This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36EEB6B/142F9550DCDB11EFACCA1A7A762E951A/-0jt8CFBI-P1CPl-PyqK-V2JNXk.mft
File:                     -0jt8CFBI-P1CPl-PyqK-V2JNXk.mft (raw, json)
Hash identifier:          l/dloJlDD8yB0AXgzE11Bd10YN+NfLFVVfTTBZP8j0Q=
Subject key identifier:   A3:A3:17:4B:C0:03:1E:0D:1B:67:72:E5:99:2F:D3:CF:FC:70:B6:1C
Authority key identifier: FB:48:ED:F0:21:41:23:E3:F5:08:F9:7E:3F:2A:8A:F9:5D:89:35:79
Certificate issuer:       /CN=F36EEB6BAR/serialNumber=FB48EDF0214123E3F508F97E3F2A8AF95D893579
Certificate serial:       0159
Authority info access:    rsync://rpki.afrinic.net/repository/arin/-0jt8CFBI-P1CPl-PyqK-V2JNXk.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36EEB6B/142F9550DCDB11EFACCA1A7A762E951A/-0jt8CFBI-P1CPl-PyqK-V2JNXk.mft
Manifest number:          0158
Signing time:             Mon 29 Dec 2025 04:52:10 +0000
Manifest this update:     Mon 29 Dec 2025 04:52:09 +0000
Manifest next update:     Wed 31 Dec 2025 04:52:09 +0000
Files and hashes:         1: -0jt8CFBI-P1CPl-PyqK-V2JNXk.crl (hash: dTTJTni7BTtrxmMIvrlbMZKxsZH7WhkVoDheuQtuP3o=)
                          2: 6DA243DEDCE111EF81D2DCA3762E951A.roa (hash: WNGwoowengyDdO9xPLt8TfFNLhgBtMLoD0A1CFD7WaM=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36EEB6B/142F9550DCDB11EFACCA1A7A762E951A/-0jt8CFBI-P1CPl-PyqK-V2JNXk.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36EEB6B/142F9550DCDB11EFACCA1A7A762E951A/-0jt8CFBI-P1CPl-PyqK-V2JNXk.mft
                          rsync://rpki.afrinic.net/repository/arin/-0jt8CFBI-P1CPl-PyqK-V2JNXk.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 31 Dec 2025 00:26:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 345 (0x159)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36EEB6BAR, serialNumber=FB48EDF0214123E3F508F97E3F2A8AF95D893579
        Validity
            Not Before: Dec 29 04:52:09 2025 GMT
            Not After : Dec 31 04:52:09 2025 GMT
        Subject: CN=695208fa-74e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:7f:09:17:05:3c:9a:37:aa:31:db:49:96:a9:
                    31:c7:18:69:97:51:69:05:8b:80:ef:2b:23:e1:51:
                    d8:6d:77:8d:2b:90:15:e7:1c:b9:99:4d:d3:fc:ef:
                    c9:48:65:1c:f5:2c:b2:cf:07:c2:2b:7c:c9:b5:b2:
                    6f:88:e4:7e:16:2f:02:76:d6:64:b4:b9:51:64:57:
                    a1:9e:9f:a9:80:5b:a9:b0:89:61:59:cc:83:9d:50:
                    51:6b:86:38:7e:5f:d0:17:d6:94:1c:e5:3f:d2:9e:
                    e6:bd:cc:e4:5b:65:b5:ac:91:1c:06:47:d0:dc:28:
                    f9:c1:e2:ae:04:32:91:fe:f9:cd:48:50:3b:4e:bc:
                    91:07:3e:d0:19:ee:c1:f8:98:6f:7e:4d:19:81:d4:
                    73:02:ad:54:8b:0f:60:00:bb:98:b4:d5:fc:94:7c:
                    ce:b0:6d:79:3b:10:34:96:59:42:4f:15:59:b6:d2:
                    08:4e:31:86:ea:a9:f9:e0:19:18:8f:22:9b:61:61:
                    4d:4e:73:c3:c2:cd:47:9c:22:33:95:c9:e4:10:e6:
                    7f:c3:c9:48:f3:dd:91:f3:69:64:b8:e8:37:24:cb:
                    83:e8:fd:92:4a:a3:eb:99:da:91:a8:a7:97:af:4f:
                    c2:c8:0e:09:42:a7:91:2d:41:66:2c:cf:7c:d8:47:
                    e7:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:A3:17:4B:C0:03:1E:0D:1B:67:72:E5:99:2F:D3:CF:FC:70:B6:1C
            X509v3 Authority Key Identifier:
                keyid:FB:48:ED:F0:21:41:23:E3:F5:08:F9:7E:3F:2A:8A:F9:5D:89:35:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36EEB6B/142F9550DCDB11EFACCA1A7A762E951A/-0jt8CFBI-P1CPl-PyqK-V2JNXk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/-0jt8CFBI-P1CPl-PyqK-V2JNXk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36EEB6B/142F9550DCDB11EFACCA1A7A762E951A/-0jt8CFBI-P1CPl-PyqK-V2JNXk.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:43:40:d3:a6:cc:f8:8c:e8:b9:c3:cf:2d:86:a7:08:91:f2:
         dc:ee:ef:a8:25:b3:2a:52:96:00:cf:fd:a5:8d:92:17:98:e0:
         02:4f:80:ab:78:90:70:b8:97:44:fc:ae:7e:56:3b:df:0b:9f:
         48:87:55:74:bb:26:ba:5f:5c:02:32:2d:fc:bb:33:a5:c5:87:
         dd:ef:3d:fe:8b:34:25:c8:bb:45:83:d6:25:a9:3f:bc:d6:76:
         e3:87:92:ce:bf:7a:bf:2f:6d:21:e0:6b:04:4e:d4:4a:3d:73:
         b7:0d:b1:bc:fa:cd:6c:ff:24:67:38:33:53:2f:db:c0:da:99:
         05:1c:82:5f:1d:e7:fc:ac:32:e7:0a:49:f7:7f:d7:88:f3:60:
         8b:b5:27:62:71:56:cb:18:27:94:1d:10:ad:8e:20:30:9b:2f:
         c1:30:98:f9:09:e8:d0:91:bb:cc:b0:d5:3e:dd:6c:16:96:5e:
         79:2f:cb:18:bf:7b:b8:67:e4:e7:eb:34:b5:c7:1f:f2:4e:63:
         76:9b:ac:b4:6c:2f:2d:d1:cd:21:a5:89:25:e0:67:1a:af:e2:
         d8:25:1c:37:c2:a5:37:ee:20:13:d4:c8:2f:fe:dd:de:91:e9:
         3b:b4:c0:f0:ce:01:65:2c:b0:c5:78:88:1f:71:e7:6c:85:94:
         29:53:31:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 29 15:16:34 2025 by rpki-client