This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3662123/2BCF62489D2811EDB8F9258BF1222468/MzQdyhYYc65_OkSzbhzbObXAoJo.mft
File:                     MzQdyhYYc65_OkSzbhzbObXAoJo.mft (raw, json)
Hash identifier:          YEo4TdPy/EB+24sx9WjWnw8Ritd2j6uIYoXLtbGILyk=
Subject key identifier:   7C:FF:20:A7:6E:FF:C1:A8:54:1C:FE:F4:67:64:FB:75:43:B6:38:75
Authority key identifier: 33:34:1D:CA:16:18:73:AE:7F:3A:44:B3:6E:1C:DB:39:B5:C0:A0:9A
Certificate issuer:       /CN=F3662123AR/serialNumber=33341DCA161873AE7F3A44B36E1CDB39B5C0A09A
Certificate serial:       043D
Authority info access:    rsync://rpki.afrinic.net/repository/arin/MzQdyhYYc65_OkSzbhzbObXAoJo.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3662123/2BCF62489D2811EDB8F9258BF1222468/MzQdyhYYc65_OkSzbhzbObXAoJo.mft
Manifest number:          0439
Signing time:             Thu 04 Dec 2025 03:15:14 +0000
Manifest this update:     Thu 04 Dec 2025 03:15:13 +0000
Manifest next update:     Sat 06 Dec 2025 03:15:13 +0000
Files and hashes:         1: MzQdyhYYc65_OkSzbhzbObXAoJo.crl (hash: 0hlczaydSl02h6PVfq/abH+fICWSzcHOtEUEEgREJu4=)
                          2: C8482A8890A511F09A249AC2DAE4EC9C.roa (hash: YU+s4UvMmcAg4MELqrvjtd9+g7rExQPJik+26Y7x314=)
                          3: 7AA044D690A611F0986ABFC6DAE4EC9C.roa (hash: /le7lzuRW1i4hL+MhKBxtXg6Ksje+Y1b6XKnVcdIPSQ=)
                          4: 407424D090A611F0A752BAC4DAE4EC9C.roa (hash: TH3/4mixLvf8p6rQJ/buDVDbyHxIQcv4IonGYryiTFc=)
                          5: A58DD09690A611F0BAABE5C8DAE4EC9C.roa (hash: WRkcJOJs2/U9E6K9MGQG8K0I2p0FY0LDJQ9GxZH1JLE=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3662123/2BCF62489D2811EDB8F9258BF1222468/MzQdyhYYc65_OkSzbhzbObXAoJo.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3662123/2BCF62489D2811EDB8F9258BF1222468/MzQdyhYYc65_OkSzbhzbObXAoJo.mft
                          rsync://rpki.afrinic.net/repository/arin/MzQdyhYYc65_OkSzbhzbObXAoJo.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 06 Dec 2025 03:15:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1085 (0x43d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3662123AR, serialNumber=33341DCA161873AE7F3A44B36E1CDB39B5C0A09A
        Validity
            Not Before: Dec  4 03:15:13 2025 GMT
            Not After : Dec  6 03:15:13 2025 GMT
        Subject: CN=6930fcc2-609b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:90:1b:5e:5a:a8:19:24:54:12:ea:87:b2:65:
                    40:3c:1d:a7:d1:d6:ba:e2:9e:85:9b:00:e1:1b:11:
                    0e:88:06:f3:6c:90:6a:bb:0c:4b:87:65:01:0e:f4:
                    b9:e3:51:f5:ba:92:54:35:40:3b:07:fd:6c:41:0c:
                    0d:63:27:45:76:69:99:ba:9e:8d:e4:6f:f6:9e:7b:
                    d6:76:bf:6e:76:90:a3:32:f0:49:12:34:b3:3c:5c:
                    53:05:59:2a:7c:a5:47:13:22:7d:8e:84:b0:83:8a:
                    e3:e6:c5:ee:e6:14:65:e1:b4:8e:3a:fa:12:5a:9b:
                    72:29:45:9f:3a:9d:54:59:77:c1:1f:7e:00:4b:a1:
                    33:a8:3e:0a:48:8b:97:2b:bb:d1:9a:67:66:1a:f5:
                    97:36:56:d0:91:ef:38:d2:cb:61:2a:9d:51:55:02:
                    98:9d:53:76:02:a6:61:92:91:c4:aa:aa:91:80:6f:
                    71:01:a2:23:72:44:cb:2b:28:a9:21:49:0f:5f:3a:
                    ae:c3:79:3a:14:13:74:0c:05:39:9b:18:79:a3:72:
                    bb:9f:b2:6c:6a:d5:1a:cc:57:07:3b:ab:6d:61:93:
                    6b:3b:7c:71:64:90:67:a1:a6:0c:06:e4:ca:8b:e9:
