:bf:eb:f0:84:cc:36:1c:46:7d:
                    cc:09:63:aa:7c:c8:74:92:20:58:41:f8:0e:c0:c1:
                    ca:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:7C:CA:D9:BA:9F:E3:18:07:B2:2F:52:D4:15:4F:75:D8:1E:AD:B6
            X509v3 Authority Key Identifier:
                keyid:AC:A9:C9:BE:BB:E8:D0:99:7C:06:4E:2F:B3:8F:FE:29:B3:99:07:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F367CC68/6A7B0164D35D11F0899EA597DAE4EC9C/rKnJvrvo0Jl8Bk4vs4_-KbOZBz0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/rKnJvrvo0Jl8Bk4vs4_-KbOZBz0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367CC68/6A7B0164D35D11F0899EA597DAE4EC9C/rKnJvrvo0Jl8Bk4vs4_-KbOZBz0.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:b9:ea:cd:63:bb:4c:07:12:61:a2:ec:35:7f:e4:c0:03:6d:
         a9:e8:48:4f:1a:f8:01:89:46:10:60:62:04:a3:a6:53:10:e7:
         06:60:30:5d:05:54:9c:68:3a:af:c5:1b:b6:36:99:30:80:f9:
         24:e9:09:16:dc:0c:3d:8e:3c:7a:5e:26:e5:88:e4:57:09:5b:
         9b:4d:e5:35:52:2d:f2:e2:f6:7d:36:88:8b:76:66:3b:65:17:
         96:81:4a:23:56:f8:67:21:25:51:da:9a:55:57:f2:7c:f4:d7:
         87:dc:95:dd:67:a8:b5:15:b3:c1:d7:43:53:22:51:3d:19:88:
         a3:4f:67:83:1a:8f:b7:07:dd:58:65:7d:f3:2d:84:47:ec:c6:
         d9:3f:8c:71:25:42:3b:34:96:84:fe:0d:1d:a6:5c:89:b2:3b:
         df:63:1a:5f:85:a7:bd:c7:50:29:9b:4f:aa:37:2e:aa:2b:fc:
         00:3f:0a:54:3a:a2:af:3e:14:4a:34:5d:57:b1:a0:c4:dd:83:
         05:2a:1b:57:dd:38:35:29:74:1e:71:51:de:52:08:15:69:52:
         34:ad:ea:d6:81:04:13:11:9d:b3:d1:df:85:e0:61:eb:49:c7:
         fe:51:04:45:78:ad:3b:ed:8f:90:48:e2:2a:45:e2:55:fb:39:
         0c:93:8d:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 20:24:36 2025 by rpki-client