This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36180A1/393C4C903F5A11EF92994170762E951A/7rhFIBSnqgtH8qgONjVBJ-uwQA0.mft
File:                     7rhFIBSnqgtH8qgONjVBJ-uwQA0.mft (raw, json)
Hash identifier:          i4ER6Xwdam2e/l5BUy2bk9kbZNJG2cDhfhITQtwgEeo=
Subject key identifier:   89:31:16:64:DB:4B:F8:FB:7C:E0:90:51:33:BE:67:33:6E:DD:A3:43
Authority key identifier: EE:B8:45:20:14:A7:AA:0B:47:F2:A8:0E:36:35:41:27:EB:B0:40:0D
Certificate issuer:       /CN=F36180A1AR/serialNumber=EEB8452014A7AA0B47F2A80E36354127EBB0400D
Certificate serial:       021C
Authority info access:    rsync://rpki.afrinic.net/repository/arin/7rhFIBSnqgtH8qgONjVBJ-uwQA0.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36180A1/393C4C903F5A11EF92994170762E951A/7rhFIBSnqgtH8qgONjVBJ-uwQA0.mft
Manifest number:          021A
Signing time:             Wed 17 Dec 2025 04:21:21 +0000
Manifest this update:     Wed 17 Dec 2025 04:21:20 +0000
Manifest next update:     Fri 19 Dec 2025 04:21:20 +0000
Files and hashes:         1: 7rhFIBSnqgtH8qgONjVBJ-uwQA0.crl (hash: sunczxM5sD8O2e8H8My83arLdDQmD275yXxm4tdtl/8=)
                          2: 125EF2A63F7011EFB90A2881762E951A.roa (hash: CYHaNxXH3G1/sB9APmxu1n3UtTgC5Edc0gfpDVgJNk8=)
                          3: 41A178E4429111EF8883AAAA762E951A.roa (hash: MkpjkL83C02qTlHENSDXSaJZwjQp8E4rGj/mJx7w1Cc=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36180A1/393C4C903F5A11EF92994170762E951A/7rhFIBSnqgtH8qgONjVBJ-uwQA0.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36180A1/393C4C903F5A11EF92994170762E951A/7rhFIBSnqgtH8qgONjVBJ-uwQA0.mft
                          rsync://rpki.afrinic.net/repository/arin/7rhFIBSnqgtH8qgONjVBJ-uwQA0.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 19 Dec 2025 00:26:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 540 (0x21c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36180A1AR, serialNumber=EEB8452014A7AA0B47F2A80E36354127EBB0400D
        Validity
            Not Before: Dec 17 04:21:20 2025 GMT
            Not After : Dec 19 04:21:20 2025 GMT
        Subject: CN=69422fc0-397c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:22:19:dd:7e:37:9d:91:72:1c:67:30:45:18:
                    dc:e2:32:77:b0:16:65:bc:2b:4e:4e:c8:b3:b8:f7:
                    9f:f6:8c:be:50:c7:0f:ec:3c:5c:4c:f7:b4:de:1d:
                    4f:c8:86:11:96:ba:6d:97:8d:2a:50:54:46:d3:a5:
                    28:f5:ad:2a:fd:26:d6:8f:d0:f7:f0:36:a7:d7:b0:
                    6a:53:ce:20:62:6e:2f:8c:c3:72:cb:4d:59:00:32:
                    56:ef:b3:4f:1c:66:15:dc:b2:10:38:3b:ea:3d:9d:
                    70:5a:70:45:52:a2:bf:01:9c:7a:83:0c:c2:62:39:
                    99:0d:7a:42:f7:70:b0:28:8a:39:61:d2:29:8a:78:
                    cd:8f:35:21:75:eb:2a:80:a0:4c:3a:b3:fb:b8:11:
                    36:de:2e:f5:27:4d:3b:55:21:b1:89:76:ac:a5:d4:
                    af:5c:93:2f:85:9b:e2:35:81:ac:fd:66:fc:dd:66:
                    64:1a:cd:e2:c6:bc:4a:f9:75:f0:81:d8:0f:be:22:
                    f9:4b:db:d7:2f:95:07:42:c1:3f:34:1e:57:af:ce:
                    7c:4f:c3:a3:1a:26:87:b0:8f:e8:72:92:bc:80:35:
                    c5:57:e1:bd:75:0a:c5:c9:b4:29:bd:c3:b0:89:73:
                    b8:bd:03:05:3d:96:b6:4c:0e:f1:15:85:55:cd:69:
                    9a:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:31:16:64:DB:4B:F8:FB:7C:E0:90:51:33:BE:67:33:6E:DD:A3:43
            X509v3 Authority Key Identifier:
                keyid:EE:B8:45:20:14:A7:AA:0B:47:F2:A8:0E:36:35:41:27:EB:B0:40:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36180A1/393C4C903F5A11EF92994170762E951A/7rhFIBSnqgtH8qgONjVBJ-uwQA0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/7rhFIBSnqgtH8qgONjVBJ-uwQA0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36180A1/393C4C903F5A11EF92994170762E951A/7rhFIBSnqgtH8qgONjVBJ-uwQA0.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:b6:43:15:13:83:65:e1:97:5f:84:56:35:5a:2e:be:25:e4:
         72:ff:58:93:51:54:c2:97:78:20:8b:a5:21:6d:88:25:ec:e1:
         75:3d:aa:14:15:0a:bd:eb:64:34:6f:44:f1:56:a2:0d:1d:5d:
         3d:48:79:25:41:ff:d9:46:14:2a:34:eb:37:12:79:fb:fa:47:
         47:3b:e3:31:d3:2f:88:e9:6e:4c:65:15:f8:39:cd:1e:87:44:
         c5:de:59:76:69:e1:70:58:82:34:3f:05:d4:43:95:b1:84:18:
         68:b6:83:fa:73:e3:b8:fa:ff:a4:4c:bb:50:cb:fa:79:8c:4b:
         b7:3a:9a:f0:ff:9e:bd:b0:26:5e:23:c6:36:c3:e5:f5:4b:33:
         ad:0a:44:2b:2c:54:44:59:41:5f:a2:75:02:67:30:4d:f1:75:
         64:6d:6a:a9:95:fa:73:70:ae:3c:5b:5e:8d:a2:7c:f4:40:0c:
         7b:58:ab:63:35:6e:93:e6:51:6c:a3:56:8d:8b:22:f2:3a:8f:
         37:1b:79:58:e1:6c:ca:ce:90:03:1e:3c:3e:31:26:60:b1:d8:
         a4:f6:aa:aa:76:98:09:39:d7:42:77:ff:eb:fa:f2:a0:a5:f4:
         37:19:75:a4:82:0d:86:7a:7f:56:66:d2:e3:d5:10:6f:e1:a2:
         3c:1a:94:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 17 19:10:27 2025 by rpki-client