This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3687682/ECCB3E1C009211EF94AE900D017001B1/ZoAHqf6WL0fU33c33hdQYKxavOw.mft
File:                     ZoAHqf6WL0fU33c33hdQYKxavOw.mft (raw, json)
Hash identifier:          d4IcCf2f41JvYONgsKEs7SvVREBltYDcsaAXoVBhLoI=
Subject key identifier:   85:47:D4:16:0C:83:B0:22:DE:0B:B5:79:25:BE:1B:30:93:70:A5:BF
Authority key identifier: 66:80:07:A9:FE:96:2F:47:D4:DF:77:37:DE:17:50:60:AC:5A:BC:EC
Certificate issuer:       /CN=F3687682AR/serialNumber=668007A9FE962F47D4DF7737DE175060AC5ABCEC
Certificate serial:       0274
Authority info access:    rsync://rpki.afrinic.net/repository/arin/ZoAHqf6WL0fU33c33hdQYKxavOw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3687682/ECCB3E1C009211EF94AE900D017001B1/ZoAHqf6WL0fU33c33hdQYKxavOw.mft
Manifest number:          0272
Signing time:             Sun 21 Dec 2025 04:10:28 +0000
Manifest this update:     Sun 21 Dec 2025 04:10:27 +0000
Manifest next update:     Tue 23 Dec 2025 04:10:27 +0000
Files and hashes:         1: ZoAHqf6WL0fU33c33hdQYKxavOw.crl (hash: DGIYXC+ENp5WJpy1ftOosAOsyQsH3LWuz8be7Pjr4Ow=)
                          2: 4348CF92009411EF9CFF8618017001B1.roa (hash: kE7Wa2CuajfImbklB2Ig5E0X9bA3vR+6n/vZhq2Lzac=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3687682/ECCB3E1C009211EF94AE900D017001B1/ZoAHqf6WL0fU33c33hdQYKxavOw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3687682/ECCB3E1C009211EF94AE900D017001B1/ZoAHqf6WL0fU33c33hdQYKxavOw.mft
                          rsync://rpki.afrinic.net/repository/arin/ZoAHqf6WL0fU33c33hdQYKxavOw.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 23 Dec 2025 00:26:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 628 (0x274)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3687682AR, serialNumber=668007A9FE962F47D4DF7737DE175060AC5ABCEC
        Validity
            Not Before: Dec 21 04:10:27 2025 GMT
            Not After : Dec 23 04:10:27 2025 GMT
        Subject: CN=69477334-dc08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:8e:15:4d:26:40:c8:9d:d9:1f:45:fb:57:56:
                    a4:98:a0:ef:b3:75:2b:3e:d3:1f:24:f0:7d:07:ef:
                    db:cd:76:e2:63:95:90:ff:81:8b:a6:00:0c:02:57:
                    3b:68:bb:16:5d:c7:2e:0b:1f:3b:9e:11:92:36:7f:
                    4a:56:1b:9f:1e:69:1e:9b:c1:84:d2:7c:da:35:b2:
                    31:f9:a5:ae:0a:de:6d:d8:ae:53:44:c9:f0:3b:af:
                    e3:ef:13:17:b6:af:c8:aa:38:b4:e9:54:1d:44:fa:
                    2f:f8:90:d9:43:f0:97:17:2a:8b:35:f8:b1:3a:ea:
                    b2:b0:af:79:25:74:88:e3:55:18:2f:f2:f9:0f:88:
                    0b:61:37:00:57:1a:13:84:f2:3f:08:b8:54:07:fe:
                    3b:75:60:72:b0:6b:c0:45:bb:40:83:93:63:b7:76:
                    86:49:00:7f:4b:0a:fc:0e:4d:9b:a6:e8:87:2b:d2:
                    4d:e6:65:4b:57:51:3e:e9:15:1f:6c:37:ec:27:13:
                    68:18:ed:90:4a:67:a6:ff:5e:f9:29:d4:e0:54:68:
                    1f:32:84:fd:51:55:0f:1c:84:1c:51:e6:5e:9e:49:
                    e4:0a:19:d5:eb:b5:c3:fa:f4:5b:dd:fe:52:78:8a:
                    e8:9a:93:ce:bd:68:ad:1d:69:18:4d:dd:f4:c8:98:
                    44:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:47:D4:16:0C:83:B0:22:DE:0B:B5:79:25:BE:1B:30:93:70:A5:BF
            X509v3 Authority Key Identifier:
                keyid:66:80:07:A9:FE:96:2F:47:D4:DF:77:37:DE:17:50:60:AC:5A:BC:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3687682/ECCB3E1C009211EF94AE900D017001B1/ZoAHqf6WL0fU33c33hdQYKxavOw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/ZoAHqf6WL0fU33c33hdQYKxavOw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3687682/ECCB3E1C009211EF94AE900D017001B1/ZoAHqf6WL0fU33c33hdQYKxavOw.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:5a:39:10:cc:e1:61:f9:45:88:83:7a:cb:57:10:1b:b8:ee:
         8f:da:c0:07:ac:d8:73:e9:7c:06:a5:81:ca:74:d0:8d:8f:8b:
         af:0f:f7:ee:6d:d0:c5:6e:a8:bf:34:6e:92:d0:93:62:99:9e:
         54:20:4a:aa:3c:8c:ba:2f:3d:fa:52:7c:d1:52:e6:24:02:7a:
         40:2d:d5:43:88:1c:33:3e:df:fa:b7:9b:9a:f8:3c:23:da:21:
         6c:10:ef:a0:f6:13:a7:da:d5:b2:14:a2:c7:02:38:82:b4:b7:
         4f:c9:f0:85:57:6f:25:18:27:88:37:b9:36:e7:0f:37:65:d5:
         d9:4f:47:d7:b6:7d:e2:d5:f5:f3:ff:50:27:17:2c:d4:ba:ee:
         3c:92:6f:9c:6d:9e:e5:fd:a2:7c:2f:c9:a2:59:87:2f:10:2a:
         a5:f1:5b:98:e3:d9:8f:c1:b1:09:c8:d8:59:a8:1e:e9:42:ac:
         1f:24:8a:ee:89:d5:bc:b9:89:ef:ae:22:62:49:d8:aa:d7:fc:
         56:92:c7:84:25:bc:08:43:20:b2:53:ff:d7:4d:d8:8f:1c:0c:
         3a:0c:b0:a9:97:15:4d:79:93:3d:6f:b6:58:3e:7d:58:d9:86:
         aa:b8:15:7c:60:07:1c:b0:20:48:e6:dd:d3:3a:dd:d8:cf:c7:
         42:01:69:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 19:32:29 2025 by rpki-client