This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F364379D/502A97D4BF3D11EDB8DB40F1F1222468/-sDqJCqAq1tZab-mHdXZlLIVbrU.mft
File:                     -sDqJCqAq1tZab-mHdXZlLIVbrU.mft (raw, json)
Hash identifier:          epU3xFypteRbsK8pgavUo3ZiYRDA3dIxzizQFjwLKFM=
Subject key identifier:   BD:DD:2D:0E:6A:03:44:F7:DC:3C:70:CE:91:69:4C:01:F4:51:B9:EA
Authority key identifier: FA:C0:EA:24:2A:80:AB:5B:59:69:BF:A6:1D:D5:D9:94:B2:15:6E:B5
Certificate issuer:       /CN=F364379DAR/serialNumber=FAC0EA242A80AB5B5969BFA61DD5D994B2156EB5
Certificate serial:       040E
Authority info access:    rsync://rpki.afrinic.net/repository/arin/-sDqJCqAq1tZab-mHdXZlLIVbrU.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F364379D/502A97D4BF3D11EDB8DB40F1F1222468/-sDqJCqAq1tZab-mHdXZlLIVbrU.mft
Manifest number:          040A
Signing time:             Thu 04 Dec 2025 03:20:50 +0000
Manifest this update:     Thu 04 Dec 2025 03:20:50 +0000
Manifest next update:     Sat 06 Dec 2025 03:20:50 +0000
Files and hashes:         1: -sDqJCqAq1tZab-mHdXZlLIVbrU.crl (hash: b+hjH4AxQsxjdJjYEz48xDK9oqKvK3nTo+9zNhss0fg=)
                          2: C838A4D646CD11F0B8C628B5DAE4EC9C.roa (hash: RTdZvWYUXJmf/Li5OHmQzr8WCYMhMf0ZpwZGPZXQQ+o=)
                          3: A696AAEC46CA11F0B0F691A0DAE4EC9C.roa (hash: xB7HU00jvjBw/6JgiS40uDAO/7+ErDQc10oiyq65hjE=)
                          4: 3561E70246C911F0B48FB997DAE4EC9C.roa (hash: hvGUR7BeqJ6MTLBaAk0vWcFdQF+l1z7VmRPb0Tpc0aQ=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F364379D/502A97D4BF3D11EDB8DB40F1F1222468/-sDqJCqAq1tZab-mHdXZlLIVbrU.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F364379D/502A97D4BF3D11EDB8DB40F1F1222468/-sDqJCqAq1tZab-mHdXZlLIVbrU.mft
                          rsync://rpki.afrinic.net/repository/arin/-sDqJCqAq1tZab-mHdXZlLIVbrU.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 06 Dec 2025 03:20:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1038 (0x40e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F364379DAR, serialNumber=FAC0EA242A80AB5B5969BFA61DD5D994B2156EB5
        Validity
            Not Before: Dec  4 03:20:50 2025 GMT
            Not After : Dec  6 03:20:50 2025 GMT
        Subject: CN=6930fe12-a817
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:2e:c1:a9:7a:91:49:f6:f9:0a:ea:06:76:5f:
                    69:67:af:6d:2c:c3:de:14:e1:fc:30:b6:9c:54:37:
                    a6:52:f1:70:f0:21:8e:27:89:09:a7:a2:03:6f:1b:
                    3e:41:51:ec:7e:6e:1b:0d:d1:e1:9d:55:d5:ef:36:
                    97:32:63:9e:ae:92:31:6c:50:4d:ca:d4:8e:5a:b0:
                    75:64:20:2a:c4:d7:d4:0c:9e:8a:d1:40:80:05:b7:
                    22:cb:a8:60:2f:5f:51:87:3e:e4:1a:28:9d:69:e7:
                    06:46:53:cb:73:9c:13:3e:e2:2c:b3:32:b3:09:3a:
                    9d:04:e6:62:03:c2:a6:8d:44:40:2c:e0:66:6e:98:
                    9a:d3:1c:30:ac:b2:a9:90:98:b8:37:a5:6f:e7:e7:
                    09:98:f3:24:69:3d:94:60:ac:43:ba:da:77:b4:e0:
                    41:00:c8:8a:18:d3:39:85:94:c1:8a:d8:67:b2:82:
                    e2:fd:88:81:f1:65:b9:e3:a0:a0:1b:04:a5:d3:cd:
                    a0:ae:94:96:f7:fc:f2:6b:67:75:42:3c:a3:26:ba:
                    4c:a4:d2:2a:fb:c1:91:4b:e9:cd:16:5e:43:a3:e0:
                    39:76:93:8c:0d:05:53:6d:d9:8c:1b:19:f0:b1:6c:
                    2e:08:c7:00:64:5d:81:3b:69:9d:53:85:2c:70:db:
