This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F4A1/A61F3BB83F5C11EF9D4CC77E762E951A/gl2wNPq0N6iajdJEBqtygseLYro.mft
File:                     gl2wNPq0N6iajdJEBqtygseLYro.mft (raw, json)
Hash identifier:          WutZ9lEKm5+48MK1h4UQMadDdQrmZscA3ipOGpJ0d9A=
Subject key identifier:   2F:DE:FD:0A:DE:8B:17:EC:DD:C2:60:DE:26:9C:33:57:31:CC:DC:47
Authority key identifier: 82:5D:B0:34:FA:B4:37:A8:9A:8D:D2:44:06:AB:72:82:C7:8B:62:BA
Certificate issuer:       /CN=F368F4A1AR/serialNumber=825DB034FAB437A89A8DD24406AB7282C78B62BA
Certificate serial:       022D
Authority info access:    rsync://rpki.afrinic.net/repository/arin/gl2wNPq0N6iajdJEBqtygseLYro.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F4A1/A61F3BB83F5C11EF9D4CC77E762E951A/gl2wNPq0N6iajdJEBqtygseLYro.mft
Manifest number:          0225
Signing time:             Fri 19 Dec 2025 04:23:00 +0000
Manifest this update:     Fri 19 Dec 2025 04:22:59 +0000
Manifest next update:     Sun 21 Dec 2025 04:22:59 +0000
Files and hashes:         1: gl2wNPq0N6iajdJEBqtygseLYro.crl (hash: c6kjAWpkeit3vcctUwHxr2++KG9nYkTxGQvoI7WeHMM=)
                          2: A11224BE49CA11EF9C401F91762E951A.roa (hash: KDj2Lzc4dz6ze7gmYdXtI25bUBjs8RYx75qbzXwadro=)
                          3: FFBD17A449C911EF9BD0848C762E951A.roa (hash: 1q6DfjzPCakdGBa3y25kmYy0lgCV4qqQEYn4uXM0n0g=)
                          4: EC0AAE60435711EFB8E0D6BA762E951A.roa (hash: CywE6U5JIpUptFBIfv36q/lnpSHgsnnC42/YpAaW+DI=)
                          5: B6688076435611EFAB2BE6B1762E951A.roa (hash: 9tse/mxNJXfyu1H3gIXX1krLQVJ31qcACHPTQWNjpxU=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F4A1/A61F3BB83F5C11EF9D4CC77E762E951A/gl2wNPq0N6iajdJEBqtygseLYro.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F4A1/A61F3BB83F5C11EF9D4CC77E762E951A/gl2wNPq0N6iajdJEBqtygseLYro.mft
                          rsync://rpki.afrinic.net/repository/arin/gl2wNPq0N6iajdJEBqtygseLYro.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 21 Dec 2025 00:26:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 557 (0x22d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F4A1AR, serialNumber=825DB034FAB437A89A8DD24406AB7282C78B62BA
        Validity
            Not Before: Dec 19 04:22:59 2025 GMT
            Not After : Dec 21 04:22:59 2025 GMT
        Subject: CN=6944d323-99f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:f7:0b:67:be:b1:d8:e1:5f:63:b6:3d:fb:b1:
                    79:89:93:26:d0:61:85:c7:30:fc:a2:96:8b:8f:b4:
                    08:8f:80:f3:36:a5:30:55:1a:13:e2:04:30:bf:9d:
                    9e:11:5b:88:82:c4:da:ee:29:64:d2:0c:04:a1:34:
                    c3:b8:dc:87:57:2f:6d:0c:13:e3:9f:cc:fc:ec:89:
                    3e:21:ff:b7:55:7e:c6:c9:0b:c9:2e:39:36:c4:8e:
                    05:c7:18:26:62:46:7f:a4:5c:de:54:50:cc:ab:15:
                    66:90:c5:12:cb:ef:9c:23:46:45:a7:fb:f3:c9:72:
                    34:05:16:d4:c9:d8:41:32:42:22:6e:54:27:0f:64:
                    11:39:36:71:e0:fc:ca:2b:82:b7:89:6e:d0:fa:c8:
                    c8:a7:a3:f1:21:6d:e7:16:a2:a6:ca:c4:14:ff:fb:
                    3e:cb:0e:17:a1:58:1d:27:02:55:70:6d:0c:8c:2f:
                    1d:a5:12:bb:42:e3:a1:22:67:c5:cf:54:98:07:81:
                    7b:a8:57:e3:a4:b2:43:df:1a:c1:d1:00:54:fc:ab:
                    f2:e5:41:e5:62:fe:9e:86:ed:f8:f4:65:f7:b9:90:
                    0e:e0:31:11:90:f2:22:fa:37:f0:0b:09:ac:66:dc:
                    14:3e:b7:b2:97:98:cf:6e:7c:27:c4:19:0b:f2:9e:
                    17:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:DE:FD:0A:DE:8B:17:EC:DD:C2:60:DE:26:9C:33:57:31:CC:DC:47
            X509v3 Authority Key Identifier:
                keyid:82:5D:B0:34:FA:B4:37:A8:9A:8D:D2:44:06:AB:72:82:C7:8B:62:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F4A1/A61F3BB83F5C11EF9D4CC77E762E951A/gl2wNPq0N6iajdJEBqtygseLYro.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/gl2wNPq0N6iajdJEBqtygseLYro.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F4A1/A61F3BB83F5C11EF9D4CC77E762E951A/gl2wNPq0N6iajdJEBqtygseLYro.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:77:9a:f4:49:c8:eb:5b:51:57:3d:74:66:67:77:28:59:93:
         7d:a9:98:d1:25:2c:8b:fd:45:4d:70:00:f6:40:fb:d8:31:f3:
         17:9c:56:04:bc:d5:f6:fa:4f:f3:37:44:92:32:11:7f:d5:3e:
         39:67:4e:fa:8a:91:07:d0:9f:d1:1d:af:44:61:1c:bd:96:4f:
         4c:df:f5:9b:60:a2:73:d5:51:62:c5:71:99:62:8e:93:da:3c:
         42:ce:68:03:2f:88:53:d4:7c:7b:67:53:a6:da:06:91:31:cf:
         0e:a1:d4:be:21:44:01:93:0a:62:17:87:72:d3:46:91:ac:06:
         90:10:5f:fc:83:72:00:90:ae:8e:cc:74:1e:e1:36:7f:e2:bb:
         33:4f:79:4c:2c:0e:d5:ad:89:54:dd:71:87:39:aa:a1:19:58:
         dc:e8:e5:e1:fa:ee:27:a6:2b:96:b7:a4:8f:41:bc:1a:56:e3:
         f2:85:f4:8c:01:41:ee:0b:c6:7c:fb:62:b3:23:73:0b:2a:f8:
         16:22:e0:b9:4f:14:f1:d2:92:d2:76:d8:64:45:1d:52:f0:44:
         8d:47:ca:eb:db:45:22:3f:24:65:9f:71:62:b9:49:68:5f:d5:
         d4:d5:ad:34:16:dc:39:27:99:9b:7d:85:b6:cc:6f:8a:e4:23:
         da:a2:a6:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 20:27:40 2025 by rpki-client