This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3687682/ECCB3E1C009211EF94AE900D017001B1/ZoAHqf6WL0fU33c33hdQYKxavOw.mft
File:                     ZoAHqf6WL0fU33c33hdQYKxavOw.mft (raw, json)
Hash identifier:          QpFQQEoj6/sfKdBruOXkgNj7FHLKsws7cWfhWUrm0d4=
Subject key identifier:   AD:19:07:BF:1A:7F:3D:95:46:97:17:9B:C9:8A:06:E8:60:ED:3E:5D
Authority key identifier: 66:80:07:A9:FE:96:2F:47:D4:DF:77:37:DE:17:50:60:AC:5A:BC:EC
Certificate issuer:       /CN=F3687682AR/serialNumber=668007A9FE962F47D4DF7737DE175060AC5ABCEC
Certificate serial:       0284
Authority info access:    rsync://rpki.afrinic.net/repository/arin/ZoAHqf6WL0fU33c33hdQYKxavOw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3687682/ECCB3E1C009211EF94AE900D017001B1/ZoAHqf6WL0fU33c33hdQYKxavOw.mft
Manifest number:          0282
Signing time:             Mon 05 Jan 2026 04:12:23 +0000
Manifest this update:     Mon 05 Jan 2026 04:12:23 +0000
Manifest next update:     Wed 07 Jan 2026 04:12:23 +0000
Files and hashes:         1: ZoAHqf6WL0fU33c33hdQYKxavOw.crl (hash: CaxxLxNsDKISohwrCd5OtFeISbxkzD6FxtFCANpGW88=)
                          2: 4348CF92009411EF9CFF8618017001B1.roa (hash: kE7Wa2CuajfImbklB2Ig5E0X9bA3vR+6n/vZhq2Lzac=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3687682/ECCB3E1C009211EF94AE900D017001B1/ZoAHqf6WL0fU33c33hdQYKxavOw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3687682/ECCB3E1C009211EF94AE900D017001B1/ZoAHqf6WL0fU33c33hdQYKxavOw.mft
                          rsync://rpki.afrinic.net/repository/arin/ZoAHqf6WL0fU33c33hdQYKxavOw.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 07 Jan 2026 00:26:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 644 (0x284)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3687682AR, serialNumber=668007A9FE962F47D4DF7737DE175060AC5ABCEC
        Validity
            Not Before: Jan  5 04:12:23 2026 GMT
            Not After : Jan  7 04:12:23 2026 GMT
        Subject: CN=695b3a27-1af0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:40:c0:b9:6b:52:79:54:0a:96:5d:3a:fa:13:
                    6b:8d:d3:f7:94:f5:20:fc:98:70:d2:f6:5d:f6:70:
                    f7:02:ae:fb:4a:3f:0f:58:cc:0d:4b:43:0a:dc:b7:
                    79:00:2a:17:b3:b2:7d:9f:b8:68:b6:5e:65:2e:7f:
                    2b:31:5d:93:44:b2:75:ce:0d:e9:37:82:2d:e7:40:
                    61:ac:f7:e4:c0:20:90:e7:1b:52:5c:b6:a8:bf:27:
                    99:6b:06:d3:03:f2:f9:85:dd:44:15:bc:67:35:8f:
                    6d:77:4d:bf:a1:c6:5e:2a:17:f0:ca:32:0f:28:a8:
                    79:24:d3:86:f7:49:02:df:de:64:22:ae:da:06:c2:
                    d4:6a:fe:b9:ba:6d:61:29:17:76:49:a4:76:a4:a1:
                    03:2c:3d:f8:e9:44:07:8e:66:41:3f:19:bb:3b:ba:
                    af:ed:b4:4e:00:7c:e9:a1:4b:1a:72:39:62:7e:35:
                    e6:a1:3c:8a:31:5a:b6:b9:6b:f8:23:9b:66:98:a5:
                    a5:6c:58:a8:d7:82:60:ef:4f:bb:62:92:df:a6:c7:
                    89:91:72:68:16:fb:d2:f2:15:a0:96:31:32:2c:78:
                    31:2e:96:79:ea:3f:c2:05:3c:99:e0:23:cc:04:ab:
                    3d:44:24:46:f4:36:d0:ec:4a:9e:d3:e0:53:c1:64:
                    fe:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:19:07:BF:1A:7F:3D:95:46:97:17:9B:C9:8A:06:E8:60:ED:3E:5D
