This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36CFBB0/3503D9F8D45211EFB23848B1762E951A/xcFCD1BxamsUb136joK_0eTdmRA.mft
File:                     xcFCD1BxamsUb136joK_0eTdmRA.mft (raw, json)
Hash identifier:          jgvmSQujYKslDzSBS5bw9PXi7M3f7jjUtmtOhFHIrGI=
Subject key identifier:   E8:78:A0:18:DD:9F:2E:87:D1:B7:57:7A:2D:D5:C0:6C:AE:01:D3:67
Authority key identifier: C5:C1:42:0F:50:71:6A:6B:14:6F:5D:FA:8E:82:BF:D1:E4:DD:99:10
Certificate issuer:       /CN=F36CFBB0AR/serialNumber=C5C1420F50716A6B146F5DFA8E82BFD1E4DD9910
Certificate serial:       0163
Authority info access:    rsync://rpki.afrinic.net/repository/arin/xcFCD1BxamsUb136joK_0eTdmRA.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36CFBB0/3503D9F8D45211EFB23848B1762E951A/xcFCD1BxamsUb136joK_0eTdmRA.mft
Manifest number:          015A
Signing time:             Thu 04 Dec 2025 04:49:07 +0000
Manifest this update:     Thu 04 Dec 2025 04:49:07 +0000
Manifest next update:     Sat 06 Dec 2025 04:49:07 +0000
Files and hashes:         1: xcFCD1BxamsUb136joK_0eTdmRA.crl (hash: heIkVBbrDqItC98Vd8Bw93GtJGBkjQY73nfBDZhSI0Q=)
                          2: 1FC67724DB2F11EFA180C6B7762E951A.roa (hash: JHgdUdEE2ORETD1hobD1l7BrD95rRqOs+/yUcWHinV4=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36CFBB0/3503D9F8D45211EFB23848B1762E951A/xcFCD1BxamsUb136joK_0eTdmRA.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36CFBB0/3503D9F8D45211EFB23848B1762E951A/xcFCD1BxamsUb136joK_0eTdmRA.mft
                          rsync://rpki.afrinic.net/repository/arin/xcFCD1BxamsUb136joK_0eTdmRA.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 06 Dec 2025 04:49:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 355 (0x163)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36CFBB0AR, serialNumber=C5C1420F50716A6B146F5DFA8E82BFD1E4DD9910
        Validity
            Not Before: Dec  4 04:49:07 2025 GMT
            Not After : Dec  6 04:49:07 2025 GMT
        Subject: CN=693112c3-70d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:51:67:af:18:a3:9e:cb:1a:b1:73:1c:ad:f5:
                    e5:64:a2:84:82:56:11:2e:ba:98:41:0e:c0:85:6a:
                    01:91:0c:b1:2c:b2:4d:9f:b6:92:54:f1:a8:a3:a5:
                    25:98:88:ad:27:3f:29:3a:b0:72:40:e7:5f:29:fc:
                    ca:63:e4:31:a0:dd:b1:1f:1b:c1:6b:cb:ff:b6:c4:
                    d1:49:ae:5c:bf:36:ed:9f:99:e0:21:50:e6:95:4c:
                    37:14:82:91:29:5c:17:b4:81:f3:89:e8:a9:6c:c4:
                    6a:6f:91:0e:71:e4:4f:67:b2:44:ca:cf:1c:39:25:
                    0f:12:58:f9:0f:c3:28:b7:ee:f2:36:a2:1b:a1:7f:
                    e1:f3:8b:f3:17:99:76:c1:21:20:d0:8b:cd:5c:db:
                    ec:4b:ed:ff:79:82:07:0f:e2:1b:70:c5:a7:a2:63:
                    1c:c6:c1:bd:70:15:38:77:66:38:50:82:00:5f:06:
                    85:51:e9:bb:16:f1:4c:51:ce:5a:33:6d:62:30:a3:
                    d8:a2:87:ab:f7:6d:43:d9:0a:f2:3b:53:19:5f:af:
                    36:db:bf:7c:21:61:18:a3:f8:33:4c:e2:58:a1:03:
                    ae:9c:c7:d7:32:e6:d2:c8:4f:5e:49:65:be:97:c1:
                    48:f4:c5:cd:4e:73:04:e2:8b:ce:7b:da:a8:5c:81:
                    91:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:78:A0:18:DD:9F:2E:87:D1:B7:57:7A:2D:D5:C0:6C:AE:01:D3:67
            X509v3 Authority Key Identifier:
                keyid:C5:C1:42:0F:50:71:6A:6B:14:6F:5D:FA:8E:82:BF:D1:E4:DD:99:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36CFBB0/3503D9F8D45211EFB23848B1762E951A/xcFCD1BxamsUb136joK_0eTdmRA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/xcFCD1BxamsUb136joK_0eTdmRA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36CFBB0/3503D9F8D45211EFB23848B1762E951A/xcFCD1BxamsUb136joK_0eTdmRA.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:b0:42:1f:ce:61:a2:7f:06:52:28:8d:ad:35:ed:50:98:1f:
         4d:75:a8:83:8c:90:71:91:23:bc:60:09:f4:34:e5:8b:c4:94:
         a9:c7:84:eb:8d:31:70:8d:04:ba:a0:d6:1d:5c:07:e7:9e:8a:
         7a:76:09:37:be:4b:ad:18:61:6b:a7:7d:e5:2e:04:30:f7:a5:
         8b:2e:cc:53:b0:7d:ec:d8:d0:49:57:50:a4:0d:88:b3:34:bc:
         b2:33:14:d4:08:51:b5:ba:50:f3:6e:70:8d:f8:0e:ad:bd:23:
         95:c9:0a:fa:02:3d:13:db:44:92:47:7d:4d:3e:9c:7a:8b:4f:
         a7:f8:06:94:db:6a:87:2f:b7:83:b8:69:d8:4b:5c:dd:ea:10:
         b2:d8:2d:85:5a:a2:c6:fc:bb:1a:8e:ad:1f:0a:9c:1b:1b:6c:
         69:a5:78:bb:c5:a2:40:01:89:47:1f:72:5c:2e:51:45:db:46:
         51:3c:47:5a:34:35:a3:10:81:23:93:14:9e:2c:9e:86:4a:15:
         69:55:b3:d2:be:43:f2:c4:9c:e9:c2:20:d9:31:12:ac:99:9b:
         40:1e:c3:22:e0:0c:65:02:ab:17:6c:92:26:6f:a4:cd:9a:d1:
         9f:12:31:2b:44:e2:6c:68:a6:99:96:4c:85:37:2f:63:b7:9c:
         00:38:9b:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 4 23:38:00 2025 by rpki-client