This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A413F/D8EC92AED33911EFA750A6B3762E951A/J9ZRBLhSABrB1WULLAw3SPxdaVA.mft
File:                     J9ZRBLhSABrB1WULLAw3SPxdaVA.mft (raw, json)
Hash identifier:          yHG9PiJS71If4SSZXctzRJXaJXnSgwcl1CmFJFXG4OI=
Subject key identifier:   33:5F:64:08:5A:F9:5B:F8:6C:E3:39:65:D9:7E:83:14:65:2F:1A:FE
Authority key identifier: 27:D6:51:04:B8:52:00:1A:C1:D5:65:0B:2C:0C:37:48:FC:5D:69:50
Certificate issuer:       /CN=F36A413FAR/serialNumber=27D65104B852001AC1D5650B2C0C3748FC5D6950
Certificate serial:       015D
Authority info access:    rsync://rpki.afrinic.net/repository/arin/J9ZRBLhSABrB1WULLAw3SPxdaVA.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A413F/D8EC92AED33911EFA750A6B3762E951A/J9ZRBLhSABrB1WULLAw3SPxdaVA.mft
Manifest number:          015B
Signing time:             Sat 20 Dec 2025 04:48:38 +0000
Manifest this update:     Sat 20 Dec 2025 04:48:37 +0000
Manifest next update:     Mon 22 Dec 2025 04:48:37 +0000
Files and hashes:         1: J9ZRBLhSABrB1WULLAw3SPxdaVA.crl (hash: YCdyzjFEfa5N/ociF86VxfKukBNJsDVe6KUsWaOIhmo=)
                          2: 485660E2D33B11EFB36E4BBC762E951A.roa (hash: miJkwutQdLFlKKXwBXo4jomSNflYIN5M9tkEV2QPIO0=)
                          3: 0D036F94D33B11EF941C0BBC762E951A.roa (hash: EIHN0q7Gf2yEMmUmQTz3WgcUrSDB0YHCZOvy1CApRc0=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A413F/D8EC92AED33911EFA750A6B3762E951A/J9ZRBLhSABrB1WULLAw3SPxdaVA.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A413F/D8EC92AED33911EFA750A6B3762E951A/J9ZRBLhSABrB1WULLAw3SPxdaVA.mft
                          rsync://rpki.afrinic.net/repository/arin/J9ZRBLhSABrB1WULLAw3SPxdaVA.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 22 Dec 2025 04:48:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 349 (0x15d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A413FAR, serialNumber=27D65104B852001AC1D5650B2C0C3748FC5D6950
        Validity
            Not Before: Dec 20 04:48:37 2025 GMT
            Not After : Dec 22 04:48:37 2025 GMT
        Subject: CN=69462aa6-a128
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:25:67:09:6e:bd:9a:4f:ca:5e:32:5a:1a:18:
                    35:b1:23:91:53:43:b5:d2:7b:ca:ea:a6:ae:5d:47:
                    90:9d:81:26:78:25:3e:2e:14:0f:5c:07:b0:c3:8e:
                    72:5c:84:83:8e:b6:38:fd:26:a9:b3:4f:18:d3:1b:
                    17:a3:59:9d:0c:91:dc:e5:b9:48:2b:2e:55:d2:f7:
                    83:30:80:ed:da:33:c5:c2:82:af:09:73:dd:2d:fe:
                    a9:e7:b3:39:99:f0:7e:35:37:09:af:40:9b:a8:0e:
                    3f:9f:39:00:90:2d:77:35:13:2b:79:e4:f7:12:ea:
                    d8:27:52:29:40:92:e6:ee:8a:56:83:03:a8:d3:3b:
                    95:14:82:36:4c:a9:91:cb:63:67:a6:52:4b:f6:3e:
                    8c:b5:45:fb:59:96:2f:a1:bb:98:5a:59:8a:83:84:
                    42:23:9f:36:ac:28:32:46:a1:d7:0c:20:ba:28:b7:
                    6b:28:28:3f:df:1e:a5:3c:9e:e9:62:09:f3:56:e4:
                    3e:96:ca:86:d4:db:54:68:cc:b2:4a:45:bb:1e:75:
                    a3:b7:26:be:bc:ba:c2:20:20:70:ee:85:86:be:39:
                    90:46:9f:e4:f9:7d:c7:66:d4:6a:f3:e5:18:0a:69:
                    3f:37:b0:8d:b1:d1:a0:ff:87:d2:26:78:aa:e8:18:
                    fb:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:5F:64:08:5A:F9:5B:F8:6C:E3:39:65:D9:7E:83:14:65:2F:1A:FE
            X509v3 Authority Key Identifier:
                keyid:27:D6:51:04:B8:52:00:1A:C1:D5:65:0B:2C:0C:37:48:FC:5D:69:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A413F/D8EC92AED33911EFA750A6B3762E951A/J9ZRBLhSABrB1WULLAw3SPxdaVA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/J9ZRBLhSABrB1WULLAw3SPxdaVA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A413F/D8EC92AED33911EFA750A6B3762E951A/J9ZRBLhSABrB1WULLAw3SPxdaVA.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d4:78:6c:b4:49:9c:2b:40:69:3c:1c:cf:ec:0e:13:23:a9:4c:
         0d:bd:69:94:fd:ef:05:ee:0e:ed:35:e8:31:6b:54:e2:b6:2c:
         2e:a4:b2:c8:97:cb:b2:34:5a:66:b7:b0:49:24:29:88:ff:38:
         2c:2b:29:fb:34:1f:d1:4e:de:95:a0:1e:45:96:cd:57:f4:0c:
         76:14:81:b0:72:1c:59:82:22:b3:9d:ae:f7:78:fd:98:80:e0:
         eb:48:96:df:8f:7b:06:9a:3f:98:f3:4b:68:4b:3c:60:26:82:
         46:77:89:fe:8c:6d:28:c0:15:68:93:0a:4a:1d:c3:c3:9d:86:
         24:99:d6:47:00:fa:3a:73:c4:a3:1b:84:be:41:d7:22:7b:11:
         4f:4a:5b:a2:62:68:82:25:bc:02:a3:a0:ce:1a:88:28:77:75:
         9c:47:1b:6b:d8:ad:c2:be:e0:68:e8:bc:f2:14:1d:05:7d:0f:
         16:05:89:e3:94:b7:f8:95:17:be:49:f7:54:fb:18:e6:9e:ca:
         1b:ec:93:8f:fc:66:dd:41:ce:32:0d:e6:4e:75:d9:25:27:8f:
         31:44:6f:0f:1a:d6:8b:4e:49:89:53:3e:16:d6:27:99:20:ea:
         e5:71:2f:8f:8d:57:69:39:1b:8a:20:82:8a:5e:e3:2e:8a:38:
         91:80:07:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 02:03:40 2025 by rpki-client