This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F364379D/502A97D4BF3D11EDB8DB40F1F1222468/-sDqJCqAq1tZab-mHdXZlLIVbrU.mft
File:                     -sDqJCqAq1tZab-mHdXZlLIVbrU.mft (raw, json)
Hash identifier:          m+MmP9fSr3ALwys325pJG5nhEI0lBl/5Iff11CHEXeA=
Subject key identifier:   01:6D:CA:D5:33:C7:84:0A:3B:F1:D6:DB:75:6C:49:AB:68:61:32:7F
Authority key identifier: FA:C0:EA:24:2A:80:AB:5B:59:69:BF:A6:1D:D5:D9:94:B2:15:6E:B5
Certificate issuer:       /CN=F364379DAR/serialNumber=FAC0EA242A80AB5B5969BFA61DD5D994B2156EB5
Certificate serial:       0420
Authority info access:    rsync://rpki.afrinic.net/repository/arin/-sDqJCqAq1tZab-mHdXZlLIVbrU.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F364379D/502A97D4BF3D11EDB8DB40F1F1222468/-sDqJCqAq1tZab-mHdXZlLIVbrU.mft
Manifest number:          041C
Signing time:             Mon 22 Dec 2025 03:21:18 +0000
Manifest this update:     Mon 22 Dec 2025 03:21:17 +0000
Manifest next update:     Wed 24 Dec 2025 03:21:17 +0000
Files and hashes:         1: -sDqJCqAq1tZab-mHdXZlLIVbrU.crl (hash: KpOTMKHg27TfHKUXRTxt4fSAu00W0duCDKhO1yJT5rE=)
                          2: C838A4D646CD11F0B8C628B5DAE4EC9C.roa (hash: RTdZvWYUXJmf/Li5OHmQzr8WCYMhMf0ZpwZGPZXQQ+o=)
                          3: A696AAEC46CA11F0B0F691A0DAE4EC9C.roa (hash: xB7HU00jvjBw/6JgiS40uDAO/7+ErDQc10oiyq65hjE=)
                          4: 3561E70246C911F0B48FB997DAE4EC9C.roa (hash: hvGUR7BeqJ6MTLBaAk0vWcFdQF+l1z7VmRPb0Tpc0aQ=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F364379D/502A97D4BF3D11EDB8DB40F1F1222468/-sDqJCqAq1tZab-mHdXZlLIVbrU.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F364379D/502A97D4BF3D11EDB8DB40F1F1222468/-sDqJCqAq1tZab-mHdXZlLIVbrU.mft
                          rsync://rpki.afrinic.net/repository/arin/-sDqJCqAq1tZab-mHdXZlLIVbrU.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 24 Dec 2025 00:26:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1056 (0x420)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F364379DAR, serialNumber=FAC0EA242A80AB5B5969BFA61DD5D994B2156EB5
        Validity
            Not Before: Dec 22 03:21:17 2025 GMT
            Not After : Dec 24 03:21:17 2025 GMT
        Subject: CN=6948b92e-9819
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:ac:75:3c:b6:0f:61:bf:2a:6f:c5:c5:32:78:
                    07:6c:21:9d:83:b7:9d:bf:24:d6:59:38:a4:68:41:
                    22:ca:55:6e:41:48:00:c6:ce:45:e4:8d:da:0d:b3:
                    25:5a:d6:65:33:96:9d:9d:c0:9c:03:8b:85:06:ac:
                    fc:15:c0:2c:ec:11:34:50:84:02:aa:42:94:02:78:
                    22:ce:c1:52:e0:53:82:5f:04:ae:df:45:2d:df:48:
                    d6:d6:ef:9e:d4:d5:03:50:0c:f0:61:43:a7:d7:71:
                    ac:8e:18:14:3a:97:7d:69:c6:1a:0a:04:b0:7a:44:
                    ff:b2:2a:ec:c4:c1:7a:f8:be:80:79:f1:3a:b5:12:
                    b6:09:78:8c:63:fd:83:50:da:33:5a:e3:e8:32:0e:
                    6f:46:e2:e3:f0:92:d9:59:0c:ef:1a:42:ba:7b:ba:
                    41:fc:75:bd:0a:ca:4e:31:1b:9a:10:25:6c:d0:1a:
                    b1:b6:a2:28:17:6e:4d:8e:de:2d:c3:4c:ec:ce:a2:
                    88:f9:a7:f1:02:b0:22:f2:c2:c1:4e:be:35:14:2e:
                    66:e4:41:32:6b:93:6a:7b:95:23:cf:9d:de:1f:32:
                    46:4d:1f:8a:0b:ba:87:c4:fa:fe:6e:50:55:2a:38:
                    40:2c:0b:4c:ef:95:4f:62:bc:92:3b:ad:3d:bb:36:
