This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3680C14/7707FAD65AE011E69FAE5E32F8AEA228/JlfA2qREzLm--MKoWGoOdJzqm1I.mft
File:                     JlfA2qREzLm--MKoWGoOdJzqm1I.mft (raw, json)
Hash identifier:          AC+/3IlroP6dwM32c3Y4ej1GKREUyhbZT2fvI9Mr1NY=
Subject key identifier:   C5:7F:91:C6:9D:27:7B:BE:15:DD:ED:A4:B9:F5:6B:C5:43:95:9D:D6
Authority key identifier: 26:57:C0:DA:A4:44:CC:B9:BE:F8:C2:A8:58:6A:0E:74:9C:EA:9B:52
Certificate issuer:       /CN=F3680C14AR/serialNumber=2657C0DAA444CCB9BEF8C2A8586A0E749CEA9B52
Certificate serial:       0DA2
Authority info access:    rsync://rpki.afrinic.net/repository/arin/JlfA2qREzLm--MKoWGoOdJzqm1I.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3680C14/7707FAD65AE011E69FAE5E32F8AEA228/JlfA2qREzLm--MKoWGoOdJzqm1I.mft
Manifest number:          0D9E
Signing time:             Thu 04 Dec 2025 01:03:06 +0000
Manifest this update:     Thu 04 Dec 2025 01:03:05 +0000
Manifest next update:     Sat 06 Dec 2025 01:03:05 +0000
Files and hashes:         1: JlfA2qREzLm--MKoWGoOdJzqm1I.crl (hash: jbPQmOOc4Y+YDwf+b2Gmg0oaHt2MPU8PLLYtJ7mFVo8=)
                          2: 4AC87CE0B11911F0830CDBDFDAE4EC9C.roa (hash: BbmEW7gIRevtuQq0qmlAx+V5iEy5gjhSfXPW6vQnAiw=)
                          3: F4602E7A7D7A11EFAF08EC65762E951A.roa (hash: haY/GuoRZps/E0T0DW+Xq+UzSC93SwDzI9EXCFdllhw=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3680C14/7707FAD65AE011E69FAE5E32F8AEA228/JlfA2qREzLm--MKoWGoOdJzqm1I.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3680C14/7707FAD65AE011E69FAE5E32F8AEA228/JlfA2qREzLm--MKoWGoOdJzqm1I.mft
                          rsync://rpki.afrinic.net/repository/arin/JlfA2qREzLm--MKoWGoOdJzqm1I.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 06 Dec 2025 01:03:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3490 (0xda2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3680C14AR, serialNumber=2657C0DAA444CCB9BEF8C2A8586A0E749CEA9B52
        Validity
            Not Before: Dec  4 01:03:05 2025 GMT
            Not After : Dec  6 01:03:05 2025 GMT
        Subject: CN=6930ddca-2241
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:40:ad:8c:1a:28:c9:8f:5c:a2:ae:0b:8d:51:
                    cd:5f:ab:ce:92:5a:0b:75:06:2c:02:6f:74:3f:1a:
                    eb:a0:75:37:2a:d7:23:55:f6:7d:51:f3:30:d6:51:
                    3f:26:be:f8:a8:91:47:a3:0c:a3:ae:37:b0:11:5f:
                    cd:90:ec:8a:a5:0a:a0:cc:5f:2f:37:7d:2a:94:6c:
                    48:32:b8:68:2e:42:0b:5f:85:1f:8b:58:d1:0e:ad:
                    b3:f1:54:78:9a:f1:30:71:7f:db:90:8f:06:1c:37:
                    ad:73:75:ff:3b:fa:bc:e1:fd:18:f6:21:20:5a:c6:
                    03:13:d5:55:0b:ec:2d:3a:8c:84:d6:88:36:6b:90:
                    8a:d4:6a:a2:c4:d2:52:58:41:12:d0:d4:1c:fa:5b:
                    b7:75:0e:d0:47:3b:6b:ee:6f:ba:07:fb:9d:40:23:
                    97:af:4d:b3:03:80:53:f8:59:66:57:ab:60:ff:59:
                    59:57:83:1a:a2:db:0f:b8:70:12:7d:e4:eb:5c:65:
                    11:95:d2:91:62:70:44:85:ea:69:e4:51:77:fb:92:
                    a6:1e:02:9d:82:72:78:35:ab:8f:48:c7:ae:ef:d3:
                    7b:48:56:d2:a6:98:1e:39:30:0e:1b:80:58:e0:a1:
                    bf:47:f6:29:9f:da:25:fd:6a:a7:5c:b2:b2:ea:77:
                    87:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:7F:91:C6:9D:27:7B:BE:15:DD:ED:A4:B9:F5:6B:C5:43:95:9D:D6
            X509v3 Authority Key Identifier:
                keyid:26:57:C0:DA:A4:44:CC:B9:BE:F8:C2:A8:58:6A:0E:74:9C:EA:9B:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3680C14/7707FAD65AE011E69FAE5E32F8AEA228/JlfA2qREzLm--MKoWGoOdJzqm1I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/JlfA2qREzLm--MKoWGoOdJzqm1I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3680C14/7707FAD65AE011E69FAE5E32F8AEA228/JlfA2qREzLm--MKoWGoOdJzqm1I.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:01:fd:61:3f:fa:1e:59:44:2f:57:f2:70:57:b5:ed:2d:a8:
         f6:bd:4f:83:2f:a9:d0:4e:1f:e1:f0:12:82:24:c8:7a:b8:e5:
         e3:b4:2f:70:f2:62:3f:94:aa:7e:c6:24:bb:fe:9c:20:f8:6a:
         9e:e9:b6:b0:f5:e0:ab:3d:8b:2f:b6:48:f2:35:77:b8:81:24:
         d5:0c:3b:e1:c6:b7:3c:6a:4f:6f:83:81:38:06:34:f2:bf:82:
         f0:21:c4:c7:80:50:fc:36:ee:b2:1d:1a:f1:ac:56:8f:ee:c0:
         0a:98:04:92:bb:58:ca:1b:0c:1b:20:8d:e2:b2:70:db:d9:2b:
         ac:9b:25:72:83:a3:7c:a0:a1:be:49:28:38:37:eb:7b:36:73:
         25:90:9e:1a:a3:e2:bf:41:d7:08:4b:32:ee:a6:f8:01:04:2a:
         67:6f:66:a9:1b:28:20:38:fc:f1:bf:6f:e5:61:a8:cf:04:cc:
         a5:69:cc:ff:41:89:5a:a7:60:cf:0e:c4:ca:75:52:1d:50:f2:
         6f:19:aa:de:42:5b:61:86:4b:1d:5d:89:a5:88:9e:93:c1:fb:
         cd:c6:72:52:ed:2d:d7:65:a8:52:33:f1:12:52:c8:f2:dd:35:
         93:09:87:2b:68:10:2e:33:9d:40:b4:44:e3:d0:c2:1f:94:bf:
         f0:a7:5c:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 4 23:38:02 2025 by rpki-client