This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36776F1/592DF6A2B89511EF93752D6B762E951A/oPeJf2dYfKZFs1FBAQpaoaMFf2w.mft
File:                     oPeJf2dYfKZFs1FBAQpaoaMFf2w.mft (raw, json)
Hash identifier:          I/AYwVR9LgjDirEqs6sovoYOP6KD1bt4pbo+wJ370BI=
Subject key identifier:   74:19:DD:2D:05:82:CB:B5:38:FF:83:D4:EC:12:67:41:05:25:87:BE
Authority key identifier: A0:F7:89:7F:67:58:7C:A6:45:B3:51:41:01:0A:5A:A1:A3:05:7F:6C
Certificate issuer:       /CN=F36776F1AR/serialNumber=A0F7897F67587CA645B35141010A5AA1A3057F6C
Certificate serial:       019D
Authority info access:    rsync://rpki.afrinic.net/repository/arin/oPeJf2dYfKZFs1FBAQpaoaMFf2w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36776F1/592DF6A2B89511EF93752D6B762E951A/oPeJf2dYfKZFs1FBAQpaoaMFf2w.mft
Manifest number:          0192
Signing time:             Fri 19 Dec 2025 04:46:36 +0000
Manifest this update:     Fri 19 Dec 2025 04:46:35 +0000
Manifest next update:     Sun 21 Dec 2025 04:46:35 +0000
Files and hashes:         1: oPeJf2dYfKZFs1FBAQpaoaMFf2w.crl (hash: 7rB8Qzl+7PlwYly3zloEdPN8pVYewNm6vx3GPyrQCLg=)
                          2: F891118CBE3711EF94207A53762E951A.roa (hash: /BSsoHmVYWT3uZmtUs29hLyCS4VFjhVXegvsldImsTY=)
                          3: F4E3CCE6C2FB11EFB2921875762E951A.roa (hash: em5+W6hV5wb4UsoaGm9yNPcphUOmzIzRc/FvZi8E2vQ=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36776F1/592DF6A2B89511EF93752D6B762E951A/oPeJf2dYfKZFs1FBAQpaoaMFf2w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36776F1/592DF6A2B89511EF93752D6B762E951A/oPeJf2dYfKZFs1FBAQpaoaMFf2w.mft
                          rsync://rpki.afrinic.net/repository/arin/oPeJf2dYfKZFs1FBAQpaoaMFf2w.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 21 Dec 2025 00:26:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 413 (0x19d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36776F1AR, serialNumber=A0F7897F67587CA645B35141010A5AA1A3057F6C
        Validity
            Not Before: Dec 19 04:46:35 2025 GMT
            Not After : Dec 21 04:46:35 2025 GMT
        Subject: CN=6944d8ac-6d1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:ae:4e:e7:2d:d6:13:73:0b:90:d5:58:47:f9:
                    29:40:16:00:19:cd:3e:8d:01:4f:a1:5c:4d:a1:04:
                    8f:cb:c1:45:db:ef:f9:d9:5c:0a:23:8d:98:1f:eb:
                    68:9f:7a:dd:04:0a:93:53:9e:67:8a:ae:28:7d:fe:
                    29:ec:b1:a3:30:f4:2c:ab:31:57:7d:dd:d3:9f:1c:
                    16:1f:87:c0:e9:15:60:c2:0a:da:80:fc:2d:4d:88:
                    a4:51:10:a5:50:ad:26:46:58:5c:7d:8a:ef:c5:92:
                    e1:95:80:93:1d:75:ef:8a:d0:0a:92:36:6b:7e:d7:
                    2e:63:98:e8:62:02:46:c0:47:ab:c8:36:4a:77:04:
                    57:01:fe:00:3e:78:59:78:d2:9b:3b:7c:5f:25:83:
                    8c:d9:6b:54:1f:a8:28:e2:4a:0a:51:85:a3:e9:57:
                    fe:1d:e2:41:9b:4a:4f:32:fb:10:af:eb:eb:e7:ff:
                    ea:d2:a5:6f:ee:97:89:85:10:20:20:e6:e8:2c:70:
                    20:4a:71:f0:92:35:ee:4a:56:a4:14:33:56:68:c1:
                    3e:d2:ca:54:cf:e5:26:b8:49:2d:99:63:3a:de:1a:
                    5a:b9:97:94:23:26:e2:41:11:e2:88:b6:79:f2:21:
                    ed:ce:4b:68:73:9c:9d:06:62:95:b7:18:16:29:a7:
