This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F731F/9340D826379711EE96FB7A314AD9E6FC/xkc2Jerv1nNskH0jHdnF29ufXqs.mft
File:                     xkc2Jerv1nNskH0jHdnF29ufXqs.mft (raw, json)
Hash identifier:          dbKkp9D9teBuKlz4sloTiztwCnoDrgP7BqiCSndediw=
Subject key identifier:   2E:96:96:62:47:A3:37:B0:FC:DF:5D:88:54:BA:74:B5:60:D1:8F:B2
Authority key identifier: C6:47:36:25:EA:EF:D6:73:6C:90:7D:23:1D:D9:C5:DB:DB:9F:5E:AB
Certificate issuer:       /CN=F36F731FAR/serialNumber=C6473625EAEFD6736C907D231DD9C5DBDB9F5EAB
Certificate serial:       037B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/xkc2Jerv1nNskH0jHdnF29ufXqs.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36F731F/9340D826379711EE96FB7A314AD9E6FC/xkc2Jerv1nNskH0jHdnF29ufXqs.mft
Manifest number:          0379
Signing time:             Sun 21 Dec 2025 03:39:46 +0000
Manifest this update:     Sun 21 Dec 2025 03:39:45 +0000
Manifest next update:     Tue 23 Dec 2025 03:39:45 +0000
Files and hashes:         1: xkc2Jerv1nNskH0jHdnF29ufXqs.crl (hash: 8ALjrZDBHOZhIAR+xifU+56tn1yDRg1yu8bH8abVyeM=)
                          2: 046CF67872E311F0A86CB7A7DAE4EC9C.roa (hash: RxZ6zJwwPB1hMFI2/FMmvPsAjrVlDL8yDDweU2BNpDw=)
                          3: 308911DA72E111F086A6389EDAE4EC9C.roa (hash: tYlSqnPCB7Kv8awS73OBDNcKa9Ut1iPvCF4nylTCo2o=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36F731F/9340D826379711EE96FB7A314AD9E6FC/xkc2Jerv1nNskH0jHdnF29ufXqs.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36F731F/9340D826379711EE96FB7A314AD9E6FC/xkc2Jerv1nNskH0jHdnF29ufXqs.mft
                          rsync://rpki.afrinic.net/repository/arin/xkc2Jerv1nNskH0jHdnF29ufXqs.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 23 Dec 2025 00:26:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 891 (0x37b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36F731FAR, serialNumber=C6473625EAEFD6736C907D231DD9C5DBDB9F5EAB
        Validity
            Not Before: Dec 21 03:39:45 2025 GMT
            Not After : Dec 23 03:39:45 2025 GMT
        Subject: CN=69476c02-2695
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:05:9c:3e:c2:07:65:9d:79:c3:0c:53:bf:28:
                    ab:e5:0e:51:b0:f4:69:80:12:1f:02:bb:b8:2e:44:
                    36:7d:d5:ba:9d:d5:b8:26:bb:42:42:13:f2:1c:26:
                    a4:65:96:08:4b:75:b2:e3:44:55:8b:f5:cf:f0:d0:
                    1e:07:2f:ee:52:53:aa:67:ec:ce:6c:a1:5e:a8:0f:
                    7a:1d:89:54:bc:10:15:64:31:06:52:c2:30:ec:42:
                    f6:3a:88:9f:5b:c9:ab:f5:be:c3:17:e4:8c:a2:42:
                    c4:e7:a5:b4:d0:0d:72:80:71:ef:19:39:30:0f:dc:
                    fd:36:56:89:44:d7:3d:b5:f9:ac:b1:f2:f9:a1:66:
                    b8:a7:c5:bf:e3:b0:c5:db:21:48:15:df:d1:05:7f:
                    c1:b1:60:f6:f4:f5:e4:a5:da:92:af:6c:c4:14:d3:
                    a7:c5:6b:1c:cc:9b:12:7e:26:90:ba:e5:12:2a:28:
                    6d:f6:d6:3f:36:30:71:c0:b9:0b:07:b7:ae:1d:07:
                    b8:cd:c8:59:24:1e:b3:90:b1:6b:b0:10:91:71:82:
                    40:04:67:fa:7a:5b:73:21:11:9d:ea:ea:df:f0:33:
                    76:32:ad:76:a8:25:4b:5f:af:4c:02:55:3c:20:1c:
                    3c:29:66:a3:43:25:bd:2e:ee:72:08:35:db:3b:c7:
