This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FBB68/EEBD11DE767311EB92548A6DF8AEA228/3e9RyKD_hVBdng5v-gInbCpVrug.mft
File:                     3e9RyKD_hVBdng5v-gInbCpVrug.mft (raw, json)
Hash identifier:          0/gjCtY7YHryzr/6Lgu+hDQjrhtEg4zTtpIAw1J1BIE=
Subject key identifier:   0E:27:9B:69:71:82:8D:1A:2B:03:6C:70:7E:8A:C6:22:24:BC:A3:B7
Authority key identifier: DD:EF:51:C8:A0:FF:85:50:5D:9E:0E:6F:FA:02:27:6C:2A:55:AE:E8
Certificate issuer:       /CN=F36FBB68AR/serialNumber=DDEF51C8A0FF85505D9E0E6FFA02276C2A55AEE8
Certificate serial:       072D
Authority info access:    rsync://rpki.afrinic.net/repository/arin/3e9RyKD_hVBdng5v-gInbCpVrug.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36FBB68/EEBD11DE767311EB92548A6DF8AEA228/3e9RyKD_hVBdng5v-gInbCpVrug.mft
Manifest number:          0729
Signing time:             Tue 23 Dec 2025 02:02:22 +0000
Manifest this update:     Tue 23 Dec 2025 02:02:21 +0000
Manifest next update:     Thu 25 Dec 2025 02:02:21 +0000
Files and hashes:         1: 3e9RyKD_hVBdng5v-gInbCpVrug.crl (hash: KL7X5Man4N/6R8TfL9wQsdgDXUwqXfIXDMIVQjV6msc=)
                          2: 8EB8874C767711EB81CF8371F8AEA228.roa (hash: a5Ya8AZMPcr4yo5onV+OXArWF7aJzeoyFelL2j6STfo=)
                          3: A8B2187C767511EBB8015C6FF8AEA228.roa (hash: +55ryPzqgEQMEpzdUbqmX7lkwQdExVhKk9NqHf4i0Lk=)
                          4: 1E3F561E8B1A11EBB0DA3D71F8AEA228.roa (hash: Cpd4zmkYKicudOUgZJe6/OaQ296nySd++X2fdJd/rUU=)
                          5: F8B4E3247D9E11EB83704925F8AEA228.roa (hash: 63CDlb9OzE0Ed+gaeo+vCDqqodWQ+GqMecV9r4cwpCQ=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36FBB68/EEBD11DE767311EB92548A6DF8AEA228/3e9RyKD_hVBdng5v-gInbCpVrug.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36FBB68/EEBD11DE767311EB92548A6DF8AEA228/3e9RyKD_hVBdng5v-gInbCpVrug.mft
                          rsync://rpki.afrinic.net/repository/arin/3e9RyKD_hVBdng5v-gInbCpVrug.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 25 Dec 2025 00:26:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1837 (0x72d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36FBB68AR, serialNumber=DDEF51C8A0FF85505D9E0E6FFA02276C2A55AEE8
        Validity
            Not Before: Dec 23 02:02:21 2025 GMT
            Not After : Dec 25 02:02:21 2025 GMT
        Subject: CN=6949f82e-aae2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:2d:d7:3c:a8:61:45:50:68:58:03:d6:1d:cb:
                    fb:09:fa:a3:18:b5:d4:85:e1:c5:ea:95:7c:ec:16:
                    b7:b3:2f:85:f7:19:ed:8e:45:3e:47:28:e6:bc:17:
                    4f:24:db:4f:3c:c9:c1:7a:b6:63:db:32:e5:c1:7e:
                    dc:18:26:b9:30:7b:03:7d:00:bb:d2:6a:b1:db:99:
                    33:b1:ac:b5:2b:ca:14:84:2c:8d:78:8e:7a:59:af:
                    2f:47:dd:17:34:82:0f:63:57:cc:97:33:0e:54:fe:
                    42:f9:ad:17:b3:f7:92:4f:7f:f6:bb:df:67:04:4c:
                    66:a6:22:01:e0:d1:50:b2:9f:5e:5e:54:2f:d2:99:
                    a0:52:30:15:62:5c:23:d8:19:56:66:2a:aa:79:c1:
                    b5:ca:b6:60:5b:1f:cc:93:32:42:cb:0c:a8:e2:2b:
                    48:e1:5a:03:3f:53:34:6d:1c:ec:06:65:34:44:5b:
                    22:0b:61:5d:7e:af:27:c1:d3:a8:3f:6c:2f:c0:2f:
                    5b:15:f3:38:b9:60:b2:61:c7:7b:55:9a:07:d5:ac:
                    b2:01:59:1b:ac:d5:23:a6:34:cf:dd:f0:6f:36:86:
                    82:e1:24:44:4c:b8:2e:99:fc:6c:27:ff:5f:58:14:
                    06:4e:04:ce:70:8d:91:7c:39:2c:06:f5:29:39:72:
                    f9:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:27:9B:69:71:82:8D:1A:2B:03:6C:70:7E:8A:C6:22:24:BC:A3:B7
            X509v3 Authority Key Identifier:
                keyid:DD:EF:51:C8:A0:FF:85:50:5D:9E:0E:6F:FA:02:27:6C:2A:55:AE:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36FBB68/EEBD11DE767311EB92548A6DF8AEA228/3e9RyKD_hVBdng5v-gInbCpVrug.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/3e9RyKD_hVBdng5v-gInbCpVrug.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FBB68/EEBD11DE767311EB92548A6DF8AEA228/3e9RyKD_hVBdng5v-gInbCpVrug.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:39:a8:de:04:d6:68:de:52:73:74:89:55:4e:90:7c:b0:19:
         45:72:2c:0c:eb:85:73:3c:c4:f6:5e:e4:8b:a9:ae:7b:30:91:
         88:c7:69:35:ab:5a:68:1c:a3:01:dc:86:bc:b6:88:6c:98:10:
         61:89:6c:2c:ff:53:51:5e:dd:4b:62:36:d1:28:de:be:d9:8d:
         83:78:21:e2:8c:c5:07:fd:59:da:2a:b6:84:3c:63:fb:84:10:
         ca:07:32:a3:48:02:e7:a5:1a:fb:69:d0:3e:29:de:0d:6b:87:
         ea:1a:69:0e:92:b3:6a:d0:a9:ad:e4:f8:51:fb:c6:9d:f0:1f:
         98:52:c9:0f:c5:90:fb:f3:10:57:17:92:95:7a:ce:2a:1a:59:
         b0:7e:be:e8:ac:be:87:b1:3e:13:a1:c2:b5:dd:79:57:d3:d7:
         02:07:2c:3a:20:71:44:dd:e0:eb:eb:4c:09:67:11:06:98:62:
         1e:e6:20:b4:ce:08:83:03:95:84:7e:d1:a0:72:79:99:54:06:
         3d:40:62:4f:a5:1f:19:31:a8:79:a4:66:46:86:70:34:e0:8a:
         13:41:d9:b1:33:88:14:20:fb:4f:22:96:88:4f:fe:31:db:16:
         9e:cf:3b:72:a4:e1:be:8f:4c:b3:92:e4:cc:6e:59:7a:5d:a7:
         fa:f7:85:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 04:30:19 2025 by rpki-client