This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A413F/D8EC92AED33911EFA750A6B3762E951A/J9ZRBLhSABrB1WULLAw3SPxdaVA.mft
File:                     J9ZRBLhSABrB1WULLAw3SPxdaVA.mft (raw, json)
Hash identifier:          Jd3N73smGK2cCWIEs+F+xoqTZTJtFTeYicQhsYpG8DI=
Subject key identifier:   78:AA:BF:7F:1A:04:54:26:B5:EF:34:A5:87:2F:CD:DC:4F:99:CE:82
Authority key identifier: 27:D6:51:04:B8:52:00:1A:C1:D5:65:0B:2C:0C:37:48:FC:5D:69:50
Certificate issuer:       /CN=F36A413FAR/serialNumber=27D65104B852001AC1D5650B2C0C3748FC5D6950
Certificate serial:       014D
Authority info access:    rsync://rpki.afrinic.net/repository/arin/J9ZRBLhSABrB1WULLAw3SPxdaVA.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A413F/D8EC92AED33911EFA750A6B3762E951A/J9ZRBLhSABrB1WULLAw3SPxdaVA.mft
Manifest number:          014B
Signing time:             Thu 04 Dec 2025 04:48:43 +0000
Manifest this update:     Thu 04 Dec 2025 04:48:42 +0000
Manifest next update:     Sat 06 Dec 2025 04:48:42 +0000
Files and hashes:         1: J9ZRBLhSABrB1WULLAw3SPxdaVA.crl (hash: a1TvcpeucsUA1nHd9rEkGTnR75c3x4FPWsFGqhopDUQ=)
                          2: 485660E2D33B11EFB36E4BBC762E951A.roa (hash: miJkwutQdLFlKKXwBXo4jomSNflYIN5M9tkEV2QPIO0=)
                          3: 0D036F94D33B11EF941C0BBC762E951A.roa (hash: EIHN0q7Gf2yEMmUmQTz3WgcUrSDB0YHCZOvy1CApRc0=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A413F/D8EC92AED33911EFA750A6B3762E951A/J9ZRBLhSABrB1WULLAw3SPxdaVA.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A413F/D8EC92AED33911EFA750A6B3762E951A/J9ZRBLhSABrB1WULLAw3SPxdaVA.mft
                          rsync://rpki.afrinic.net/repository/arin/J9ZRBLhSABrB1WULLAw3SPxdaVA.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 06 Dec 2025 04:48:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 333 (0x14d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A413FAR, serialNumber=27D65104B852001AC1D5650B2C0C3748FC5D6950
        Validity
            Not Before: Dec  4 04:48:42 2025 GMT
            Not After : Dec  6 04:48:42 2025 GMT
        Subject: CN=693112aa-876b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:eb:61:56:c7:19:85:41:57:da:cc:66:c8:35:
                    56:55:89:3e:be:b0:1e:c0:fe:9e:b8:1f:c8:c9:51:
                    0d:af:21:a0:d2:2e:66:25:a0:71:4a:03:e2:6a:07:
                    70:43:13:cb:25:62:a1:75:91:cc:d7:59:33:dd:36:
                    0f:d9:99:35:d8:9d:77:fb:1f:12:14:4c:41:54:e2:
                    93:53:a2:8c:b7:8c:91:ba:4f:c0:07:f8:d5:79:2e:
                    c2:0d:83:2f:f7:2d:28:7e:f7:7b:33:6e:fe:0a:1a:
                    5e:48:cc:52:e6:d7:db:a3:9e:ee:4a:28:63:12:fa:
                    b1:50:1e:b8:a2:29:97:a7:f0:76:80:2b:5f:c9:c8:
                    58:f7:31:4d:e5:4c:8c:57:fa:98:13:8d:6e:6f:5b:
                    1a:32:01:80:0f:2a:31:53:8d:ae:5e:67:1c:6d:f7:
                    80:d8:d4:a6:fe:51:23:46:48:66:aa:d7:a6:87:89:
                    04:10:73:3a:c1:cf:6c:f8:d3:92:dd:42:88:0d:93:
                    40:ee:d1:c9:6c:19:f5:d6:e6:f4:e2:57:90:8e:9a:
                    a3:ba:3e:f1:73:d2:95:49:20:10:c6:6c:28:fd:be:
                    59:ce:58:b9:3c:b6:b2:5d:06:25:0d:39:d6:4d:54:
                    b0:2e:95:c2:b0:37:e5:81:89:49:ad:0f:6e:5c:4c:
