This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362D462/BD668408C06011F0A1497CB9DAE4EC9C/HlOpzb_lwlJjWC-7AmsE0CBLYAk.mft
File:                     HlOpzb_lwlJjWC-7AmsE0CBLYAk.mft (raw, json)
Hash identifier:          3zVLBYYXsocp9zNaWA+W5RMacuxfpiDPgo03Aynn3dk=
Subject key identifier:   56:6C:3D:47:C0:28:17:81:33:1C:4D:EC:CF:DA:85:F1:DD:79:39:DB
Authority key identifier: 1E:53:A9:CD:BF:E5:C2:52:63:58:2F:BB:02:6B:04:D0:20:4B:60:09
Certificate issuer:       /CN=F362D462AR/serialNumber=1E53A9CDBFE5C25263582FBB026B04D0204B6009
Certificate serial:       1D
Authority info access:    rsync://rpki.afrinic.net/repository/arin/HlOpzb_lwlJjWC-7AmsE0CBLYAk.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F362D462/BD668408C06011F0A1497CB9DAE4EC9C/HlOpzb_lwlJjWC-7AmsE0CBLYAk.mft
Manifest number:          1B
Signing time:             Thu 04 Dec 2025 05:20:32 +0000
Manifest this update:     Thu 04 Dec 2025 05:20:32 +0000
Manifest next update:     Sat 06 Dec 2025 05:20:32 +0000
Files and hashes:         1: HlOpzb_lwlJjWC-7AmsE0CBLYAk.crl (hash: ThDW7s8OR1GWcJjE84F4lbPUpSCO1h7fZXZHh15VUBE=)
                          2: 4040C74AC52E11F0B05A368DDAE4EC9C.roa (hash: g29ZcN62OuQIybrymKKsA2XNqXJfFk2KbrGYZddauWU=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F362D462/BD668408C06011F0A1497CB9DAE4EC9C/HlOpzb_lwlJjWC-7AmsE0CBLYAk.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F362D462/BD668408C06011F0A1497CB9DAE4EC9C/HlOpzb_lwlJjWC-7AmsE0CBLYAk.mft
                          rsync://rpki.afrinic.net/repository/arin/HlOpzb_lwlJjWC-7AmsE0CBLYAk.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 06 Dec 2025 05:20:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 29 (0x1d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F362D462AR, serialNumber=1E53A9CDBFE5C25263582FBB026B04D0204B6009
        Validity
            Not Before: Dec  4 05:20:32 2025 GMT
            Not After : Dec  6 05:20:32 2025 GMT
        Subject: CN=69311a20-f15f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:c9:31:a9:99:4d:ea:35:5e:ab:cc:ac:01:74:
                    ca:29:2b:4f:84:39:1d:a5:40:42:41:b3:ec:f4:74:
                    30:b8:ce:e1:30:36:38:80:08:9e:c1:cc:c0:f2:84:
                    29:9e:c6:b8:ee:57:91:35:d6:67:75:8d:07:30:9e:
                    51:2e:5d:99:2e:08:6f:15:03:39:b9:31:2f:cc:37:
                    1f:3f:a6:af:52:a3:49:c8:74:00:d6:8e:73:ff:64:
                    cf:57:72:a4:4a:f1:eb:c5:a7:cb:d3:f1:e0:ef:30:
                    75:a1:60:1d:a6:12:26:bf:ca:e0:ca:68:2e:3c:79:
                    dd:7b:b2:6b:48:6c:d8:ac:f9:83:99:3b:9c:ac:99:
                    3c:45:bc:2e:e6:3b:21:4c:ce:2d:83:b0:14:cf:c4:
                    22:b3:a3:a8:a3:4f:17:f2:9a:16:cd:33:64:a5:c1:
                    ae:0c:5b:1a:23:42:ef:32:2f:58:52:13:5b:4a:4d:
                    c6:74:2b:11:8b:ad:3f:5c:3c:74:91:0d:8b:5c:3a:
                    8d:76:64:a6:6c:f3:1e:58:61:47:9f:2d:f4:11:35:
                    d0:6e:ff:6e:c6:12:c0:77:18:d0:8e:af:8f:b9:e9:
                    b7:cb:ca:97:8d:95:14:ed:12:d8:5a:e9:28:d8:ae:
                    f9:ce:67:e4:70:a9:54:ff:ef:08:86:8e:16:8b:78:
                    75:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:6C:3D:47:C0:28:17:81:33:1C:4D:EC:CF:DA:85:F1:DD:79:39:DB
            X509v3 Authority Key Identifier:
                keyid:1E:53:A9:CD:BF:E5:C2:52:63:58:2F:BB:02:6B:04:D0:20:4B:60:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F362D462/BD668408C06011F0A1497CB9DAE4EC9C/HlOpzb_lwlJjWC-7AmsE0CBLYAk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/HlOpzb_lwlJjWC-7AmsE0CBLYAk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362D462/BD668408C06011F0A1497CB9DAE4EC9C/HlOpzb_lwlJjWC-7AmsE0CBLYAk.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:a0:f4:49:2e:f9:23:e2:ed:68:9b:f1:66:82:1d:8d:24:7f:
         7f:d4:71:e8:e6:12:57:71:70:ae:2a:ad:c1:0e:99:8c:38:76:
         8c:85:d7:11:b0:4c:91:19:82:25:fc:9f:69:21:78:a7:ab:34:
         96:55:ad:60:c0:55:f4:84:99:1e:99:85:c9:bf:83:b3:ca:f4:
         16:c1:f2:71:d2:33:1d:1b:ff:3d:aa:f1:68:12:2f:40:67:2c:
         3d:bc:5a:ef:e6:65:d5:a1:c4:88:7b:3f:99:22:ad:76:08:5d:
         cb:c6:e1:fa:4a:bf:9d:33:7b:49:44:ae:db:ac:65:31:b7:24:
         21:b1:bd:73:3c:cd:46:dd:63:46:10:73:df:98:cb:3e:50:2a:
         61:77:f1:03:05:cd:78:13:30:26:fb:f4:d6:ae:ce:23:45:ee:
         54:f4:59:c3:08:d2:30:0d:94:12:9c:e8:85:ae:40:2e:54:4e:
         91:03:5b:7a:2e:99:fd:b3:35:38:9d:8c:c1:d8:43:3c:ab:14:
         b4:50:5b:49:3d:db:3c:ac:17:af:bb:5c:11:c0:3a:63:d5:3b:
         0f:50:4d:8c:f1:d0:dd:a0:68:23:ed:f2:15:e6:33:8e:ad:80:
         12:b6:e2:37:e7:ef:9d:14:33:75:e4:67:93:a4:21:51:81:5a:
         ff:a5:1d:e9
-----BEGIN CERTIFICATE-----
MIIFkjCCBHqgAwIBAgIBHTANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDEwpGMzYy
RDQ2MkFSMTEwLwYDVQQFEygxRTUzQTlDREJGRTVDMjUyNjM1ODJGQkIwMjZCMDRE
MDIwNEI2MDA5MB4XDTI1MTIwNDA1MjAzMloXDTI1MTIwNjA1MjAzMlowGDEWMBQG
A1UEAxMNNjkzMTFhMjAtZjE1ZjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBANHJMamZTeo1XqvMrAF0yikrT4Q5HaVAQkGz7PR0MLjO4TA2OIAInsHMwPKE
KZ7GuO5XkTXWZ3WNBzCeUS5dmS4IbxUDObkxL8w3Hz+mr1KjSch0ANaOc/9kz1dy
pErx68Wny9Px4O8wdaFgHaYSJr/K4MpoLjx53Xuya0hs2Kz5g5k7nKyZPEW8LuY7
IUzOLYOwFM/EIrOjqKNPF/KaFs0zZKXBrgxbGiNC7zIvWFITW0pNxnQrEYutP1w8
dJENi1w6jXZkpmzzHlhhR58t9BE10G7/bsYSwHcY0I6vj7npt8vKl42VFO0S2Frp
KNiu+c5n5HCpVP/vCIaOFot4dUUCAwEAAaOCArUwggKxMB0GA1UdDgQWBBRWbD1H
wCgXgTMcTezP2oXx3Xk52zAfBgNVHSMEGDAWgBQeU6nNv+XCUmNYL7sCawTQIEtg
CTAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2MkQ0NjIvQkQ2Njg0MDhDMDYwMTFGMEExNDk3Q0I5REFFNEVDOUMvSGxPcHpi
X2x3bEpqV0MtN0Ftc0UwQ0JMWUFrLmNybDBkBggrBgEFBQcBAQRYMFYwVAYIKwYB
BQUHMAKGSHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2FyaW4v
SGxPcHpiX2x3bEpqV0MtN0Ftc0UwQ0JMWUFrLmNlcjBPBgNVHSABAf8ERTBDMEEG
CCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmljLm5l
dC9wb2xpY3kvQ1BTLnBkZjCB1QYIKwYBBQUHAQsEgcgwgcUwgYsGCCsGAQUFBzAL
hn9yc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVw
b3NpdG9yeS9GMzYyRDQ2Mi9CRDY2ODQwOEMwNjAxMUYwQTE0OTdDQjlEQUU0RUM5
Qy9IbE9wemJfbHdsSmpXQy03QW1zRTBDQkxZQWsubWZ0MDUGCCsGAQUFBzANhilo
dHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEF
BQcBCAEB/wQGMASgAgUAMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwDQYJKoZIhvcNAQELBQADggEBAFGg9Eku+SPi7Wib8WaCHY0kf3/UcejmEldx
cK4qrcEOmYw4doyF1xGwTJEZgiX8n2kheKerNJZVrWDAVfSEmR6Zhcm/g7PK9BbB
8nHSMx0b/z2q8WgSL0BnLD28Wu/mZdWhxIh7P5kirXYIXcvG4fpKv50ze0lErtus
ZTG3JCGxvXM8zUbdY0YQc9+Yyz5QKmF38QMFzXgTMCb79NauziNF7lT0WcMI0jAN
lBKc6IWuQC5UTpEDW3oumf2zNTidjMHYQzyrFLRQW0k92zysF6+7XBHAOmPVOw9Q
TYzx0N2gaCPt8hXmM46tgBK24jfn750UM3XkZ5OkIVGBWv+lHek=
-----END CERTIFICATE-----
Generated at Thu Dec 4 23:36:42 2025 by rpki-client