This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FAE49/8523FFA8BFDE11F0B0A85DF5DAE4EC9C/lyNg0Kyyz5cxmQW6RU7QdwiCLf0.mft
File:                     lyNg0Kyyz5cxmQW6RU7QdwiCLf0.mft (raw, json)
Hash identifier:          6Y6zDDDnosHlyTqZEifegXcm5It5vzwDILR+QKETyuI=
Subject key identifier:   5B:9F:75:85:10:51:E1:58:CC:A9:2B:33:FF:93:21:92:B9:E0:16:9E
Authority key identifier: 97:23:60:D0:AC:B2:CF:97:31:99:05:BA:45:4E:D0:77:08:82:2D:FD
Certificate issuer:       /CN=F36FAE49AR/serialNumber=972360D0ACB2CF97319905BA454ED07708822DFD
Certificate serial:       1D
Authority info access:    rsync://rpki.afrinic.net/repository/arin/lyNg0Kyyz5cxmQW6RU7QdwiCLf0.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36FAE49/8523FFA8BFDE11F0B0A85DF5DAE4EC9C/lyNg0Kyyz5cxmQW6RU7QdwiCLf0.mft
Manifest number:          1C
Signing time:             Thu 04 Dec 2025 05:19:55 +0000
Manifest this update:     Thu 04 Dec 2025 05:19:55 +0000
Manifest next update:     Sat 06 Dec 2025 05:19:55 +0000
Files and hashes:         1: lyNg0Kyyz5cxmQW6RU7QdwiCLf0.crl (hash: 8TJ1Y7YT8ClOcNeQjx7GxDUmuPdJp7sSPp91csqcgPQ=)
                          2: 497A6552C40011F0A4C64789DAE4EC9C.roa (hash: dAgm1qsqszfkmXft+qwZkQMhMXYqxZMoROazFTtdak4=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36FAE49/8523FFA8BFDE11F0B0A85DF5DAE4EC9C/lyNg0Kyyz5cxmQW6RU7QdwiCLf0.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36FAE49/8523FFA8BFDE11F0B0A85DF5DAE4EC9C/lyNg0Kyyz5cxmQW6RU7QdwiCLf0.mft
                          rsync://rpki.afrinic.net/repository/arin/lyNg0Kyyz5cxmQW6RU7QdwiCLf0.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 06 Dec 2025 05:19:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 29 (0x1d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36FAE49AR, serialNumber=972360D0ACB2CF97319905BA454ED07708822DFD
        Validity
            Not Before: Dec  4 05:19:55 2025 GMT
            Not After : Dec  6 05:19:55 2025 GMT
        Subject: CN=693119fb-7bc7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:b0:8c:f4:a2:7f:fe:cd:05:74:dc:c9:0a:18:
                    ff:69:64:3b:74:83:6a:24:96:70:f5:ae:65:39:f1:
                    3b:22:5f:44:cf:4b:a2:8c:ce:d2:e9:32:13:52:2c:
                    14:d4:4d:51:f7:1e:8e:b6:93:1b:49:22:18:e0:9f:
                    3f:1a:99:e2:2c:ed:59:ae:4e:96:a8:c7:0a:a6:c6:
                    27:9d:2d:10:fc:c0:f1:66:c9:cd:24:dd:8c:9a:33:
                    ad:b2:df:b4:b7:16:2c:9b:ba:7d:f0:b6:ed:fb:63:
                    74:70:d9:37:e3:b2:b3:b6:1e:d4:ad:2d:56:19:ef:
                    87:30:0b:a2:99:29:5d:b2:60:fb:5a:9a:41:09:81:
                    7b:7e:f6:8f:c3:05:71:df:e7:cb:0b:5e:3d:69:77:
                    66:86:a4:df:b5:fc:a4:dd:b1:3b:ab:27:21:f5:80:
                    25:8e:aa:24:4c:1d:aa:9f:c1:a6:3b:34:60:78:a6:
                    bb:4f:a0:20:34:b8:0f:54:14:79:68:1e:52:27:8d:
                    f7:32:76:14:cc:d5:6a:f8:92:9a:b6:f3:2b:2e:0d:
                    b1:a0:56:11:14:a0:2e:c1:04:49:c6:2d:31:e4:71:
                    5d:19:2b:e6:19:0b:20:7f:40:f0:d3:d2:55:ea:c3:
                    62:0b:e6:27:75:e4:49:de:7d:4f:46:7d:c6:ca:af:
                    b2:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:9F:75:85:10:51:E1:58:CC:A9:2B:33:FF:93:21:92:B9:E0:16:9E
            X509v3 Authority Key Identifier:
                keyid:97:23:60:D0:AC:B2:CF:97:31:99:05:BA:45:4E:D0:77:08:82:2D:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36FAE49/8523FFA8BFDE11F0B0A85DF5DAE4EC9C/lyNg0Kyyz5cxmQW6RU7QdwiCLf0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/lyNg0Kyyz5cxmQW6RU7QdwiCLf0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FAE49/8523FFA8BFDE11F0B0A85DF5DAE4EC9C/lyNg0Kyyz5cxmQW6RU7QdwiCLf0.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:22:b6:d2:74:d4:6e:f5:ad:dd:f0:35:bd:5b:1b:2b:71:e5:
         3c:b6:03:6d:e3:72:b1:81:d4:7f:40:55:1d:ee:f4:7f:5d:ec:
         64:9c:0b:f9:43:95:09:a6:bd:eb:84:f0:b2:cf:14:af:61:6a:
         d7:ca:b1:8e:b0:74:fb:c4:54:53:8f:c5:4e:c6:6e:b5:9a:71:
         39:7d:b5:52:ec:02:c3:7b:73:c0:c2:22:5d:8f:04:16:96:3a:
         b3:1d:b1:b4:85:70:12:0d:57:fb:ca:26:e8:e8:a6:af:74:87:
         e7:f4:49:89:65:0e:09:9e:5a:5a:1a:2a:49:45:95:8a:41:9b:
         3f:0b:fa:a3:07:79:c6:e6:78:71:0a:d7:80:6d:39:aa:fc:7a:
         52:c4:15:de:92:ca:e7:93:1c:fd:f8:36:41:08:ae:02:78:9d:
         b9:1e:f8:21:78:8f:39:8d:99:56:5a:67:b3:5e:ce:2a:51:bf:
         9a:ba:0b:6b:57:66:1f:19:5c:35:a2:8b:77:d9:fd:d3:c0:25:
         56:12:6c:19:43:dc:e4:88:0a:46:3e:2c:1c:1f:64:25:2f:8f:
         59:4f:02:6a:63:a9:d1:11:3d:42:c0:4f:94:a0:7a:fe:d6:78:
         96:f9:18:c8:a7:44:3c:ed:e0:ba:98:1f:30:1e:3b:c1:cd:74:
         d8:42:5e:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 4 23:36:42 2025 by rpki-client