                    94:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:6D:CA:D5:33:C7:84:0A:3B:F1:D6:DB:75:6C:49:AB:68:61:32:7F
            X509v3 Authority Key Identifier:
                keyid:FA:C0:EA:24:2A:80:AB:5B:59:69:BF:A6:1D:D5:D9:94:B2:15:6E:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F364379D/502A97D4BF3D11EDB8DB40F1F1222468/-sDqJCqAq1tZab-mHdXZlLIVbrU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/-sDqJCqAq1tZab-mHdXZlLIVbrU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F364379D/502A97D4BF3D11EDB8DB40F1F1222468/-sDqJCqAq1tZab-mHdXZlLIVbrU.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:e1:ab:e3:1b:7d:5f:2f:fa:b9:c4:12:43:e8:a0:69:c5:79:
         f1:e5:6d:2d:62:53:24:47:be:eb:71:cf:98:6f:1e:86:76:0e:
         3f:2b:fb:cf:ab:03:27:5c:d1:93:02:98:c3:e9:99:7e:34:07:
         38:2e:8d:7e:52:6d:0d:00:e4:f7:e9:e6:18:ab:e2:29:93:e6:
         f7:76:60:f7:90:fd:d5:63:50:01:ba:b0:be:17:2b:fb:2b:ae:
         4f:45:8e:83:49:60:0f:dd:a2:71:43:2b:56:10:d5:92:c2:dd:
         5a:83:f5:a0:63:83:74:20:5a:f5:2e:9f:2d:a1:53:70:a2:5b:
         00:81:af:75:fb:56:1d:cb:2b:df:3f:1b:57:37:e1:8e:82:03:
         c4:fb:6a:fd:ea:2a:6d:04:66:63:f7:7a:0f:c5:31:a5:4d:f0:
         7c:e1:8a:20:6f:ef:73:7b:5a:a4:e9:71:af:ca:27:91:c2:04:
         4a:15:b6:25:5d:cd:44:11:41:e6:72:97:dc:7c:ea:4f:48:9f:
         96:e4:13:cc:c7:7a:d9:a0:ca:83:59:0a:2f:2e:57:1d:9d:3c:
         bb:b2:f8:1b:05:7c:bd:44:d7:e8:c3:b0:e6:25:0d:f4:29:68:
         08:4f:d0:21:31:ed:7b:74:22:a6:35:e4:c6:64:02:94:7e:db:
         ec:0b:47:9a
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgICBCAwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NDM3OURBUjExMC8GA1UEBRMoRkFDMEVBMjQyQTgwQUI1QjU5NjlCRkE2MURENUQ5
OTRCMjE1NkVCNTAeFw0yNTEyMjIwMzIxMTdaFw0yNTEyMjQwMzIxMTdaMBgxFjAU
BgNVBAMTDTY5NDhiOTJlLTk4MTkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDXrHU8tg9hvypvxcUyeAdsIZ2Dt52/JNZZOKRoQSLKVW5BSADGzkXkjdoN
syVa1mUzlp2dwJwDi4UGrPwVwCzsETRQhAKqQpQCeCLOwVLgU4JfBK7fRS3fSNbW
757U1QNQDPBhQ6fXcayOGBQ6l31pxhoKBLB6RP+yKuzEwXr4voB58Tq1ErYJeIxj
/YNQ2jNa4+gyDm9G4uPwktlZDO8aQrp7ukH8db0Kyk4xG5oQJWzQGrG2oigXbk2O
3i3DTOzOooj5p/ECsCLywsFOvjUULmbkQTJrk2p7lSPPnd4fMkZNH4oLuofE+v5u
UFUqOEAsC0zvlU9ivJI7rT27NpRpAgMBAAGjggK1MIICsTAdBgNVHQ4EFgQUAW3K
1TPHhAo78dbbdWxJq2hhMn8wHwYDVR0jBBgwFoAU+sDqJCqAq1tZab+mHdXZlLIV
brUwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjQzNzlELzUwMkE5N0Q0QkYzRDExRURCOERCNDBGMUYxMjIyNDY4Ly1zRHFK
Q3FBcTF0WmFiLW1IZFhabExJVmJyVS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
Ly1zRHFKQ3FBcTF0WmFiLW1IZFhabExJVmJyVS5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEFBQcw
C4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl
cG9zaXRvcnkvRjM2NDM3OUQvNTAyQTk3RDRCRjNEMTFFREI4REI0MEYxRjEyMjI0
NjgvLXNEcUpDcUFxMXRaYWItbUhkWFpsTElWYnJVLm1mdDA1BggrBgEFBQcwDYYp
aHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA
AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQA34avjG31fL/q5xBJD6KBpxXnx5W0tYlMk
R77rcc+Ybx6Gdg4/K/vPqwMnXNGTApjD6Zl+NAc4Lo1+Um0NAOT36eYYq+Ipk+b3
dmD3kP3VY1ABurC+Fyv7K65PRY6DSWAP3aJxQytWENWSwt1ag/WgY4N0IFr1Lp8t
oVNwolsAga91+1YdyyvfPxtXN+GOggPE+2r96iptBGZj93oPxTGlTfB84Yogb+9z
e1qk6XGvyieRwgRKFbYlXc1EEUHmcpfcfOpPSJ+W5BPMx3rZoMqDWQovLlcdnTy7
svgbBXy9RNfow7DmJQ30KWgIT9AhMe17dCKmNeTGZAKUftvsC0ea
-----END CERTIFICATE-----
Generated at Mon Dec 22 06:50:43 2025 by rpki-client