This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D5F5A/3AB9187EDAA611ED9B1E00C52F6D8C1D/XupaL-cvQ0KF-Bi2gjAtm8KtRL8.mft
File:                     XupaL-cvQ0KF-Bi2gjAtm8KtRL8.mft (raw, json)
Hash identifier:          JpGhAGb7/luePdzdOCunlyDK+onmwfF7F0RP2HCXgsM=
Subject key identifier:   AB:63:4C:B8:D5:87:D5:12:B0:81:A6:A6:F6:CB:4D:AF:1F:42:BB:8E
Authority key identifier: 5E:EA:5A:2F:E7:2F:43:42:85:F8:18:B6:82:30:2D:9B:C2:AD:44:BF
Certificate issuer:       /CN=F36D5F5AAR/serialNumber=5EEA5A2FE72F434285F818B682302D9BC2AD44BF
Certificate serial:       03FD
Authority info access:    rsync://rpki.afrinic.net/repository/arin/XupaL-cvQ0KF-Bi2gjAtm8KtRL8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36D5F5A/3AB9187EDAA611ED9B1E00C52F6D8C1D/XupaL-cvQ0KF-Bi2gjAtm8KtRL8.mft
Manifest number:          03FA
Signing time:             Sun 21 Dec 2025 03:23:45 +0000
Manifest this update:     Sun 21 Dec 2025 03:23:44 +0000
Manifest next update:     Tue 23 Dec 2025 03:23:44 +0000
Files and hashes:         1: XupaL-cvQ0KF-Bi2gjAtm8KtRL8.crl (hash: FpTe022CDsaRdgQfGsTEW6pCHuNE1sqbiot52y7OdEA=)
                          2: A1805C0C92FF11F0845A567BDAE4EC9C.roa (hash: ccYbYk4DFeBezZ71ObQ5q/wL3jkn4Z2RITih1QoUcNo=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36D5F5A/3AB9187EDAA611ED9B1E00C52F6D8C1D/XupaL-cvQ0KF-Bi2gjAtm8KtRL8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36D5F5A/3AB9187EDAA611ED9B1E00C52F6D8C1D/XupaL-cvQ0KF-Bi2gjAtm8KtRL8.mft
                          rsync://rpki.afrinic.net/repository/arin/XupaL-cvQ0KF-Bi2gjAtm8KtRL8.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 23 Dec 2025 00:26:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1021 (0x3fd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36D5F5AAR, serialNumber=5EEA5A2FE72F434285F818B682302D9BC2AD44BF
        Validity
            Not Before: Dec 21 03:23:44 2025 GMT
            Not After : Dec 23 03:23:44 2025 GMT
        Subject: CN=69476841-f485
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:86:25:ed:43:c6:fe:1c:95:e3:02:66:7c:a5:
                    99:ab:75:94:c6:e0:a5:4a:b9:26:40:e7:2c:28:b9:
                    47:64:d9:4e:c4:a2:de:78:e3:46:65:53:1a:57:cc:
                    5f:25:d3:41:18:bc:e4:3f:7b:cf:04:4c:c4:04:18:
                    e3:16:43:a3:65:d6:98:05:97:9e:e6:c9:5e:b8:9d:
                    19:12:40:41:b3:3d:d5:ed:91:3d:bf:44:fb:3d:8d:
                    29:f2:50:9f:c3:4a:9c:51:81:9d:71:71:46:46:6a:
                    41:67:9a:9b:53:f2:f6:cb:bc:c0:0c:9f:77:8a:f6:
                    24:b2:c3:bf:86:ba:83:ef:8b:2c:66:36:fb:28:ed:
                    f4:b2:79:3a:fb:0c:45:07:b8:7c:86:88:b4:cf:74:
                    7f:bf:5d:c7:b9:97:61:e8:52:9c:d2:08:11:25:7c:
                    0b:a9:ed:30:75:52:27:50:e2:3e:27:17:a3:01:81:
                    f6:f7:2b:0d:fa:11:ce:c6:7d:63:e8:7e:93:b4:4b:
                    43:45:c9:78:63:4c:1f:5e:da:26:9a:15:b0:ff:36:
                    53:93:89:ee:f2:28:34:2c:5b:ce:77:e4:77:d2:ca:
                    e4:5b:7c:a2:3d:db:17:aa:f2:60:90:ba:f3:81:9e:
                    c2:e5:8d:c5:af:66:b0:88:b6:96:df:9a:f2:be:5a:
                    07:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:63:4C:B8:D5:87:D5:12:B0:81:A6:A6:F6:CB:4D:AF:1F:42:BB:8E
