This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36580B0/0AC199A441CE11EEBCA91D114AD9E6FC/6KKF56kRnMEwyin3NXnbBoJPg7U.mft
File:                     6KKF56kRnMEwyin3NXnbBoJPg7U.mft (raw, json)
Hash identifier:          YK7v7mrqz4/igZDsn8G5M5Np/tkqQ1SrIALXdcAVw1E=
Subject key identifier:   13:15:B1:AE:B4:87:C1:0B:1D:14:B6:CD:EF:02:79:79:09:C6:3A:91
Authority key identifier: E8:A2:85:E7:A9:11:9C:C1:30:CA:29:F7:35:79:DB:06:82:4F:83:B5
Certificate issuer:       /CN=F36580B0AR/serialNumber=E8A285E7A9119CC130CA29F73579DB06824F83B5
Certificate serial:       036F
Authority info access:    rsync://rpki.afrinic.net/repository/arin/6KKF56kRnMEwyin3NXnbBoJPg7U.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36580B0/0AC199A441CE11EEBCA91D114AD9E6FC/6KKF56kRnMEwyin3NXnbBoJPg7U.mft
Manifest number:          036D
Signing time:             Mon 22 Dec 2025 03:45:06 +0000
Manifest this update:     Mon 22 Dec 2025 03:45:05 +0000
Manifest next update:     Wed 24 Dec 2025 03:45:05 +0000
Files and hashes:         1: 6KKF56kRnMEwyin3NXnbBoJPg7U.crl (hash: Sj6Yai7JMtDOBprXWzKMJdvFfWrc1MZTvnkxL2uEbhA=)
                          2: E9200F1437BD11F0BD0B81C1DAE4EC9C.roa (hash: 1c3GThWv8g2r9qs7UzZVBaLErWyY4OZNe1fIMcoY0ww=)
                          3: 60251E1041CF11EE97BA22154AD9E6FC.roa (hash: +/KON4UBgEg4d/T2YNBvCgKU2dUseDYpvvtJTHIMNow=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36580B0/0AC199A441CE11EEBCA91D114AD9E6FC/6KKF56kRnMEwyin3NXnbBoJPg7U.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36580B0/0AC199A441CE11EEBCA91D114AD9E6FC/6KKF56kRnMEwyin3NXnbBoJPg7U.mft
                          rsync://rpki.afrinic.net/repository/arin/6KKF56kRnMEwyin3NXnbBoJPg7U.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 24 Dec 2025 03:45:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 879 (0x36f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36580B0AR, serialNumber=E8A285E7A9119CC130CA29F73579DB06824F83B5
        Validity
            Not Before: Dec 22 03:45:05 2025 GMT
            Not After : Dec 24 03:45:05 2025 GMT
        Subject: CN=6948bec2-5888
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:00:83:9f:d7:5f:75:e4:03:41:0b:44:b9:b9:
                    ec:e3:29:54:80:c1:4a:d1:d2:76:b5:52:bd:48:21:
                    ff:b6:9d:dd:31:74:e2:97:ce:50:d8:6a:b5:6d:47:
                    ad:1c:b5:81:57:6c:24:80:8d:23:80:d8:a9:a0:72:
                    01:8d:b8:49:af:85:00:f2:44:6d:2e:82:1e:f4:d9:
                    cd:37:99:7e:89:b2:2f:c0:94:0b:31:8a:f7:79:2c:
                    da:a6:5e:b4:41:5b:6d:47:b3:20:ae:11:49:3d:31:
                    7d:92:8d:43:3f:8b:25:cc:2e:bf:5d:e5:73:19:fa:
                    d9:40:21:fb:4a:6c:5d:48:35:36:17:f2:5d:8c:d8:
                    cb:c5:5e:d8:47:1f:52:3a:bc:22:3f:b9:94:ee:47:
                    67:6e:8f:e6:5c:90:1c:b1:f4:d4:7c:65:2f:f5:48:
                    7c:0d:da:a7:62:1e:70:36:cb:f6:57:05:da:f3:4c:
                    53:20:bf:cd:ba:97:8a:4f:73:33:82:6f:3e:73:84:
                    81:2e:ce:43:69:41:7a:5e:94:cb:db:70:e0:7a:f2:
                    e3:6e:01:94:d9:e9:ec:ff:ab:c3:4a:91:ae:19:d7:
                    ce:3c:85:7d:68:ce:71:c2:c9:02:9e:e1:0d:9a:06:
                    0c:b4:f7:da:46:2d:5b:44:a5:cf:1a:4d:1f:25:96:
                    86:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:15:B1:AE:B4:87:C1:0B:1D:14:B6:CD:EF:02:79:79:09:C6:3A:91
            X509v3 Authority Key Identifier:
                keyid:E8:A2:85:E7:A9:11:9C:C1:30:CA:29:F7:35:79:DB:06:82:4F:83:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36580B0/0AC199A441CE11EEBCA91D114AD9E6FC/6KKF56kRnMEwyin3NXnbBoJPg7U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/6KKF56kRnMEwyin3NXnbBoJPg7U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36580B0/0AC199A441CE11EEBCA91D114AD9E6FC/6KKF56kRnMEwyin3NXnbBoJPg7U.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:47:d7:dd:a9:a6:e6:a8:79:0d:d1:a3:3c:54:fd:e1:60:5e:
         62:41:f9:ca:3e:1d:7b:3c:53:66:13:f6:3b:db:1b:11:34:f5:
         d1:de:d9:f4:4c:98:f6:05:6d:ae:30:b7:4a:cd:2b:73:62:1a:
         a5:f2:a8:a3:ae:3b:b3:80:58:41:f7:71:33:1a:9a:b8:8c:21:
         d1:6d:cb:3f:c5:ec:7b:53:39:9d:d3:a0:f9:30:62:5b:7d:59:
         07:2c:06:ee:98:27:f3:4b:de:5b:a0:37:65:06:99:76:44:46:
         d3:1f:1d:15:9b:6b:1d:76:65:fd:c1:57:57:15:4e:4c:d1:22:
         81:32:09:8c:99:fc:66:81:62:69:fc:20:e8:d3:74:e7:65:58:
         93:63:63:2b:26:42:ad:33:7d:7e:d3:be:7c:ff:5f:16:43:da:
         7d:51:a6:a3:2f:f9:d1:97:71:b9:dc:22:7e:bd:31:15:fd:22:
         4c:97:0b:4b:3d:b5:74:ef:82:ac:37:14:78:b3:e1:a5:1e:b2:
         b9:18:94:66:01:38:45:37:43:fb:c0:64:04:b5:86:80:1e:a9:
         9e:6f:6b:8f:2d:8e:02:f3:f1:8b:c4:8d:a6:84:23:c2:60:bf:
         2c:5d:12:35:4d:9f:91:f2:ea:0c:25:1a:14:91:cc:02:5a:67:
         08:64:23:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 01:56:52 2025 by rpki-client