This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F361D299/9D80DF78C85B11E6B829DA67F8AEA228/9oceOJrqQ9-1MdFNS_bAEdOm1IA.mft
File:                     9oceOJrqQ9-1MdFNS_bAEdOm1IA.mft (raw, json)
Hash identifier:          DkBaY27kGLLxc2Cp16Os9OaJ+bb+SRmZxdbqoa29eak=
Subject key identifier:   1F:FE:D0:A2:D4:C6:96:75:0D:A5:AB:3B:2D:48:FD:8C:30:29:ED:F1
Authority key identifier: F6:87:1E:38:9A:EA:43:DF:B5:31:D1:4D:4B:F6:C0:11:D3:A6:D4:80
Certificate issuer:       /CN=F361D299AR/serialNumber=F6871E389AEA43DFB531D14D4BF6C011D3A6D480
Certificate serial:       0D15
Authority info access:    rsync://rpki.afrinic.net/repository/arin/9oceOJrqQ9-1MdFNS_bAEdOm1IA.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F361D299/9D80DF78C85B11E6B829DA67F8AEA228/9oceOJrqQ9-1MdFNS_bAEdOm1IA.mft
Manifest number:          0D26
Signing time:             Thu 04 Dec 2025 01:07:11 +0000
Manifest this update:     Thu 04 Dec 2025 01:07:11 +0000
Manifest next update:     Sat 06 Dec 2025 01:07:11 +0000
Files and hashes:         1: 9oceOJrqQ9-1MdFNS_bAEdOm1IA.crl (hash: pPvcWUanq89V2We7mSNKXtEzTeZ+l8DX+pISYoOqKMU=)
                          2: 9602703EF4F511EFB099CDB5762E951A.roa (hash: qISfxBRfXwveVBfmScYlezjIVFsZHVW0rkfxNlst1oA=)
                          3: 0809CD56F2A511EF9A1CF353762E951A.roa (hash: 4iGumIvcUo97EFB8blys/rxgOUPw+Tx3jCeD20ZEIcg=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F361D299/9D80DF78C85B11E6B829DA67F8AEA228/9oceOJrqQ9-1MdFNS_bAEdOm1IA.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F361D299/9D80DF78C85B11E6B829DA67F8AEA228/9oceOJrqQ9-1MdFNS_bAEdOm1IA.mft
                          rsync://rpki.afrinic.net/repository/arin/9oceOJrqQ9-1MdFNS_bAEdOm1IA.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 06 Dec 2025 01:07:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3349 (0xd15)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F361D299AR, serialNumber=F6871E389AEA43DFB531D14D4BF6C011D3A6D480
        Validity
            Not Before: Dec  4 01:07:11 2025 GMT
            Not After : Dec  6 01:07:11 2025 GMT
        Subject: CN=6930debf-c4fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:3f:df:52:21:e8:ff:f3:2b:e9:97:f5:92:ee:
                    dd:40:d4:fc:1c:c2:da:2e:84:e7:e2:b2:7a:29:e6:
                    e3:1f:78:d0:19:ea:16:e9:fb:e6:57:49:ff:ed:3b:
                    01:a6:ac:aa:0a:40:d2:2f:f7:c1:7b:3b:a7:6a:45:
                    96:b1:7a:a1:cb:04:7d:75:fa:54:ed:31:92:17:87:
                    8f:2c:40:5d:e6:34:60:d1:2a:77:07:13:1e:31:d9:
                    16:d4:08:39:3c:9a:22:62:ca:d5:eb:13:ab:29:00:
                    d2:c8:0a:c8:48:eb:0d:65:3e:99:3d:e8:a4:ec:05:
                    df:46:6b:65:31:4c:4e:59:82:16:78:7a:42:d2:3c:
                    6d:68:4e:ce:2b:12:d0:f6:9d:b7:45:f7:f7:a4:9f:
                    90:45:08:29:71:be:2e:fa:7c:5e:37:70:f2:a8:87:
                    b0:75:85:8c:45:ce:d7:5d:a9:ef:85:06:3a:9e:1d:
                    e3:6a:50:7b:06:42:9b:13:ce:46:db:3e:de:59:53:
                    fd:d0:23:e5:5f:5a:dc:fc:64:80:89:a3:99:6b:59:
                    91:a6:85:cd:2f:4d:b0:4c:0b:54:81:f5:e9:b9:9e:
                    82:68:cb:db:02:72:9b:8f:d7:4a:5a:0f:4f:a8:5e:
                    e2:e7:b6:17:7c:ca:3a:9f:ee:dd:f9:7f:c8:9c:40:
                    9f:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:FE:D0:A2:D4:C6:96:75:0D:A5:AB:3B:2D:48:FD:8C:30:29:ED:F1
            X509v3 Authority Key Identifier:
                keyid:F6:87:1E:38:9A:EA:43:DF:B5:31:D1:4D:4B:F6:C0:11:D3:A6:D4:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F361D299/9D80DF78C85B11E6B829DA67F8AEA228/9oceOJrqQ9-1MdFNS_bAEdOm1IA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/9oceOJrqQ9-1MdFNS_bAEdOm1IA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F361D299/9D80DF78C85B11E6B829DA67F8AEA228/9oceOJrqQ9-1MdFNS_bAEdOm1IA.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:e4:89:13:b5:5e:46:6c:d4:ca:c1:61:40:e7:dd:39:0c:a3:
         1a:71:c5:30:90:e3:a3:ce:ee:ef:6f:a9:75:c6:c7:3e:6b:4e:
         ee:56:53:04:62:04:b1:af:ca:f1:f6:0a:76:a1:5e:21:42:c9:
         dc:8f:da:bb:fc:9e:97:ce:86:50:fb:35:93:ea:c9:91:6c:0b:
         e3:c2:30:33:32:b1:0a:42:ec:c6:8d:60:56:3c:f4:5e:9c:ae:
         64:e1:6e:ca:6e:59:32:cd:74:ee:9d:41:21:f9:1e:16:df:f7:
         ea:a9:44:71:18:7e:92:00:a5:24:7e:6e:70:75:f9:4e:31:c6:
         e0:5a:14:e4:6a:05:4e:1b:d9:08:74:bf:94:f9:13:00:1b:d9:
         a7:0d:da:84:b1:03:34:12:2e:13:58:8d:52:fd:3d:4c:28:89:
         06:fa:44:20:c1:fc:c1:cf:65:90:83:5c:2e:ed:6d:b3:df:31:
         46:56:f4:b0:8d:2d:fc:c4:45:72:02:2d:93:c3:04:aa:c3:a0:
         14:50:fc:45:5e:f9:d4:fe:de:55:02:53:05:7e:c7:a8:34:cc:
         4c:ab:54:f1:3d:43:fa:aa:5d:01:f1:3c:7c:f1:3f:91:73:0b:
         b1:d6:71:22:97:82:38:dc:73:0a:41:d7:c6:63:64:9e:4b:be:
         b5:2d:eb:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 4 23:37:00 2025 by rpki-client