This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36150C1/0947D0A4855411E69C2A4A4BF8AEA228/6BnEzwuPOvk_fxH_kCpqbP9aHlw.mft
File:                     6BnEzwuPOvk_fxH_kCpqbP9aHlw.mft (raw, json)
Hash identifier:          rYHZzAcAZMM+M1I7ihDmr2T4qPN92iZfJab+Dfatdzw=
Subject key identifier:   40:03:9E:7F:1C:12:76:71:7A:A4:AB:4D:C0:B9:83:97:5B:38:CA:A5
Authority key identifier: E8:19:C4:CF:0B:8F:3A:F9:3F:7F:11:FF:90:2A:6A:6C:FF:5A:1E:5C
Certificate issuer:       /CN=F36150C1AR/serialNumber=E819C4CF0B8F3AF93F7F11FF902A6A6CFF5A1E5C
Certificate serial:       0D77
Authority info access:    rsync://rpki.afrinic.net/repository/arin/6BnEzwuPOvk_fxH_kCpqbP9aHlw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36150C1/0947D0A4855411E69C2A4A4BF8AEA228/6BnEzwuPOvk_fxH_kCpqbP9aHlw.mft
Manifest number:          0D77
Signing time:             Tue 23 Dec 2025 01:06:08 +0000
Manifest this update:     Tue 23 Dec 2025 01:06:07 +0000
Manifest next update:     Thu 25 Dec 2025 01:06:07 +0000
Files and hashes:         1: 6BnEzwuPOvk_fxH_kCpqbP9aHlw.crl (hash: JK0aaPiJe1Q86biVGOrj4repKAW/d9a11x5/E2tlJxU=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36150C1/0947D0A4855411E69C2A4A4BF8AEA228/6BnEzwuPOvk_fxH_kCpqbP9aHlw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36150C1/0947D0A4855411E69C2A4A4BF8AEA228/6BnEzwuPOvk_fxH_kCpqbP9aHlw.mft
                          rsync://rpki.afrinic.net/repository/arin/6BnEzwuPOvk_fxH_kCpqbP9aHlw.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 25 Dec 2025 00:26:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3447 (0xd77)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36150C1AR, serialNumber=E819C4CF0B8F3AF93F7F11FF902A6A6CFF5A1E5C
        Validity
            Not Before: Dec 23 01:06:07 2025 GMT
            Not After : Dec 25 01:06:07 2025 GMT
        Subject: CN=6949eb00-5729
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:64:ba:c4:3e:61:f7:c3:bd:0b:a4:e7:6b:ed:
                    60:32:ff:9f:7b:4e:9b:f5:4c:74:38:32:85:b0:e7:
                    e7:93:0c:1e:6b:2f:49:77:6f:a4:3c:4a:59:82:3d:
                    12:03:a3:eb:74:77:f6:97:29:14:c9:20:69:11:82:
                    5d:ef:52:e0:ae:ae:c0:cf:7d:ac:60:02:24:9c:6d:
                    1b:61:a5:99:dc:d0:25:12:a0:09:33:50:1d:e6:be:
                    a7:bb:64:fb:a5:e5:b1:93:3a:80:62:0b:37:29:60:
                    0a:85:36:03:68:d8:7a:53:b2:b1:f3:78:41:db:7f:
                    c3:c4:c1:9e:7b:7f:f2:5d:58:33:7d:63:77:0c:3a:
                    56:ae:50:cb:70:9e:3d:3b:27:d3:67:5a:20:5c:4d:
                    4e:77:72:81:a5:53:c5:fa:db:c6:fb:d3:21:cf:67:
                    b7:2b:ad:b8:53:df:a6:65:31:b1:64:e9:90:72:1f:
                    3c:87:3c:9f:93:e3:db:66:93:f2:58:df:4d:ba:35:
                    50:62:5d:94:e8:3a:20:73:0e:a4:27:f1:bc:11:64:
                    e7:75:35:1b:79:69:87:83:ba:c2:53:a8:42:11:ee:
                    b3:fc:8c:1d:67:03:b0:cf:70:ac:4b:41:87:86:f9:
                    a8:73:c9:d1:a9:cf:dc:98:ac:3a:55:7d:5a:e7:4a:
                    05:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:03:9E:7F:1C:12:76:71:7A:A4:AB:4D:C0:B9:83:97:5B:38:CA:A5
            X509v3 Authority Key Identifier:
                keyid:E8:19:C4:CF:0B:8F:3A:F9:3F:7F:11:FF:90:2A:6A:6C:FF:5A:1E:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36150C1/0947D0A4855411E69C2A4A4BF8AEA228/6BnEzwuPOvk_fxH_kCpqbP9aHlw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/6BnEzwuPOvk_fxH_kCpqbP9aHlw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36150C1/0947D0A4855411E69C2A4A4BF8AEA228/6BnEzwuPOvk_fxH_kCpqbP9aHlw.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:89:b8:3b:b4:79:db:41:12:f2:b4:5a:2e:8c:b5:76:9b:ca:
         82:45:7d:09:04:a6:a6:a5:ab:b8:83:92:4e:15:8d:ae:67:d8:
         d6:0e:8c:54:96:23:a8:96:cb:a2:5c:02:2b:7f:10:6d:8b:e3:
         e2:ad:b1:da:c9:be:3b:6c:14:1f:6d:49:84:b6:38:54:0e:5a:
         e0:f1:a6:8c:7e:91:12:59:26:85:9b:46:af:1b:7c:83:dd:b6:
         f1:64:81:e1:71:b3:55:ff:5a:db:28:af:4d:7b:d5:b8:49:28:
         a4:98:cc:04:34:af:6a:da:bb:83:d7:f8:02:ba:0b:34:25:59:
         fe:72:b9:96:29:cf:d7:35:b2:e9:9d:50:66:ce:6b:73:26:ec:
         f6:7c:eb:ac:d3:fa:69:db:b9:8b:8c:22:b8:65:b3:c4:db:59:
         3c:c8:59:ed:73:23:3e:66:25:5a:ca:30:78:57:69:7b:41:95:
         8c:9c:7c:f2:45:22:6a:1b:04:8f:3d:ef:2b:36:38:d3:d6:83:
         99:ff:5f:82:93:04:4a:3e:36:65:3b:a3:07:5a:a1:37:1a:14:
         f2:d6:4b:91:9a:ab:e4:f8:20:b8:56:9f:51:f0:ba:5c:85:aa:
         8b:2c:af:e5:af:1f:06:0e:02:b6:e5:39:e4:38:cd:1e:d0:43:
         9c:75:08:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 04:11:17 2025 by rpki-client