This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36EADB7/270CEFC4132011ED810BF0EDF1222468/IG86iVTAbX-P1ttnm4NmlsxnQX8.mft
File:                     IG86iVTAbX-P1ttnm4NmlsxnQX8.mft (raw, json)
Hash identifier:          eP7SZ+YBRA8o+QVnJL+cOsTnQo6r5cD+HjOjGdNW5fs=
Subject key identifier:   3D:A6:9F:87:E4:5E:F3:ED:65:26:41:08:A3:2C:00:C9:45:06:BA:A0
Authority key identifier: 20:6F:3A:89:54:C0:6D:7F:8F:D6:DB:67:9B:83:66:96:CC:67:41:7F
Certificate issuer:       /CN=F36EADB7AR/serialNumber=206F3A8954C06D7F8FD6DB679B836696CC67417F
Certificate serial:       04EE
Authority info access:    rsync://rpki.afrinic.net/repository/arin/IG86iVTAbX-P1ttnm4NmlsxnQX8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36EADB7/270CEFC4132011ED810BF0EDF1222468/IG86iVTAbX-P1ttnm4NmlsxnQX8.mft
Manifest number:          04EC
Signing time:             Thu 04 Dec 2025 02:55:15 +0000
Manifest this update:     Thu 04 Dec 2025 02:55:14 +0000
Manifest next update:     Sat 06 Dec 2025 02:55:14 +0000
Files and hashes:         1: IG86iVTAbX-P1ttnm4NmlsxnQX8.crl (hash: rNhKGMe5kGXXaul8u/WO6c0q3MM6xHiem4jRXlQjbtA=)
                          2: 8B2E941E132311EDAA0899F8F1222468.roa (hash: ew9Uj2uCxLmzZTTD/CqWWgyHenFXZpBC+gInaFzAnTk=)
                          3: 3CFE37A4132311EDB9E986F7F1222468.roa (hash: IOGE8BC0yOI0vrslrBgUOPLd6Qyb61EQfYKNBTnamFg=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36EADB7/270CEFC4132011ED810BF0EDF1222468/IG86iVTAbX-P1ttnm4NmlsxnQX8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36EADB7/270CEFC4132011ED810BF0EDF1222468/IG86iVTAbX-P1ttnm4NmlsxnQX8.mft
                          rsync://rpki.afrinic.net/repository/arin/IG86iVTAbX-P1ttnm4NmlsxnQX8.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 06 Dec 2025 02:55:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1262 (0x4ee)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36EADB7AR, serialNumber=206F3A8954C06D7F8FD6DB679B836696CC67417F
        Validity
            Not Before: Dec  4 02:55:14 2025 GMT
            Not After : Dec  6 02:55:14 2025 GMT
        Subject: CN=6930f813-19b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:0f:81:c8:33:1a:ca:93:71:18:84:9b:1e:ad:
                    b5:12:b9:21:99:5c:c9:21:15:6e:22:d2:c2:3b:25:
                    39:e1:95:b1:47:db:06:9a:18:8a:0b:ac:06:fc:b1:
                    85:76:4a:5b:df:fc:5b:52:97:be:6b:b2:68:11:6d:
                    5e:e0:be:d0:9b:b8:ca:58:4a:34:4a:65:d9:94:40:
                    69:88:ff:5e:20:ed:ea:b3:30:c4:27:e6:5c:22:14:
                    12:0e:58:6f:4e:0b:6a:97:f7:cd:0e:0b:30:2a:0a:
                    f9:3d:bb:4f:f7:ad:52:ed:d7:8b:b4:27:40:20:7d:
                    7f:ab:4b:21:74:14:c5:58:66:f4:fc:df:2c:30:8c:
                    a2:56:e3:7d:16:64:ad:8d:56:e6:fe:8a:88:3a:a5:
                    4e:d8:84:52:45:42:be:37:8c:a6:ae:1d:27:23:77:
                    28:d2:90:9e:d4:3d:a6:a4:8e:44:ab:d2:3b:d8:0c:
                    f8:ec:88:5c:5f:ec:f0:3e:d4:4a:ab:b7:3b:f8:12:
                    58:48:55:9d:24:42:84:e5:30:f5:a8:b8:e7:56:9d:
                    e8:c6:e2:c9:dd:11:5b:bd:0a:26:16:3b:ea:99:6b:
                    2d:81:ff:55:9e:a4:fc:28:5d:88:96:d9:61:6a:f9:
                    91:bb:01:89:d4:bc:7a:93:10:6e:4c:29:9a:cf:0a:
                    81:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:A6:9F:87:E4:5E:F3:ED:65:26:41:08:A3:2C:00:C9:45:06:BA:A0
            X509v3 Authority Key Identifier:
                keyid:20:6F:3A:89:54:C0:6D:7F:8F:D6:DB:67:9B:83:66:96:CC:67:41:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36EADB7/270CEFC4132011ED810BF0EDF1222468/IG86iVTAbX-P1ttnm4NmlsxnQX8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/IG86iVTAbX-P1ttnm4NmlsxnQX8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36EADB7/270CEFC4132011ED810BF0EDF1222468/IG86iVTAbX-P1ttnm4NmlsxnQX8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:d9:fe:bc:6b:66:2e:77:3b:4a:36:53:92:90:0d:3a:11:08:
         c5:86:48:f7:f9:8f:9b:90:a4:6c:5f:e0:aa:f7:17:c6:53:1d:
         a3:cc:df:71:8c:8f:41:c1:fa:5f:89:eb:89:5c:05:92:4b:3e:
         93:6c:aa:87:38:8f:1e:42:22:d4:c2:f5:dc:c2:65:a5:f9:73:
         29:bc:70:56:a2:88:b5:b9:47:8a:a6:6b:29:c1:51:6d:e6:86:
         84:ea:6b:17:16:b6:41:0b:54:80:ab:16:cd:24:98:15:f5:dd:
         c3:48:78:81:69:90:94:86:36:c9:9e:89:32:34:86:73:08:fb:
         6c:b7:c0:8a:a1:ff:a3:29:3d:e1:b3:15:1a:7f:db:35:02:f0:
         c0:71:41:02:e4:09:d3:b1:30:21:d9:cb:fc:4a:31:ce:bd:10:
         a6:18:22:db:25:6e:12:0c:d1:b7:28:60:e2:39:16:a1:92:16:
         7a:1c:e8:83:a5:df:0b:7d:34:8d:66:34:a4:4d:bd:61:70:0c:
         55:2d:04:9e:f9:07:12:a7:83:b6:22:38:fb:23:5b:0c:24:4d:
         05:f2:44:1f:9d:11:0d:5b:97:86:be:29:f9:ae:7e:de:ef:aa:
         e9:27:63:e6:a4:99:ba:cd:a8:18:42:c2:9c:3f:65:08:1b:5d:
         e0:a0:91:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 4 23:36:56 2025 by rpki-client