            X509v3 Authority Key Identifier:
                keyid:5E:EA:5A:2F:E7:2F:43:42:85:F8:18:B6:82:30:2D:9B:C2:AD:44:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36D5F5A/3AB9187EDAA611ED9B1E00C52F6D8C1D/XupaL-cvQ0KF-Bi2gjAtm8KtRL8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/XupaL-cvQ0KF-Bi2gjAtm8KtRL8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D5F5A/3AB9187EDAA611ED9B1E00C52F6D8C1D/XupaL-cvQ0KF-Bi2gjAtm8KtRL8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ba:c8:7d:a4:58:98:ce:a7:63:24:ea:56:85:25:b8:66:84:30:
         96:90:be:d9:cb:92:54:f5:a4:e2:67:3b:b7:d0:3b:84:86:30:
         53:72:34:2c:4d:b7:92:fd:ee:d0:16:12:9d:79:f6:75:53:e8:
         b9:a8:2c:6a:3e:58:15:f2:67:85:47:f9:f3:c8:71:16:cb:a7:
         dd:44:65:24:de:cd:eb:d3:f8:3f:44:9c:60:35:1f:9f:51:ea:
         63:b2:4b:06:5e:04:c8:08:93:a5:e6:43:df:17:6a:34:fa:78:
         ab:86:a6:10:d7:4c:34:d5:51:4b:58:e7:d0:7f:2d:e6:ac:18:
         6f:3c:2e:98:d8:70:e2:50:1b:94:26:9a:92:7a:6e:6a:41:a8:
         2b:ff:89:09:a9:ab:03:4c:a2:2a:61:ca:bc:7f:22:2a:eb:25:
         8b:e8:c7:4d:71:23:a9:c9:e5:3e:2b:06:a9:c7:02:c4:ab:9f:
         53:7c:90:aa:4f:b3:2d:82:e8:a1:4d:e3:df:e1:91:8e:3a:a0:
         45:83:25:f9:fd:7a:25:55:bf:30:58:b6:01:10:d4:f1:b6:c7:
         e8:fa:aa:bb:10:cf:31:92:19:1e:81:4a:14:7e:bb:cc:80:b1:
         ed:6e:16:19:38:b5:6f:9b:21:5e:eb:c6:57:cc:b0:9f:45:db:
         7f:ce:f5:ab
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgICA/0wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
RDVGNUFBUjExMC8GA1UEBRMoNUVFQTVBMkZFNzJGNDM0Mjg1RjgxOEI2ODIzMDJE
OUJDMkFENDRCRjAeFw0yNTEyMjEwMzIzNDRaFw0yNTEyMjMwMzIzNDRaMBgxFjAU
BgNVBAMTDTY5NDc2ODQxLWY0ODUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCthiXtQ8b+HJXjAmZ8pZmrdZTG4KVKuSZA5ywouUdk2U7Eot5440ZlUxpX
zF8l00EYvOQ/e88ETMQEGOMWQ6Nl1pgFl57myV64nRkSQEGzPdXtkT2/RPs9jSny
UJ/DSpxRgZ1xcUZGakFnmptT8vbLvMAMn3eK9iSyw7+GuoPviyxmNvso7fSyeTr7
DEUHuHyGiLTPdH+/Xce5l2HoUpzSCBElfAup7TB1UidQ4j4nF6MBgfb3Kw36Ec7G
fWPofpO0S0NFyXhjTB9e2iaaFbD/NlOTie7yKDQsW8535HfSyuRbfKI92xeq8mCQ
uvOBnsLljcWvZrCItpbfmvK+Wgd5AgMBAAGjggK1MIICsTAdBgNVHQ4EFgQUq2NM
uNWH1RKwgaam9stNrx9Cu44wHwYDVR0jBBgwFoAUXupaL+cvQ0KF+Bi2gjAtm8Kt
RL8wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkQ1RjVBLzNBQjkxODdFREFBNjExRUQ5QjFFMDBDNTJGNkQ4QzFEL1h1cGFM
LWN2UTBLRi1CaTJnakF0bThLdFJMOC5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L1h1cGFMLWN2UTBLRi1CaTJnakF0bThLdFJMOC5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEFBQcw
C4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl
cG9zaXRvcnkvRjM2RDVGNUEvM0FCOTE4N0VEQUE2MTFFRDlCMUUwMEM1MkY2RDhD
MUQvWHVwYUwtY3ZRMEtGLUJpMmdqQXRtOEt0Ukw4Lm1mdDA1BggrBgEFBQcwDYYp
aHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA
AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQC6yH2kWJjOp2Mk6laFJbhmhDCWkL7Zy5JU
9aTiZzu30DuEhjBTcjQsTbeS/e7QFhKdefZ1U+i5qCxqPlgV8meFR/nzyHEWy6fd
RGUk3s3r0/g/RJxgNR+fUepjsksGXgTICJOl5kPfF2o0+nirhqYQ10w01VFLWOfQ
fy3mrBhvPC6Y2HDiUBuUJpqSem5qQagr/4kJqasDTKIqYcq8fyIq6yWL6MdNcSOp
yeU+KwapxwLEq59TfJCqT7MtguihTePf4ZGOOqBFgyX5/XolVb8wWLYBENTxtsfo
+qq7EM8xkhkegUoUfrvMgLHtbhYZOLVvmyFe68ZXzLCfRdt/zvWr
-----END CERTIFICATE-----
Generated at Sun Dec 21 15:41:09 2025 by rpki-client