                    fc:1e:74:52:88:21:4c:12:bc:19:8f:0d:87:5b:e5:
                    1e:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:FF:20:A7:6E:FF:C1:A8:54:1C:FE:F4:67:64:FB:75:43:B6:38:75
            X509v3 Authority Key Identifier:
                keyid:33:34:1D:CA:16:18:73:AE:7F:3A:44:B3:6E:1C:DB:39:B5:C0:A0:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3662123/2BCF62489D2811EDB8F9258BF1222468/MzQdyhYYc65_OkSzbhzbObXAoJo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/MzQdyhYYc65_OkSzbhzbObXAoJo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3662123/2BCF62489D2811EDB8F9258BF1222468/MzQdyhYYc65_OkSzbhzbObXAoJo.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:de:64:2f:24:d3:ae:ea:21:d2:f5:de:06:52:4f:87:31:cc:
         87:e9:ee:a9:94:23:ea:75:f3:dc:ca:71:ef:b1:5d:18:33:6d:
         7a:e3:6c:c9:6a:4a:76:c4:ca:99:bc:18:3d:f2:83:a8:8a:09:
         ab:3e:66:d3:09:f4:43:d4:75:ac:90:87:d7:a9:d5:c2:04:46:
         bc:d5:36:10:d9:3a:9d:84:d9:dd:35:10:50:17:78:bd:3f:87:
         19:cf:53:5c:9c:f0:56:0e:68:1d:2c:1a:76:d3:eb:91:55:06:
         db:aa:f8:60:48:04:73:34:a8:ff:29:b4:43:c3:e8:d5:19:94:
         2e:11:07:35:fc:24:f8:db:35:3c:af:60:96:80:f4:42:b2:ff:
         1f:a4:be:6c:58:ca:89:d4:aa:15:8f:05:6b:df:f2:2e:39:69:
         74:5b:6e:8f:d8:c1:51:d2:2f:fa:34:e7:1b:58:3b:69:96:72:
         46:e1:f1:cb:e8:e7:d0:87:b6:7e:48:8e:90:66:6f:7d:46:97:
         53:46:69:a8:f3:fb:3e:a5:37:43:d5:c3:b1:02:58:fb:c5:9b:
         df:a6:0e:f0:6e:05:a3:85:3e:21:1e:d7:fb:55:99:06:24:33:
         d6:c6:a3:66:62:03:3c:15:49:c6:0b:f7:0b:4f:b2:3f:ef:c3:
         c6:42:f6:17
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgICBD0wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NjIxMjNBUjExMC8GA1UEBRMoMzMzNDFEQ0ExNjE4NzNBRTdGM0E0NEIzNkUxQ0RC
MzlCNUMwQTA5QTAeFw0yNTEyMDQwMzE1MTNaFw0yNTEyMDYwMzE1MTNaMBgxFjAU
BgNVBAMTDTY5MzBmY2MyLTYwOWIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCxkBteWqgZJFQS6oeyZUA8HafR1rrinoWbAOEbEQ6IBvNskGq7DEuHZQEO
9LnjUfW6klQ1QDsH/WxBDA1jJ0V2aZm6no3kb/aee9Z2v252kKMy8EkSNLM8XFMF
WSp8pUcTIn2OhLCDiuPmxe7mFGXhtI46+hJam3IpRZ86nVRZd8EffgBLoTOoPgpI
i5cru9GaZ2Ya9Zc2VtCR7zjSy2EqnVFVApidU3YCpmGSkcSqqpGAb3EBoiNyRMsr
KKkhSQ9fOq7DeToUE3QMBTmbGHmjcrufsmxq1RrMVwc7q21hk2s7fHFkkGehpgwG
5MqL6fwedFKIIUwSvBmPDYdb5R5lAgMBAAGjggK1MIICsTAdBgNVHQ4EFgQUfP8g
p27/wahUHP70Z2T7dUO2OHUwHwYDVR0jBBgwFoAUMzQdyhYYc65/OkSzbhzbObXA
oJowDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjYyMTIzLzJCQ0Y2MjQ4OUQyODExRURCOEY5MjU4QkYxMjIyNDY4L016UWR5
aFlZYzY1X09rU3piaHpiT2JYQW9Kby5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L016UWR5aFlZYzY1X09rU3piaHpiT2JYQW9Kby5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEFBQcw
C4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl
cG9zaXRvcnkvRjM2NjIxMjMvMkJDRjYyNDg5RDI4MTFFREI4RjkyNThCRjEyMjI0
NjgvTXpRZHloWVljNjVfT2tTemJoemJPYlhBb0pvLm1mdDA1BggrBgEFBQcwDYYp
aHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA
AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBt3mQvJNOu6iHS9d4GUk+HMcyH6e6plCPq
dfPcynHvsV0YM21642zJakp2xMqZvBg98oOoigmrPmbTCfRD1HWskIfXqdXCBEa8
1TYQ2TqdhNndNRBQF3i9P4cZz1NcnPBWDmgdLBp20+uRVQbbqvhgSARzNKj/KbRD
w+jVGZQuEQc1/CT42zU8r2CWgPRCsv8fpL5sWMqJ1KoVjwVr3/IuOWl0W26P2MFR
0i/6NOcbWDtplnJG4fHL6OfQh7Z+SI6QZm99RpdTRmmo8/s+pTdD1cOxAlj7xZvf
pg7wbgWjhT4hHtf7VZkGJDPWxqNmYgM8FUnGC/cLT7I/78PGQvYX
-----END CERTIFICATE-----
Generated at Thu Dec 4 23:39:58 2025 by rpki-client