This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A4459/E99BCBEA2D1B11EDA54FC78BF1222468/oeAWQGNsg8ItBwmSQsz0wmkQK14.mft
File:                     oeAWQGNsg8ItBwmSQsz0wmkQK14.mft (raw, json)
Hash identifier:          DEVsQSkqnF641ONJXKAUxdsXM37Imrsn3M9rCi7oIxs=
Subject key identifier:   F6:6C:26:D2:BC:0F:D3:FC:65:5F:2A:75:1F:AD:0F:A2:FA:3E:4C:59
Authority key identifier: A1:E0:16:40:63:6C:83:C2:2D:07:09:92:42:CC:F4:C2:69:10:2B:5E
Certificate issuer:       /CN=F36A4459AR/serialNumber=A1E01640636C83C22D07099242CCF4C269102B5E
Certificate serial:       04E8
Authority info access:    rsync://rpki.afrinic.net/repository/arin/oeAWQGNsg8ItBwmSQsz0wmkQK14.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A4459/E99BCBEA2D1B11EDA54FC78BF1222468/oeAWQGNsg8ItBwmSQsz0wmkQK14.mft
Manifest number:          04E4
Signing time:             Fri 26 Dec 2025 03:00:11 +0000
Manifest this update:     Fri 26 Dec 2025 03:00:10 +0000
Manifest next update:     Sun 28 Dec 2025 03:00:10 +0000
Files and hashes:         1: oeAWQGNsg8ItBwmSQsz0wmkQK14.crl (hash: GEVZecYE76vEuNtXbNb4BQ4CrWMNeerwn8tOXxb8yog=)
                          2: 1F08DD5ED16711EEACC86AA3775412E6.roa (hash: Az9hy8W484eMfFVCabnds9LtEfLT4iJCPtwyoHAX59g=)
                          3: 013601FA2D1F11EDB1D2DC93F1222468.roa (hash: yGuY2CCJU8+S6SbKAlGxxoY56hHo78tBwYij9EjfVDE=)
                          4: 3876EB0ED16811EE9C0E66A5775412E6.roa (hash: +yOAS1cNO7QrZSN56ooSffQEaFtdkY96rU9n2WKG4AA=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A4459/E99BCBEA2D1B11EDA54FC78BF1222468/oeAWQGNsg8ItBwmSQsz0wmkQK14.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A4459/E99BCBEA2D1B11EDA54FC78BF1222468/oeAWQGNsg8ItBwmSQsz0wmkQK14.mft
                          rsync://rpki.afrinic.net/repository/arin/oeAWQGNsg8ItBwmSQsz0wmkQK14.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 28 Dec 2025 00:26:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1256 (0x4e8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A4459AR, serialNumber=A1E01640636C83C22D07099242CCF4C269102B5E
        Validity
            Not Before: Dec 26 03:00:10 2025 GMT
            Not After : Dec 28 03:00:10 2025 GMT
        Subject: CN=694dfa3b-3b4c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:c9:0d:1a:f1:ad:a6:e5:a6:9f:78:53:03:0a:
                    92:4e:66:e5:50:35:f3:2c:96:f6:00:4a:a3:4d:79:
                    51:8b:d9:ee:d5:52:de:a3:7f:09:f0:ec:b7:e4:06:
                    a1:7e:2e:6c:73:05:60:58:32:16:ff:2f:09:97:0c:
                    8f:86:f4:c9:b2:01:57:ff:d2:03:cd:32:f6:0d:5e:
                    8b:c1:37:7b:ba:55:39:5b:5b:13:cb:cd:77:2f:37:
                    90:40:dc:7a:fa:15:9d:d5:e9:b7:da:10:10:cc:e0:
                    55:52:c3:bc:3f:34:e0:78:5d:df:2b:11:3e:14:41:
                    18:ed:e6:51:99:0c:74:52:4f:ca:fe:d3:db:a8:61:
                    82:88:d8:a1:71:d0:b6:94:47:b4:d7:c8:20:6f:c1:
                    a3:db:53:54:1c:15:7a:e2:90:80:b5:bb:f4:86:31:
                    3e:70:73:78:e7:18:d0:07:e7:18:3c:f8:33:36:83:
                    f8:ad:e6:18:7a:c1:df:2f:8c:5d:8a:7c:4a:f8:78:
                    3d:62:b0:15:68:95:93:80:28:b8:fe:7b:14:dc:f2:
                    3d:66:55:69:ff:7b:c5:f7:a7:dd:dd:a6:02:4b:ac:
                    d0:e6:93:6b:10:bd:3a:a2:d7:43:86:aa:63:e6:1c:
                    7b:a2:dd:20:9f:e0:7b:2e:0a:6d:12:54:35:55:04:
                    8a:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:6C:26:D2:BC:0F:D3:FC:65:5F:2A:75:1F:AD:0F:A2:FA:3E:4C:59
            X509v3 Authority Key Identifier:
                keyid:A1:E0:16:40:63:6C:83:C2:2D:07:09:92:42:CC:F4:C2:69:10:2B:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A4459/E99BCBEA2D1B11EDA54FC78BF1222468/oeAWQGNsg8ItBwmSQsz0wmkQK14.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/oeAWQGNsg8ItBwmSQsz0wmkQK14.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A4459/E99BCBEA2D1B11EDA54FC78BF1222468/oeAWQGNsg8ItBwmSQsz0wmkQK14.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:5c:a2:7a:29:12:f9:87:c0:65:19:db:5a:f4:d7:aa:cb:31:
         ac:e8:bd:60:78:f2:b7:34:fd:83:3a:14:fc:b2:11:aa:ee:87:
         91:47:b3:75:83:33:4d:2c:3e:df:eb:a2:15:84:42:27:50:39:
         99:ae:d5:f9:18:6f:8f:26:ea:e8:68:74:5e:87:9f:40:ee:30:
         0f:e8:7e:1b:76:38:c2:99:61:6e:6d:97:be:74:97:3c:f8:48:
         86:cf:0a:6d:08:96:5a:20:2c:14:fa:7f:6f:4c:e5:04:35:27:
         46:0a:16:7a:42:56:2a:37:74:d6:76:a5:4e:43:3c:68:1d:a9:
         b4:db:54:d2:2b:f4:db:2e:fe:60:ac:42:21:d7:cb:cb:12:14:
         6d:60:07:79:75:f8:4b:f8:39:de:96:87:94:53:8e:1f:4e:4f:
         7a:f8:b4:27:c0:81:f8:1a:c3:50:dd:6c:d9:0a:eb:8d:c1:e1:
         02:c0:dd:6a:12:33:25:f5:02:41:ca:2f:c9:ed:87:cf:c1:d1:
         8a:7a:62:17:43:64:f8:59:02:67:6a:d8:d5:b9:52:16:83:f1:
         e5:16:6e:49:12:3d:45:b0:a2:77:6a:ed:78:c5:3e:71:86:89:
         44:6a:cf:2c:53:97:05:fa:04:ca:95:1b:3d:7c:bc:1c:61:8c:
         2a:48:50:22
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgICBOgwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QTQ0NTlBUjExMC8GA1UEBRMoQTFFMDE2NDA2MzZDODNDMjJEMDcwOTkyNDJDQ0Y0
QzI2OTEwMkI1RTAeFw0yNTEyMjYwMzAwMTBaFw0yNTEyMjgwMzAwMTBaMBgxFjAU
BgNVBAMTDTY5NGRmYTNiLTNiNGMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC4yQ0a8a2m5aafeFMDCpJOZuVQNfMslvYASqNNeVGL2e7VUt6jfwnw7Lfk
BqF+LmxzBWBYMhb/LwmXDI+G9MmyAVf/0gPNMvYNXovBN3u6VTlbWxPLzXcvN5BA
3Hr6FZ3V6bfaEBDM4FVSw7w/NOB4Xd8rET4UQRjt5lGZDHRST8r+09uoYYKI2KFx
0LaUR7TXyCBvwaPbU1QcFXrikIC1u/SGMT5wc3jnGNAH5xg8+DM2g/it5hh6wd8v
jF2KfEr4eD1isBVolZOAKLj+exTc8j1mVWn/e8X3p93dpgJLrNDmk2sQvTqi10OG
qmPmHHui3SCf4HsuCm0SVDVVBIptAgMBAAGjggK1MIICsTAdBgNVHQ4EFgQU9mwm
0rwP0/xlXyp1H60Povo+TFkwHwYDVR0jBBgwFoAUoeAWQGNsg8ItBwmSQsz0wmkQ
K14wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkE0NDU5L0U5OUJDQkVBMkQxQjExRURBNTRGQzc4QkYxMjIyNDY4L29lQVdR
R05zZzhJdEJ3bVNRc3owd21rUUsxNC5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L29lQVdRR05zZzhJdEJ3bVNRc3owd21rUUsxNC5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEFBQcw
C4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl
cG9zaXRvcnkvRjM2QTQ0NTkvRTk5QkNCRUEyRDFCMTFFREE1NEZDNzhCRjEyMjI0
Njgvb2VBV1FHTnNnOEl0QndtU1FzejB3bWtRSzE0Lm1mdDA1BggrBgEFBQcwDYYp
aHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA
AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCPXKJ6KRL5h8BlGdta9NeqyzGs6L1gePK3
NP2DOhT8shGq7oeRR7N1gzNNLD7f66IVhEInUDmZrtX5GG+PJuroaHReh59A7jAP
6H4bdjjCmWFubZe+dJc8+EiGzwptCJZaICwU+n9vTOUENSdGChZ6QlYqN3TWdqVO
QzxoHam021TSK/TbLv5grEIh18vLEhRtYAd5dfhL+DneloeUU44fTk96+LQnwIH4
GsNQ3WzZCuuNweECwN1qEjMl9QJByi/J7YfPwdGKemIXQ2T4WQJnatjVuVIWg/Hl
Fm5JEj1FsKJ3au14xT5xholEas8sU5cF+gTKlRs9fLwcYYwqSFAi
-----END CERTIFICATE-----
Generated at Fri Dec 26 23:14:08 2025 by rpki-client