This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A413F/D8EC92AED33911EFA750A6B3762E951A/J9ZRBLhSABrB1WULLAw3SPxdaVA.mft
File:                     J9ZRBLhSABrB1WULLAw3SPxdaVA.mft (raw, json)
Hash identifier:          lq652PCsBrcMDBPhepXM/UzapICsTJyN1/VkXfbD/Cc=
Subject key identifier:   E3:F1:4F:56:0C:30:3A:0F:94:BB:F6:CF:CE:61:05:E5:3F:D5:BB:E2
Authority key identifier: 27:D6:51:04:B8:52:00:1A:C1:D5:65:0B:2C:0C:37:48:FC:5D:69:50
Certificate issuer:       /CN=F36A413FAR/serialNumber=27D65104B852001AC1D5650B2C0C3748FC5D6950
Certificate serial:       0162
Authority info access:    rsync://rpki.afrinic.net/repository/arin/J9ZRBLhSABrB1WULLAw3SPxdaVA.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A413F/D8EC92AED33911EFA750A6B3762E951A/J9ZRBLhSABrB1WULLAw3SPxdaVA.mft
Manifest number:          0160
Signing time:             Thu 25 Dec 2025 04:47:29 +0000
Manifest this update:     Thu 25 Dec 2025 04:47:29 +0000
Manifest next update:     Sat 27 Dec 2025 04:47:29 +0000
Files and hashes:         1: J9ZRBLhSABrB1WULLAw3SPxdaVA.crl (hash: SEz02KcylaQp2TTzC1a9dSt09zDY0mPXbDnQC3t4PTU=)
                          2: 485660E2D33B11EFB36E4BBC762E951A.roa (hash: miJkwutQdLFlKKXwBXo4jomSNflYIN5M9tkEV2QPIO0=)
                          3: 0D036F94D33B11EF941C0BBC762E951A.roa (hash: EIHN0q7Gf2yEMmUmQTz3WgcUrSDB0YHCZOvy1CApRc0=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A413F/D8EC92AED33911EFA750A6B3762E951A/J9ZRBLhSABrB1WULLAw3SPxdaVA.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A413F/D8EC92AED33911EFA750A6B3762E951A/J9ZRBLhSABrB1WULLAw3SPxdaVA.mft
                          rsync://rpki.afrinic.net/repository/arin/J9ZRBLhSABrB1WULLAw3SPxdaVA.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 27 Dec 2025 00:26:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 354 (0x162)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A413FAR, serialNumber=27D65104B852001AC1D5650B2C0C3748FC5D6950
        Validity
            Not Before: Dec 25 04:47:29 2025 GMT
            Not After : Dec 27 04:47:29 2025 GMT
        Subject: CN=694cc1e1-4eca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:1c:55:3e:38:3b:fa:14:a8:09:69:16:7c:8a:
                    8d:d3:f0:4a:2d:7c:d5:4c:2b:5a:98:a3:6b:48:18:
                    67:8f:38:7c:03:81:58:da:e3:c9:28:d9:12:44:1f:
                    24:6b:bd:97:52:99:2c:be:ad:5f:0f:23:43:bf:91:
                    de:ed:9c:57:fb:e5:ef:df:46:a7:bc:ef:a5:65:b4:
                    1e:1a:c1:e1:6c:92:f3:ac:d6:dd:6b:7d:bd:d8:4e:
                    4c:36:cb:c4:56:4d:dc:dc:3f:e3:7a:95:03:fb:1f:
                    fa:1b:7a:d6:ec:31:aa:e6:5e:99:67:dd:06:62:3b:
                    4c:d0:9f:fb:96:6a:91:c5:93:6f:5d:b9:4f:3b:45:
                    0b:b7:ce:39:ee:b9:d3:d5:51:16:98:bb:1e:b8:07:
                    a6:f5:86:15:e2:36:25:69:2c:5f:0d:4a:d8:77:b5:
                    53:8b:50:e4:16:3c:22:76:4b:66:ba:5f:68:46:6f:
                    8f:6d:0b:c7:03:ef:1a:c1:71:6d:d2:5f:79:68:86:
                    82:f5:ce:be:2d:b7:36:6b:ca:32:69:16:12:4e:56:
                    f7:0d:29:8b:11:3c:3a:0f:16:be:31:e6:67:ed:c0:
                    ef:95:cc:1d:54:73:e9:35:46:eb:81:af:61:92:17:
                    0e:26:fb:74:67:a9:86:76:91:25:99:6e:d2:ee:1f:
                    de:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:F1:4F:56:0C:30:3A:0F:94:BB:F6:CF:CE:61:05:E5:3F:D5:BB:E2
            X509v3 Authority Key Identifier:
                keyid:27:D6:51:04:B8:52:00:1A:C1:D5:65:0B:2C:0C:37:48:FC:5D:69:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A413F/D8EC92AED33911EFA750A6B3762E951A/J9ZRBLhSABrB1WULLAw3SPxdaVA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/J9ZRBLhSABrB1WULLAw3SPxdaVA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A413F/D8EC92AED33911EFA750A6B3762E951A/J9ZRBLhSABrB1WULLAw3SPxdaVA.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:d6:bd:77:73:15:90:7d:02:03:3b:67:fe:f1:f4:42:6a:cf:
         79:a1:6e:8c:bb:7f:fc:a9:a2:59:92:14:50:14:99:67:85:59:
         cb:ea:8a:8c:f0:ea:18:1c:74:07:0f:cb:0e:3f:0d:89:53:7f:
         37:fa:57:81:0f:96:36:bd:61:03:86:7f:cd:97:b3:21:61:78:
         1e:41:c2:0a:8f:f3:c1:66:e8:ae:38:4a:a8:a0:75:f2:ff:1d:
         c4:0a:20:c1:c2:8c:54:7a:b8:03:d2:a1:64:60:82:af:f8:7c:
         64:22:5a:b3:01:3e:3a:9b:c6:a3:a4:3e:41:c1:93:7f:c6:84:
         06:99:bd:2a:d5:46:64:ee:77:f0:37:1d:7b:f9:b4:c1:78:02:
         58:e3:9b:ed:81:b4:fb:ba:5a:d5:b0:59:c0:91:95:00:98:d0:
         52:62:e9:71:bb:62:6c:b5:aa:f1:08:3b:47:ca:a7:2d:27:4e:
         22:49:1f:6d:99:15:6b:dc:2a:d9:52:ea:6c:c9:ef:29:fc:8d:
         c1:80:92:15:e3:88:f1:52:e3:0b:e7:ec:88:f4:73:13:bf:b6:
         4c:8d:be:10:f5:4e:f0:61:93:92:ce:93:fb:c6:0c:4d:fc:22:
         b3:1a:a4:17:d9:aa:3f:c8:55:8b:0a:21:41:1c:4b:3e:56:95:
         27:09:ba:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 25 19:40:24 2025 by rpki-client