This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A39CE/621AB4EE0B5311EE9B4D135D4AD9E6FC/dF3XcQDluqV1XTuTwPQnTCebbdc.mft
File:                     dF3XcQDluqV1XTuTwPQnTCebbdc.mft (raw, json)
Hash identifier:          FoiHkljRhmOr9N6Bu3hst0YLkO1VXcQXO5NA6NF77IU=
Subject key identifier:   0D:90:92:0B:08:F2:45:4C:5A:9B:50:F7:26:0E:5C:FA:F1:4F:5C:EA
Authority key identifier: 74:5D:D7:71:00:E5:BA:A5:75:5D:3B:93:C0:F4:27:4C:27:9B:6D:D7
Certificate issuer:       /CN=F36A39CEAR/serialNumber=745DD77100E5BAA5755D3B93C0F4274C279B6DD7
Certificate serial:       03A3
Authority info access:    rsync://rpki.afrinic.net/repository/arin/dF3XcQDluqV1XTuTwPQnTCebbdc.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A39CE/621AB4EE0B5311EE9B4D135D4AD9E6FC/dF3XcQDluqV1XTuTwPQnTCebbdc.mft
Manifest number:          03A2
Signing time:             Thu 04 Dec 2025 03:32:52 +0000
Manifest this update:     Thu 04 Dec 2025 03:32:51 +0000
Manifest next update:     Sat 06 Dec 2025 03:32:51 +0000
Files and hashes:         1: dF3XcQDluqV1XTuTwPQnTCebbdc.crl (hash: VOjS0MaA9k8vY/hkHp8CiOChoChiXh5425km7va8D34=)
                          2: 9D1F1EF4403611EF977FF944762E951A.roa (hash: hLeObmsi90Fg8VBqFqxqwLqUBn1VTFF0SZa65WhAxQ4=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A39CE/621AB4EE0B5311EE9B4D135D4AD9E6FC/dF3XcQDluqV1XTuTwPQnTCebbdc.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A39CE/621AB4EE0B5311EE9B4D135D4AD9E6FC/dF3XcQDluqV1XTuTwPQnTCebbdc.mft
                          rsync://rpki.afrinic.net/repository/arin/dF3XcQDluqV1XTuTwPQnTCebbdc.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 06 Dec 2025 03:32:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 931 (0x3a3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A39CEAR, serialNumber=745DD77100E5BAA5755D3B93C0F4274C279B6DD7
        Validity
            Not Before: Dec  4 03:32:51 2025 GMT
            Not After : Dec  6 03:32:51 2025 GMT
        Subject: CN=693100e4-0f61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:ed:4f:ec:02:ab:ad:1b:83:57:dc:79:2f:72:
                    07:20:83:b3:48:73:02:c9:c6:cb:02:25:a8:62:bd:
                    8c:3f:b5:98:a9:81:b1:33:6d:8a:26:64:e2:ca:27:
                    04:e1:c0:19:15:16:22:95:fe:07:aa:d7:2a:9d:7a:
                    9e:d7:54:7e:85:6c:56:49:59:d4:9f:4c:50:50:46:
                    b1:6e:24:27:48:4e:d4:1f:7a:18:89:3c:e0:5c:30:
                    95:59:07:c5:b9:6f:0c:3a:d0:13:04:88:3c:4a:74:
                    38:e7:f7:58:9d:07:a6:2f:92:9d:d1:9b:bf:6a:85:
                    e8:7f:72:76:d5:ec:3d:bd:ac:cf:f8:7c:b9:15:19:
                    cb:29:8e:b1:aa:e8:67:55:b1:3c:ca:a6:80:53:ba:
                    0b:48:f2:87:70:b9:25:88:72:ca:4c:5b:11:0f:6e:
                    de:d0:6e:a9:5e:f1:9b:0e:63:0f:48:c2:46:1c:ba:
                    49:3f:48:00:b5:01:97:32:19:73:88:1e:49:c8:c0:
                    c3:87:c7:2b:10:70:f8:bd:23:4f:45:0f:4f:2b:13:
                    24:e0:06:ef:8d:c6:1f:16:aa:06:f2:ae:35:82:26:
                    da:55:0a:4f:90:24:c7:b9:7a:89:5d:b7:74:ef:97:
                    5f:00:10:9e:51:bc:9c:d7:d4:f3:e9:28:e5:a8:ab:
                    47:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:90:92:0B:08:F2:45:4C:5A:9B:50:F7:26:0E:5C:FA:F1:4F:5C:EA
            X509v3 Authority Key Identifier:
                keyid:74:5D:D7:71:00:E5:BA:A5:75:5D:3B:93:C0:F4:27:4C:27:9B:6D:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A39CE/621AB4EE0B5311EE9B4D135D4AD9E6FC/dF3XcQDluqV1XTuTwPQnTCebbdc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/dF3XcQDluqV1XTuTwPQnTCebbdc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A39CE/621AB4EE0B5311EE9B4D135D4AD9E6FC/dF3XcQDluqV1XTuTwPQnTCebbdc.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:62:a1:61:86:f2:17:c2:43:93:3b:fc:fc:d8:6b:4d:67:2b:
         6b:d7:cc:b9:da:b6:9d:60:00:74:4f:3b:17:cd:8d:e3:0d:14:
         93:9c:3d:e2:87:2b:13:41:f6:88:fb:9b:d2:67:12:ad:eb:f4:
         b0:7f:61:a2:b8:38:3e:0f:36:8d:7c:21:d2:a2:87:c3:30:39:
         23:8f:78:eb:79:83:5a:b6:dc:ed:63:78:f3:87:a4:38:86:2d:
         30:9a:4f:e9:2e:2d:db:b4:7f:17:88:aa:27:f3:95:aa:57:bb:
         db:6c:ae:27:ec:88:7b:77:3d:fb:82:e1:3b:b3:a6:0c:45:bb:
         97:8f:72:94:63:1d:12:93:a1:fa:d3:5d:2e:b2:11:f0:2b:7f:
         86:6b:38:e5:e5:6a:1b:96:dd:ae:dd:69:57:21:c7:d3:99:b6:
         dc:99:f4:91:08:1a:1f:f0:74:f8:cc:4d:36:27:ba:41:dc:1a:
         b2:ab:fd:d3:07:cf:ae:43:51:54:0a:2a:e0:9b:81:0d:61:fc:
         40:26:70:84:03:99:ef:1a:bd:11:f3:0a:ed:65:2b:08:9c:2a:
         1b:d2:06:2c:94:44:2a:ee:6e:af:97:ef:c1:18:8c:6c:08:1f:
         62:c3:dd:30:f9:d5:59:79:69:3d:6e:52:bd:27:0d:88:f5:3e:
         a5:9c:88:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 4 23:38:51 2025 by rpki-client