This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C2BF2/F17A498A19EC11EF9C02892C017001B1/Ijb_q094oHoZuC6P3m3C2wZK278.mft
File:                     Ijb_q094oHoZuC6P3m3C2wZK278.mft (raw, json)
Hash identifier:          JN3c+JDFW8KyxtK9MWF2fMeVatKRY9FzDCjTNfBCDUc=
Subject key identifier:   B5:C8:A7:3F:D4:51:BA:28:E2:BE:11:45:1A:B9:2F:EA:07:72:5C:4A
Authority key identifier: 22:36:FF:AB:4F:78:A0:7A:19:B8:2E:8F:DE:6D:C2:DB:06:4A:DB:BF
Certificate issuer:       /CN=F36C2BF2AR/serialNumber=2236FFAB4F78A07A19B82E8FDE6DC2DB064ADBBF
Certificate serial:       023D
Authority info access:    rsync://rpki.afrinic.net/repository/arin/Ijb_q094oHoZuC6P3m3C2wZK278.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C2BF2/F17A498A19EC11EF9C02892C017001B1/Ijb_q094oHoZuC6P3m3C2wZK278.mft
Manifest number:          023C
Signing time:             Wed 03 Dec 2025 04:18:57 +0000
Manifest this update:     Wed 03 Dec 2025 04:18:56 +0000
Manifest next update:     Fri 05 Dec 2025 04:18:56 +0000
Files and hashes:         1: Ijb_q094oHoZuC6P3m3C2wZK278.crl (hash: 91gJJr25YGbyuPvcA4W3g8F/QBSnnd4L4wGzIBqbUlY=)
                          2: 5E52EDD81C4911EFA98F9E317DDC24C2.roa (hash: Zixh/aFPuo2zs0C1hGvWJdvczTuAhUvvaA1FyHi6zv8=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36C2BF2/F17A498A19EC11EF9C02892C017001B1/Ijb_q094oHoZuC6P3m3C2wZK278.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36C2BF2/F17A498A19EC11EF9C02892C017001B1/Ijb_q094oHoZuC6P3m3C2wZK278.mft
                          rsync://rpki.afrinic.net/repository/arin/Ijb_q094oHoZuC6P3m3C2wZK278.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 05 Dec 2025 00:26:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 573 (0x23d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C2BF2AR, serialNumber=2236FFAB4F78A07A19B82E8FDE6DC2DB064ADBBF
        Validity
            Not Before: Dec  3 04:18:56 2025 GMT
            Not After : Dec  5 04:18:56 2025 GMT
        Subject: CN=692fba31-ec86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:c2:ce:60:50:de:d0:dc:cf:28:2e:31:74:5a:
                    94:f8:b4:b7:74:4b:60:86:a7:25:0f:d0:a2:38:e5:
                    8e:a7:71:bd:d2:ce:8f:7b:15:5e:20:9e:6f:ef:3b:
                    f8:ed:cd:df:49:7b:07:ee:99:d7:3a:66:b0:24:d0:
                    08:37:f4:f7:f5:2e:0c:02:04:fe:d0:41:bd:4e:5b:
                    21:53:45:02:ad:5a:e9:f4:9a:77:15:c1:dd:24:26:
                    07:18:3e:57:ed:3c:2d:a0:2f:3e:76:f6:a5:b0:ae:
                    bc:8e:fe:9c:76:9e:c4:b3:08:0d:53:bc:8b:e5:a8:
                    cf:b3:17:57:60:5b:b0:e7:56:df:39:2e:1f:5e:b6:
                    9a:e0:19:c3:3d:ef:58:66:1a:f3:a5:3b:71:c9:ad:
                    2c:4a:02:df:09:e4:aa:6c:f2:be:e6:d4:f2:ce:1e:
                    dc:72:ef:8d:35:72:5d:63:e0:b2:9c:46:c5:60:a4:
                    3d:44:16:fb:98:f8:36:62:6d:e6:3c:08:b8:25:e9:
                    4c:73:43:b0:fc:ae:48:45:b4:6c:81:c5:15:b4:20:
                    3e:b1:de:65:92:b8:a1:9f:0a:bc:1b:e6:50:d6:39:
                    02:50:96:b9:2d:95:cc:6b:9c:16:8b:14:e2:ab:0f:
                    dd:86:e8:df:89:ac:da:6c:3b:ae:0f:04:3d:7d:3e:
                    86:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:C8:A7:3F:D4:51:BA:28:E2:BE:11:45:1A:B9:2F:EA:07:72:5C:4A
            X509v3 Authority Key Identifier:
                keyid:22:36:FF:AB:4F:78:A0:7A:19:B8:2E:8F:DE:6D:C2:DB:06:4A:DB:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C2BF2/F17A498A19EC11EF9C02892C017001B1/Ijb_q094oHoZuC6P3m3C2wZK278.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/Ijb_q094oHoZuC6P3m3C2wZK278.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C2BF2/F17A498A19EC11EF9C02892C017001B1/Ijb_q094oHoZuC6P3m3C2wZK278.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:9f:72:1c:f0:76:cd:7e:b3:5c:a6:40:dd:78:89:d7:f7:92:
         5e:a4:e4:1d:3f:0a:ae:f9:10:50:f0:90:1e:71:34:18:6e:50:
         08:ef:81:15:9e:52:38:e2:4c:eb:63:76:65:02:fa:79:ae:81:
         1a:35:34:b2:8e:be:f6:c3:e3:bb:e7:b7:f1:f8:02:40:05:11:
         56:ca:4e:bb:e5:07:54:22:42:cb:00:23:21:45:55:37:03:b4:
         d9:d6:d1:8b:e9:6f:a6:4d:4f:f4:05:9c:e6:cb:f4:4a:44:59:
         0e:66:81:30:b6:a4:80:be:ff:fe:e7:63:d1:36:41:97:5c:59:
         f0:f6:bd:59:a1:c0:95:b9:ce:b7:d4:38:c4:38:ab:24:b2:d7:
         52:d0:21:36:fc:c6:42:14:2d:6b:86:63:92:c1:7c:79:2b:78:
         ff:3c:df:22:81:3f:11:16:b7:80:c5:4c:e5:06:c5:65:59:a3:
         8c:69:97:b5:4a:97:6f:a7:7c:74:91:dc:6b:f5:e1:44:04:1b:
         8b:af:7a:db:75:5d:17:3d:0f:2c:45:85:b5:01:6b:bf:38:31:
         77:43:ff:1a:ca:a1:d4:d5:dd:c1:d2:55:ae:b6:88:f6:e4:f6:
         a9:da:e4:99:a5:c0:e6:64:02:26:df:cb:1a:b3:e4:e8:eb:e0:
         fd:46:44:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 12:45:53 2025 by rpki-client