                    f4:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:AA:BF:7F:1A:04:54:26:B5:EF:34:A5:87:2F:CD:DC:4F:99:CE:82
            X509v3 Authority Key Identifier:
                keyid:27:D6:51:04:B8:52:00:1A:C1:D5:65:0B:2C:0C:37:48:FC:5D:69:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A413F/D8EC92AED33911EFA750A6B3762E951A/J9ZRBLhSABrB1WULLAw3SPxdaVA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/J9ZRBLhSABrB1WULLAw3SPxdaVA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A413F/D8EC92AED33911EFA750A6B3762E951A/J9ZRBLhSABrB1WULLAw3SPxdaVA.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:9b:b7:cc:f4:b3:dc:a4:34:2d:03:64:1e:87:98:fb:5a:40:
         e4:1f:49:65:c0:f4:c5:62:ca:af:6e:0b:74:22:ee:73:78:54:
         41:78:4f:a4:5e:b8:78:1f:12:96:8e:00:07:1b:2b:54:af:1b:
         14:3b:06:ff:5a:e5:03:da:29:9f:1d:22:a0:c5:5a:e6:6e:36:
         27:fd:38:e8:40:df:21:b3:db:82:d9:f8:cb:e3:6c:94:d0:49:
         69:79:14:9c:42:cc:ec:16:a4:e2:08:2c:1c:b6:9f:ab:80:24:
         a9:16:85:0c:3e:dc:a9:48:e3:ae:17:29:e1:ca:f2:1f:fb:2b:
         31:13:5e:43:89:53:ba:ab:8f:b2:8d:b9:cf:c4:89:b5:d8:91:
         37:9d:78:72:57:a9:31:30:89:76:1e:27:99:a2:39:f0:71:32:
         6d:15:d7:57:f6:7a:5a:5d:ba:de:cd:8d:04:6f:e5:d3:fc:13:
         6b:c8:2d:fd:72:55:50:a6:dd:65:73:f3:dd:87:e7:4c:f2:be:
         77:0e:b1:ab:e2:f9:87:65:cc:9c:e7:bd:40:7f:13:6a:ab:a6:
         d8:c4:d6:0c:4b:40:63:0f:cb:98:84:aa:c9:71:c2:ae:b3:23:
         61:14:a0:26:16:62:b2:cd:81:38:0d:5a:05:fc:2f:8c:92:50:
         97:98:76:00
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgICAU0wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QTQxM0ZBUjExMC8GA1UEBRMoMjdENjUxMDRCODUyMDAxQUMxRDU2NTBCMkMwQzM3
NDhGQzVENjk1MDAeFw0yNTEyMDQwNDQ4NDJaFw0yNTEyMDYwNDQ4NDJaMBgxFjAU
BgNVBAMTDTY5MzExMmFhLTg3NmIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCk62FWxxmFQVfazGbINVZViT6+sB7A/p64H8jJUQ2vIaDSLmYloHFKA+Jq
B3BDE8slYqF1kczXWTPdNg/ZmTXYnXf7HxIUTEFU4pNTooy3jJG6T8AH+NV5LsIN
gy/3LSh+93szbv4KGl5IzFLm19ujnu5KKGMS+rFQHriiKZen8HaAK1/JyFj3MU3l
TIxX+pgTjW5vWxoyAYAPKjFTja5eZxxt94DY1Kb+USNGSGaq16aHiQQQczrBz2z4
05LdQogNk0Du0clsGfXW5vTiV5COmqO6PvFz0pVJIBDGbCj9vlnOWLk8trJdBiUN
OdZNVLAulcKwN+WBiUmtD25cTPSjAgMBAAGjggK1MIICsTAdBgNVHQ4EFgQUeKq/
fxoEVCa17zSlhy/N3E+ZzoIwHwYDVR0jBBgwFoAUJ9ZRBLhSABrB1WULLAw3SPxd
aVAwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkE0MTNGL0Q4RUM5MkFFRDMzOTExRUZBNzUwQTZCMzc2MkU5NTFBL0o5WlJC
TGhTQUJyQjFXVUxMQXczU1B4ZGFWQS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L0o5WlJCTGhTQUJyQjFXVUxMQXczU1B4ZGFWQS5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEFBQcw
C4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl
cG9zaXRvcnkvRjM2QTQxM0YvRDhFQzkyQUVEMzM5MTFFRkE3NTBBNkIzNzYyRTk1
MUEvSjlaUkJMaFNBQnJCMVdVTExBdzNTUHhkYVZBLm1mdDA1BggrBgEFBQcwDYYp
aHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA
AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQC0m7fM9LPcpDQtA2Qeh5j7WkDkH0llwPTF
Ysqvbgt0Iu5zeFRBeE+kXrh4HxKWjgAHGytUrxsUOwb/WuUD2imfHSKgxVrmbjYn
/TjoQN8hs9uC2fjL42yU0ElpeRScQszsFqTiCCwctp+rgCSpFoUMPtypSOOuFynh
yvIf+ysxE15DiVO6q4+yjbnPxIm12JE3nXhyV6kxMIl2HieZojnwcTJtFddX9npa
XbrezY0Eb+XT/BNryC39clVQpt1lc/Pdh+dM8r53DrGr4vmHZcyc571AfxNqq6bY
xNYMS0BjD8uYhKrJccKusyNhFKAmFmKyzYE4DVoF/C+MklCXmHYA
-----END CERTIFICATE-----
Generated at Thu Dec 4 23:37:59 2025 by rpki-client