This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3687682/ECCB3E1C009211EF94AE900D017001B1/ZoAHqf6WL0fU33c33hdQYKxavOw.mft
File:                     ZoAHqf6WL0fU33c33hdQYKxavOw.mft (raw, json)
Hash identifier:          DJPWrEQ6b4CDBKxH4B7WzAifGIQYCnFa/oN/mjg+/rI=
Subject key identifier:   49:CD:62:2F:14:72:42:EB:6A:54:7B:A6:5F:04:5A:3B:BF:95:89:E4
Authority key identifier: 66:80:07:A9:FE:96:2F:47:D4:DF:77:37:DE:17:50:60:AC:5A:BC:EC
Certificate issuer:       /CN=F3687682AR/serialNumber=668007A9FE962F47D4DF7737DE175060AC5ABCEC
Certificate serial:       0272
Authority info access:    rsync://rpki.afrinic.net/repository/arin/ZoAHqf6WL0fU33c33hdQYKxavOw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3687682/ECCB3E1C009211EF94AE900D017001B1/ZoAHqf6WL0fU33c33hdQYKxavOw.mft
Manifest number:          0270
Signing time:             Fri 19 Dec 2025 04:12:40 +0000
Manifest this update:     Fri 19 Dec 2025 04:12:39 +0000
Manifest next update:     Sun 21 Dec 2025 04:12:39 +0000
Files and hashes:         1: ZoAHqf6WL0fU33c33hdQYKxavOw.crl (hash: v8EQK+yV5tEVKY+EG0hxbfMiGilxeMl5Ha55VuCRLdU=)
                          2: 4348CF92009411EF9CFF8618017001B1.roa (hash: kE7Wa2CuajfImbklB2Ig5E0X9bA3vR+6n/vZhq2Lzac=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3687682/ECCB3E1C009211EF94AE900D017001B1/ZoAHqf6WL0fU33c33hdQYKxavOw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3687682/ECCB3E1C009211EF94AE900D017001B1/ZoAHqf6WL0fU33c33hdQYKxavOw.mft
                          rsync://rpki.afrinic.net/repository/arin/ZoAHqf6WL0fU33c33hdQYKxavOw.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 21 Dec 2025 04:12:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 626 (0x272)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3687682AR, serialNumber=668007A9FE962F47D4DF7737DE175060AC5ABCEC
        Validity
            Not Before: Dec 19 04:12:39 2025 GMT
            Not After : Dec 21 04:12:39 2025 GMT
        Subject: CN=6944d0b8-6345
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:3c:89:f9:ea:dd:89:4d:28:c3:a7:46:29:9a:
                    8e:67:83:05:5d:38:6f:bb:e5:fa:fb:08:96:7a:8b:
                    df:93:10:16:1d:51:67:71:ba:3f:8d:c0:ec:40:e9:
                    94:52:1d:45:37:f3:92:08:de:65:56:7e:35:11:ae:
                    52:5a:4e:cf:47:84:1f:33:9f:f7:3f:b9:a1:7d:86:
                    d7:61:0e:87:a5:e8:17:cc:f6:54:0a:22:68:48:1a:
                    61:00:3e:21:56:49:11:70:dc:bf:a6:95:40:15:db:
                    d7:e0:c6:81:35:c6:61:d9:a4:1a:4a:01:9b:5f:79:
                    21:ed:6a:5f:30:d6:9f:87:0a:e1:da:74:e3:aa:a9:
                    f7:b8:b6:82:78:92:ac:eb:12:ee:72:b3:4f:17:92:
                    33:72:f8:13:37:bc:f5:5e:23:f6:8a:05:47:cd:d9:
                    89:35:ec:1d:df:18:2d:90:53:77:73:89:24:5d:85:
                    ee:32:f1:be:84:6c:1a:5b:8e:87:9b:5b:69:ad:e7:
                    dc:4a:53:ef:f5:3a:1d:9a:17:93:81:50:ad:2c:1d:
                    5f:9d:38:75:11:b5:1f:81:fe:28:51:a6:cf:9f:df:
                    20:34:40:90:a0:71:8f:f5:1d:c1:1b:2e:b8:a0:cd:
                    bb:a1:3f:77:82:99:1e:04:9c:49:b4:6c:89:57:9b:
                    8c:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:CD:62:2F:14:72:42:EB:6A:54:7B:A6:5F:04:5A:3B:BF:95:89:E4