                    c7:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:DD:2D:0E:6A:03:44:F7:DC:3C:70:CE:91:69:4C:01:F4:51:B9:EA
            X509v3 Authority Key Identifier:
                keyid:FA:C0:EA:24:2A:80:AB:5B:59:69:BF:A6:1D:D5:D9:94:B2:15:6E:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F364379D/502A97D4BF3D11EDB8DB40F1F1222468/-sDqJCqAq1tZab-mHdXZlLIVbrU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/-sDqJCqAq1tZab-mHdXZlLIVbrU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F364379D/502A97D4BF3D11EDB8DB40F1F1222468/-sDqJCqAq1tZab-mHdXZlLIVbrU.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:7f:d5:44:85:98:9a:99:a2:3c:f8:cd:0d:15:c5:27:8c:34:
         74:89:e9:f9:25:b5:36:2b:fb:9e:cc:20:9d:fb:69:39:61:1c:
         f4:57:70:e2:12:88:16:af:fc:26:80:ac:9c:7a:65:e5:6c:d6:
         4a:4b:61:c1:cc:cc:16:a1:96:0e:65:dc:f2:9d:48:d7:8b:1b:
         fe:d0:46:38:4f:83:c5:b2:9f:b7:a1:d8:1b:f8:44:cb:be:e0:
         90:c3:11:33:9e:b2:5e:b6:c3:10:d2:e5:ba:de:e0:5d:a0:00:
         49:58:e6:34:fa:d1:69:64:5f:6d:f5:ee:ed:74:7f:af:b8:8d:
         85:9d:f9:97:1e:01:95:1d:19:11:6a:ce:d9:8a:34:1c:80:00:
         84:82:8c:4a:cb:40:bf:98:88:5d:6d:f9:f0:35:df:6f:80:17:
         1b:c6:27:85:38:08:b8:ed:28:a3:44:02:8c:c9:0a:19:2a:34:
         5d:0f:67:81:90:a2:c9:16:27:ad:da:e4:7b:07:b4:4a:e2:3f:
         91:3e:7f:93:81:7c:66:20:95:b8:97:43:f6:05:13:09:2e:f7:
         a5:ac:d7:e0:e4:21:36:2f:4d:5d:b5:b0:98:5a:98:41:35:62:
         a6:66:82:77:96:a7:3c:bf:05:a2:3e:77:39:47:03:83:5e:72:
         4f:23:51:db
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgICBA4wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NDM3OURBUjExMC8GA1UEBRMoRkFDMEVBMjQyQTgwQUI1QjU5NjlCRkE2MURENUQ5
OTRCMjE1NkVCNTAeFw0yNTEyMDQwMzIwNTBaFw0yNTEyMDYwMzIwNTBaMBgxFjAU
BgNVBAMTDTY5MzBmZTEyLWE4MTcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDTLsGpepFJ9vkK6gZ2X2lnr20sw94U4fwwtpxUN6ZS8XDwIY4niQmnogNv
Gz5BUex+bhsN0eGdVdXvNpcyY56ukjFsUE3K1I5asHVkICrE19QMnorRQIAFtyLL
qGAvX1GHPuQaKJ1p5wZGU8tznBM+4iyzMrMJOp0E5mIDwqaNREAs4GZumJrTHDCs
sqmQmLg3pW/n5wmY8yRpPZRgrEO62ne04EEAyIoY0zmFlMGK2GeyguL9iIHxZbnj
oKAbBKXTzaCulJb3/PJrZ3VCPKMmukyk0ir7wZFL6c0WXkOj4Dl2k4wNBVNt2Ywb
GfCxbC4IxwBkXYE7aZ1ThSxw28dTAgMBAAGjggK1MIICsTAdBgNVHQ4EFgQUvd0t
DmoDRPfcPHDOkWlMAfRRueowHwYDVR0jBBgwFoAU+sDqJCqAq1tZab+mHdXZlLIV
brUwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjQzNzlELzUwMkE5N0Q0QkYzRDExRURCOERCNDBGMUYxMjIyNDY4Ly1zRHFK
Q3FBcTF0WmFiLW1IZFhabExJVmJyVS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
Ly1zRHFKQ3FBcTF0WmFiLW1IZFhabExJVmJyVS5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEFBQcw
C4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl
cG9zaXRvcnkvRjM2NDM3OUQvNTAyQTk3RDRCRjNEMTFFREI4REI0MEYxRjEyMjI0
NjgvLXNEcUpDcUFxMXRaYWItbUhkWFpsTElWYnJVLm1mdDA1BggrBgEFBQcwDYYp
aHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA
AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAFf9VEhZiamaI8+M0NFcUnjDR0ien5JbU2
K/uezCCd+2k5YRz0V3DiEogWr/wmgKycemXlbNZKS2HBzMwWoZYOZdzynUjXixv+
0EY4T4PFsp+3odgb+ETLvuCQwxEznrJetsMQ0uW63uBdoABJWOY0+tFpZF9t9e7t
dH+vuI2FnfmXHgGVHRkRas7ZijQcgACEgoxKy0C/mIhdbfnwNd9vgBcbxieFOAi4
7SijRAKMyQoZKjRdD2eBkKLJFiet2uR7B7RK4j+RPn+TgXxmIJW4l0P2BRMJLvel
rNfg5CE2L01dtbCYWphBNWKmZoJ3lqc8vwWiPnc5RwODXnJPI1Hb
-----END CERTIFICATE-----
Generated at Thu Dec 4 23:39:59 2025 by rpki-client