This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A4459/E99BCBEA2D1B11EDA54FC78BF1222468/oeAWQGNsg8ItBwmSQsz0wmkQK14.mft
File:                     oeAWQGNsg8ItBwmSQsz0wmkQK14.mft (raw, json)
Hash identifier:          tm1JR9GVK5ykIbRe2TFbLmsVOFQfCSHFtz1TGbYiQtc=
Subject key identifier:   8D:44:48:1F:3E:21:A1:C6:DF:56:E7:83:EE:C3:FE:19:87:B7:E3:38
Authority key identifier: A1:E0:16:40:63:6C:83:C2:2D:07:09:92:42:CC:F4:C2:69:10:2B:5E
Certificate issuer:       /CN=F36A4459AR/serialNumber=A1E01640636C83C22D07099242CCF4C269102B5E
Certificate serial:       04E1
Authority info access:    rsync://rpki.afrinic.net/repository/arin/oeAWQGNsg8ItBwmSQsz0wmkQK14.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A4459/E99BCBEA2D1B11EDA54FC78BF1222468/oeAWQGNsg8ItBwmSQsz0wmkQK14.mft
Manifest number:          04DD
Signing time:             Fri 19 Dec 2025 02:59:01 +0000
Manifest this update:     Fri 19 Dec 2025 02:59:01 +0000
Manifest next update:     Sun 21 Dec 2025 02:59:01 +0000
Files and hashes:         1: oeAWQGNsg8ItBwmSQsz0wmkQK14.crl (hash: i93LW5QfJSAKyZ6OZZQKzbPoYJidP9+eRjO/xhCODIY=)
                          2: 1F08DD5ED16711EEACC86AA3775412E6.roa (hash: Az9hy8W484eMfFVCabnds9LtEfLT4iJCPtwyoHAX59g=)
                          3: 013601FA2D1F11EDB1D2DC93F1222468.roa (hash: yGuY2CCJU8+S6SbKAlGxxoY56hHo78tBwYij9EjfVDE=)
                          4: 3876EB0ED16811EE9C0E66A5775412E6.roa (hash: +yOAS1cNO7QrZSN56ooSffQEaFtdkY96rU9n2WKG4AA=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A4459/E99BCBEA2D1B11EDA54FC78BF1222468/oeAWQGNsg8ItBwmSQsz0wmkQK14.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A4459/E99BCBEA2D1B11EDA54FC78BF1222468/oeAWQGNsg8ItBwmSQsz0wmkQK14.mft
                          rsync://rpki.afrinic.net/repository/arin/oeAWQGNsg8ItBwmSQsz0wmkQK14.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 21 Dec 2025 00:26:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1249 (0x4e1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A4459AR, serialNumber=A1E01640636C83C22D07099242CCF4C269102B5E
        Validity
            Not Before: Dec 19 02:59:01 2025 GMT
            Not After : Dec 21 02:59:01 2025 GMT
        Subject: CN=6944bf75-4559
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:95:6c:6e:e6:66:85:b1:0a:b9:f6:12:19:d3:
                    61:65:39:07:e8:dc:72:f0:e3:a8:64:ac:f9:a7:a7:
                    20:00:4c:3d:b3:33:2f:b6:21:7b:61:88:4b:24:85:
                    a6:c5:08:41:cb:d8:c6:ab:f5:9c:11:87:3f:67:1e:
                    df:33:d9:ea:04:d8:30:fe:d4:0f:3a:4b:46:d5:21:
                    95:2c:d5:fc:8e:f2:e2:98:3d:79:d7:c0:f8:ba:fa:
                    0f:d0:7a:c4:fb:2f:34:a7:6b:6c:ca:e8:85:e0:64:
                    34:56:30:aa:99:d9:05:44:ec:6e:d1:46:40:b7:85:
                    89:a5:ad:d0:11:ac:3c:71:20:59:1f:c1:e9:e1:bf:
                    0c:6b:e3:d1:28:24:df:74:ba:db:74:8b:0c:a1:0c:
                    77:57:f3:95:7e:fc:21:e3:fa:c7:8e:7c:9b:63:1b:
                    ed:4a:10:85:fe:14:c6:64:ae:65:73:d9:c3:64:0d:
                    45:a0:5d:67:01:f4:44:54:a8:70:74:a8:89:40:46:
                    6f:f8:68:ad:af:10:2b:df:5b:03:de:2e:ae:28:f3:
                    28:9d:2c:b8:0f:a0:ae:48:1b:8c:f5:fd:b1:a1:42:
                    a6:7c:2e:00:4d:47:cf:06:c8:45:9c:1a:a4:48:ef:
                    6a:a0:fc:3d:52:98:a0:c1:56:dc:b7:8e:a0:13:fe:
                    e4:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:44:48:1F:3E:21:A1:C6:DF:56:E7:83:EE:C3:FE:19:87:B7:E3:38
            X509v3 Authority Key Identifier:
                keyid:A1:E0:16:40:63:6C:83:C2:2D:07:09:92:42:CC:F4:C2:69:10:2B:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A4459/E99BCBEA2D1B11EDA54FC78BF1222468/oeAWQGNsg8ItBwmSQsz0wmkQK14.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/oeAWQGNsg8ItBwmSQsz0wmkQK14.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A4459/E99BCBEA2D1B11EDA54FC78BF1222468/oeAWQGNsg8ItBwmSQsz0wmkQK14.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:d4:9b:95:dd:2f:37:f6:ea:fa:fc:d2:2f:9a:d1:bf:f3:73:
         4c:20:a8:f0:e1:4e:c8:24:7e:3c:47:a8:b0:9b:68:c1:57:46:
         26:50:0b:1f:8b:10:9a:38:fc:ca:ec:6c:19:2d:bf:e1:0c:6b:
         8e:9b:3a:fb:19:08:36:14:3d:83:34:ff:3e:a9:41:2f:1b:d3:
         15:58:50:62:da:0f:af:6d:15:f7:c4:25:47:9d:a3:b0:71:5d:
         c2:db:4e:46:fb:15:01:05:0b:3b:ce:c2:50:92:c6:99:e1:5e:
         78:3b:e2:82:f3:e5:d9:ea:0b:6d:12:ec:cc:89:7f:36:0c:6f:
         94:0e:d6:26:ff:8a:2b:b9:cc:2c:79:df:e0:50:d3:6f:a4:d2:
         26:9f:cd:2a:30:b4:96:c2:69:45:65:38:a7:c6:ca:10:64:04:
         96:c2:f1:85:96:5b:70:f6:6c:16:fb:cd:42:d3:6b:9d:38:30:
         00:72:1a:3d:e2:ef:89:61:a1:65:2f:23:ac:06:1c:f0:1f:26:
         c3:ba:33:67:5f:8e:fc:2d:10:54:8e:a4:a3:0a:95:94:99:0b:
         21:80:ae:0d:04:63:4c:20:92:f0:5a:05:1d:cd:ed:07:a3:00:
         00:3a:c3:a3:02:35:39:92:1d:07:dc:56:8d:86:44:dd:43:21:
         f9:e6:45:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 22:08:41 2025 by rpki-client