This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FAE49/8523FFA8BFDE11F0B0A85DF5DAE4EC9C/lyNg0Kyyz5cxmQW6RU7QdwiCLf0.mft
File:                     lyNg0Kyyz5cxmQW6RU7QdwiCLf0.mft (raw, json)
Hash identifier:          MnzeLec5JPHcsypgcNouK9KSKV1P8L6hdDjR2Ha2D6s=
Subject key identifier:   24:93:37:C4:7C:D0:6F:0E:E6:8B:62:D6:C7:C1:64:C7:78:17:24:A6
Authority key identifier: 97:23:60:D0:AC:B2:CF:97:31:99:05:BA:45:4E:D0:77:08:82:2D:FD
Certificate issuer:       /CN=F36FAE49AR/serialNumber=972360D0ACB2CF97319905BA454ED07708822DFD
Certificate serial:       2C
Authority info access:    rsync://rpki.afrinic.net/repository/arin/lyNg0Kyyz5cxmQW6RU7QdwiCLf0.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36FAE49/8523FFA8BFDE11F0B0A85DF5DAE4EC9C/lyNg0Kyyz5cxmQW6RU7QdwiCLf0.mft
Manifest number:          2B
Signing time:             Fri 19 Dec 2025 05:20:09 +0000
Manifest this update:     Fri 19 Dec 2025 05:20:08 +0000
Manifest next update:     Sun 21 Dec 2025 05:20:08 +0000
Files and hashes:         1: lyNg0Kyyz5cxmQW6RU7QdwiCLf0.crl (hash: Anb59cPz9oF+vqmhJUzcchYGsadsSA/lBbTlf9dAoc4=)
                          2: 497A6552C40011F0A4C64789DAE4EC9C.roa (hash: dAgm1qsqszfkmXft+qwZkQMhMXYqxZMoROazFTtdak4=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36FAE49/8523FFA8BFDE11F0B0A85DF5DAE4EC9C/lyNg0Kyyz5cxmQW6RU7QdwiCLf0.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36FAE49/8523FFA8BFDE11F0B0A85DF5DAE4EC9C/lyNg0Kyyz5cxmQW6RU7QdwiCLf0.mft
                          rsync://rpki.afrinic.net/repository/arin/lyNg0Kyyz5cxmQW6RU7QdwiCLf0.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 21 Dec 2025 00:26:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 44 (0x2c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36FAE49AR, serialNumber=972360D0ACB2CF97319905BA454ED07708822DFD
        Validity
            Not Before: Dec 19 05:20:08 2025 GMT
            Not After : Dec 21 05:20:08 2025 GMT
        Subject: CN=6944e088-6b34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:7b:2e:1e:63:13:8b:15:58:be:b4:c7:02:31:
                    91:cc:53:27:53:c2:c3:8a:4e:09:f1:98:3c:14:56:
                    15:fd:5e:35:e4:e9:aa:9b:cd:20:bc:fc:b8:b3:7c:
                    a1:1b:ab:5c:14:94:80:01:d1:16:d8:13:fd:96:7b:
                    a1:ba:e1:44:dd:de:4a:a7:de:cd:01:5f:ac:05:a9:
                    6c:0d:1f:13:ba:2f:22:ba:91:e7:69:59:90:67:f0:
                    a8:4e:a5:6d:93:39:e4:98:37:aa:c0:d1:19:0d:7e:
                    d2:65:00:68:eb:7c:56:fb:c5:d0:2a:47:e8:ef:11:
                    0e:e4:c3:2f:a7:1b:45:a2:ee:c5:60:cd:dd:13:b3:
                    6c:86:4c:92:58:6b:8f:6e:65:cb:c8:09:a6:d4:bf:
                    d8:bc:a1:49:a4:f3:85:d2:a8:02:ad:40:b6:e6:40:
                    4b:36:13:7c:2c:c6:4a:15:ff:c6:ca:f5:56:f5:de:
                    c3:6d:e0:4b:57:4a:fc:e1:3b:68:8b:ec:d9:ba:b8:
                    72:32:b3:2c:dd:94:55:71:32:5e:b5:f0:69:23:09:
                    a2:0d:8d:bf:e9:7d:a9:28:0f:99:21:4c:cd:d7:ff:
                    cb:33:e8:87:65:02:cd:7b:6e:d8:ed:72:54:fe:e2:
                    5c:2a:7f:5f:a9:6b:11:fd:55:4b:a3:2a:4d:1c:34:
                    14:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:93:37:C4:7C:D0:6F:0E:E6:8B:62:D6:C7:C1:64:C7:78:17:24:A6
            X509v3 Authority Key Identifier:
                keyid:97:23:60:D0:AC:B2:CF:97:31:99:05:BA:45:4E:D0:77:08:82:2D:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36FAE49/8523FFA8BFDE11F0B0A85DF5DAE4EC9C/lyNg0Kyyz5cxmQW6RU7QdwiCLf0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/lyNg0Kyyz5cxmQW6RU7QdwiCLf0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FAE49/8523FFA8BFDE11F0B0A85DF5DAE4EC9C/lyNg0Kyyz5cxmQW6RU7QdwiCLf0.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:49:70:0e:00:24:d3:26:d9:99:89:9b:e0:47:47:f6:bc:38:
         ab:10:25:71:b9:2b:b8:0e:52:31:11:1e:63:31:56:54:46:4c:
         42:26:2f:d6:58:d4:00:2b:4e:bd:0b:2f:41:b4:fa:e5:8a:b3:
         6f:59:27:08:81:36:ad:28:e4:cc:b6:9d:5e:24:b9:c9:46:b4:
         d1:8c:dc:5f:84:60:22:e3:bd:51:1a:e1:b0:17:6a:1c:a3:14:
         4b:bf:42:c7:3b:46:b6:59:93:36:13:a6:c9:d4:b7:84:9b:b8:
         c1:5d:a4:de:7d:7c:b4:e4:3e:17:9b:b8:c7:52:19:8e:e3:18:
         97:da:d3:53:40:26:c0:21:22:5e:81:d8:e4:b0:4a:a0:fa:b9:
         9b:26:49:8f:0c:1f:da:a7:2d:d7:14:d8:cf:54:5b:f2:2e:89:
         62:71:fb:57:04:1a:9d:5c:e3:5c:ed:5a:3b:19:7b:17:ae:92:
         b8:1b:c0:b0:2d:3c:a0:fa:d1:51:82:69:b6:8f:33:57:5b:83:
         51:54:c3:a4:96:c2:c7:60:25:d9:29:3e:20:7e:9b:0b:4d:11:
         9a:83:ee:8e:f2:8d:ea:d3:a0:df:6d:29:d1:77:34:0a:8f:d9:
         89:e8:f9:4a:d2:88:96:46:5c:96:80:04:e5:2e:81:2c:a7:0f:
         35:94:b9:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 20:23:06 2025 by rpki-client