This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D9B5B/ECEAE276C86411E6994F5B75F8AEA228/gw8nolWHc_MWi4g8BLAjjqV1I7U.mft
File:                     gw8nolWHc_MWi4g8BLAjjqV1I7U.mft (raw, json)
Hash identifier:          xTPPm+fFbGgCpYu3Ku/oKeA4cSZJmLjfsF0EVFVN+OU=
Subject key identifier:   DA:DB:F0:F4:06:7F:7F:9C:25:F6:0D:84:2B:AF:FB:47:AD:45:10:B3
Authority key identifier: 83:0F:27:A2:55:87:73:F3:16:8B:88:3C:04:B0:23:8E:A5:75:23:B5
Certificate issuer:       /CN=F36D9B5BAR/serialNumber=830F27A2558773F3168B883C04B0238EA57523B5
Certificate serial:       0D23
Authority info access:    rsync://rpki.afrinic.net/repository/arin/gw8nolWHc_MWi4g8BLAjjqV1I7U.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36D9B5B/ECEAE276C86411E6994F5B75F8AEA228/gw8nolWHc_MWi4g8BLAjjqV1I7U.mft
Manifest number:          0D28
Signing time:             Sun 21 Dec 2025 01:07:08 +0000
Manifest this update:     Sun 21 Dec 2025 01:07:08 +0000
Manifest next update:     Tue 23 Dec 2025 01:07:08 +0000
Files and hashes:         1: gw8nolWHc_MWi4g8BLAjjqV1I7U.crl (hash: 6slujIEZ+djc6jW9E11A/plszXqpQa2gwWqTO8GeQfE=)
                          2: D24E31E2DE7C11EBB05A5E63F8AEA228.roa (hash: M2UxYeTNruKkNVITsjU6u+dRgieWPfDpSGMbsu/uKcE=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36D9B5B/ECEAE276C86411E6994F5B75F8AEA228/gw8nolWHc_MWi4g8BLAjjqV1I7U.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36D9B5B/ECEAE276C86411E6994F5B75F8AEA228/gw8nolWHc_MWi4g8BLAjjqV1I7U.mft
                          rsync://rpki.afrinic.net/repository/arin/gw8nolWHc_MWi4g8BLAjjqV1I7U.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 23 Dec 2025 00:26:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3363 (0xd23)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36D9B5BAR, serialNumber=830F27A2558773F3168B883C04B0238EA57523B5
        Validity
            Not Before: Dec 21 01:07:08 2025 GMT
            Not After : Dec 23 01:07:08 2025 GMT
        Subject: CN=6947483c-cb18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fb:10:28:cb:0e:d0:93:b9:33:54:64:82:be:79:
                    c0:74:8c:8d:0b:69:8a:38:dd:76:4d:56:68:b2:b9:
                    f7:97:eb:87:d7:8d:62:03:30:2c:15:28:84:1b:74:
                    8d:67:39:e0:f6:c3:05:7d:32:a4:7a:8b:9c:09:2e:
                    e1:c0:ef:0f:30:d9:08:4c:00:3b:a2:28:fb:64:e1:
                    3e:96:5a:6b:14:a6:3d:83:fe:61:7a:88:6b:65:b5:
                    96:db:66:d6:85:c9:4d:f3:b0:e1:3b:43:3f:f2:55:
                    a2:76:68:a5:01:c8:a4:34:d7:54:9f:1d:1c:25:f6:
                    7f:b1:b3:73:98:ac:5c:d9:e6:c4:32:ca:28:de:26:
                    fb:38:5d:20:f7:5a:fb:61:c3:c2:ee:4d:12:15:77:
                    e3:97:6c:f7:0e:a4:bd:6b:08:2e:a9:46:5a:2f:66:
                    db:1f:24:4e:47:74:23:0f:05:0b:39:33:6b:e4:b1:
                    db:e6:09:fc:1a:a7:f6:af:5f:32:c1:a0:6c:a8:32:
                    3b:68:63:b6:56:59:af:16:4d:40:d7:a5:89:a9:b7:
                    ca:b4:63:66:29:aa:37:0c:cd:c9:fd:71:ab:5f:ed:
                    a4:98:3c:50:c4:03:74:bd:eb:f5:9d:f4:34:5a:af:
                    f8:a3:4c:c9:d4:ec:de:6d:18:7a:03:0b:cd:39:5b:
                    6a:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:DB:F0:F4:06:7F:7F:9C:25:F6:0D:84:2B:AF:FB:47:AD:45:10:B3
            X509v3 Authority Key Identifier:
                keyid:83:0F:27:A2:55:87:73:F3:16:8B:88:3C:04:B0:23:8E:A5:75:23:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36D9B5B/ECEAE276C86411E6994F5B75F8AEA228/gw8nolWHc_MWi4g8BLAjjqV1I7U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/gw8nolWHc_MWi4g8BLAjjqV1I7U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D9B5B/ECEAE276C86411E6994F5B75F8AEA228/gw8nolWHc_MWi4g8BLAjjqV1I7U.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:b9:66:47:4e:1a:eb:f1:60:79:94:4b:c9:e3:05:5a:fb:a2:
         96:d5:81:e6:d0:c8:37:72:88:6c:8e:c4:ab:a4:20:44:49:78:
         5d:cc:4f:a1:68:b1:61:28:4d:0d:63:1a:99:fb:70:8c:ef:8e:
         e9:c4:d4:af:3b:11:08:45:90:52:46:54:8f:10:dd:77:f9:cf:
         8c:60:50:56:f0:fd:03:78:b9:a4:52:78:8e:18:8f:83:7e:20:
         56:6f:d4:f8:46:a3:93:18:1c:37:55:d1:ed:93:8e:28:e3:3e:
         7c:c8:59:31:bd:ef:47:48:ef:36:94:ea:8a:3a:09:b0:79:2b:
         b1:09:da:09:cf:99:36:e3:18:b4:5c:ad:a8:8d:87:3f:b4:09:
         f6:87:72:3b:5d:7c:51:b9:d3:00:27:cf:ef:6c:14:72:29:50:
         ab:a2:15:da:b4:54:24:18:df:dc:0f:b6:8f:81:77:f5:dc:07:
         95:e1:b2:9f:d9:f7:4b:44:2c:1f:cf:98:2f:bd:10:92:27:3e:
         33:0b:8d:6d:50:c0:be:2a:64:c1:f2:35:4b:2e:5a:a8:0b:ff:
         9e:9c:bb:31:6f:9a:34:43:b3:9d:7a:ed:d5:3c:cb:fe:b8:ab:
         06:1d:58:e9:7e:3a:d0:f4:9c:eb:55:c9:c1:88:44:43:c5:e2:
         76:cc:58:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 08:17:19 2025 by rpki-client