This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36CFBB0/3503D9F8D45211EFB23848B1762E951A/xcFCD1BxamsUb136joK_0eTdmRA.mft
File:                     xcFCD1BxamsUb136joK_0eTdmRA.mft (raw, json)
Hash identifier:          k5rFmRP82Rx2RVgS290L5Wk54VxgCGDMBY+/G5/TLw0=
Subject key identifier:   38:62:15:74:EC:BE:E5:1A:02:A2:DF:CD:26:AE:4D:78:74:10:79:74
Authority key identifier: C5:C1:42:0F:50:71:6A:6B:14:6F:5D:FA:8E:82:BF:D1:E4:DD:99:10
Certificate issuer:       /CN=F36CFBB0AR/serialNumber=C5C1420F50716A6B146F5DFA8E82BFD1E4DD9910
Certificate serial:       0175
Authority info access:    rsync://rpki.afrinic.net/repository/arin/xcFCD1BxamsUb136joK_0eTdmRA.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36CFBB0/3503D9F8D45211EFB23848B1762E951A/xcFCD1BxamsUb136joK_0eTdmRA.mft
Manifest number:          016C
Signing time:             Mon 22 Dec 2025 04:50:10 +0000
Manifest this update:     Mon 22 Dec 2025 04:50:09 +0000
Manifest next update:     Wed 24 Dec 2025 04:50:09 +0000
Files and hashes:         1: xcFCD1BxamsUb136joK_0eTdmRA.crl (hash: YDuNH32aqNccL9w3jV1Szyjunh5FLoI11t41xs9M6fI=)
                          2: 1FC67724DB2F11EFA180C6B7762E951A.roa (hash: JHgdUdEE2ORETD1hobD1l7BrD95rRqOs+/yUcWHinV4=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36CFBB0/3503D9F8D45211EFB23848B1762E951A/xcFCD1BxamsUb136joK_0eTdmRA.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36CFBB0/3503D9F8D45211EFB23848B1762E951A/xcFCD1BxamsUb136joK_0eTdmRA.mft
                          rsync://rpki.afrinic.net/repository/arin/xcFCD1BxamsUb136joK_0eTdmRA.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 24 Dec 2025 00:26:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 373 (0x175)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36CFBB0AR, serialNumber=C5C1420F50716A6B146F5DFA8E82BFD1E4DD9910
        Validity
            Not Before: Dec 22 04:50:09 2025 GMT
            Not After : Dec 24 04:50:09 2025 GMT
        Subject: CN=6948ce02-38e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:ef:22:d9:09:b7:d2:ac:73:79:01:82:32:52:
                    39:0c:f1:12:cf:f5:c2:ef:d2:25:63:52:80:77:80:
                    d9:fd:5d:2b:a0:e4:0e:16:93:57:02:d2:cb:90:ff:
                    5a:a2:48:de:47:80:4f:00:08:70:69:46:a5:05:e0:
                    ce:19:31:8b:fd:d4:98:59:37:9e:4b:67:95:7b:02:
                    b9:e1:9a:c8:20:ed:48:54:21:5f:b2:8d:3b:7c:15:
                    6c:59:90:14:98:6a:a2:34:12:9c:b7:6a:60:77:85:
                    13:94:c9:b1:4a:4d:68:80:6a:db:b9:75:41:c6:df:
                    34:d4:a8:47:fc:93:ce:b8:b4:26:bf:00:2f:a1:61:
                    53:9e:2d:bb:c7:aa:53:8f:99:9a:44:d7:9d:97:64:
                    a9:9a:7e:fb:3a:5b:26:3c:35:f1:c9:69:46:ef:86:
                    0d:8d:0b:e8:ea:54:5e:8a:39:59:cd:bf:ca:5a:91:
                    04:bd:3d:4e:bb:58:ee:72:e6:f9:7d:84:4f:37:2a:
                    79:18:04:9f:04:22:4e:25:d6:8e:9a:32:78:7d:44:
                    8e:77:a6:a6:f7:9b:5b:12:ef:c8:9b:f7:d6:0a:bc:
                    96:4f:a0:31:f1:5a:0c:04:a6:d8:c1:94:c4:3c:9e:
                    b4:9f:bc:7e:0a:bd:cc:5b:ad:a3:c8:72:04:52:37:
                    a0:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:62:15:74:EC:BE:E5:1A:02:A2:DF:CD:26:AE:4D:78:74:10:79:74
            X509v3 Authority Key Identifier:
                keyid:C5:C1:42:0F:50:71:6A:6B:14:6F:5D:FA:8E:82:BF:D1:E4:DD:99:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36CFBB0/3503D9F8D45211EFB23848B1762E951A/xcFCD1BxamsUb136joK_0eTdmRA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/xcFCD1BxamsUb136joK_0eTdmRA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36CFBB0/3503D9F8D45211EFB23848B1762E951A/xcFCD1BxamsUb136joK_0eTdmRA.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:b1:f1:61:28:6f:d0:bc:3d:f5:8b:07:5a:bb:47:e3:5e:85:
         56:ef:0a:57:0f:08:c8:05:cf:c0:fc:ce:44:53:fd:8c:c6:9e:
         a7:0b:dd:73:72:ff:5a:b7:8b:63:9d:8e:46:f1:30:2d:45:ac:
         6a:9a:de:b6:c6:75:25:f1:0e:9f:7f:d0:e9:4e:75:d0:14:99:
         4e:73:90:a3:54:ee:6f:d0:47:9b:8d:6d:74:b1:21:9f:db:de:
         f7:03:ef:6b:db:1c:9f:26:e1:64:72:35:17:b5:14:4f:1c:10:
         7d:94:42:ec:cc:48:84:fc:1f:22:87:2f:e0:c5:2d:62:3d:d4:
         89:3a:22:2f:16:29:09:77:98:ac:83:6b:8e:69:02:55:63:fb:
         da:be:44:2f:22:4e:d1:97:7d:43:d9:91:30:6e:c0:4b:91:ec:
         42:de:63:be:8b:4b:0b:17:da:38:1d:09:4e:06:50:ec:1e:9b:
         08:76:a0:e1:4a:e3:6a:0f:11:72:dc:cb:55:ad:bb:4a:14:31:
         d1:42:94:3e:ca:6c:f2:a7:66:01:7b:79:0c:7c:53:47:d1:e0:
         05:00:8c:0d:72:ab:b5:43:d9:2d:50:3a:d4:9d:9b:6c:db:28:
         62:f1:ad:63:50:31:fd:62:4b:0a:dd:96:ec:40:a0:91:86:77:
         58:4c:cb:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 11:31:02 2025 by rpki-client