This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3698125/BEF71C94838411EE8E2697354AD9E6FC/zt9uwjs6Dp_IyZsUc0ra56HYmUo.mft
File:                     zt9uwjs6Dp_IyZsUc0ra56HYmUo.mft (raw, json)
Hash identifier:          jslkizN7XvrVSFfTg1YMgiwrb36/uGRjiu4YobbYr80=
Subject key identifier:   C7:90:C5:3F:75:AD:38:29:1D:FB:A1:6E:FB:3A:71:26:DA:EF:5A:83
Authority key identifier: CE:DF:6E:C2:3B:3A:0E:9F:C8:C9:9B:14:73:4A:DA:E7:A1:D8:99:4A
Certificate issuer:       /CN=F3698125AR/serialNumber=CEDF6EC23B3A0E9FC8C99B14734ADAE7A1D8994A
Certificate serial:       031B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/zt9uwjs6Dp_IyZsUc0ra56HYmUo.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3698125/BEF71C94838411EE8E2697354AD9E6FC/zt9uwjs6Dp_IyZsUc0ra56HYmUo.mft
Manifest number:          0319
Signing time:             Tue 23 Dec 2025 03:52:19 +0000
Manifest this update:     Tue 23 Dec 2025 03:52:18 +0000
Manifest next update:     Thu 25 Dec 2025 03:52:18 +0000
Files and hashes:         1: zt9uwjs6Dp_IyZsUc0ra56HYmUo.crl (hash: etwEqM/w8/lUMyXRSO2Lmyw6sPqnfBoTxi7o8XnO1C8=)
                          2: 637017A4270D11EF83B8A0DA7CDC24C2.roa (hash: KcWpAlTox8uHxgsa4XXL2SuGUP0/4ifMRuSUqNE8VdQ=)
                          3: D2BCB8AC24CD11EFBA1E711B7DDC24C2.roa (hash: pk6a4ptH8vZ8/DDIS6o5NsLyUfZR0uUROi741ipkTm8=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3698125/BEF71C94838411EE8E2697354AD9E6FC/zt9uwjs6Dp_IyZsUc0ra56HYmUo.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3698125/BEF71C94838411EE8E2697354AD9E6FC/zt9uwjs6Dp_IyZsUc0ra56HYmUo.mft
                          rsync://rpki.afrinic.net/repository/arin/zt9uwjs6Dp_IyZsUc0ra56HYmUo.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 25 Dec 2025 00:26:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 795 (0x31b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3698125AR, serialNumber=CEDF6EC23B3A0E9FC8C99B14734ADAE7A1D8994A
        Validity
            Not Before: Dec 23 03:52:18 2025 GMT
            Not After : Dec 25 03:52:18 2025 GMT
        Subject: CN=694a11f3-3b34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:22:59:8a:42:87:de:57:55:0f:be:6a:c4:35:
                    99:cc:a3:a2:6e:2f:da:03:52:6e:cd:36:28:d7:36:
                    bb:cb:d8:35:cf:ef:25:56:d0:20:2a:6e:5f:bc:d6:
                    ed:69:81:1e:d8:b1:82:96:0c:08:c6:14:b4:93:1a:
                    d0:56:30:19:cd:42:71:ac:77:ff:80:97:03:6b:77:
                    e5:df:15:a6:8c:40:16:ea:b0:7c:93:78:6b:41:ec:
                    8a:09:25:ef:88:3a:5d:1c:fb:19:41:5f:86:52:ff:
                    3a:22:a4:b8:08:38:9f:f6:b9:06:ed:28:a0:21:21:
                    40:c4:9c:55:6b:e4:81:ce:1b:f5:ee:13:57:00:d7:
                    f9:1f:f7:78:9f:20:59:6f:e2:41:84:9b:f6:83:73:
                    a9:20:63:18:01:cd:94:09:f9:48:2a:f3:cf:38:c8:
                    60:a7:7e:70:10:62:d5:a8:23:f2:dd:e4:67:60:1b:
                    bd:a8:b4:c3:e1:26:e5:5b:20:3c:aa:64:95:0d:ac:
                    63:41:fc:8f:c3:ea:79:60:77:b2:8c:34:c7:03:00:
                    49:48:4e:b9:a9:5d:16:89:09:d8:68:80:63:83:07:
                    a6:07:fd:38:d0:6b:ed:09:60:74:d5:bd:65:b1:16:
                    25:b3:51:3a:5f:45:42:f2:fe:5c:40:5c:4a:9c:b9:
                    69:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:90:C5:3F:75:AD:38:29:1D:FB:A1:6E:FB:3A:71:26:DA:EF:5A:83
            X509v3 Authority Key Identifier:
                keyid:CE:DF:6E:C2:3B:3A:0E:9F:C8:C9:9B:14:73:4A:DA:E7:A1:D8:99:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3698125/BEF71C94838411EE8E2697354AD9E6FC/zt9uwjs6Dp_IyZsUc0ra56HYmUo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/zt9uwjs6Dp_IyZsUc0ra56HYmUo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3698125/BEF71C94838411EE8E2697354AD9E6FC/zt9uwjs6Dp_IyZsUc0ra56HYmUo.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:68:de:ba:8e:05:06:1f:b9:74:89:00:24:81:88:03:1e:f6:
         d8:22:28:9d:40:02:ed:2f:a4:36:8c:9c:09:f3:c1:bf:45:8f:
         62:85:9a:35:5a:21:b9:65:96:d9:8f:cf:a8:1c:c0:3f:6f:c6:
         bd:58:f7:25:c9:ab:32:28:01:d4:3a:e8:98:06:a8:05:c1:b3:
         7f:f2:32:ba:8b:5e:3f:09:b5:77:1b:6f:03:17:55:08:69:6e:
         95:bf:25:0b:a0:40:74:ca:d8:f0:26:5f:a8:c4:9f:f4:10:e6:
         81:12:8b:09:ed:c4:ba:0b:32:24:44:c5:5c:5f:ab:72:25:0d:
         fd:17:0d:fb:57:aa:36:15:08:92:38:f6:af:3d:cf:b3:98:8d:
         18:f6:3e:17:95:5a:5d:16:bc:f5:63:a5:70:ac:b5:36:80:5b:
         c0:d8:86:0b:5a:fe:05:0c:66:ac:9d:85:09:9a:12:fd:56:88:
         7f:53:76:4b:3e:d4:e9:bf:c4:8c:ad:6d:5f:de:cc:b6:77:9e:
         f8:bc:64:49:fb:ee:1a:f4:f9:5c:d0:25:5d:7a:67:8d:57:ae:
         6f:53:64:8e:5a:e1:4e:54:3e:d1:2b:66:f2:42:2c:71:28:db:
         56:8d:bd:57:04:2f:5e:28:8a:f3:d6:17:b0:10:c1:f6:e3:8d:
         8d:2c:89:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 18:55:15 2025 by rpki-client