This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36852F0/C35834EC825811F08AF34E8CDAE4EC9C/mANBymMoP9xkLng8RVg-pGRCMxs.mft
File:                     mANBymMoP9xkLng8RVg-pGRCMxs.mft (raw, json)
Hash identifier:          Gnb/V5A34KrJeYEvzPbG4gdQ6RxcqQo7YsAzYmPAyFM=
Subject key identifier:   A1:1F:25:5B:DC:90:55:4F:4F:9A:E0:9E:86:4E:C0:F7:D8:92:0F:D9
Authority key identifier: 98:03:41:CA:63:28:3F:DC:64:2E:78:3C:45:58:3E:A4:64:42:33:1B
Certificate issuer:       /CN=F36852F0AR/serialNumber=980341CA63283FDC642E783C45583EA46442331B
Certificate serial:       7D
Authority info access:    rsync://rpki.afrinic.net/repository/arin/mANBymMoP9xkLng8RVg-pGRCMxs.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36852F0/C35834EC825811F08AF34E8CDAE4EC9C/mANBymMoP9xkLng8RVg-pGRCMxs.mft
Manifest number:          7B
Signing time:             Sun 21 Dec 2025 05:10:25 +0000
Manifest this update:     Sun 21 Dec 2025 05:10:24 +0000
Manifest next update:     Tue 23 Dec 2025 05:10:24 +0000
Files and hashes:         1: mANBymMoP9xkLng8RVg-pGRCMxs.crl (hash: cDlfxbUHPqhYIj6dFBaBadhXQMsw+S3KsOvxmg5UEu4=)
                          2: 6D2177B4832511F0892AAFC7DAE4EC9C.roa (hash: aHAZN2QhTCRQrqiHV0Jl7+gEXu4WrL625sFACBWD1qA=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36852F0/C35834EC825811F08AF34E8CDAE4EC9C/mANBymMoP9xkLng8RVg-pGRCMxs.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36852F0/C35834EC825811F08AF34E8CDAE4EC9C/mANBymMoP9xkLng8RVg-pGRCMxs.mft
                          rsync://rpki.afrinic.net/repository/arin/mANBymMoP9xkLng8RVg-pGRCMxs.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 23 Dec 2025 00:26:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 125 (0x7d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36852F0AR, serialNumber=980341CA63283FDC642E783C45583EA46442331B
        Validity
            Not Before: Dec 21 05:10:24 2025 GMT
            Not After : Dec 23 05:10:24 2025 GMT
        Subject: CN=69478141-f435
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:c2:18:12:9f:5b:29:f1:d4:c8:e2:7b:28:a7:
                    09:bc:63:44:79:69:d6:e0:fa:74:e0:bd:0c:f1:13:
                    62:75:51:c8:b0:67:7c:86:de:f2:8a:61:56:3f:66:
                    4e:1b:7a:8d:e0:b4:46:e8:41:40:36:c4:e3:a5:1c:
                    b5:dc:98:38:ed:49:56:6e:2d:d4:df:3e:72:4f:63:
                    95:43:00:49:b3:95:44:9b:96:4f:08:60:f6:36:9b:
                    84:98:88:23:f1:b7:7b:d1:48:73:7d:22:f3:8a:c2:
                    e6:a8:b2:41:df:ba:85:4b:d5:34:56:d3:39:75:a2:
                    51:d0:b7:78:c7:fc:a7:c5:22:7d:c2:16:92:9f:ed:
                    99:6e:7a:66:da:5f:fc:04:3c:7d:38:de:ee:d7:12:
                    4d:9b:57:70:81:a5:32:f2:fd:72:40:d9:bd:34:3c:
                    28:5a:81:72:35:ac:5f:5b:46:6c:da:a3:78:d2:f2:
                    ca:2a:a8:7c:f8:dc:42:6f:64:34:35:71:30:ca:b0:
                    f6:01:ef:ac:1a:35:9a:3c:42:4a:e3:c9:9c:9d:68:
                    f7:7d:ee:a5:10:c0:c5:9f:19:86:ce:41:b2:4c:7c:
                    93:db:f1:9c:e8:68:cb:6c:21:07:f0:84:7f:55:9a:
                    1f:77:e1:47:be:92:92:51:3d:e0:d3:2b:64:14:57:
                    77:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:1F:25:5B:DC:90:55:4F:4F:9A:E0:9E:86:4E:C0:F7:D8:92:0F:D9
            X509v3 Authority Key Identifier:
                keyid:98:03:41:CA:63:28:3F:DC:64:2E:78:3C:45:58:3E:A4:64:42:33:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36852F0/C35834EC825811F08AF34E8CDAE4EC9C/mANBymMoP9xkLng8RVg-pGRCMxs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/mANBymMoP9xkLng8RVg-pGRCMxs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36852F0/C35834EC825811F08AF34E8CDAE4EC9C/mANBymMoP9xkLng8RVg-pGRCMxs.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:ef:c3:50:e0:21:1e:c4:1b:b1:d1:50:ad:2a:b6:a4:69:6b:
         55:23:02:87:4d:f8:c4:b8:98:9c:24:e1:36:1b:c5:79:a2:f6:
         97:be:85:e2:e3:34:e1:a7:91:b7:15:42:98:d6:f8:fb:dc:fd:
         b2:9d:16:38:f5:32:52:77:08:a6:47:99:e1:91:8c:ea:7e:e1:
         ab:e0:d8:0e:95:17:7f:bd:31:96:30:13:ba:31:c7:c3:2b:cb:
         bb:f0:c6:e4:1e:4b:6f:ea:d3:4e:9f:d5:d8:88:ee:cc:de:d3:
         c5:33:34:35:59:87:0a:e7:93:19:67:1c:ba:0b:bf:50:0f:3d:
         7f:62:93:5d:aa:f2:c5:34:da:6c:f5:15:35:e1:10:7f:da:e8:
         a6:d5:15:39:69:b8:90:35:c2:11:d8:ad:c3:2b:3f:0d:00:41:
         91:05:f1:57:cb:dd:58:cc:ad:81:64:2d:da:ae:23:5f:07:83:
         60:4b:e0:5e:24:b7:79:cf:7b:82:e0:da:c1:19:8e:fd:9f:14:
         61:7d:57:e8:f6:e1:8f:c9:8c:ab:4b:69:64:b0:12:81:26:70:
         c3:aa:f0:3a:c7:35:19:eb:cf:1f:bf:d0:c6:df:38:96:32:71:
         ba:b8:d5:4a:b7:78:ba:9f:7f:96:7b:5e:bb:3b:c3:d5:36:40:
         a2:cd:53:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 12:48:13 2025 by rpki-client