This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36795C4/E84703BC91ED11E9B09E747DF8AEA228/XdGcZ_E-Y9etoa6si3eswGPp5RQ.mft
File:                     XdGcZ_E-Y9etoa6si3eswGPp5RQ.mft (raw, json)
Hash identifier:          MGJ5bIv3wPp4IYTWC+ikslp5f0XO0PaLqKv/NPZ/kR8=
Subject key identifier:   51:DC:D5:24:52:93:05:64:59:86:B5:F8:98:25:AB:4D:4A:F7:36:30
Authority key identifier: 5D:D1:9C:67:F1:3E:63:D7:AD:A1:AE:AC:8B:77:AC:C0:63:E9:E5:14
Certificate issuer:       /CN=F36795C4AR/serialNumber=5DD19C67F13E63D7ADA1AEAC8B77ACC063E9E514
Certificate serial:       0989
Authority info access:    rsync://rpki.afrinic.net/repository/arin/XdGcZ_E-Y9etoa6si3eswGPp5RQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36795C4/E84703BC91ED11E9B09E747DF8AEA228/XdGcZ_E-Y9etoa6si3eswGPp5RQ.mft
Manifest number:          0988
Signing time:             Tue 23 Dec 2025 01:30:35 +0000
Manifest this update:     Tue 23 Dec 2025 01:30:35 +0000
Manifest next update:     Thu 25 Dec 2025 01:30:34 +0000
Files and hashes:         1: XdGcZ_E-Y9etoa6si3eswGPp5RQ.crl (hash: xKgavL/objXjX+kXjxkROiYZeH979dftP7k9K8EdNWM=)
                          2: 85DEE92291EF11E9ABCCB07EF8AEA228.roa (hash: 3K2tDuP6LQooSlB5SsHZUahCN8ylMLHTNlp/RyDYHoc=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36795C4/E84703BC91ED11E9B09E747DF8AEA228/XdGcZ_E-Y9etoa6si3eswGPp5RQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36795C4/E84703BC91ED11E9B09E747DF8AEA228/XdGcZ_E-Y9etoa6si3eswGPp5RQ.mft
                          rsync://rpki.afrinic.net/repository/arin/XdGcZ_E-Y9etoa6si3eswGPp5RQ.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 25 Dec 2025 00:26:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2441 (0x989)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36795C4AR, serialNumber=5DD19C67F13E63D7ADA1AEAC8B77ACC063E9E514
        Validity
            Not Before: Dec 23 01:30:35 2025 GMT
            Not After : Dec 25 01:30:34 2025 GMT
        Subject: CN=6949f0bb-c7b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:6a:69:00:08:7d:8c:f0:38:2b:8a:21:4b:e3:
                    b3:93:29:bb:04:c1:ad:17:53:46:77:7a:0c:ba:58:
                    d6:e5:94:7e:4b:47:c1:06:6b:29:c6:d0:5d:4e:e7:
                    f5:5d:b4:c0:4b:16:b1:1c:e7:f9:89:2d:4f:63:3a:
                    2b:e6:13:12:21:55:12:23:2b:86:cb:c8:89:12:35:
                    e2:e5:b6:f1:75:73:82:4c:12:1a:93:f7:24:e5:06:
                    94:2d:98:e2:4f:25:16:b1:c2:57:77:de:91:9b:65:
                    78:82:37:69:d4:40:7b:76:b2:8f:5f:16:d0:c2:54:
                    b2:aa:00:28:f7:7e:19:46:28:23:ba:a2:d2:8d:93:
                    5c:45:46:d1:5e:02:3c:ab:38:5b:72:e3:66:8d:d4:
                    1b:65:b3:e9:ea:08:c9:e0:28:3d:15:74:d4:10:87:
                    5e:fc:97:46:5b:e6:15:97:40:a2:4f:77:d9:06:7d:
                    5a:43:65:a2:b5:ba:4e:13:3a:17:46:c7:09:93:9e:
                    e4:6f:16:d9:6c:f7:71:b8:f5:ab:8c:96:b5:ed:d8:
                    9e:26:71:bd:60:aa:e3:a7:fe:99:e8:b6:68:f6:dc:
                    55:fc:65:20:45:50:3f:00:01:26:24:5c:e2:ce:d0:
                    08:90:e2:b3:ab:56:ef:80:0b:72:16:61:be:4a:0a:
                    eb:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:DC:D5:24:52:93:05:64:59:86:B5:F8:98:25:AB:4D:4A:F7:36:30
            X509v3 Authority Key Identifier:
                keyid:5D:D1:9C:67:F1:3E:63:D7:AD:A1:AE:AC:8B:77:AC:C0:63:E9:E5:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36795C4/E84703BC91ED11E9B09E747DF8AEA228/XdGcZ_E-Y9etoa6si3eswGPp5RQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/XdGcZ_E-Y9etoa6si3eswGPp5RQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36795C4/E84703BC91ED11E9B09E747DF8AEA228/XdGcZ_E-Y9etoa6si3eswGPp5RQ.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:ec:53:0c:8c:40:1d:e4:cf:91:5b:52:a8:c4:eb:fe:ec:e2:
         f2:57:9a:b5:52:08:51:aa:76:32:db:59:88:44:dd:26:31:6a:
         d7:fd:46:8e:6c:01:64:e7:6f:f4:30:b4:7c:4a:71:ad:46:01:
         e3:77:b8:9f:b0:6f:f9:7b:8d:3e:05:5d:08:91:38:84:06:4a:
         b8:6e:bc:64:41:22:cd:1d:b7:91:04:ae:16:e6:60:94:0a:d8:
         73:31:4b:dd:af:ec:7b:e1:1a:19:09:c7:4a:80:0a:2b:5d:7e:
         82:d8:6c:c8:45:a1:5c:dd:2b:59:98:af:2f:fc:c7:4a:dc:b0:
         c2:f3:f1:d1:b2:00:2f:51:11:69:83:60:f5:c8:cc:3f:e8:89:
         6f:22:c7:d0:fa:cf:99:a8:2d:35:f4:01:ca:a3:92:de:85:44:
         2d:15:8a:74:21:2c:05:8e:2b:26:e7:ba:74:ad:e1:46:36:23:
         8e:52:51:0d:11:75:45:d4:a1:cf:e7:6f:4e:95:6b:ab:a4:dc:
         57:92:f8:4f:54:9c:1a:e7:5e:4d:14:98:7f:61:89:cb:d8:1b:
         68:ce:5d:ad:f8:1c:e9:fc:3c:a1:11:9a:ad:a3:6b:25:b6:d9:
         a9:af:18:23:37:18:e5:31:30:40:28:5b:38:23:1c:b5:73:8e:
         a0:23:fe:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 10:59:37 2025 by rpki-client