This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3632159/8A0A5AE84ABC11EDACFD3184F1222468/ZyGhkvz9Jhp3wc3cR4kceBT6x3c.mft
File:                     ZyGhkvz9Jhp3wc3cR4kceBT6x3c.mft (raw, json)
Hash identifier:          g7sxRuYRGJS4QnTYF0Dtmo4lgdT2Y4JbVzvt04Gs3Nw=
Subject key identifier:   19:DA:FA:95:8A:0D:E6:0F:06:D5:3B:C7:C8:D5:3A:CB:F3:D3:F4:73
Authority key identifier: 67:21:A1:92:FC:FD:26:1A:77:C1:CD:DC:47:89:1C:78:14:FA:C7:77
Certificate issuer:       /CN=F3632159AR/serialNumber=6721A192FCFD261A77C1CDDC47891C7814FAC777
Certificate serial:       04B4
Authority info access:    rsync://rpki.afrinic.net/repository/arin/ZyGhkvz9Jhp3wc3cR4kceBT6x3c.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3632159/8A0A5AE84ABC11EDACFD3184F1222468/ZyGhkvz9Jhp3wc3cR4kceBT6x3c.mft
Manifest number:          04B3
Signing time:             Sun 21 Dec 2025 03:03:18 +0000
Manifest this update:     Sun 21 Dec 2025 03:03:17 +0000
Manifest next update:     Tue 23 Dec 2025 03:03:17 +0000
Files and hashes:         1: ZyGhkvz9Jhp3wc3cR4kceBT6x3c.crl (hash: dKVrtHUPXFFPbYHXrWoddstp1ncT54MjsF6/8tfrO4g=)
                          2: 1A49A96A7AC911ED812AA695F1222468.roa (hash: ETAi2jqzRi0+AxwIwLa8K/gDxbVP7M/q9PlBlPYnPkY=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3632159/8A0A5AE84ABC11EDACFD3184F1222468/ZyGhkvz9Jhp3wc3cR4kceBT6x3c.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3632159/8A0A5AE84ABC11EDACFD3184F1222468/ZyGhkvz9Jhp3wc3cR4kceBT6x3c.mft
                          rsync://rpki.afrinic.net/repository/arin/ZyGhkvz9Jhp3wc3cR4kceBT6x3c.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 23 Dec 2025 00:26:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1204 (0x4b4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3632159AR, serialNumber=6721A192FCFD261A77C1CDDC47891C7814FAC777
        Validity
            Not Before: Dec 21 03:03:17 2025 GMT
            Not After : Dec 23 03:03:17 2025 GMT
        Subject: CN=69476376-3291
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:b2:63:8a:f2:8a:ef:71:e0:ac:cc:f4:76:54:
                    c7:c6:08:de:c4:df:11:0d:2a:e6:48:2d:d1:f5:62:
                    23:17:c3:2a:67:cf:fa:6e:fd:34:cd:a8:4b:e8:38:
                    db:f7:39:ac:29:7c:e5:14:10:80:c2:1d:25:7b:9e:
                    ba:d3:79:cc:47:e1:73:59:b8:9d:0e:17:d3:b1:d3:
                    84:fd:46:72:8b:08:bd:f1:ce:18:65:0b:30:8e:00:
                    93:69:78:aa:6f:f9:c3:9d:f3:9e:35:2b:6a:0d:35:
                    24:30:d7:54:ff:e9:11:45:79:b1:ad:88:3a:e6:04:
                    b8:16:a2:d2:01:4e:2f:42:99:a6:a9:46:aa:03:8d:
                    2c:0a:ee:f9:3f:cc:59:46:1e:d1:18:fe:ba:ba:ec:
                    45:8b:f8:01:d7:a9:6f:e4:64:ba:3a:d7:07:04:d1:
                    f2:07:ed:0e:cc:cf:48:69:d1:54:18:24:8b:a3:31:
                    6e:f9:60:12:c3:20:d1:8f:f4:e7:12:54:79:b2:e4:
                    d7:29:a1:e0:2a:c6:66:f7:75:f7:ad:ce:23:9f:4b:
                    69:ed:76:25:e5:dc:a1:cb:cc:3f:05:70:8b:ed:63:
                    40:55:5d:80:13:d7:37:5f:0a:8e:95:af:e9:57:b9:
                    56:c0:7d:9b:b3:a9:a3:38:59:85:d5:f8:87:84:e6:
                    66:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:DA:FA:95:8A:0D:E6:0F:06:D5:3B:C7:C8:D5:3A:CB:F3:D3:F4:73
            X509v3 Authority Key Identifier:
                keyid:67:21:A1:92:FC:FD:26:1A:77:C1:CD:DC:47:89:1C:78:14:FA:C7:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3632159/8A0A5AE84ABC11EDACFD3184F1222468/ZyGhkvz9Jhp3wc3cR4kceBT6x3c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/ZyGhkvz9Jhp3wc3cR4kceBT6x3c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3632159/8A0A5AE84ABC11EDACFD3184F1222468/ZyGhkvz9Jhp3wc3cR4kceBT6x3c.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:6f:36:3a:6c:44:56:89:f2:dd:73:f8:7b:26:17:e1:72:61:
         52:59:ed:0c:51:13:53:ef:3c:37:84:17:3a:1f:37:68:fd:39:
         2a:9e:89:14:8e:ef:72:06:d8:89:a3:a8:75:b8:0d:14:64:f9:
         3d:5c:15:ab:cd:cb:b0:5b:4f:2e:61:1c:b9:e3:8d:64:ee:a0:
         31:70:76:5d:4f:f1:9e:9d:47:0c:f8:b4:e8:29:bb:e4:c5:1d:
         24:2b:c2:8b:a0:6c:4b:b0:4b:d1:24:e1:0a:66:cf:ea:48:8d:
         b4:2d:8a:73:a7:36:cf:32:3a:8c:f0:a7:a8:3f:5d:ce:41:5f:
         5a:5e:02:91:2b:1c:53:db:0f:f2:fb:46:f1:ee:ae:f2:6e:00:
         b0:72:fb:8e:38:05:03:47:34:da:7f:42:60:df:22:44:ff:22:
         4f:ea:23:47:27:42:5f:a1:dc:3e:a7:b0:06:b2:70:78:28:aa:
         a3:a1:4d:d0:0a:80:12:e7:07:7e:8a:79:b8:ef:3a:1e:b9:70:
         a6:75:b5:ec:82:cd:43:db:f4:6d:b1:1d:a4:02:6f:b7:be:cc:
         72:d3:2c:ec:3a:4f:71:6e:67:68:e2:f0:30:75:30:51:85:22:
         d2:ae:09:ce:fc:f6:ca:93:c8:00:41:68:91:e1:2b:ab:88:46:
         25:d6:52:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 17:17:52 2025 by rpki-client