This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369FA36/AD43F906813911E9928B381AF8AEA228/xfhhSKRBFqYpLACKCbTnW4vZ2h0.mft
File:                     xfhhSKRBFqYpLACKCbTnW4vZ2h0.mft (raw, json)
Hash identifier:          EaPNQo+X9eFlw0tkPrd7a5rHJgbxY6qa1plU/XaDdzU=
Subject key identifier:   3B:98:B9:34:82:1A:17:EF:E9:A3:AC:09:EE:12:C1:E2:B4:DD:B9:2E
Authority key identifier: C5:F8:61:48:A4:41:16:A6:29:2C:00:8A:09:B4:E7:5B:8B:D9:DA:1D
Certificate issuer:       /CN=F369FA36AR/serialNumber=C5F86148A44116A6292C008A09B4E75B8BD9DA1D
Certificate serial:       09A6
Authority info access:    rsync://rpki.afrinic.net/repository/arin/xfhhSKRBFqYpLACKCbTnW4vZ2h0.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F369FA36/AD43F906813911E9928B381AF8AEA228/xfhhSKRBFqYpLACKCbTnW4vZ2h0.mft
Manifest number:          099B
Signing time:             Thu 04 Dec 2025 01:22:41 +0000
Manifest this update:     Thu 04 Dec 2025 01:22:40 +0000
Manifest next update:     Sat 06 Dec 2025 01:22:40 +0000
Files and hashes:         1: xfhhSKRBFqYpLACKCbTnW4vZ2h0.crl (hash: iQFLxQb1HbzXeTEcvdlxXRqhpEUBqjI8NdtH8zTwxm0=)
                          2: D4B109C4B0AF11EF94AB2EA4762E951A.roa (hash: Dru2mYr5BfjKlr8vM+NaW5CnYd2mn2FHYHVMnOlP6ow=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F369FA36/AD43F906813911E9928B381AF8AEA228/xfhhSKRBFqYpLACKCbTnW4vZ2h0.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F369FA36/AD43F906813911E9928B381AF8AEA228/xfhhSKRBFqYpLACKCbTnW4vZ2h0.mft
                          rsync://rpki.afrinic.net/repository/arin/xfhhSKRBFqYpLACKCbTnW4vZ2h0.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 06 Dec 2025 01:22:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2470 (0x9a6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F369FA36AR, serialNumber=C5F86148A44116A6292C008A09B4E75B8BD9DA1D
        Validity
            Not Before: Dec  4 01:22:40 2025 GMT
            Not After : Dec  6 01:22:40 2025 GMT
        Subject: CN=6930e260-e4c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:d5:53:e0:b7:ec:fc:fa:4f:e7:e8:24:3b:fd:
                    0b:55:c0:b8:e1:fc:9a:bc:98:91:24:ec:a2:0e:6a:
                    1c:10:a3:0d:c3:4e:86:a7:52:e0:66:a0:80:ee:fd:
                    ee:e3:75:00:07:a0:f4:f6:1f:fc:fb:e1:a1:d1:5c:
                    0c:51:f5:59:b8:9c:06:6e:88:d0:61:89:2e:9d:8d:
                    46:d5:d1:40:47:7e:e9:5b:29:18:57:8e:f1:6c:9f:
                    93:a8:8a:3a:8f:d7:da:ba:ba:df:70:7d:bf:6e:63:
                    4a:94:f5:5c:c6:88:ed:94:c9:c4:28:53:e3:20:3e:
                    a0:9c:c6:d1:5b:ee:60:89:f4:08:ef:f7:9c:28:c8:
                    37:5e:97:8d:12:72:89:04:a0:2b:be:0b:f4:4f:40:
                    bd:6b:7a:46:23:02:17:20:df:eb:b5:65:f6:24:55:
                    4b:8f:db:bf:dd:a2:5a:e8:4b:26:24:c4:86:11:48:
                    d1:8e:41:1c:f7:de:89:3a:60:f6:0c:90:c9:fc:11:
                    df:ed:37:92:81:a8:78:69:a3:76:f9:d6:e2:03:1d:
                    bd:83:39:fd:71:33:ea:74:2a:d3:dc:68:ce:81:25:
                    24:eb:05:e9:10:25:3d:ff:59:7b:5d:b1:a3:fd:6c:
                    99:6a:0a:82:58:cc:65:99:1c:67:58:7b:c6:9e:82:
                    70:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:98:B9:34:82:1A:17:EF:E9:A3:AC:09:EE:12:C1:E2:B4:DD:B9:2E
            X509v3 Authority Key Identifier:
                keyid:C5:F8:61:48:A4:41:16:A6:29:2C:00:8A:09:B4:E7:5B:8B:D9:DA:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F369FA36/AD43F906813911E9928B381AF8AEA228/xfhhSKRBFqYpLACKCbTnW4vZ2h0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/xfhhSKRBFqYpLACKCbTnW4vZ2h0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369FA36/AD43F906813911E9928B381AF8AEA228/xfhhSKRBFqYpLACKCbTnW4vZ2h0.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:1d:b9:09:2e:cd:bc:be:92:d4:01:06:ff:20:59:bd:b8:92:
         31:57:dd:ee:b6:7f:5d:d3:c0:50:f4:74:a3:d0:05:c9:64:41:
         e7:a3:13:c0:2e:80:0b:ee:be:5c:41:99:6c:b5:79:48:94:e3:
         c7:2b:76:34:d2:b1:24:17:e7:64:c2:f8:d1:ad:1f:a7:16:41:
         f4:01:57:c9:81:f1:aa:0e:7c:d3:9f:5c:1e:2d:25:cd:06:b5:
         37:7f:76:be:44:f2:11:27:9b:53:05:8b:b2:86:16:ea:be:60:
         37:1b:ed:43:ad:34:72:3b:a3:26:38:ec:1b:22:67:78:cf:bd:
         4b:e6:5c:95:13:52:79:ed:08:93:dd:24:aa:0e:f9:49:9e:77:
         a7:5a:76:56:36:cc:6f:95:f3:ba:1b:4a:79:0f:95:a6:9b:f3:
         48:c1:f4:ac:64:3b:0c:a9:da:97:b9:6d:fc:af:36:83:a5:f4:
         80:83:3e:2f:ac:40:53:3e:bf:9f:e9:26:f7:1f:66:6d:2d:67:
         a7:a2:5e:57:fb:8c:80:07:28:38:ec:a7:c1:a9:39:c7:9d:36:
         85:ff:27:47:57:b9:85:da:19:11:86:e3:c0:fc:61:40:06:4d:
         05:4c:88:3f:84:d8:fc:83:4a:70:c9:84:56:9f:d0:75:5b:99:
         cf:a9:34:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 4 23:37:59 2025 by rpki-client