This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36EADB7/270CEFC4132011ED810BF0EDF1222468/IG86iVTAbX-P1ttnm4NmlsxnQX8.mft
File:                     IG86iVTAbX-P1ttnm4NmlsxnQX8.mft (raw, json)
Hash identifier:          JME1ap6zmhGsxbWIDu/9w1QmhGYbbPj8QmhzENFPA0Y=
Subject key identifier:   3F:7E:A5:47:0D:0D:09:AC:23:07:1E:F4:44:1E:8C:F8:12:A6:2C:CA
Authority key identifier: 20:6F:3A:89:54:C0:6D:7F:8F:D6:DB:67:9B:83:66:96:CC:67:41:7F
Certificate issuer:       /CN=F36EADB7AR/serialNumber=206F3A8954C06D7F8FD6DB679B836696CC67417F
Certificate serial:       04F9
Authority info access:    rsync://rpki.afrinic.net/repository/arin/IG86iVTAbX-P1ttnm4NmlsxnQX8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36EADB7/270CEFC4132011ED810BF0EDF1222468/IG86iVTAbX-P1ttnm4NmlsxnQX8.mft
Manifest number:          04F7
Signing time:             Mon 15 Dec 2025 02:56:04 +0000
Manifest this update:     Mon 15 Dec 2025 02:56:03 +0000
Manifest next update:     Wed 17 Dec 2025 02:56:03 +0000
Files and hashes:         1: IG86iVTAbX-P1ttnm4NmlsxnQX8.crl (hash: CD+5JOeW1iA/Ey9mmC1/5veCOMZzW/7KghO9PWGnHUs=)
                          2: 8B2E941E132311EDAA0899F8F1222468.roa (hash: ew9Uj2uCxLmzZTTD/CqWWgyHenFXZpBC+gInaFzAnTk=)
                          3: 3CFE37A4132311EDB9E986F7F1222468.roa (hash: IOGE8BC0yOI0vrslrBgUOPLd6Qyb61EQfYKNBTnamFg=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36EADB7/270CEFC4132011ED810BF0EDF1222468/IG86iVTAbX-P1ttnm4NmlsxnQX8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36EADB7/270CEFC4132011ED810BF0EDF1222468/IG86iVTAbX-P1ttnm4NmlsxnQX8.mft
                          rsync://rpki.afrinic.net/repository/arin/IG86iVTAbX-P1ttnm4NmlsxnQX8.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 17 Dec 2025 00:26:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1273 (0x4f9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36EADB7AR, serialNumber=206F3A8954C06D7F8FD6DB679B836696CC67417F
        Validity
            Not Before: Dec 15 02:56:03 2025 GMT
            Not After : Dec 17 02:56:03 2025 GMT
        Subject: CN=693f78c4-e677
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:78:64:e8:98:12:f2:fb:5a:07:16:52:95:5a:
                    c8:80:c2:4e:22:62:44:bf:ed:7e:ae:a5:1c:c7:2e:
                    85:e6:43:0e:db:39:c6:ee:2e:d1:14:88:ff:50:3e:
                    3e:59:6d:11:4b:d6:60:80:50:87:4a:e1:d7:85:bc:
                    d4:78:49:64:a7:48:15:31:df:a6:1a:43:20:21:22:
                    7d:0c:a4:2f:b1:4d:ee:5d:3b:96:11:8c:d8:71:dc:
                    6e:5a:91:22:35:a5:22:27:e5:ed:68:7d:62:3f:b8:
                    c6:11:2b:fd:ca:68:6b:05:d2:c2:dc:1f:6a:1f:4b:
                    a4:85:39:04:52:84:28:7d:68:bc:77:35:ec:3c:0d:
                    d0:a2:60:3c:b2:70:7b:7c:66:da:d1:75:41:59:24:
                    25:5f:05:13:db:eb:00:2a:df:61:e3:19:09:16:54:
                    1f:c7:40:f5:88:50:18:26:a9:46:79:0e:e8:d7:7a:
                    19:b6:6b:02:b0:3e:37:6f:cb:75:ba:bf:b9:36:d2:
                    f9:b8:62:f5:0a:56:20:7c:57:80:0d:93:39:41:28:
                    40:99:88:93:53:d3:7a:38:1b:10:03:4b:1e:01:60:
                    a3:70:86:54:f8:10:fa:e4:ed:08:dd:98:c2:37:ba:
                    f9:4a:c0:70:f8:24:75:67:2e:37:1e:76:9a:b5:b5:
                    65:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:7E:A5:47:0D:0D:09:AC:23:07:1E:F4:44:1E:8C:F8:12:A6:2C:CA
            X509v3 Authority Key Identifier:
                keyid:20:6F:3A:89:54:C0:6D:7F:8F:D6:DB:67:9B:83:66:96:CC:67:41:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36EADB7/270CEFC4132011ED810BF0EDF1222468/IG86iVTAbX-P1ttnm4NmlsxnQX8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/IG86iVTAbX-P1ttnm4NmlsxnQX8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36EADB7/270CEFC4132011ED810BF0EDF1222468/IG86iVTAbX-P1ttnm4NmlsxnQX8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:38:3f:e1:c9:6b:95:8a:8f:3f:b8:f8:5e:d1:36:81:f1:e9:
         7b:a8:a6:94:f7:72:88:15:2a:e4:24:ac:57:35:c4:06:1a:d5:
         82:3e:d1:f3:f8:59:13:72:e3:2f:93:56:01:17:18:c5:c1:d6:
         a3:e4:7b:16:c5:8c:7c:a0:8a:9b:41:a3:5b:85:97:3c:1c:3e:
         d9:8c:8e:39:3a:43:ad:30:73:0e:2b:ee:5f:2d:06:bd:b4:3f:
         6c:3a:aa:cc:a9:09:7c:78:62:3e:cd:2a:0b:bf:81:b6:13:cf:
         28:e8:0d:9a:9d:9e:2b:e1:0c:bd:d2:d1:3d:66:fc:6f:0a:c7:
         c4:d4:30:3a:76:c4:0c:84:8d:6b:3f:35:c4:a7:62:17:62:c0:
         8d:c6:2f:7b:33:0a:3f:fb:37:36:b5:ff:ea:08:52:ce:07:db:
         52:c1:f9:03:5f:0c:d8:d9:88:9d:98:b6:2c:c0:35:6f:77:58:
         21:0a:1b:d3:0a:3f:a0:1d:00:9e:fe:db:19:6b:31:2f:47:d3:
         1d:64:d8:3a:eb:03:b1:c7:41:7f:1c:42:08:10:9d:97:d3:4d:
         94:15:fd:93:46:9d:13:e4:e7:0d:a0:5f:04:15:d3:6b:ee:b7:
         0b:c5:e3:ff:68:1d:24:bb:c0:d6:07:bc:a3:d8:86:97:ad:c2:
         7e:29:3a:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 15 13:21:17 2025 by rpki-client