This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A34E4/CC8FC36CDA3011EE9E6C98AA775412E6/LGcfQllwcCcjdUC_YiZaLZfrlcs.mft
File:                     LGcfQllwcCcjdUC_YiZaLZfrlcs.mft (raw, json)
Hash identifier:          Ka/1C9Zf2AFiFQO2LzgmOtJjZpL5GZjIw5Oce/EPQws=
Subject key identifier:   3F:89:6F:B8:85:BB:74:C7:8B:F3:2E:EA:34:A5:70:C6:80:AD:54:7E
Authority key identifier: 2C:67:1F:42:59:70:70:27:23:75:40:BF:62:26:5A:2D:97:EB:95:CB
Certificate issuer:       /CN=F36A34E4AR/serialNumber=2C671F4259707027237540BF62265A2D97EB95CB
Certificate serial:       029A
Authority info access:    rsync://rpki.afrinic.net/repository/arin/LGcfQllwcCcjdUC_YiZaLZfrlcs.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A34E4/CC8FC36CDA3011EE9E6C98AA775412E6/LGcfQllwcCcjdUC_YiZaLZfrlcs.mft
Manifest number:          0295
Signing time:             Thu 04 Dec 2025 04:08:28 +0000
Manifest this update:     Thu 04 Dec 2025 04:08:28 +0000
Manifest next update:     Sat 06 Dec 2025 04:08:28 +0000
Files and hashes:         1: LGcfQllwcCcjdUC_YiZaLZfrlcs.crl (hash: PwMjpd2xLLL/sa6NNEI33hjtvOLQGF3JQ6ISF3JIr2E=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A34E4/CC8FC36CDA3011EE9E6C98AA775412E6/LGcfQllwcCcjdUC_YiZaLZfrlcs.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A34E4/CC8FC36CDA3011EE9E6C98AA775412E6/LGcfQllwcCcjdUC_YiZaLZfrlcs.mft
                          rsync://rpki.afrinic.net/repository/arin/LGcfQllwcCcjdUC_YiZaLZfrlcs.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 06 Dec 2025 04:08:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 666 (0x29a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A34E4AR, serialNumber=2C671F4259707027237540BF62265A2D97EB95CB
        Validity
            Not Before: Dec  4 04:08:28 2025 GMT
            Not After : Dec  6 04:08:28 2025 GMT
        Subject: CN=6931093c-264c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:e8:7a:f6:07:41:58:03:54:95:51:ed:ce:2e:
                    84:22:b2:c5:20:45:bc:ad:6e:cf:7c:09:11:db:d6:
                    4e:2f:75:b2:e9:3f:2f:a4:23:f7:56:51:35:1c:92:
                    61:bd:79:c4:40:51:83:2a:57:47:09:86:88:75:d4:
                    b4:c9:be:eb:20:7c:bf:7d:15:c4:17:1c:5f:df:6e:
                    ca:b5:14:d0:ea:23:ee:dd:bb:3e:96:e1:f4:38:eb:
                    1c:7b:70:35:df:aa:8e:2f:43:8a:cd:e5:59:51:d0:
                    5b:49:08:cf:61:8b:a5:19:01:3e:88:3d:09:b7:52:
                    d3:17:79:d6:30:b9:b6:02:25:a4:a1:09:6d:40:31:
                    f3:d5:dd:6c:0e:cb:c4:db:2d:d0:8f:70:5f:df:ee:
                    58:a2:f9:36:22:11:b8:06:07:8b:7f:f8:0c:ad:34:
                    1b:1a:c0:9d:ec:bf:c4:88:0d:e5:79:98:c7:f8:a0:
                    aa:5b:fa:70:4e:01:3e:9a:20:97:0f:da:cd:0e:c2:
                    4a:f0:19:e0:3b:c1:1e:9a:40:32:92:ba:ae:ac:fc:
                    52:65:85:cb:69:2e:6b:3f:e6:1f:32:12:a5:51:3e:
                    ed:a7:e5:b2:ea:a3:46:91:78:31:ca:4b:b7:f8:87:
                    38:68:85:d1:44:45:04:8a:4c:d0:47:c3:89:19:49:
                    a2:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:89:6F:B8:85:BB:74:C7:8B:F3:2E:EA:34:A5:70:C6:80:AD:54:7E
            X509v3 Authority Key Identifier:
