This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C65C6/11FF6652CF5B11EBB4B3CE16F8AEA228/H_M-JaMrRpH3I_hQENNsHRmtJhM.mft
File:                     H_M-JaMrRpH3I_hQENNsHRmtJhM.mft (raw, json)
Hash identifier:          O6jV1WNLWu8NvD2oYgp7DTHr3cOMIt2qJoen6yShmvU=
Subject key identifier:   2E:D9:34:A0:10:58:05:B7:6D:23:AA:4A:07:6E:68:72:D1:33:69:71
Authority key identifier: 1F:F3:3E:25:A3:2B:46:91:F7:23:F8:50:10:D3:6C:1D:19:AD:26:13
Certificate issuer:       /CN=F36C65C6AR/serialNumber=1FF33E25A32B4691F723F85010D36C1D19AD2613
Certificate serial:       06AB
Authority info access:    rsync://rpki.afrinic.net/repository/arin/H_M-JaMrRpH3I_hQENNsHRmtJhM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C65C6/11FF6652CF5B11EBB4B3CE16F8AEA228/H_M-JaMrRpH3I_hQENNsHRmtJhM.mft
Manifest number:          06A7
Signing time:             Sun 21 Dec 2025 02:13:46 +0000
Manifest this update:     Sun 21 Dec 2025 02:13:46 +0000
Manifest next update:     Tue 23 Dec 2025 02:13:46 +0000
Files and hashes:         1: H_M-JaMrRpH3I_hQENNsHRmtJhM.crl (hash: Hjq8qexL6ze1z5YtWoTRCTCteSnhcXxPvtSQPhYQcCQ=)
                          2: 945DC79A23C111ED8AF760CAF1222468.roa (hash: oeRPpf6MWdOyBYB//e/bum3Rw2HHTIkr2se6ssnUJVc=)
                          3: FA9B731023BF11ED84295CC5F1222468.roa (hash: YC8KXYNCaCNhKTJ0A821cYNyvFRRYAF9H6w9FgItikQ=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36C65C6/11FF6652CF5B11EBB4B3CE16F8AEA228/H_M-JaMrRpH3I_hQENNsHRmtJhM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36C65C6/11FF6652CF5B11EBB4B3CE16F8AEA228/H_M-JaMrRpH3I_hQENNsHRmtJhM.mft
                          rsync://rpki.afrinic.net/repository/arin/H_M-JaMrRpH3I_hQENNsHRmtJhM.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 23 Dec 2025 00:26:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1707 (0x6ab)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C65C6AR, serialNumber=1FF33E25A32B4691F723F85010D36C1D19AD2613
        Validity
            Not Before: Dec 21 02:13:46 2025 GMT
            Not After : Dec 23 02:13:46 2025 GMT
        Subject: CN=694757da-03a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:fb:7d:c1:11:26:4b:bd:7a:56:67:59:86:43:
                    e9:57:bb:9c:5b:9b:04:c4:d2:68:9e:12:c4:35:2b:
                    44:3e:1b:f2:e9:1b:17:a1:0e:b1:e5:21:88:ca:fc:
                    54:ec:19:bd:42:36:02:c3:57:30:0f:f5:99:99:8f:
                    56:52:b5:a5:00:ea:f6:71:99:97:a7:2f:f0:c3:dc:
                    6d:5e:67:39:de:4e:0c:c9:cd:99:f0:e6:e7:8d:b9:
                    b0:d6:94:79:8e:e8:26:4f:31:bf:a1:01:ff:21:3c:
                    37:02:23:b1:03:9d:3e:76:29:6a:ff:fa:30:92:c1:
                    51:ed:75:0e:a1:64:a5:3a:82:db:2f:ef:50:ee:fc:
                    18:57:15:9e:d5:c6:09:4a:a7:f7:98:78:b1:d3:d5:
                    a1:21:07:ef:af:92:ba:27:be:21:3f:26:0b:2a:9b:
                    c3:92:95:46:06:f0:92:fb:61:6d:46:f6:b8:38:33:
                    15:e7:c5:ff:bb:55:1b:91:be:e9:38:51:eb:29:ca:
                    f1:6a:bd:d6:00:31:b8:d1:bd:19:f7:8b:4e:1e:7e:
                    4c:a5:a5:5b:4a:e9:9f:d8:73:4d:ef:b8:bd:f0:6a:
                    e2:bb:18:07:7b:53:be:a5:43:de:e4:ce:c4:c6:ce:
                    dd:6c:15:50:f6:ec:a8:ab:04:a7:81:29:ce:c7:94:
                    9e:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:D9:34:A0:10:58:05:B7:6D:23:AA:4A:07:6E:68:72:D1:33:69:71
            X509v3 Authority Key Identifier:
                keyid:1F:F3:3E:25:A3:2B:46:91:F7:23:F8:50:10:D3:6C:1D:19:AD:26:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C65C6/11FF6652CF5B11EBB4B3CE16F8AEA228/H_M-JaMrRpH3I_hQENNsHRmtJhM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/H_M-JaMrRpH3I_hQENNsHRmtJhM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C65C6/11FF6652CF5B11EBB4B3CE16F8AEA228/H_M-JaMrRpH3I_hQENNsHRmtJhM.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:c5:8c:45:33:9f:20:e7:74:65:d8:40:b9:69:37:c0:a3:85:
         25:44:fa:89:90:16:f9:b6:76:c8:17:9d:d8:2f:05:ef:1f:ac:
         4b:13:73:1e:4f:c7:d2:8c:da:ba:b6:57:c2:33:69:a2:9e:68:
         7b:93:40:b9:d6:53:7a:a7:d7:11:bd:18:8a:b3:b9:71:e1:e1:
         c6:da:8a:74:39:4b:c5:81:e5:ef:1f:aa:83:f3:8f:3f:65:d6:
         33:f7:a7:18:d4:3f:20:5d:09:db:56:33:9f:32:38:e1:99:22:
         46:9f:8e:12:be:e1:3a:5b:8f:64:de:d7:78:a9:c2:32:c2:a5:
         a7:c2:59:84:f4:41:47:43:98:3f:18:e3:32:e3:de:10:24:ae:
         5a:db:74:9d:54:1f:94:40:38:b7:d2:f2:cd:1b:c3:c7:3a:24:
         10:39:cb:a1:06:e7:9e:90:6a:f1:e2:b0:37:a3:1c:11:b4:b8:
         eb:b1:e1:88:62:72:67:a3:e3:e7:d2:07:3d:88:81:8b:1b:61:
         51:45:36:61:47:e5:02:5f:17:c0:38:27:85:98:7b:a6:80:c3:
         eb:1d:c2:f4:74:40:19:a5:db:f7:40:36:05:85:09:95:69:85:
         48:13:83:cd:be:23:4c:0a:5d:fa:04:18:c3:c3:92:86:fb:d3:
         0e:6d:0e:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 07:45:06 2025 by rpki-client