This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3656177/8F51AB8E83BF11E681ABEC37F8AEA228/ARf_NlB776Kb324d58jVMKSepOM.mft
File:                     ARf_NlB776Kb324d58jVMKSepOM.mft (raw, json)
Hash identifier:          WBMd8RKEsXbf1V7/53Dl/pm8smMMP8NqrnUUlRg0HGY=
Subject key identifier:   68:15:E7:D2:9D:36:4D:10:E0:60:EC:B8:49:B4:6E:20:64:1F:7B:DA
Authority key identifier: 01:17:FF:36:50:7B:EF:A2:9B:DF:6E:1D:E7:C8:D5:30:A4:9E:A4:E3
Certificate issuer:       /CN=F3656177AF/serialNumber=0117FF36507BEFA29BDF6E1DE7C8D530A49EA4E3
Certificate serial:       0D6C
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/ARf_NlB776Kb324d58jVMKSepOM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3656177/8F51AB8E83BF11E681ABEC37F8AEA228/ARf_NlB776Kb324d58jVMKSepOM.mft
Manifest number:          0D6A
Signing time:             Thu 04 Dec 2025 01:05:39 +0000
Manifest this update:     Thu 04 Dec 2025 01:05:39 +0000
Manifest next update:     Sat 06 Dec 2025 01:05:39 +0000
Files and hashes:         1: ARf_NlB776Kb324d58jVMKSepOM.crl (hash: gZmRtah2n77NGY3H+K7BhVeGaO2i164bBBqmY5ssvRU=)
                          2: B638C7E6C8C711E997C29757F8AEA228.roa (hash: EisbOpC1Y+D87WQCpz01JdeRv1C7VPmD55bEQs7AK5Y=)
                          3: 7DB93F0EC8C711E9BC304257F8AEA228.roa (hash: UV0937nnVyRu+QQ+Af7r5v4ImK92QTguDEzt+VyalNw=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3656177/8F51AB8E83BF11E681ABEC37F8AEA228/ARf_NlB776Kb324d58jVMKSepOM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3656177/8F51AB8E83BF11E681ABEC37F8AEA228/ARf_NlB776Kb324d58jVMKSepOM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/ARf_NlB776Kb324d58jVMKSepOM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 06 Dec 2025 01:05:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3436 (0xd6c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3656177AF, serialNumber=0117FF36507BEFA29BDF6E1DE7C8D530A49EA4E3
        Validity
            Not Before: Dec  4 01:05:39 2025 GMT
            Not After : Dec  6 01:05:39 2025 GMT
        Subject: CN=6930de63-c8a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:4e:66:25:f0:db:ec:0d:e4:64:09:f2:38:49:
                    5e:0d:fc:7f:18:d8:6f:bc:04:11:5e:b3:d6:07:8a:
                    df:31:8d:73:eb:97:e7:ae:72:7f:ad:65:31:a2:18:
                    a4:d2:c1:2a:cc:b6:9b:30:bb:d1:65:d4:f5:57:b4:
                    bc:4e:c3:f4:92:e0:26:a3:13:42:c4:75:e9:b2:e9:
                    d2:2d:31:80:b3:30:0c:0b:17:e5:3a:b0:f0:eb:9d:
                    9c:8e:88:ac:2f:c5:f5:ba:c1:f1:cb:37:65:95:28:
                    bc:5e:6b:26:e5:80:7b:f7:78:24:62:f5:bc:aa:ad:
                    b4:14:f6:a6:da:74:df:86:2b:95:6e:a1:b6:5c:67:
                    24:e4:37:f0:c9:cb:cf:76:da:8f:9d:d4:3b:5b:68:
                    41:e8:21:7b:1e:54:85:a4:94:a8:09:7a:65:97:18:
                    52:06:39:9b:7a:cc:bc:7d:11:86:70:d2:13:74:8c:
                    53:4b:0a:31:94:45:b7:74:49:ec:0f:77:be:0a:26:
                    a5:57:68:02:27:f7:69:14:fa:cf:1b:21:d5:6c:3b:
                    43:72:ec:04:df:e8:72:9a:bf:b0:6c:31:d2:9c:03:
                    c6:4f:22:ba:36:45:ae:d0:d3:16:e4:20:ea:ed:cc:
                    85:5a:5d:7f:c1:4a:70:24:40:01:5c:f1:53:71:f7:
                    8a:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:15:E7:D2:9D:36:4D:10:E0:60:EC:B8:49:B4:6E:20:64:1F:7B:DA
            X509v3 Authority Key Identifier:
                keyid:01:17:FF:36:50:7B:EF:A2:9B:DF:6E:1D:E7:C8:D5:30:A4:9E:A4:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3656177/8F51AB8E83BF11E681ABEC37F8AEA228/ARf_NlB776Kb324d58jVMKSepOM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/ARf_NlB776Kb324d58jVMKSepOM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3656177/8F51AB8E83BF11E681ABEC37F8AEA228/ARf_NlB776Kb324d58jVMKSepOM.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:f5:3b:25:62:6a:c2:b9:f7:79:5b:40:fe:11:05:16:0f:69:
         5f:d9:70:e2:16:19:6b:53:d6:99:d3:5e:e3:1b:46:cb:e6:71:
         bb:e4:9c:ad:ef:21:f1:de:36:69:4c:36:83:59:35:70:ea:0b:
         1f:b4:5e:38:b5:1c:30:9f:e2:49:ef:d2:65:b8:b0:40:13:d8:
         a7:eb:a0:5b:57:23:8e:28:23:7d:21:f2:a2:71:eb:14:f7:a6:
         cf:46:0b:62:74:f3:b1:81:7b:64:96:60:3b:53:bb:ab:cc:bc:
         4b:73:66:2d:22:39:a5:96:dd:35:0b:1f:62:ef:3f:a7:e6:2c:
         3e:af:36:84:33:eb:e6:2b:15:36:db:cf:e2:0f:42:cf:1b:f8:
         e9:01:1b:32:17:84:73:00:8c:1e:e5:49:6b:2c:bf:d6:1a:d5:
         c4:b8:7a:d3:b4:31:91:f3:16:11:8a:10:df:1c:6b:d5:ac:f2:
         b8:d2:38:ef:3d:67:a0:e5:84:9b:2c:20:59:5f:6f:00:ca:9e:
         f2:d1:05:17:f3:d9:63:78:05:e5:80:42:95:6d:f3:b0:83:6d:
         8e:b7:0d:7e:71:98:aa:a4:29:fd:51:fe:88:8c:70:43:e7:78:
         bb:0f:b2:e0:59:8c:6c:a7:9b:53:77:d7:1f:6f:26:e7:ec:78:
         05:02:4a:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 5 02:12:07 2025 by rpki-client