This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F361A501/8797D19A13FD11EE94C3DB244AD9E6FC/tgB5bcJQyHSsVx0yPQFLiHYkPF4.mft
File:                     tgB5bcJQyHSsVx0yPQFLiHYkPF4.mft (raw, json)
Hash identifier:          Va1fdFJ55p76DlaO7vszbD1289aP3y24Wus87WpoxGs=
Subject key identifier:   88:E5:89:B4:B8:9F:C6:1F:2A:83:61:0A:03:B4:05:A4:73:07:32:51
Authority key identifier: B6:00:79:6D:C2:50:C8:74:AC:57:1D:32:3D:01:4B:88:76:24:3C:5E
Certificate issuer:       /CN=F361A501AR/serialNumber=B600796DC250C874AC571D323D014B8876243C5E
Certificate serial:       0399
Authority info access:    rsync://rpki.afrinic.net/repository/arin/tgB5bcJQyHSsVx0yPQFLiHYkPF4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F361A501/8797D19A13FD11EE94C3DB244AD9E6FC/tgB5bcJQyHSsVx0yPQFLiHYkPF4.mft
Manifest number:          0399
Signing time:             Sat 06 Dec 2025 03:35:59 +0000
Manifest this update:     Sat 06 Dec 2025 03:35:58 +0000
Manifest next update:     Mon 08 Dec 2025 03:35:58 +0000
Files and hashes:         1: tgB5bcJQyHSsVx0yPQFLiHYkPF4.crl (hash: +SytixmyMlZOUhtAN/cvZhrzGshf/h7GVGR6Ev810a0=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F361A501/8797D19A13FD11EE94C3DB244AD9E6FC/tgB5bcJQyHSsVx0yPQFLiHYkPF4.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F361A501/8797D19A13FD11EE94C3DB244AD9E6FC/tgB5bcJQyHSsVx0yPQFLiHYkPF4.mft
                          rsync://rpki.afrinic.net/repository/arin/tgB5bcJQyHSsVx0yPQFLiHYkPF4.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 08 Dec 2025 00:26:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 921 (0x399)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F361A501AR, serialNumber=B600796DC250C874AC571D323D014B8876243C5E
        Validity
            Not Before: Dec  6 03:35:58 2025 GMT
            Not After : Dec  8 03:35:58 2025 GMT
        Subject: CN=6933a49f-f1a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:db:ec:ba:9a:18:51:4e:bc:cc:ba:c9:d4:27:
                    14:be:21:d0:9c:5f:1a:9a:bb:67:62:b0:44:62:eb:
                    52:2c:7d:f2:40:ca:b6:8b:09:1b:9d:60:f4:fb:c9:
                    ff:57:a4:2d:71:a2:db:01:41:db:d1:ea:f1:10:77:
                    e0:b6:d7:74:04:7f:cf:79:08:70:64:43:f3:f4:d3:
                    98:03:3a:3e:5e:8b:b9:63:3d:ce:bf:c8:e8:42:af:
                    77:82:16:06:58:7e:b4:d1:aa:2c:80:00:0b:19:d5:
                    38:9a:b5:c5:bc:12:c6:8d:2c:52:1b:f1:a8:5a:77:
                    12:40:d2:78:4a:67:cd:bb:89:24:07:ef:1d:03:52:
                    1e:b0:1b:df:42:0a:08:12:ff:c3:89:09:63:cf:7e:
                    32:ad:41:f7:ee:72:fc:2e:42:cd:10:19:27:0e:03:
                    fa:c3:1a:8e:2c:6d:03:c3:4a:86:9d:b8:3b:bb:c8:
                    29:9e:68:50:a9:bf:17:2a:14:a1:61:6e:18:10:3c:
                    dd:a1:bf:c6:de:ec:7e:05:06:91:c5:56:32:73:03:
                    df:79:30:19:7e:0a:16:6a:73:5e:b5:34:9a:3b:36:
                    db:5c:c1:dc:59:d9:ce:28:78:c5:d0:2e:db:d5:9c:
                    7b:86:73:83:28:98:61:24:c5:48:8f:3d:3f:4e:6f:
                    05:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:E5:89:B4:B8:9F:C6:1F:2A:83:61:0A:03:B4:05:A4:73:07:32:51
            X509v3 Authority Key Identifier:
                keyid:B6:00:79:6D:C2:50:C8:74:AC:57:1D:32:3D:01:4B:88:76:24:3C:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F361A501/8797D19A13FD11EE94C3DB244AD9E6FC/tgB5bcJQyHSsVx0yPQFLiHYkPF4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/tgB5bcJQyHSsVx0yPQFLiHYkPF4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F361A501/8797D19A13FD11EE94C3DB244AD9E6FC/tgB5bcJQyHSsVx0yPQFLiHYkPF4.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:19:7d:f5:11:fb:4a:f2:aa:5f:a1:e1:34:a7:e7:65:cb:87:
         9f:cb:27:f7:5e:3d:69:d8:1f:40:2b:4c:14:2e:7b:1b:19:e9:
         96:1c:77:15:02:dc:ab:64:44:3a:97:db:8d:7b:52:08:f2:64:
         fc:ce:fe:f6:10:b9:ce:6f:ad:47:12:09:13:f5:f6:f7:8c:41:
         98:92:a9:06:77:8f:ef:16:6e:7f:33:7c:e3:fb:e2:0d:25:0c:
         86:16:9f:bb:ea:70:3b:43:fa:a2:0f:e0:94:5f:68:ed:ee:b1:
         29:86:8a:df:bd:34:67:65:b1:6e:33:c3:b7:d1:74:91:86:ac:
         a8:66:2c:04:ac:30:ef:f5:a8:f5:12:0a:6f:d6:ba:26:9b:80:
         2f:09:e7:23:bf:46:a6:8c:67:52:6e:95:cd:34:57:3b:b0:79:
         9e:99:82:5b:27:da:80:4e:59:77:3b:9b:a7:83:46:a5:d6:f8:
         fa:1f:b1:40:4e:10:1c:93:b1:8c:da:70:a8:55:8f:56:88:96:
         10:84:fe:fe:ea:6e:02:73:82:5a:62:52:5f:5a:b2:20:94:d6:
         ad:bf:74:62:cc:f8:52:ee:1e:03:32:af:2d:ef:7c:c5:4a:96:
         e0:74:7d:72:25:57:a8:57:90:dc:f0:bd:db:f1:46:8c:98:d0:
         c5:0e:56:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 19:06:37 2025 by rpki-client