This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36852F0/C35834EC825811F08AF34E8CDAE4EC9C/mANBymMoP9xkLng8RVg-pGRCMxs.mft
File:                     mANBymMoP9xkLng8RVg-pGRCMxs.mft (raw, json)
Hash identifier:          qnW4QiSASb1syNN9XWSj90qADJMsG9TQNG2tiolCKcs=
Subject key identifier:   D3:3B:07:BB:DA:B5:2B:56:3A:DD:08:1E:96:F7:4C:98:7E:00:AE:57
Authority key identifier: 98:03:41:CA:63:28:3F:DC:64:2E:78:3C:45:58:3E:A4:64:42:33:1B
Certificate issuer:       /CN=F36852F0AR/serialNumber=980341CA63283FDC642E783C45583EA46442331B
Certificate serial:       7C
Authority info access:    rsync://rpki.afrinic.net/repository/arin/mANBymMoP9xkLng8RVg-pGRCMxs.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36852F0/C35834EC825811F08AF34E8CDAE4EC9C/mANBymMoP9xkLng8RVg-pGRCMxs.mft
Manifest number:          7A
Signing time:             Sat 20 Dec 2025 05:12:54 +0000
Manifest this update:     Sat 20 Dec 2025 05:12:54 +0000
Manifest next update:     Mon 22 Dec 2025 05:12:54 +0000
Files and hashes:         1: mANBymMoP9xkLng8RVg-pGRCMxs.crl (hash: nDipr07HHf6o/l3NUTs6yJgz7d/JNcbGjmYhLz0sx2Q=)
                          2: 6D2177B4832511F0892AAFC7DAE4EC9C.roa (hash: aHAZN2QhTCRQrqiHV0Jl7+gEXu4WrL625sFACBWD1qA=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36852F0/C35834EC825811F08AF34E8CDAE4EC9C/mANBymMoP9xkLng8RVg-pGRCMxs.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36852F0/C35834EC825811F08AF34E8CDAE4EC9C/mANBymMoP9xkLng8RVg-pGRCMxs.mft
                          rsync://rpki.afrinic.net/repository/arin/mANBymMoP9xkLng8RVg-pGRCMxs.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 22 Dec 2025 05:12:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 124 (0x7c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36852F0AR, serialNumber=980341CA63283FDC642E783C45583EA46442331B
        Validity
            Not Before: Dec 20 05:12:54 2025 GMT
            Not After : Dec 22 05:12:54 2025 GMT
        Subject: CN=69463056-cbb9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:9f:a0:7b:b8:3d:c3:0a:fa:fa:9d:71:1b:7c:
                    94:4a:6a:0f:19:2b:fc:8d:e2:5f:eb:97:dd:bb:85:
                    47:41:0b:9c:a8:1d:cd:d9:46:cf:d7:e5:8b:d9:d8:
                    a5:86:00:7a:c5:ca:50:23:a4:14:56:c9:dc:92:cd:
                    b7:22:11:72:fa:89:cb:52:16:fa:28:3a:47:20:3c:
                    bb:6d:ac:d8:48:e7:01:54:37:5c:90:1a:29:e0:ec:
                    6c:e7:48:50:87:63:50:b5:fb:f0:2b:1d:37:96:4d:
                    db:fd:60:66:f8:09:88:e9:90:11:61:c7:3a:49:ae:
                    15:a3:17:06:7a:71:82:0e:86:62:af:ed:4b:c9:f9:
                    c6:21:9c:c8:bb:03:bf:8b:cc:b1:43:6e:74:c0:42:
                    05:d9:64:fc:4c:e7:ea:b9:7b:5b:1d:67:67:fa:b4:
                    d2:c7:f7:61:75:51:1b:59:04:28:ec:3d:e5:84:75:
                    4b:f3:15:9d:a7:14:8a:0d:b2:bb:5d:cd:5f:61:f2:
                    a6:7f:d4:f5:06:22:4d:4d:96:b2:51:1d:03:b1:e4:
                    fc:4f:36:6e:26:81:0d:bd:c2:ef:1d:ab:03:5b:a2:
                    c7:c2:eb:64:3b:65:77:b5:14:d6:f0:97:82:f0:e5:
                    b5:95:66:31:f6:b3:2b:8e:88:41:93:da:3a:0f:fe:
                    6d:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:3B:07:BB:DA:B5:2B:56:3A:DD:08:1E:96:F7:4C:98:7E:00:AE:57
            X509v3 Authority Key Identifier:
                keyid:98:03:41:CA:63:28:3F:DC:64:2E:78:3C:45:58:3E:A4:64:42:33:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36852F0/C35834EC825811F08AF34E8CDAE4EC9C/mANBymMoP9xkLng8RVg-pGRCMxs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/mANBymMoP9xkLng8RVg-pGRCMxs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36852F0/C35834EC825811F08AF34E8CDAE4EC9C/mANBymMoP9xkLng8RVg-pGRCMxs.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c8:e5:58:26:3b:05:c7:5c:96:33:b7:03:61:f0:fe:b3:2b:e5:
         21:09:cf:ea:c8:8a:f8:ca:b6:b6:72:99:34:8c:21:e8:c4:50:
         81:d7:45:9c:50:af:ae:8e:00:2a:2e:f7:96:21:56:ef:4e:dc:
         a6:ba:04:e4:b3:96:14:9f:82:8f:1d:a7:5f:d7:78:c0:f6:a0:
         71:86:fd:b4:f5:fe:b2:8f:7b:70:c6:af:da:f2:bd:cb:bf:25:
         69:62:a5:2f:b8:91:36:e0:ae:19:49:b5:9e:00:3c:0a:ad:1a:
         19:bc:fe:cf:c3:9a:9c:fa:0f:00:e8:60:05:3e:c9:44:fc:99:
         0a:a3:81:5d:46:bc:d9:0c:11:3c:8a:d3:1c:ad:79:90:70:87:
         a7:8c:96:a2:07:26:38:d3:55:e9:9a:5b:9f:ed:d5:f7:eb:22:
         e8:9a:4a:b5:07:e5:03:2a:78:82:ca:ab:c3:3d:6e:45:90:06:
         e2:eb:79:ca:b4:07:03:82:93:ef:69:cd:b6:9f:12:10:51:bd:
         03:da:d6:c6:73:1e:79:f4:70:11:c1:89:ae:d4:29:db:cc:9d:
         bd:f2:aa:b0:fd:c7:ab:ce:e4:2b:ca:04:95:3e:eb:01:8d:fa:
         3f:fa:4d:6f:98:1c:47:db:72:68:27:99:74:36:ee:73:88:9e:
         c7:1f:5a:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 02:08:41 2025 by rpki-client