                    2b:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:96:96:62:47:A3:37:B0:FC:DF:5D:88:54:BA:74:B5:60:D1:8F:B2
            X509v3 Authority Key Identifier:
                keyid:C6:47:36:25:EA:EF:D6:73:6C:90:7D:23:1D:D9:C5:DB:DB:9F:5E:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36F731F/9340D826379711EE96FB7A314AD9E6FC/xkc2Jerv1nNskH0jHdnF29ufXqs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/xkc2Jerv1nNskH0jHdnF29ufXqs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F731F/9340D826379711EE96FB7A314AD9E6FC/xkc2Jerv1nNskH0jHdnF29ufXqs.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:70:9d:ef:45:a8:db:b8:8e:ba:4a:ae:5b:78:0f:51:20:ff:
         a2:17:90:1e:2d:fd:d9:96:99:18:49:9b:14:ca:9f:f3:25:5a:
         a3:e8:51:71:6c:42:44:8f:0c:b2:21:6b:44:35:61:50:52:c4:
         8f:03:c0:74:38:59:6f:01:9f:3e:4c:11:52:17:08:fe:74:a4:
         8e:c9:d0:37:0a:50:4a:3e:43:77:fd:3d:9c:1e:cc:9a:eb:f3:
         70:f0:6c:70:af:90:ce:ad:de:8b:79:e8:c4:d6:04:ef:6d:e3:
         c2:63:9a:b0:2d:e3:b1:f4:4c:36:fd:0a:36:a1:6b:82:3b:b8:
         9d:dc:9b:7b:9c:b1:da:fa:74:f2:4d:b2:61:8d:c8:ed:27:83:
         61:33:2b:5c:21:0b:56:17:89:72:d9:7c:b7:6d:39:11:80:cb:
         63:a5:e0:7b:9f:3f:44:4c:3f:fd:6d:4d:ba:d9:f4:fb:d3:87:
         2d:a4:73:d9:a8:bf:6d:4d:12:bd:79:e3:55:8e:2e:84:4e:07:
         27:f9:8c:7f:99:7a:85:07:04:0e:a9:e0:53:94:55:69:79:94:
         4a:ff:9d:85:c9:9c:7c:2c:bc:1a:90:64:fb:f1:71:85:1c:ce:
         d3:4e:85:7d:2c:38:14:02:f9:60:f3:53:f9:14:64:c0:20:ce:
         cc:78:2a:0d
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgICA3swDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
RjczMUZBUjExMC8GA1UEBRMoQzY0NzM2MjVFQUVGRDY3MzZDOTA3RDIzMUREOUM1
REJEQjlGNUVBQjAeFw0yNTEyMjEwMzM5NDVaFw0yNTEyMjMwMzM5NDVaMBgxFjAU
BgNVBAMTDTY5NDc2YzAyLTI2OTUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDsBZw+wgdlnXnDDFO/KKvlDlGw9GmAEh8Cu7guRDZ91bqd1bgmu0JCE/Ic
JqRllghLdbLjRFWL9c/w0B4HL+5SU6pn7M5soV6oD3odiVS8EBVkMQZSwjDsQvY6
iJ9byav1vsMX5IyiQsTnpbTQDXKAce8ZOTAP3P02VolE1z21+ayx8vmhZrinxb/j
sMXbIUgV39EFf8GxYPb09eSl2pKvbMQU06fFaxzMmxJ+JpC65RIqKG321j82MHHA
uQsHt64dB7jNyFkkHrOQsWuwEJFxgkAEZ/p6W3MhEZ3q6t/wM3YyrXaoJUtfr0wC
VTwgHDwpZqNDJb0u7nIINds7xytNAgMBAAGjggK1MIICsTAdBgNVHQ4EFgQULpaW
YkejN7D8312IVLp0tWDRj7IwHwYDVR0jBBgwFoAUxkc2Jerv1nNskH0jHdnF29uf
XqswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkY3MzFGLzkzNDBEODI2Mzc5NzExRUU5NkZCN0EzMTRBRDlFNkZDL3hrYzJK
ZXJ2MW5Oc2tIMGpIZG5GMjl1Zlhxcy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L3hrYzJKZXJ2MW5Oc2tIMGpIZG5GMjl1Zlhxcy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEFBQcw
C4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl
cG9zaXRvcnkvRjM2RjczMUYvOTM0MEQ4MjYzNzk3MTFFRTk2RkI3QTMxNEFEOUU2
RkMveGtjMkplcnYxbk5za0gwakhkbkYyOXVmWHFzLm1mdDA1BggrBgEFBQcwDYYp
aHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA
AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBMcJ3vRajbuI66Sq5beA9RIP+iF5AeLf3Z
lpkYSZsUyp/zJVqj6FFxbEJEjwyyIWtENWFQUsSPA8B0OFlvAZ8+TBFSFwj+dKSO
ydA3ClBKPkN3/T2cHsya6/Nw8Gxwr5DOrd6LeejE1gTvbePCY5qwLeOx9Ew2/Qo2
oWuCO7id3Jt7nLHa+nTyTbJhjcjtJ4NhMytcIQtWF4ly2Xy3bTkRgMtjpeB7nz9E
TD/9bU262fT704ctpHPZqL9tTRK9eeNVji6ETgcn+Yx/mXqFBwQOqeBTlFVpeZRK
/52FyZx8LLwakGT78XGFHM7TToV9LDgUAvlg81P5FGTAIM7MeCoN
-----END CERTIFICATE-----
Generated at Sun Dec 21 12:40:58 2025 by rpki-client