This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A4459/E99BCBEA2D1B11EDA54FC78BF1222468/oeAWQGNsg8ItBwmSQsz0wmkQK14.mft
File:                     oeAWQGNsg8ItBwmSQsz0wmkQK14.mft (raw, json)
Hash identifier:          exZfCoGsJs8wtd9wGfDpssCSZgLYq9YtRvVN6/uBWhY=
Subject key identifier:   A4:04:A2:44:4C:38:1D:93:7E:8A:F8:06:B7:D8:4E:F4:A3:26:69:6C
Authority key identifier: A1:E0:16:40:63:6C:83:C2:2D:07:09:92:42:CC:F4:C2:69:10:2B:5E
Certificate issuer:       /CN=F36A4459AR/serialNumber=A1E01640636C83C22D07099242CCF4C269102B5E
Certificate serial:       04E2
Authority info access:    rsync://rpki.afrinic.net/repository/arin/oeAWQGNsg8ItBwmSQsz0wmkQK14.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A4459/E99BCBEA2D1B11EDA54FC78BF1222468/oeAWQGNsg8ItBwmSQsz0wmkQK14.mft
Manifest number:          04DE
Signing time:             Sat 20 Dec 2025 02:58:38 +0000
Manifest this update:     Sat 20 Dec 2025 02:58:37 +0000
Manifest next update:     Mon 22 Dec 2025 02:58:37 +0000
Files and hashes:         1: oeAWQGNsg8ItBwmSQsz0wmkQK14.crl (hash: zl0bDN/JKf9oZ1Ojdze6x4zAoZ6XnpgrqkaxVOHcRq8=)
                          2: 1F08DD5ED16711EEACC86AA3775412E6.roa (hash: Az9hy8W484eMfFVCabnds9LtEfLT4iJCPtwyoHAX59g=)
                          3: 013601FA2D1F11EDB1D2DC93F1222468.roa (hash: yGuY2CCJU8+S6SbKAlGxxoY56hHo78tBwYij9EjfVDE=)
                          4: 3876EB0ED16811EE9C0E66A5775412E6.roa (hash: +yOAS1cNO7QrZSN56ooSffQEaFtdkY96rU9n2WKG4AA=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A4459/E99BCBEA2D1B11EDA54FC78BF1222468/oeAWQGNsg8ItBwmSQsz0wmkQK14.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A4459/E99BCBEA2D1B11EDA54FC78BF1222468/oeAWQGNsg8ItBwmSQsz0wmkQK14.mft
                          rsync://rpki.afrinic.net/repository/arin/oeAWQGNsg8ItBwmSQsz0wmkQK14.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 22 Dec 2025 00:26:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1250 (0x4e2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A4459AR, serialNumber=A1E01640636C83C22D07099242CCF4C269102B5E
        Validity
            Not Before: Dec 20 02:58:37 2025 GMT
            Not After : Dec 22 02:58:37 2025 GMT
        Subject: CN=694610dd-b23c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:97:22:1b:e9:c6:de:c0:36:75:23:9c:83:e1:
                    63:92:de:33:5e:ab:b1:86:20:d9:ab:73:0d:16:f5:
                    25:b6:62:df:c3:e5:bf:1a:d7:84:67:97:12:e2:ef:
                    77:72:b9:2a:11:cd:2b:a5:b2:b1:e6:51:9c:e5:5f:
                    e8:d7:ba:8a:98:5e:b8:e4:0c:cf:2c:ed:52:41:07:
                    24:6a:69:b4:e4:91:9c:c3:2c:49:16:22:1a:e5:dc:
                    f5:9d:ff:5e:3d:96:52:85:d8:c3:70:0b:b9:4f:f0:
                    dd:2a:c3:e3:e3:cf:a1:0c:b8:89:d7:e4:84:9f:b3:
                    22:bd:28:10:36:17:1d:ca:e1:75:d9:01:6d:96:7f:
                    08:bd:0e:39:fb:b9:b3:26:72:74:68:a2:d7:c3:08:
                    a2:30:38:c1:42:3f:ca:e0:60:44:9a:bd:2a:b3:b5:
                    71:80:3d:a6:96:7b:47:79:ec:bb:ad:bb:af:f4:dc:
                    9e:9f:ad:d2:e6:b6:2d:0c:ca:a8:c7:2b:21:ab:24:
                    7d:5a:66:ce:0d:20:b1:ee:fe:b5:4d:de:7b:12:d3:
                    5a:89:a2:f8:a5:a7:bc:b0:f4:0e:9b:b2:40:c0:d8:
                    34:2e:2f:64:7f:f8:8b:e0:17:cc:cf:09:2c:da:f5:
                    0c:3c:9f:df:a8:00:b6:6d:df:31:0c:90:32:a9:97:
                    87:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:04:A2:44:4C:38:1D:93:7E:8A:F8:06:B7:D8:4E:F4:A3:26:69:6C
            X509v3 Authority Key Identifier:
                keyid:A1:E0:16:40:63:6C:83:C2:2D:07:09:92:42:CC:F4:C2:69:10:2B:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A4459/E99BCBEA2D1B11EDA54FC78BF1222468/oeAWQGNsg8ItBwmSQsz0wmkQK14.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/oeAWQGNsg8ItBwmSQsz0wmkQK14.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A4459/E99BCBEA2D1B11EDA54FC78BF1222468/oeAWQGNsg8ItBwmSQsz0wmkQK14.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:cb:86:bd:61:89:52:08:4b:10:b1:d5:f9:db:3c:1b:1b:30:
         34:4c:1e:05:68:11:9b:5a:27:d8:d6:d4:dc:07:0b:57:22:85:
         db:14:d7:82:33:e3:4a:f1:d3:ca:a2:cb:f8:6c:07:74:d5:07:
         89:1d:a0:38:38:ce:aa:47:ec:53:a9:a7:d5:ba:63:36:c4:bb:
         a0:52:97:21:f8:cb:a7:03:c2:9a:c4:39:06:c2:60:84:52:3c:
         6b:83:7d:29:46:df:f9:d9:c1:9a:09:88:9e:d7:8c:d8:65:86:
         c9:a7:6f:01:4b:21:ae:ef:e8:f2:a7:fd:ee:27:c2:a1:38:1b:
         65:2e:26:bc:68:d1:c2:96:2e:43:12:5b:f3:98:e0:58:94:f9:
         99:94:87:77:27:e3:b4:1a:71:55:3a:76:2a:a4:08:28:75:c9:
         87:28:ee:ee:17:dd:4d:df:4f:72:ed:03:23:12:87:6c:ad:d2:
         9b:bc:4f:fb:09:5b:47:73:1e:91:36:63:2c:cc:c1:38:f4:b1:
         68:63:a3:b9:e7:d0:5a:24:de:04:81:ee:11:7d:46:36:59:c3:
         cc:7f:d5:0a:53:c2:c3:e2:e6:49:5c:4d:9e:93:32:90:63:0d:
         05:80:f7:97:17:4d:be:78:cc:58:86:26:50:bf:2e:5a:d5:cf:
         e9:f6:7b:d9
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgICBOIwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QTQ0NTlBUjExMC8GA1UEBRMoQTFFMDE2NDA2MzZDODNDMjJEMDcwOTkyNDJDQ0Y0
QzI2OTEwMkI1RTAeFw0yNTEyMjAwMjU4MzdaFw0yNTEyMjIwMjU4MzdaMBgxFjAU
BgNVBAMTDTY5NDYxMGRkLWIyM2MwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDBlyIb6cbewDZ1I5yD4WOS3jNeq7GGINmrcw0W9SW2Yt/D5b8a14RnlxLi
73dyuSoRzSulsrHmUZzlX+jXuoqYXrjkDM8s7VJBByRqabTkkZzDLEkWIhrl3PWd
/149llKF2MNwC7lP8N0qw+Pjz6EMuInX5ISfsyK9KBA2Fx3K4XXZAW2Wfwi9Djn7
ubMmcnRootfDCKIwOMFCP8rgYESavSqztXGAPaaWe0d57Lutu6/03J6frdLmti0M
yqjHKyGrJH1aZs4NILHu/rVN3nsS01qJovilp7yw9A6bskDA2DQuL2R/+IvgF8zP
CSza9Qw8n9+oALZt3zEMkDKpl4dNAgMBAAGjggK1MIICsTAdBgNVHQ4EFgQUpASi
REw4HZN+ivgGt9hO9KMmaWwwHwYDVR0jBBgwFoAUoeAWQGNsg8ItBwmSQsz0wmkQ
K14wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkE0NDU5L0U5OUJDQkVBMkQxQjExRURBNTRGQzc4QkYxMjIyNDY4L29lQVdR
R05zZzhJdEJ3bVNRc3owd21rUUsxNC5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L29lQVdRR05zZzhJdEJ3bVNRc3owd21rUUsxNC5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEFBQcw
C4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl
cG9zaXRvcnkvRjM2QTQ0NTkvRTk5QkNCRUEyRDFCMTFFREE1NEZDNzhCRjEyMjI0
Njgvb2VBV1FHTnNnOEl0QndtU1FzejB3bWtRSzE0Lm1mdDA1BggrBgEFBQcwDYYp
aHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA
AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCHy4a9YYlSCEsQsdX52zwbGzA0TB4FaBGb
WifY1tTcBwtXIoXbFNeCM+NK8dPKosv4bAd01QeJHaA4OM6qR+xTqafVumM2xLug
Upch+MunA8KaxDkGwmCEUjxrg30pRt/52cGaCYie14zYZYbJp28BSyGu7+jyp/3u
J8KhOBtlLia8aNHCli5DElvzmOBYlPmZlId3J+O0GnFVOnYqpAgodcmHKO7uF91N
309y7QMjEodsrdKbvE/7CVtHcx6RNmMszME49LFoY6O559BaJN4Ege4RfUY2WcPM
f9UKU8LD4uZJXE2ekzKQYw0FgPeXF02+eMxYhiZQvy5a1c/p9nvZ
-----END CERTIFICATE-----
Generated at Sat Dec 20 17:05:35 2025 by rpki-client