This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F361F1DA/1B8578D077E011EE80DBA27B4AD9E6FC/hgwk5dUBPSMjsLq0BphmwNwK7m0.mft
File:                     hgwk5dUBPSMjsLq0BphmwNwK7m0.mft (raw, json)
Hash identifier:          5XojiCl/1ymhFrvaVA6/0k+6cFOW053ldkSfuSGqCKE=
Subject key identifier:   A4:5C:5F:FF:92:5F:97:C0:24:A9:FE:B2:DD:BD:52:F1:24:CA:68:3C
Authority key identifier: 86:0C:24:E5:D5:01:3D:23:23:B0:BA:B4:06:98:66:C0:DC:0A:EE:6D
Certificate issuer:       /CN=F361F1DAAR/serialNumber=860C24E5D5013D2323B0BAB4069866C0DC0AEE6D
Certificate serial:       0317
Authority info access:    rsync://rpki.afrinic.net/repository/arin/hgwk5dUBPSMjsLq0BphmwNwK7m0.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F361F1DA/1B8578D077E011EE80DBA27B4AD9E6FC/hgwk5dUBPSMjsLq0BphmwNwK7m0.mft
Manifest number:          0315
Signing time:             Thu 04 Dec 2025 03:51:23 +0000
Manifest this update:     Thu 04 Dec 2025 03:51:22 +0000
Manifest next update:     Sat 06 Dec 2025 03:51:22 +0000
Files and hashes:         1: hgwk5dUBPSMjsLq0BphmwNwK7m0.crl (hash: cBpZKJvfhaoXOFSDDRCODVhmjr82roMVzJS63oiy6kk=)
                          2: D58D35F0CFB411F08C034B9CDAE4EC9C.roa (hash: drYb/Mzs9lAY1gFSlF8WTX0aJ5jYnq/Lar8E/17vb1g=)
                          3: B2B100A8960311EE9DAC9C0ED25BE465.roa (hash: oJ8IY/etJV+KmOnt6rOLNi+N6bGbXrWs5HWdSZ42ZyE=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F361F1DA/1B8578D077E011EE80DBA27B4AD9E6FC/hgwk5dUBPSMjsLq0BphmwNwK7m0.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F361F1DA/1B8578D077E011EE80DBA27B4AD9E6FC/hgwk5dUBPSMjsLq0BphmwNwK7m0.mft
                          rsync://rpki.afrinic.net/repository/arin/hgwk5dUBPSMjsLq0BphmwNwK7m0.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 06 Dec 2025 03:51:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 791 (0x317)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F361F1DAAR, serialNumber=860C24E5D5013D2323B0BAB4069866C0DC0AEE6D
        Validity
            Not Before: Dec  4 03:51:22 2025 GMT
            Not After : Dec  6 03:51:22 2025 GMT
        Subject: CN=6931053b-838c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:ba:5c:e1:f8:f0:6b:8b:23:7e:a3:2d:23:de:
                    a0:04:76:58:74:22:79:5f:cc:70:ae:07:5a:12:62:
                    f8:8a:8b:97:55:99:14:3d:84:4a:06:d3:83:ce:1f:
                    d6:dc:a4:9f:8c:2c:d1:98:d2:0f:ad:d6:d8:ab:03:
                    60:5a:35:05:7a:cd:d7:c9:66:87:d0:77:24:62:f9:
                    5a:e7:73:72:b7:42:7f:fc:5a:8d:09:6f:62:74:f2:
                    8d:9b:71:91:9b:6a:be:90:a5:bf:32:c9:76:1c:2d:
                    55:08:e8:dc:8f:58:f1:51:3e:be:9a:2f:ce:53:1c:
                    e4:26:bf:bb:1e:e7:2d:41:ce:f8:33:3a:79:b3:ff:
                    64:48:b6:8f:08:86:f8:60:05:bc:7e:7d:ad:f9:e1:
                    3d:d8:8f:34:95:fd:6c:4f:1f:27:d5:09:6b:0a:12:
                    a7:8b:45:5f:23:00:e6:2e:dc:90:f9:b2:ac:43:cd:
                    8e:16:9e:a4:20:c9:a2:90:89:91:d9:d9:d3:a0:9a:
                    84:bc:c1:3c:13:7c:5e:e7:9a:bb:e2:17:6b:cd:d7:
                    2a:b5:a2:d5:55:df:98:c9:96:86:24:ed:f3:21:6b:
                    75:5f:24:d0:7c:e3:99:30:4d:90:e3:c7:3e:1c:e5:
                    9e:e7:c0:98:f6:db:e3:d0:f2:3e:9d:c9:d9:47:0f:
                    7b:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:5C:5F:FF:92:5F:97:C0:24:A9:FE:B2:DD:BD:52:F1:24:CA:68:3C
            X509v3 Authority Key Identifier:
                keyid:86:0C:24:E5:D5:01:3D:23:23:B0:BA:B4:06:98:66:C0:DC:0A:EE:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F361F1DA/1B8578D077E011EE80DBA27B4AD9E6FC/hgwk5dUBPSMjsLq0BphmwNwK7m0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/hgwk5dUBPSMjsLq0BphmwNwK7m0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F361F1DA/1B8578D077E011EE80DBA27B4AD9E6FC/hgwk5dUBPSMjsLq0BphmwNwK7m0.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:b4:af:bf:c5:b6:4d:0d:d0:19:c5:80:09:f1:14:13:06:33:
         a1:b7:f0:0c:0a:1e:58:db:a6:ef:bf:f1:e9:a6:1e:1d:0b:c9:
         a7:ae:88:c5:6a:ac:8e:7f:9a:cc:5e:a3:8e:ed:62:e9:24:5a:
         28:21:7e:29:fa:51:0f:47:cc:26:a3:92:ee:2c:a6:1f:42:5d:
         8f:66:0e:0c:e5:38:c0:a7:77:d3:38:50:ac:cb:75:c5:61:ad:
         f6:bc:f4:8d:b8:8e:df:06:0a:0f:05:39:43:fc:ef:b1:b1:9b:
         7b:54:31:03:c7:71:2d:a0:a0:a0:07:62:ea:94:3d:60:8a:aa:
         93:64:26:0c:7c:1f:ae:47:38:98:a4:14:da:de:fd:b6:80:e0:
         c4:b0:ed:c7:43:7c:94:bb:49:ea:82:23:f7:d4:b3:6f:2e:88:
         e1:02:af:0a:5b:b4:82:9d:83:b0:df:95:3b:2b:1e:d7:24:46:
         bd:11:82:a4:60:53:df:4f:60:56:1c:96:52:e5:2e:71:80:a5:
         98:42:16:7c:af:92:c9:73:54:4f:e4:ed:18:ec:71:6b:33:00:
         4d:08:a1:bc:14:ef:23:ae:64:7e:f0:bd:12:54:45:e2:33:39:
         c2:d6:b8:1d:33:27:f2:13:cb:c0:3e:fa:ce:fb:26:75:1b:44:
         58:c7:a4:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 4 23:36:56 2025 by rpki-client