This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A1CEF/73D428FAF13811EBA58CBF17D8A014CE/DjU23jQviMVeSslMS36nCgwn6aE.mft
File:                     DjU23jQviMVeSslMS36nCgwn6aE.mft (raw, json)
Hash identifier:          kASZz90Hgn5cJvhI9MLE5m8YIRxPbh/3TwhuoAR5w0M=
Subject key identifier:   DD:1B:01:57:42:82:C0:46:A6:61:A7:A7:A3:DB:A2:B6:B2:E6:94:8F
Authority key identifier: 0E:35:36:DE:34:2F:88:C5:5E:4A:C9:4C:4B:7E:A7:0A:0C:27:E9:A1
Certificate issuer:       /CN=F36A1CEFAR/serialNumber=0E3536DE342F88C55E4AC94C4B7EA70A0C27E9A1
Certificate serial:       067B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/DjU23jQviMVeSslMS36nCgwn6aE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A1CEF/73D428FAF13811EBA58CBF17D8A014CE/DjU23jQviMVeSslMS36nCgwn6aE.mft
Manifest number:          0679
Signing time:             Sat 20 Dec 2025 02:19:52 +0000
Manifest this update:     Sat 20 Dec 2025 02:19:51 +0000
Manifest next update:     Mon 22 Dec 2025 02:19:51 +0000
Files and hashes:         1: DjU23jQviMVeSslMS36nCgwn6aE.crl (hash: ZaxAwnwsXd6NdwJzgd8Vl7/vppnCL2Y+W0Wrrv5BQDY=)
                          2: A6E483ACF13D11EBB28E971FD8A014CE.roa (hash: tXqfjeHuKCyrjlrfXizxneaHbdNneJ3cppKugGAFdHI=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A1CEF/73D428FAF13811EBA58CBF17D8A014CE/DjU23jQviMVeSslMS36nCgwn6aE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A1CEF/73D428FAF13811EBA58CBF17D8A014CE/DjU23jQviMVeSslMS36nCgwn6aE.mft
                          rsync://rpki.afrinic.net/repository/arin/DjU23jQviMVeSslMS36nCgwn6aE.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 22 Dec 2025 00:26:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1659 (0x67b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A1CEFAR, serialNumber=0E3536DE342F88C55E4AC94C4B7EA70A0C27E9A1
        Validity
            Not Before: Dec 20 02:19:51 2025 GMT
            Not After : Dec 22 02:19:51 2025 GMT
        Subject: CN=694607c8-d2f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:f9:a1:b0:df:dc:68:a7:a4:64:59:66:43:e3:
                    ae:a9:4c:9f:09:32:68:d8:7d:20:f3:ae:46:90:e3:
                    b2:32:9f:7f:9b:b0:50:96:31:e9:20:80:f4:2a:68:
                    07:92:26:2b:3f:b6:7f:68:f2:ee:36:a9:8b:5e:f2:
                    02:63:6e:3e:d7:15:08:e0:37:11:32:a3:60:ca:b4:
                    0f:99:05:93:d6:5f:4e:e5:5c:a6:5e:15:14:58:3c:
                    64:56:dc:d1:93:01:e8:d9:95:c8:77:f9:1d:86:dd:
                    b7:7b:23:17:a9:79:b1:d3:9a:bb:cd:c9:dc:c2:b9:
                    a3:30:14:14:55:25:a7:fc:97:0a:86:c5:aa:d6:86:
                    16:93:7b:5b:4a:9d:52:93:ba:0e:a4:4e:36:c4:51:
                    c6:14:7e:09:a0:0d:e5:c7:e2:81:10:c5:d3:84:85:
                    32:0d:8a:0a:6c:28:7e:ad:87:44:86:03:d6:06:95:
                    d8:d2:f6:7d:9b:9c:f1:e2:77:54:d7:30:9e:8c:21:
                    8e:f6:45:6d:5d:db:19:93:72:4a:a3:9d:fd:b7:30:
                    fc:b1:85:29:3d:db:6c:ae:d1:f3:10:95:30:fe:12:
                    8a:43:20:bb:be:63:78:96:26:03:bf:36:e3:eb:e3:
                    5d:e1:27:93:32:10:21:ff:d6:38:b3:f2:3b:3b:59:
                    d5:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:1B:01:57:42:82:C0:46:A6:61:A7:A7:A3:DB:A2:B6:B2:E6:94:8F
            X509v3 Authority Key Identifier:
                keyid:0E:35:36:DE:34:2F:88:C5:5E:4A:C9:4C:4B:7E:A7:0A:0C:27:E9:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A1CEF/73D428FAF13811EBA58CBF17D8A014CE/DjU23jQviMVeSslMS36nCgwn6aE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/DjU23jQviMVeSslMS36nCgwn6aE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A1CEF/73D428FAF13811EBA58CBF17D8A014CE/DjU23jQviMVeSslMS36nCgwn6aE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:60:57:20:3d:0c:b2:0f:c5:e6:f1:8e:35:14:56:40:a9:6d:
         02:f7:a1:4b:24:74:6b:fe:ac:a5:31:61:61:3c:18:25:0c:3f:
         b5:bf:05:af:60:49:79:b7:cc:85:1c:55:18:65:cd:be:e5:77:
         fd:8f:7d:c4:c7:83:c5:41:0e:41:2a:37:8c:12:21:d2:51:ce:
         fd:83:e3:1f:2e:c9:d8:69:a4:e7:a7:71:7c:9b:88:19:2b:9c:
         98:d3:ab:0b:85:66:c1:29:10:19:db:bc:91:5f:fc:87:5d:02:
         f0:b6:e5:3f:fa:ac:b2:50:a6:9a:63:96:80:8b:c2:4c:09:18:
         44:57:85:b8:81:c4:c0:9b:d4:dd:ad:ea:b5:59:99:0d:b9:f5:
         dc:9d:f2:c5:41:c5:20:a7:97:df:b1:81:22:61:e9:d2:80:0a:
         8a:e7:1d:0f:89:f2:c5:0f:cb:c1:05:e1:51:cb:6e:cd:73:1d:
         77:69:49:bf:9f:67:3a:22:84:42:93:0b:ca:4f:b6:bf:d8:4f:
         d1:eb:bb:9e:9b:7d:1a:69:c2:54:97:1b:05:ef:65:91:07:63:
         67:96:2f:fd:76:ce:42:9b:12:e5:2a:b9:d1:4b:3e:cd:62:88:
         74:f3:26:03:8b:8b:ec:43:d5:81:01:bd:ab:29:c4:f8:35:89:
         ad:b7:e0:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 22:49:01 2025 by rpki-client