This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D8D30/3EA696ACA6B011EDB901D49CF1222468/XozUASYISPXWb0DSj9l3F6nw8mo.mft
File:                     XozUASYISPXWb0DSj9l3F6nw8mo.mft (raw, json)
Hash identifier:          1y4MFsFcw68Czybf10y7LrrHw+4R5X6L61doUvIXx1o=
Subject key identifier:   4B:3F:D6:26:FD:76:6D:0A:47:90:8D:54:A4:17:51:B4:01:26:A4:98
Authority key identifier: 5E:8C:D4:01:26:08:48:F5:D6:6F:40:D2:8F:D9:77:17:A9:F0:F2:6A
Certificate issuer:       /CN=F36D8D30AR/serialNumber=5E8CD401260848F5D66F40D28FD97717A9F0F26A
Certificate serial:       043C
Authority info access:    rsync://rpki.afrinic.net/repository/arin/XozUASYISPXWb0DSj9l3F6nw8mo.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36D8D30/3EA696ACA6B011EDB901D49CF1222468/XozUASYISPXWb0DSj9l3F6nw8mo.mft
Manifest number:          043B
Signing time:             Tue 23 Dec 2025 03:15:43 +0000
Manifest this update:     Tue 23 Dec 2025 03:15:42 +0000
Manifest next update:     Thu 25 Dec 2025 03:15:42 +0000
Files and hashes:         1: XozUASYISPXWb0DSj9l3F6nw8mo.crl (hash: AouZQr4ikB2GPNsZpAIKfqjU8aCvBeZoz4XDditORYU=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36D8D30/3EA696ACA6B011EDB901D49CF1222468/XozUASYISPXWb0DSj9l3F6nw8mo.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36D8D30/3EA696ACA6B011EDB901D49CF1222468/XozUASYISPXWb0DSj9l3F6nw8mo.mft
                          rsync://rpki.afrinic.net/repository/arin/XozUASYISPXWb0DSj9l3F6nw8mo.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 25 Dec 2025 00:26:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1084 (0x43c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36D8D30AR, serialNumber=5E8CD401260848F5D66F40D28FD97717A9F0F26A
        Validity
            Not Before: Dec 23 03:15:42 2025 GMT
            Not After : Dec 25 03:15:42 2025 GMT
        Subject: CN=694a095f-3fac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:6b:82:fd:73:2f:fd:fe:1b:41:76:f1:84:a6:
                    37:98:76:60:de:77:6d:f8:96:9e:86:b1:85:ac:e2:
                    f3:13:ff:b2:7a:1e:9e:38:76:8c:1b:43:90:79:03:
                    e4:42:92:88:d6:3e:4e:32:15:0d:21:35:eb:33:49:
                    21:5b:cd:a3:50:2a:b4:2c:5f:13:66:9e:d3:ad:b9:
                    44:05:65:e2:ee:d6:04:5b:57:b4:b3:46:12:b5:27:
                    d7:87:39:65:62:19:f2:45:ec:61:aa:85:f2:62:aa:
                    28:49:91:0b:b5:f8:9d:dd:b2:44:5c:58:cb:83:bf:
                    0a:22:79:90:8b:d6:ce:fa:4f:4f:d6:b1:6d:e3:5d:
                    55:df:94:5d:cb:5b:1b:5c:f4:55:06:d1:00:75:6f:
                    56:14:55:44:8c:89:b4:6d:7e:77:33:0c:5e:1b:50:
                    82:51:42:75:42:4d:38:4c:93:5d:5d:16:e0:ec:3d:
                    e2:67:1d:a6:64:3e:0b:35:d9:cd:a3:1f:86:7e:c9:
                    37:24:1d:71:e9:79:9d:19:48:2d:d6:f6:d2:c3:a4:
                    e2:41:57:dd:5d:c2:3c:c1:08:23:07:02:6e:bf:6d:
                    61:e9:9f:3d:03:a3:06:d1:27:20:00:07:ec:15:b7:
                    a4:55:c9:ad:dd:bd:9e:fb:47:73:7c:a6:b7:1d:7c:
                    e5:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:3F:D6:26:FD:76:6D:0A:47:90:8D:54:A4:17:51:B4:01:26:A4:98
            X509v3 Authority Key Identifier:
                keyid:5E:8C:D4:01:26:08:48:F5:D6:6F:40:D2:8F:D9:77:17:A9:F0:F2:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36D8D30/3EA696ACA6B011EDB901D49CF1222468/XozUASYISPXWb0DSj9l3F6nw8mo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/XozUASYISPXWb0DSj9l3F6nw8mo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D8D30/3EA696ACA6B011EDB901D49CF1222468/XozUASYISPXWb0DSj9l3F6nw8mo.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:42:db:d9:b5:5f:ba:8d:c9:cf:30:a9:18:5a:5d:6f:27:ad:
         0a:67:24:8e:92:98:c1:bd:7f:52:e6:c3:56:34:95:ba:d2:76:
         d2:1b:30:c2:62:6e:42:96:ae:9b:79:43:c7:bb:c6:8d:c5:b6:
         ad:3c:40:4e:7f:b7:bb:32:fb:08:5c:f3:ea:74:c5:4b:0d:0b:
         b3:64:97:56:e0:14:3d:e4:d5:4c:bc:26:fd:c0:ac:f0:58:15:
         38:77:90:f7:0a:93:64:04:c3:ff:43:43:d1:e9:64:2b:84:08:
         1c:f6:15:02:47:7e:30:09:dd:a2:46:d2:fe:d7:84:f3:8f:d7:
         97:e2:58:eb:a4:c6:9c:23:3c:ac:c5:54:bd:e1:97:ca:bc:8a:
         e0:06:c0:5a:30:d3:d2:45:f7:66:9e:27:f9:5e:9c:9a:fa:b3:
         a3:d0:df:25:09:11:a4:30:67:8e:1a:a4:4e:08:9f:01:e6:96:
         66:ec:e5:3a:d4:57:4c:4b:34:c6:78:b8:24:f8:8e:e8:ac:a6:
         aa:8d:23:c1:4d:22:99:73:c6:5c:76:f9:33:66:15:f4:f1:67:
         ef:41:7b:1c:f5:c7:81:aa:32:cc:43:db:1e:f8:01:ed:84:a5:
         f2:47:77:c7:43:b1:37:c0:fd:2f:93:df:56:16:ef:c6:67:de:
         09:98:19:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 06:45:46 2025 by rpki-client