                keyid:2C:67:1F:42:59:70:70:27:23:75:40:BF:62:26:5A:2D:97:EB:95:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A34E4/CC8FC36CDA3011EE9E6C98AA775412E6/LGcfQllwcCcjdUC_YiZaLZfrlcs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/LGcfQllwcCcjdUC_YiZaLZfrlcs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A34E4/CC8FC36CDA3011EE9E6C98AA775412E6/LGcfQllwcCcjdUC_YiZaLZfrlcs.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:88:ee:05:a6:d1:30:ce:a5:74:1f:70:ee:59:13:79:0b:db:
         2c:cb:db:92:59:78:81:5e:02:1e:ec:8b:49:02:53:da:92:c1:
         3b:8c:af:52:b8:ea:d9:2b:03:cf:dc:9c:d0:7d:fe:4d:b7:25:
         40:a3:17:5f:50:3c:b9:b1:ed:88:00:74:f1:57:89:b1:90:df:
         ea:76:f2:9c:27:98:7c:0c:6d:da:33:33:97:cb:64:e4:e5:12:
         d3:17:9b:d4:63:e7:0e:13:82:91:91:cd:32:d2:37:b5:ca:17:
         85:18:c4:40:da:a3:9c:e1:96:d9:fd:6d:92:0d:29:72:d9:03:
         cf:62:5b:ed:5a:12:df:52:87:d9:9e:bb:1e:0e:72:a2:d7:1c:
         48:c7:2e:28:ff:03:73:74:ec:e9:6a:61:31:64:b9:d8:86:8b:
         6f:66:e4:c4:e0:04:0a:5b:db:10:0c:bb:bf:47:77:03:71:8d:
         45:ec:97:93:52:4e:27:bb:d5:99:98:cb:38:86:6d:d2:12:1a:
         b1:50:f6:e6:b3:18:57:13:55:60:b0:dd:82:03:26:4c:e9:51:
         4e:07:15:1b:56:6b:af:8d:55:b9:af:e2:d6:fa:8b:b0:44:fb:
         0e:b3:0f:1a:7d:96:3d:da:0d:8b:4f:53:9a:63:38:f8:ba:a3:
         86:5a:33:ab
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgICApowDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QTM0RTRBUjExMC8GA1UEBRMoMkM2NzFGNDI1OTcwNzAyNzIzNzU0MEJGNjIyNjVB
MkQ5N0VCOTVDQjAeFw0yNTEyMDQwNDA4MjhaFw0yNTEyMDYwNDA4MjhaMBgxFjAU
BgNVBAMTDTY5MzEwOTNjLTI2NGMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCu6Hr2B0FYA1SVUe3OLoQissUgRbytbs98CRHb1k4vdbLpPy+kI/dWUTUc
kmG9ecRAUYMqV0cJhoh11LTJvusgfL99FcQXHF/fbsq1FNDqI+7duz6W4fQ46xx7
cDXfqo4vQ4rN5VlR0FtJCM9hi6UZAT6IPQm3UtMXedYwubYCJaShCW1AMfPV3WwO
y8TbLdCPcF/f7lii+TYiEbgGB4t/+AytNBsawJ3sv8SIDeV5mMf4oKpb+nBOAT6a
IJcP2s0OwkrwGeA7wR6aQDKSuq6s/FJlhctpLms/5h8yEqVRPu2n5bLqo0aReDHK
S7f4hzhohdFERQSKTNBHw4kZSaK9AgMBAAGjggK1MIICsTAdBgNVHQ4EFgQUP4lv
uIW7dMeL8y7qNKVwxoCtVH4wHwYDVR0jBBgwFoAULGcfQllwcCcjdUC/YiZaLZfr
lcswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkEzNEU0L0NDOEZDMzZDREEzMDExRUU5RTZDOThBQTc3NTQxMkU2L0xHY2ZR
bGx3Y0NjamRVQ19ZaVphTFpmcmxjcy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L0xHY2ZRbGx3Y0NjamRVQ19ZaVphTFpmcmxjcy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEFBQcw
C4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl
cG9zaXRvcnkvRjM2QTM0RTQvQ0M4RkMzNkNEQTMwMTFFRTlFNkM5OEFBNzc1NDEy
RTYvTEdjZlFsbHdjQ2NqZFVDX1lpWmFMWmZybGNzLm1mdDA1BggrBgEFBQcwDYYp
aHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA
AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAliO4FptEwzqV0H3DuWRN5C9ssy9uSWXiB
XgIe7ItJAlPaksE7jK9SuOrZKwPP3JzQff5NtyVAoxdfUDy5se2IAHTxV4mxkN/q
dvKcJ5h8DG3aMzOXy2Tk5RLTF5vUY+cOE4KRkc0y0je1yheFGMRA2qOc4ZbZ/W2S
DSly2QPPYlvtWhLfUofZnrseDnKi1xxIxy4o/wNzdOzpamExZLnYhotvZuTE4AQK
W9sQDLu/R3cDcY1F7JeTUk4nu9WZmMs4hm3SEhqxUPbmsxhXE1VgsN2CAyZM6VFO
BxUbVmuvjVW5r+LW+ouwRPsOsw8afZY92g2LT1OaYzj4uqOGWjOr
-----END CERTIFICATE-----
Generated at Thu Dec 4 23:36:55 2025 by rpki-client