This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36CF917/F9C1E412E27711ECBA278AD6F1222468/w4V0IdXbi2FE0Hw8WTcfQgMXqXc.mft
File:                     w4V0IdXbi2FE0Hw8WTcfQgMXqXc.mft (raw, json)
Hash identifier:          7MWVmMXVK6Bt65eMWG6feHH0Jk1DjokxMn97/YN/LbE=
Subject key identifier:   88:4C:FE:A5:DE:23:AA:4B:FF:A0:FD:F4:53:C8:ED:48:15:84:56:F1
Authority key identifier: C3:85:74:21:D5:DB:8B:61:44:D0:7C:3C:59:37:1F:42:03:17:A9:77
Certificate issuer:       /CN=F36CF917AR/serialNumber=C3857421D5DB8B6144D07C3C59371F420317A977
Certificate serial:       0540
Authority info access:    rsync://rpki.afrinic.net/repository/arin/w4V0IdXbi2FE0Hw8WTcfQgMXqXc.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36CF917/F9C1E412E27711ECBA278AD6F1222468/w4V0IdXbi2FE0Hw8WTcfQgMXqXc.mft
Manifest number:          053E
Signing time:             Wed 24 Dec 2025 02:51:58 +0000
Manifest this update:     Wed 24 Dec 2025 02:51:58 +0000
Manifest next update:     Fri 26 Dec 2025 02:51:58 +0000
Files and hashes:         1: w4V0IdXbi2FE0Hw8WTcfQgMXqXc.crl (hash: kpHbZacB3D3fhbezdFlNuxKoGNbi8NOWoGxe0JmRrnY=)
                          2: 5B864758E31111EC8ED8D2BCF1222468.roa (hash: 1Y+vCOotcm5zcUTbjCnHW4jNKnu+gKBc5Vl6wk8RY10=)
                          3: 282DC0BAE31211ECABFC60BFF1222468.roa (hash: +YVubLFEdP3oFfhGjZ7aF/r3X0+W1ak/u5GBnLWdqN0=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36CF917/F9C1E412E27711ECBA278AD6F1222468/w4V0IdXbi2FE0Hw8WTcfQgMXqXc.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36CF917/F9C1E412E27711ECBA278AD6F1222468/w4V0IdXbi2FE0Hw8WTcfQgMXqXc.mft
                          rsync://rpki.afrinic.net/repository/arin/w4V0IdXbi2FE0Hw8WTcfQgMXqXc.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 26 Dec 2025 00:26:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1344 (0x540)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36CF917AR, serialNumber=C3857421D5DB8B6144D07C3C59371F420317A977
        Validity
            Not Before: Dec 24 02:51:58 2025 GMT
            Not After : Dec 26 02:51:58 2025 GMT
        Subject: CN=694b554e-2ea6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:f6:d7:dc:a7:24:d4:ee:ce:4a:a1:2b:5a:2b:
                    2a:1b:26:8f:ed:e3:81:41:67:fb:af:a6:5a:99:3b:
                    48:41:f1:09:38:48:33:fb:fa:f1:d0:b1:ca:b1:61:
                    74:5d:79:7a:fd:b2:70:15:23:42:42:d7:fe:54:29:
                    41:33:33:5a:46:26:96:64:f6:a4:49:59:16:1c:77:
                    31:cf:99:55:45:7c:b2:f0:c7:d8:ba:03:d2:f6:f7:
                    70:a6:7e:b8:51:05:bb:f1:4d:8b:0f:5d:99:dc:66:
                    46:2d:30:42:f4:44:59:7f:b1:a5:80:6e:1f:41:dc:
                    99:89:8e:5c:27:2b:71:40:31:1e:c9:9f:08:bc:2f:
                    39:4f:ae:d1:02:a4:00:97:6f:bb:83:b0:5c:5a:9f:
                    1e:a1:ce:c0:ef:df:3b:67:4f:f2:a7:a3:89:ca:e0:
                    3a:7b:56:29:12:e3:51:99:c9:b4:d6:66:df:7b:98:
                    17:18:f5:be:38:e1:f9:7f:68:73:ed:86:87:e3:d8:
                    20:39:62:8c:73:46:9b:27:59:62:77:42:43:a3:ef:
                    52:e4:06:83:f1:01:62:50:a4:d1:a7:b3:fe:fb:fe:
                    dc:ec:7a:67:ae:5f:16:f4:bf:eb:65:56:bd:05:64:
                    f4:e3:84:4b:db:a9:a6:a1:22:c3:87:07:b1:bc:a1:
                    51:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:4C:FE:A5:DE:23:AA:4B:FF:A0:FD:F4:53:C8:ED:48:15:84:56:F1
            X509v3 Authority Key Identifier:
                keyid:C3:85:74:21:D5:DB:8B:61:44:D0:7C:3C:59:37:1F:42:03:17:A9:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36CF917/F9C1E412E27711ECBA278AD6F1222468/w4V0IdXbi2FE0Hw8WTcfQgMXqXc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/w4V0IdXbi2FE0Hw8WTcfQgMXqXc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36CF917/F9C1E412E27711ECBA278AD6F1222468/w4V0IdXbi2FE0Hw8WTcfQgMXqXc.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:f9:fa:38:b3:c4:80:bb:8c:9a:9c:ad:59:ed:4c:96:95:35:
         61:13:5c:28:3b:c8:ae:de:02:d7:1a:22:08:63:a7:c7:95:9a:
         a7:39:2c:4a:69:38:16:ac:19:65:5e:71:ca:1d:17:83:03:86:
         26:26:94:ce:13:05:dd:a1:5a:fb:7d:be:d6:22:05:7b:ca:7e:
         31:10:64:03:06:77:8d:d3:1a:c7:d3:e0:30:cb:99:eb:8e:ad:
         3a:be:80:77:33:72:c4:5b:d6:85:0d:ed:9b:ee:d8:80:26:50:
         07:c2:40:19:86:12:f7:39:73:25:74:28:e0:ad:03:30:37:b0:
         b0:73:95:f1:70:63:4f:e7:df:7b:ef:73:4a:6c:72:d0:2f:f8:
         47:6d:d1:5e:da:51:7b:49:91:78:f0:1c:64:58:b4:b0:e9:c1:
         a5:b4:53:61:a6:0c:58:28:58:4a:12:e9:f6:79:40:f1:4c:b5:
         55:8c:37:70:99:7d:f2:1a:c0:fd:ad:ba:89:b1:d3:0a:45:5f:
         b8:c6:9d:53:dc:ef:4d:ce:fd:08:b0:66:06:dc:5d:be:66:8a:
         d8:8c:82:4e:03:8f:e7:58:b3:08:6d:61:b3:27:83:a5:71:a7:
         75:98:34:5f:e7:b4:95:d8:e5:43:47:13:dd:9a:32:62:e2:81:
         00:e4:81:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 22:07:00 2025 by rpki-client