This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA5EA/2098930C38B211ED90DB2EDCF1222468/lHfw5HWnR_lsVhYhZ_DBb5nEg7s.mft
File:                     lHfw5HWnR_lsVhYhZ_DBb5nEg7s.mft (raw, json)
Hash identifier:          EALW4KlzmLlJqEk2a95YU5blpmvLRc3BUHAj4/yAn8I=
Subject key identifier:   E7:F4:94:FF:D3:49:07:E2:2E:56:38:20:1E:2F:7A:BF:C2:1B:52:66
Authority key identifier: 94:77:F0:E4:75:A7:47:F9:6C:56:16:21:67:F0:C1:6F:99:C4:83:BB
Certificate issuer:       /CN=F36FA5EAAR/serialNumber=9477F0E475A747F96C56162167F0C16F99C483BB
Certificate serial:       04D2
Authority info access:    rsync://rpki.afrinic.net/repository/arin/lHfw5HWnR_lsVhYhZ_DBb5nEg7s.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36FA5EA/2098930C38B211ED90DB2EDCF1222468/lHfw5HWnR_lsVhYhZ_DBb5nEg7s.mft
Manifest number:          04D1
Signing time:             Sat 27 Dec 2025 03:02:54 +0000
Manifest this update:     Sat 27 Dec 2025 03:02:53 +0000
Manifest next update:     Mon 29 Dec 2025 03:02:53 +0000
Files and hashes:         1: lHfw5HWnR_lsVhYhZ_DBb5nEg7s.crl (hash: UygHkZ5eqqM7SskjY3aiCYS9G/tWGHp9jOFvUplvSbc=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36FA5EA/2098930C38B211ED90DB2EDCF1222468/lHfw5HWnR_lsVhYhZ_DBb5nEg7s.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36FA5EA/2098930C38B211ED90DB2EDCF1222468/lHfw5HWnR_lsVhYhZ_DBb5nEg7s.mft
                          rsync://rpki.afrinic.net/repository/arin/lHfw5HWnR_lsVhYhZ_DBb5nEg7s.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 29 Dec 2025 00:26:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1234 (0x4d2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36FA5EAAR, serialNumber=9477F0E475A747F96C56162167F0C16F99C483BB
        Validity
            Not Before: Dec 27 03:02:53 2025 GMT
            Not After : Dec 29 03:02:53 2025 GMT
        Subject: CN=694f4c5e-fc6f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:20:ec:8b:99:95:10:b5:fd:8d:c2:70:3b:48:
                    16:16:70:f1:88:ef:3e:d9:2e:7d:49:9f:19:1e:d1:
                    4e:df:a7:82:59:d1:fb:68:a5:50:af:3c:ee:79:4d:
                    a5:be:da:04:8c:cd:64:55:20:27:2c:21:ea:b8:99:
                    49:fa:b2:f1:97:ed:4e:1d:39:00:c2:31:bf:f6:e5:
                    1d:8e:c1:82:e1:21:27:7a:c3:14:ee:b0:64:61:9f:
                    6e:ff:87:80:8a:18:03:c1:0d:f0:51:ab:52:ec:c4:
                    d7:f2:17:0f:f3:9a:95:d1:58:8a:ea:33:36:65:2c:
                    10:6c:f3:15:f8:3d:1d:56:ca:92:3c:9b:20:ba:08:
                    b8:9d:bb:7e:8c:f8:41:a7:bb:30:cd:a1:58:c9:80:
                    7e:d6:67:4e:12:31:ef:4d:f6:26:2b:ed:b9:cf:5f:
                    7a:57:81:56:ea:0b:cf:e2:17:da:c3:f1:3b:95:fa:
                    a5:0d:75:f5:6a:06:8f:e7:98:d8:c0:82:4d:ae:92:
                    ea:7c:d6:76:10:6c:59:8b:47:c7:a5:22:3c:ca:6b:
                    c0:04:a9:a0:47:e8:6e:06:2b:5f:8b:b9:6f:73:48:
                    45:9e:51:91:59:9d:fe:51:da:06:d8:10:6b:51:cb:
                    ca:a5:dd:f9:f4:a7:38:65:4a:3b:4a:fe:54:d9:17:
                    17:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:F4:94:FF:D3:49:07:E2:2E:56:38:20:1E:2F:7A:BF:C2:1B:52:66
            X509v3 Authority Key Identifier:
                keyid:94:77:F0:E4:75:A7:47:F9:6C:56:16:21:67:F0:C1:6F:99:C4:83:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA5EA/2098930C38B211ED90DB2EDCF1222468/lHfw5HWnR_lsVhYhZ_DBb5nEg7s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/lHfw5HWnR_lsVhYhZ_DBb5nEg7s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA5EA/2098930C38B211ED90DB2EDCF1222468/lHfw5HWnR_lsVhYhZ_DBb5nEg7s.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:e8:e4:9c:4f:3c:84:5d:ad:82:37:8d:ed:16:1d:38:b7:66:
         76:01:45:7d:9e:eb:cb:a4:ce:fb:62:c9:a9:77:bb:23:48:24:
         1b:41:4c:91:95:bf:e9:bc:df:f7:cc:6b:46:2b:e1:dc:bf:2f:
         26:a9:73:c5:6d:a9:5a:5d:d2:ef:36:d1:70:44:fd:1a:51:2e:
         17:96:10:7c:13:21:b8:bd:e4:26:ab:0f:e4:f3:09:24:c5:ee:
         1d:03:a2:6e:72:dc:78:73:bd:ed:52:62:6b:10:c0:c0:89:16:
         aa:64:98:49:8d:32:ab:bd:3f:0c:b0:15:52:45:90:32:fa:94:
         8b:17:2f:fa:34:85:a5:c2:91:0a:3a:1a:e9:46:7a:ce:98:ef:
         80:bb:7e:a3:fc:7a:c3:94:49:97:f8:4a:8b:31:b7:f6:b1:43:
         3e:fd:1c:82:e7:41:03:9c:97:a7:a1:e7:09:8d:a7:9e:73:a6:
         a1:16:17:00:02:22:af:82:0d:26:cb:f5:14:6a:b1:63:f0:c8:
         4c:a3:e6:af:b7:bf:a6:99:46:88:10:e6:02:65:ac:21:55:da:
         20:78:ea:1f:b1:2a:91:b2:d0:80:e1:e5:9d:91:75:92:c1:65:
         54:d4:0a:ce:2c:4b:e9:7b:da:70:8f:b4:ee:6d:1a:b6:f2:77:
         af:d0:db:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 27 05:40:13 2025 by rpki-client