                    f2:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:19:DD:2D:05:82:CB:B5:38:FF:83:D4:EC:12:67:41:05:25:87:BE
            X509v3 Authority Key Identifier:
                keyid:A0:F7:89:7F:67:58:7C:A6:45:B3:51:41:01:0A:5A:A1:A3:05:7F:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36776F1/592DF6A2B89511EF93752D6B762E951A/oPeJf2dYfKZFs1FBAQpaoaMFf2w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/oPeJf2dYfKZFs1FBAQpaoaMFf2w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36776F1/592DF6A2B89511EF93752D6B762E951A/oPeJf2dYfKZFs1FBAQpaoaMFf2w.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:b7:53:96:ba:3b:f3:72:3c:32:d6:d4:c4:19:5e:53:65:f4:
         5f:70:c3:55:aa:c3:d3:4f:b2:22:9c:1c:14:d1:59:cb:38:da:
         71:9f:08:bc:4f:66:a3:6e:6e:2c:17:00:f4:09:f1:83:81:2a:
         4b:93:65:8f:c5:04:1e:92:06:e3:c0:f8:3d:8a:56:d4:6e:6e:
         28:14:44:fe:da:81:3b:f3:9f:4a:4a:f3:7a:6f:fb:41:dd:b3:
         5e:6e:ac:a7:a2:ce:3f:19:84:d5:15:6f:30:51:3a:11:88:05:
         99:78:db:44:20:b1:e0:f6:3a:1a:2d:80:5c:b3:ce:20:b5:cd:
         69:97:f5:f0:bf:5a:92:92:63:e1:51:0e:06:08:47:11:82:49:
         2d:f7:ed:15:57:6f:71:9b:86:cf:a9:2e:ba:36:bb:6b:ab:fb:
         41:bf:0c:cc:44:84:6f:42:b5:11:4d:1e:38:45:67:8c:c3:9a:
         08:a9:6a:c1:54:1a:b4:bb:00:49:f5:ba:5f:b0:22:f0:69:65:
         fc:46:6a:8b:18:86:6a:7b:ff:01:f2:aa:ab:ac:eb:bd:80:c4:
         17:9f:de:7d:ba:af:b4:56:8e:bb:c4:a4:1a:25:d1:aa:7c:02:
         41:45:7f:78:e9:b2:1a:c2:77:d7:4b:6e:f9:9a:b1:46:60:74:
         cb:5f:f1:28
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgICAZ0wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
Nzc2RjFBUjExMC8GA1UEBRMoQTBGNzg5N0Y2NzU4N0NBNjQ1QjM1MTQxMDEwQTVB
QTFBMzA1N0Y2QzAeFw0yNTEyMTkwNDQ2MzVaFw0yNTEyMjEwNDQ2MzVaMBgxFjAU
BgNVBAMTDTY5NDRkOGFjLTZkMWEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCwrk7nLdYTcwuQ1VhH+SlAFgAZzT6NAU+hXE2hBI/LwUXb7/nZXAojjZgf
62ifet0ECpNTnmeKrih9/inssaMw9CyrMVd93dOfHBYfh8DpFWDCCtqA/C1NiKRR
EKVQrSZGWFx9iu/FkuGVgJMdde+K0AqSNmt+1y5jmOhiAkbAR6vINkp3BFcB/gA+
eFl40ps7fF8lg4zZa1QfqCjiSgpRhaPpV/4d4kGbSk8y+xCv6+vn/+rSpW/ul4mF
ECAg5ugscCBKcfCSNe5KVqQUM1ZowT7SylTP5Sa4SS2ZYzreGlq5l5QjJuJBEeKI
tnnyIe3OS2hznJ0GYpW3GBYpp/IHAgMBAAGjggK1MIICsTAdBgNVHQ4EFgQUdBnd
LQWCy7U4/4PU7BJnQQUlh74wHwYDVR0jBBgwFoAUoPeJf2dYfKZFs1FBAQpaoaMF
f2wwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjc3NkYxLzU5MkRGNkEyQjg5NTExRUY5Mzc1MkQ2Qjc2MkU5NTFBL29QZUpm
MmRZZktaRnMxRkJBUXBhb2FNRmYydy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L29QZUpmMmRZZktaRnMxRkJBUXBhb2FNRmYydy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEFBQcw
C4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl
cG9zaXRvcnkvRjM2Nzc2RjEvNTkyREY2QTJCODk1MTFFRjkzNzUyRDZCNzYyRTk1
MUEvb1BlSmYyZFlmS1pGczFGQkFRcGFvYU1GZjJ3Lm1mdDA1BggrBgEFBQcwDYYp
aHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA
AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBwt1OWujvzcjwy1tTEGV5TZfRfcMNVqsPT
T7IinBwU0VnLONpxnwi8T2ajbm4sFwD0CfGDgSpLk2WPxQQekgbjwPg9ilbUbm4o
FET+2oE7859KSvN6b/tB3bNebqynos4/GYTVFW8wUToRiAWZeNtEILHg9joaLYBc
s84gtc1pl/Xwv1qSkmPhUQ4GCEcRgkkt9+0VV29xm4bPqS66Nrtrq/tBvwzMRIRv
QrURTR44RWeMw5oIqWrBVBq0uwBJ9bpfsCLwaWX8RmqLGIZqe/8B8qqrrOu9gMQX
n959uq+0Vo67xKQaJdGqfAJBRX946bIawnfXS275mrFGYHTLX/Eo
-----END CERTIFICATE-----
Generated at Fri Dec 19 13:14:18 2025 by rpki-client