            X509v3 Authority Key Identifier:
                keyid:66:80:07:A9:FE:96:2F:47:D4:DF:77:37:DE:17:50:60:AC:5A:BC:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3687682/ECCB3E1C009211EF94AE900D017001B1/ZoAHqf6WL0fU33c33hdQYKxavOw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/ZoAHqf6WL0fU33c33hdQYKxavOw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3687682/ECCB3E1C009211EF94AE900D017001B1/ZoAHqf6WL0fU33c33hdQYKxavOw.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ba:ef:fb:7c:64:25:32:f2:6f:d1:bf:78:f5:8c:30:ef:b9:1b:
         7d:1f:d3:96:fb:d2:11:b3:4f:85:6f:06:d8:52:20:82:c2:f4:
         6f:75:e1:ff:1e:bc:f6:70:63:1f:f5:c7:cf:92:4b:ce:f7:34:
         c8:d9:46:c0:35:0e:2e:58:07:7f:a7:d1:35:3b:6f:8c:a1:df:
         10:04:2c:1d:36:80:1a:c9:21:bb:c5:da:1a:17:9c:16:ba:b3:
         cc:fe:42:7a:59:3c:b1:df:fd:13:54:de:6c:a0:af:88:24:96:
         cb:a4:ca:ce:5b:24:0e:a8:25:a8:9a:24:0c:99:cb:ec:0a:b4:
         3b:bc:5f:4a:c5:99:86:ff:61:07:62:33:28:52:5c:d8:e6:53:
         19:63:7a:da:1e:e0:b6:98:46:17:66:ae:8a:f0:1f:b2:d4:d6:
         ce:0a:65:ad:f0:c7:87:ee:ae:38:e5:fc:51:08:d8:f0:e2:e5:
         e0:3a:69:41:dd:23:37:c8:0d:5e:77:db:f9:0b:a7:45:19:d6:
         ef:8a:05:86:ef:8b:9b:88:b5:79:a2:6a:f7:4f:e8:6b:36:da:
         e6:46:f5:a5:67:3c:78:2f:41:55:0f:6c:9e:5b:1b:20:f8:d6:
         ab:27:39:44:63:fc:5d:de:0f:09:63:db:58:7f:98:08:08:c0:
         16:64:3a:31
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgICAnIwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
ODc2ODJBUjExMC8GA1UEBRMoNjY4MDA3QTlGRTk2MkY0N0Q0REY3NzM3REUxNzUw
NjBBQzVBQkNFQzAeFw0yNTEyMTkwNDEyMzlaFw0yNTEyMjEwNDEyMzlaMBgxFjAU
BgNVBAMTDTY5NDRkMGI4LTYzNDUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDcPIn56t2JTSjDp0Ypmo5ngwVdOG+75fr7CJZ6i9+TEBYdUWdxuj+NwOxA
6ZRSHUU385II3mVWfjURrlJaTs9HhB8zn/c/uaF9htdhDoel6BfM9lQKImhIGmEA
PiFWSRFw3L+mlUAV29fgxoE1xmHZpBpKAZtfeSHtal8w1p+HCuHadOOqqfe4toJ4
kqzrEu5ys08XkjNy+BM3vPVeI/aKBUfN2Yk17B3fGC2QU3dziSRdhe4y8b6EbBpb
joebW2mt59xKU+/1Oh2aF5OBUK0sHV+dOHURtR+B/ihRps+f3yA0QJCgcY/1HcEb
LrigzbuhP3eCmR4EnEm0bIlXm4yDAgMBAAGjggK1MIICsTAdBgNVHQ4EFgQUSc1i
LxRyQutqVHumXwRaO7+VieQwHwYDVR0jBBgwFoAUZoAHqf6WL0fU33c33hdQYKxa
vOwwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjg3NjgyL0VDQ0IzRTFDMDA5MjExRUY5NEFFOTAwRDAxNzAwMUIxL1pvQUhx
ZjZXTDBmVTMzYzMzaGRRWUt4YXZPdy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L1pvQUhxZjZXTDBmVTMzYzMzaGRRWUt4YXZPdy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEFBQcw
C4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl
cG9zaXRvcnkvRjM2ODc2ODIvRUNDQjNFMUMwMDkyMTFFRjk0QUU5MDBEMDE3MDAx
QjEvWm9BSHFmNldMMGZVMzNjMzNoZFFZS3hhdk93Lm1mdDA1BggrBgEFBQcwDYYp
aHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA
AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQC67/t8ZCUy8m/Rv3j1jDDvuRt9H9OW+9IR
s0+FbwbYUiCCwvRvdeH/Hrz2cGMf9cfPkkvO9zTI2UbANQ4uWAd/p9E1O2+Mod8Q
BCwdNoAaySG7xdoaF5wWurPM/kJ6WTyx3/0TVN5soK+IJJbLpMrOWyQOqCWomiQM
mcvsCrQ7vF9KxZmG/2EHYjMoUlzY5lMZY3raHuC2mEYXZq6K8B+y1NbOCmWt8MeH
7q445fxRCNjw4uXgOmlB3SM3yA1ed9v5C6dFGdbvigWG74ubiLV5omr3T+hrNtrm
RvWlZzx4L0FVD2yeWxsg+NarJzlEY/xd3g8JY9tYf5gICMAWZDox
-----END CERTIFICATE-----
Generated at Sat Dec 20 03:31:20 2025 by rpki-client