This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367B8D1/4273E04E21F011EEA3A2BC0F4AD9E6FC/xNAUrWh1DnXpEEzqXCmztxlY_do.mft
File:                     xNAUrWh1DnXpEEzqXCmztxlY_do.mft (raw, json)
Hash identifier:          mava+AvW2wMtRT3xilA9ks8do5nS3BaqBaSzmL9aeps=
Subject key identifier:   37:A8:FB:3B:9E:0C:24:77:48:18:9C:DD:97:9B:E2:E8:71:29:1B:F3
Authority key identifier: C4:D0:14:AD:68:75:0E:75:E9:10:4C:EA:5C:29:B3:B7:19:58:FD:DA
Certificate issuer:       /CN=F367B8D1AR/serialNumber=C4D014AD68750E75E9104CEA5C29B3B71958FDDA
Certificate serial:       0383
Authority info access:    rsync://rpki.afrinic.net/repository/arin/xNAUrWh1DnXpEEzqXCmztxlY_do.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F367B8D1/4273E04E21F011EEA3A2BC0F4AD9E6FC/xNAUrWh1DnXpEEzqXCmztxlY_do.mft
Manifest number:          0383
Signing time:             Thu 04 Dec 2025 03:37:10 +0000
Manifest this update:     Thu 04 Dec 2025 03:37:09 +0000
Manifest next update:     Sat 06 Dec 2025 03:37:09 +0000
Files and hashes:         1: xNAUrWh1DnXpEEzqXCmztxlY_do.crl (hash: GDDi5/yUKib10csds3ztR/4KImH+9/pks1/1ca9J2zE=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F367B8D1/4273E04E21F011EEA3A2BC0F4AD9E6FC/xNAUrWh1DnXpEEzqXCmztxlY_do.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F367B8D1/4273E04E21F011EEA3A2BC0F4AD9E6FC/xNAUrWh1DnXpEEzqXCmztxlY_do.mft
                          rsync://rpki.afrinic.net/repository/arin/xNAUrWh1DnXpEEzqXCmztxlY_do.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 06 Dec 2025 03:37:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 899 (0x383)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F367B8D1AR, serialNumber=C4D014AD68750E75E9104CEA5C29B3B71958FDDA
        Validity
            Not Before: Dec  4 03:37:09 2025 GMT
            Not After : Dec  6 03:37:09 2025 GMT
        Subject: CN=693101e6-ea65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:6b:a2:03:1e:6e:ef:4d:76:c8:5e:95:49:96:
                    13:6c:b6:36:69:ed:ae:8c:40:1c:69:fc:00:73:12:
                    78:ef:a6:72:0d:d0:09:fa:33:38:34:fc:df:6a:dd:
                    65:65:21:e1:d6:34:5e:17:76:af:28:70:69:60:c8:
                    12:4a:ba:70:17:10:09:5b:44:ab:38:db:d6:0e:c4:
                    9f:a1:43:ea:2f:2b:b2:68:da:bf:d6:97:37:1c:03:
                    f3:4f:1a:20:fb:34:b4:31:8a:95:62:ae:96:a7:ea:
                    01:82:e1:59:4b:d0:5a:51:5e:cb:a7:6b:2b:11:50:
                    42:7d:a3:d2:5a:19:8e:8e:a0:2a:d8:54:84:ae:07:
                    45:e2:04:17:40:09:9b:b5:76:5c:6a:48:e4:af:d9:
                    61:b8:80:74:e9:cc:d4:00:d2:63:7e:9d:7f:44:1a:
                    88:84:5b:c3:6d:4b:bc:e6:5d:46:dd:3c:a3:b1:86:
                    44:99:20:eb:bd:da:7e:3e:d0:4d:4e:aa:36:7c:43:
                    95:ca:29:b2:18:d3:94:05:f6:6f:02:e1:1e:fe:be:
                    70:3a:6a:06:27:3c:fc:6f:61:30:2e:08:48:a4:7a:
                    95:19:03:0c:fd:c4:6f:11:6d:b7:0a:2b:b4:30:e7:
                    b7:88:49:fb:64:8b:ad:ff:38:6c:48:16:e9:0b:55:
                    65:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:A8:FB:3B:9E:0C:24:77:48:18:9C:DD:97:9B:E2:E8:71:29:1B:F3
            X509v3 Authority Key Identifier:
                keyid:C4:D0:14:AD:68:75:0E:75:E9:10:4C:EA:5C:29:B3:B7:19:58:FD:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F367B8D1/4273E04E21F011EEA3A2BC0F4AD9E6FC/xNAUrWh1DnXpEEzqXCmztxlY_do.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/xNAUrWh1DnXpEEzqXCmztxlY_do.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367B8D1/4273E04E21F011EEA3A2BC0F4AD9E6FC/xNAUrWh1DnXpEEzqXCmztxlY_do.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c4:76:19:c4:22:c0:69:e7:9b:30:48:63:98:c7:0d:50:cf:5c:
         d9:25:f1:e5:74:8a:24:39:73:a5:d2:49:be:e0:90:7d:93:4d:
         65:db:e2:1b:fc:dd:90:d9:73:15:b0:6f:dd:aa:8a:a6:f0:b2:
         e4:bf:99:45:f9:ec:3f:a5:d1:70:da:7f:bc:89:10:44:0c:49:
         0d:04:e8:1c:f2:a4:7b:a0:75:13:c3:4d:11:79:3c:a3:96:e6:
         4e:55:7f:51:45:e2:80:d7:fc:da:a2:31:88:fb:7c:bf:ea:e2:
         68:4e:91:93:99:78:bf:e1:ea:43:88:b6:5c:58:7b:07:2d:b8:
         5a:3e:11:a1:2f:6f:a9:e6:ba:89:63:ea:10:30:7b:ca:23:91:
         59:c6:45:71:c7:f1:0c:17:c8:ff:91:35:1b:0b:50:2a:43:31:
         c5:b2:54:0d:80:43:5c:71:17:3e:2d:60:27:21:39:77:5b:ce:
         41:3d:f8:7a:0e:f1:1b:ae:20:a4:6c:f4:21:18:78:9c:23:a6:
         90:50:ea:05:a1:62:01:55:f7:df:b3:d5:7c:d5:08:fb:9f:19:
         9b:c5:6e:58:9d:54:ba:a0:57:47:e4:d8:eb:65:38:32:9d:75:
         aa:db:0e:ac:ba:d4:ae:72:6c:f4:6b:65:ba:bc:7d:54:e3:02:
         bc:11:d6:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 4 23:38:01 2025 by rpki-client