            X509v3 Authority Key Identifier:
                keyid:66:80:07:A9:FE:96:2F:47:D4:DF:77:37:DE:17:50:60:AC:5A:BC:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3687682/ECCB3E1C009211EF94AE900D017001B1/ZoAHqf6WL0fU33c33hdQYKxavOw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/ZoAHqf6WL0fU33c33hdQYKxavOw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3687682/ECCB3E1C009211EF94AE900D017001B1/ZoAHqf6WL0fU33c33hdQYKxavOw.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b7:3f:38:7b:8d:90:9d:3a:bf:f0:76:fd:64:7e:29:10:25:38:
         73:4b:28:b3:2e:7d:d2:68:f9:8f:ae:82:46:2a:cc:47:0c:c9:
         a0:cb:48:59:41:ba:48:69:b3:88:c2:21:a0:38:c0:c4:0c:97:
         c5:2c:c0:73:c1:0a:c9:33:d1:06:a8:84:aa:20:97:a2:51:95:
         80:73:cf:eb:d5:ac:d1:66:86:f6:53:c4:cb:20:f7:b1:61:d0:
         e1:ca:38:ad:c0:0d:31:f9:42:40:64:1e:4b:0d:2b:10:ae:bc:
         83:41:14:f6:bf:2a:5c:b2:4e:65:d9:6d:cb:5d:35:98:6d:52:
         11:11:da:02:76:b1:21:f2:77:1a:93:39:d5:a9:34:5d:d1:e5:
         fa:79:d6:4d:83:38:2f:ca:fc:b9:8f:a4:d3:b2:82:72:29:db:
         96:5e:bb:4c:21:7b:23:8b:a8:a3:20:b2:b4:5b:c4:50:b4:ec:
         94:f5:17:18:ff:66:87:50:fd:39:70:c5:b0:f5:f7:31:58:0d:
         11:55:7e:2c:08:8d:12:a8:17:52:7b:00:b0:23:01:83:21:a0:
         f0:47:d2:fa:69:ba:5c:54:cc:6c:66:ea:19:6e:f8:f4:28:1b:
         c7:a5:eb:de:ee:f4:32:10:26:57:49:0a:68:dd:9b:46:37:be:
         cb:4f:70:e8
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgICAoQwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
ODc2ODJBUjExMC8GA1UEBRMoNjY4MDA3QTlGRTk2MkY0N0Q0REY3NzM3REUxNzUw
NjBBQzVBQkNFQzAeFw0yNjAxMDUwNDEyMjNaFw0yNjAxMDcwNDEyMjNaMBgxFjAU
BgNVBAMTDTY5NWIzYTI3LTFhZjAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDEQMC5a1J5VAqWXTr6E2uN0/eU9SD8mHDS9l32cPcCrvtKPw9YzA1LQwrc
t3kAKhezsn2fuGi2XmUufysxXZNEsnXODek3gi3nQGGs9+TAIJDnG1Jctqi/J5lr
BtMD8vmF3UQVvGc1j213Tb+hxl4qF/DKMg8oqHkk04b3SQLf3mQirtoGwtRq/rm6
bWEpF3ZJpHakoQMsPfjpRAeOZkE/Gbs7uq/ttE4AfOmhSxpyOWJ+NeahPIoxWra5
a/gjm2aYpaVsWKjXgmDvT7tikt+mx4mRcmgW+9LyFaCWMTIseDEulnnqP8IFPJng
I8wEqz1EJEb0NtDsSp7T4FPBZP7zAgMBAAGjggK1MIICsTAdBgNVHQ4EFgQUrRkH
vxp/PZVGlxebyYoG6GDtPl0wHwYDVR0jBBgwFoAUZoAHqf6WL0fU33c33hdQYKxa
vOwwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjg3NjgyL0VDQ0IzRTFDMDA5MjExRUY5NEFFOTAwRDAxNzAwMUIxL1pvQUhx
ZjZXTDBmVTMzYzMzaGRRWUt4YXZPdy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L1pvQUhxZjZXTDBmVTMzYzMzaGRRWUt4YXZPdy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEFBQcw
C4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl
cG9zaXRvcnkvRjM2ODc2ODIvRUNDQjNFMUMwMDkyMTFFRjk0QUU5MDBEMDE3MDAx
QjEvWm9BSHFmNldMMGZVMzNjMzNoZFFZS3hhdk93Lm1mdDA1BggrBgEFBQcwDYYp
aHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA
AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQC3Pzh7jZCdOr/wdv1kfikQJThzSyizLn3S
aPmProJGKsxHDMmgy0hZQbpIabOIwiGgOMDEDJfFLMBzwQrJM9EGqISqIJeiUZWA
c8/r1azRZob2U8TLIPexYdDhyjitwA0x+UJAZB5LDSsQrryDQRT2vypcsk5l2W3L
XTWYbVIREdoCdrEh8ncakznVqTRd0eX6edZNgzgvyvy5j6TTsoJyKduWXrtMIXsj
i6ijILK0W8RQtOyU9RcY/2aHUP05cMWw9fcxWA0RVX4sCI0SqBdSewCwIwGDIaDw
R9L6abpcVMxsZuoZbvj0KBvHpeve7vQyECZXSQpo3ZtGN77LT3Do
-----END CERTIFICATE-----
Generated at Mon Jan 5 19:15:32 2026 by rpki-client