This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367CC68/6A7B0164D35D11F0899EA597DAE4EC9C/rKnJvrvo0Jl8Bk4vs4_-KbOZBz0.mft
File:                     rKnJvrvo0Jl8Bk4vs4_-KbOZBz0.mft (raw, json)
Hash identifier:          W7ZDeEgEyaSWOsmAJ2EmbkFScs0Pk6tRZ0ItfNQv7qU=
Subject key identifier:   A5:17:AA:A6:95:D9:B3:66:0F:FA:5C:7E:85:5E:9C:CB:41:49:52:3D
Authority key identifier: AC:A9:C9:BE:BB:E8:D0:99:7C:06:4E:2F:B3:8F:FE:29:B3:99:07:3D
Certificate issuer:       /CN=F367CC68AR/serialNumber=ACA9C9BEBBE8D0997C064E2FB38FFE29B399073D
Certificate serial:       0C
Authority info access:    rsync://rpki.afrinic.net/repository/arin/rKnJvrvo0Jl8Bk4vs4_-KbOZBz0.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F367CC68/6A7B0164D35D11F0899EA597DAE4EC9C/rKnJvrvo0Jl8Bk4vs4_-KbOZBz0.mft
Manifest number:          0A
Signing time:             Fri 12 Dec 2025 06:24:15 +0000
Manifest this update:     Fri 12 Dec 2025 06:24:14 +0000
Manifest next update:     Sun 14 Dec 2025 06:24:14 +0000
Files and hashes:         1: rKnJvrvo0Jl8Bk4vs4_-KbOZBz0.crl (hash: UbzBBjceZmQhAuXTD+JDB/ejCldNmYi71bAvQ9Jl8hU=)
                          2: 39DB806ED61011F0A851DDF5DAE4EC9C.roa (hash: 693hBAqPFjyvxLxbrZO7JySj88IG1EEhuYzl+bnEQlU=)
                          3: 27867604D60F11F09BCF4AEFDAE4EC9C.roa (hash: vyygcPvaqmQG6OPI3dGtJ+FnuE3p2w/6vDUlsFy2p2s=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F367CC68/6A7B0164D35D11F0899EA597DAE4EC9C/rKnJvrvo0Jl8Bk4vs4_-KbOZBz0.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F367CC68/6A7B0164D35D11F0899EA597DAE4EC9C/rKnJvrvo0Jl8Bk4vs4_-KbOZBz0.mft
                          rsync://rpki.afrinic.net/repository/arin/rKnJvrvo0Jl8Bk4vs4_-KbOZBz0.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 14 Dec 2025 00:26:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12 (0xc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F367CC68AR, serialNumber=ACA9C9BEBBE8D0997C064E2FB38FFE29B399073D
        Validity
            Not Before: Dec 12 06:24:14 2025 GMT
            Not After : Dec 14 06:24:14 2025 GMT
        Subject: CN=693bb50f-dd11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:d9:25:7c:f9:7c:2a:9d:d8:03:9a:66:31:a3:
                    a1:51:11:d8:8d:7b:2d:d4:de:49:61:ce:ce:72:20:
                    7b:60:72:6b:32:f7:45:c9:c1:f2:40:6a:8c:dc:de:
                    c4:58:97:7d:81:65:67:54:73:18:55:12:df:f9:5c:
                    24:bc:e6:18:29:c6:00:6c:cf:6a:07:d9:c5:ec:15:
                    b0:c7:e8:15:8b:4c:b9:fd:f6:b3:72:06:65:92:71:
                    1a:a4:9e:09:2f:81:51:65:53:f9:5d:af:82:09:c9:
                    98:d9:c4:6e:d2:48:80:40:18:3a:03:d3:d3:6b:63:
                    1c:5a:05:39:9f:f0:c2:f8:e5:20:7d:14:47:2a:e8:
                    39:52:ac:11:91:18:7e:a5:70:c3:8d:51:92:7d:f7:
                    41:1f:fc:7f:a0:ac:48:24:de:23:f6:d6:f3:e8:8d:
                    27:92:91:db:af:be:e1:67:ea:66:e1:4f:99:b7:33:
                    84:bd:23:b2:1c:76:79:07:80:5c:12:d1:84:21:69:
                    44:e2:d5:14:88:d4:4c:c3:74:93:8c:b3:64:ee:fb:
                    d7:10:b6:da:ae:d5:b0:69:dc:f4:ef:f2:e4:89:7c:
                    b4:52:df:f5:5f:c6:e2:d5:04:21:67:25:8e:0c:78:
                    15:d8:ae:f3:ad:58:3f:40:6d:76:57:5d:19:d5:c5:
                    f6:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:17:AA:A6:95:D9:B3:66:0F:FA:5C:7E:85:5E:9C:CB:41:49:52:3D
            X509v3 Authority Key Identifier:
                keyid:AC:A9:C9:BE:BB:E8:D0:99:7C:06:4E:2F:B3:8F:FE:29:B3:99:07:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F367CC68/6A7B0164D35D11F0899EA597DAE4EC9C/rKnJvrvo0Jl8Bk4vs4_-KbOZBz0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/rKnJvrvo0Jl8Bk4vs4_-KbOZBz0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367CC68/6A7B0164D35D11F0899EA597DAE4EC9C/rKnJvrvo0Jl8Bk4vs4_-KbOZBz0.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:d2:3b:3b:76:5d:8d:55:00:09:c8:09:0c:70:55:7d:48:6c:
         d9:d8:8e:8a:a6:8b:d5:19:8c:a5:58:e8:c2:a1:16:88:b6:e4:
         55:f8:df:20:3b:05:3f:d2:61:f4:72:1a:90:09:3f:37:12:6b:
         f1:04:7a:0f:06:75:94:62:b0:55:c4:c2:09:1f:07:e1:30:a4:
         33:ca:f7:f9:dd:4c:7f:de:66:43:49:eb:56:e9:6e:9e:dc:54:
         c7:17:ed:92:b2:24:40:14:28:cc:5d:69:61:ec:ab:fd:42:85:
         ef:e2:98:cb:c2:5a:41:00:0a:78:36:89:6f:b6:76:5a:0b:28:
         6b:db:d3:95:0e:dd:f1:59:07:12:8f:ea:ec:f5:ca:35:21:45:
         8c:19:51:42:6a:84:51:6b:4a:1b:43:cb:44:b6:c4:78:92:46:
         ed:4e:cd:81:e5:d2:42:bd:46:b7:56:3c:e2:cd:ce:a7:29:d2:
         6e:ee:60:5b:8f:d1:a2:c3:19:3b:bc:4d:6f:90:14:bc:fd:30:
         40:72:43:e1:b1:df:33:ad:88:c3:4c:6f:7d:3d:e9:a5:b4:d7:
         aa:1f:cd:96:a9:5e:a8:38:d2:a9:02:93:d1:cf:a3:23:9b:d1:
         65:0e:4b:46:5e:5d:5f:b6:b9:e6:86:1f:ad:0c:0f:3c:55:2b:
         0a:0e:c6:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 12 11:29:27 2025 by rpki-client