This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3687682/ECCB3E1C009211EF94AE900D017001B1/ZoAHqf6WL0fU33c33hdQYKxavOw.mft
File:                     ZoAHqf6WL0fU33c33hdQYKxavOw.mft (raw, json)
Hash identifier:          zRMDpIXN0DlkSqxT+VjKyWnRiwa6XwKDhDpd3Bv1ZrI=
Subject key identifier:   63:00:69:80:6D:EC:72:2F:62:54:CC:DA:FB:56:DF:AD:7F:89:F9:E4
Authority key identifier: 66:80:07:A9:FE:96:2F:47:D4:DF:77:37:DE:17:50:60:AC:5A:BC:EC
Certificate issuer:       /CN=F3687682AR/serialNumber=668007A9FE962F47D4DF7737DE175060AC5ABCEC
Certificate serial:       0263
Authority info access:    rsync://rpki.afrinic.net/repository/arin/ZoAHqf6WL0fU33c33hdQYKxavOw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3687682/ECCB3E1C009211EF94AE900D017001B1/ZoAHqf6WL0fU33c33hdQYKxavOw.mft
Manifest number:          0261
Signing time:             Thu 04 Dec 2025 04:13:00 +0000
Manifest this update:     Thu 04 Dec 2025 04:12:59 +0000
Manifest next update:     Sat 06 Dec 2025 04:12:59 +0000
Files and hashes:         1: ZoAHqf6WL0fU33c33hdQYKxavOw.crl (hash: oFMoefgqlpgLuUvl5R/q9qyBKHmR2FsKBfHcuFehNa0=)
                          2: 4348CF92009411EF9CFF8618017001B1.roa (hash: kE7Wa2CuajfImbklB2Ig5E0X9bA3vR+6n/vZhq2Lzac=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3687682/ECCB3E1C009211EF94AE900D017001B1/ZoAHqf6WL0fU33c33hdQYKxavOw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3687682/ECCB3E1C009211EF94AE900D017001B1/ZoAHqf6WL0fU33c33hdQYKxavOw.mft
                          rsync://rpki.afrinic.net/repository/arin/ZoAHqf6WL0fU33c33hdQYKxavOw.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 06 Dec 2025 04:12:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 611 (0x263)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3687682AR, serialNumber=668007A9FE962F47D4DF7737DE175060AC5ABCEC
        Validity
            Not Before: Dec  4 04:12:59 2025 GMT
            Not After : Dec  6 04:12:59 2025 GMT
        Subject: CN=69310a4c-c022
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:01:d9:8a:f1:c7:99:ad:06:00:a3:9a:63:17:
                    1f:f3:aa:3b:9e:54:5d:9d:10:d9:93:dd:be:ee:d4:
                    1d:a1:63:45:07:a8:3f:ca:3c:f3:fb:b7:0d:36:89:
                    a1:77:be:ea:d0:e0:2e:e4:8c:d3:92:74:04:ee:b2:
                    e4:f8:c9:11:9d:dd:df:2b:73:b6:40:f0:77:3c:4f:
                    98:cf:46:37:2e:4d:3e:5d:a5:4c:c6:57:00:cb:db:
                    87:7f:7b:9a:e5:86:89:fa:3c:46:87:15:66:64:36:
                    28:72:d7:9e:6a:68:bf:90:5d:55:c2:8f:ef:87:df:
                    2e:b8:92:af:55:f5:c4:54:d9:99:2f:34:99:d2:22:
                    b1:52:4c:74:b9:09:c8:48:dc:38:50:be:f2:f6:d5:
                    f5:6c:de:d6:d1:7b:c1:0d:70:42:38:23:54:ac:02:
                    fd:c8:82:8b:ce:a5:ce:c0:8a:22:a3:12:aa:13:1d:
                    40:c0:70:dd:b6:f0:5e:b7:47:8b:b9:7b:e5:ab:fd:
                    d8:eb:0f:b4:06:81:2b:ac:09:47:71:a6:4f:08:be:
                    a9:36:63:ec:72:9e:24:8b:a1:4b:e7:aa:dc:3a:41:
                    bb:ae:89:4c:5a:29:b2:a0:da:ff:9c:e9:1e:2a:cb:
                    26:ea:a1:24:03:df:0b:81:74:dc:a9:10:9d:79:29:
                    aa:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:00:69:80:6D:EC:72:2F:62:54:CC:DA:FB:56:DF:AD:7F:89:F9:E4
            X509v3 Authority Key Identifier:
                keyid:66:80:07:A9:FE:96:2F:47:D4:DF:77:37:DE:17:50:60:AC:5A:BC:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3687682/ECCB3E1C009211EF94AE900D017001B1/ZoAHqf6WL0fU33c33hdQYKxavOw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/ZoAHqf6WL0fU33c33hdQYKxavOw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3687682/ECCB3E1C009211EF94AE900D017001B1/ZoAHqf6WL0fU33c33hdQYKxavOw.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:95:ca:69:64:44:c3:cf:a5:fb:66:40:72:39:be:c1:62:60:
         45:b9:4a:8b:53:84:43:0a:c3:83:fb:60:d9:0b:b8:2d:3c:b6:
         97:1d:9c:90:87:45:c7:ba:b8:93:b3:49:50:cd:c5:8f:f7:44:
         1f:ea:9f:ac:9b:83:f7:4c:2f:b1:5a:35:87:1b:ea:97:1d:b7:
         89:46:6d:e4:a3:cd:c9:85:d3:7f:e7:12:5f:30:4e:07:8e:e3:
         c1:29:4d:9d:bf:99:09:3d:da:65:e2:3f:d9:81:20:6c:0e:61:
         40:1f:0d:a4:30:54:8c:fb:e2:ea:36:7a:14:06:4e:56:4d:a6:
         25:17:ec:1b:ac:97:ba:c1:66:56:79:17:7d:16:cf:3c:02:59:
         b7:90:1b:d4:22:9e:49:04:fd:f8:8f:f9:fd:75:06:5e:26:f0:
         bf:1f:eb:36:b8:d0:14:71:67:55:78:6a:d2:d0:f5:0d:5f:64:
         1d:2f:ba:34:07:87:9c:58:5f:1b:9a:0c:79:3d:04:f9:b9:3e:
         b4:d8:e3:5a:bc:6e:d4:95:e8:55:3a:db:02:43:7a:cb:f8:44:
         17:f6:5c:6c:a8:40:38:ca:e0:05:44:25:8b:76:c4:00:de:02:
         4e:60:46:8b:f4:c6:63:87:9f:48:9b:a0:ae:3e:72:f1:81:c3:
         34:2a:ea:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 4 23:40:00 2025 by rpki-client