This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3627A02/39577B2AB58E11E8B60A4064F8AEA228/1qTOslDhuJgjxaxDmHTTUfkMQuY.mft
File:                     1qTOslDhuJgjxaxDmHTTUfkMQuY.mft (raw, json)
Hash identifier:          w7nGz0J8nrPf191yD0Xklkzxm7/Ajnj98w76ZSrGytg=
Subject key identifier:   DF:DA:D6:CF:D4:F1:06:0A:D5:E7:CD:A3:1D:92:C6:29:33:35:82:36
Authority key identifier: D6:A4:CE:B2:50:E1:B8:98:23:C5:AC:43:98:74:D3:51:F9:0C:42:E6
Certificate issuer:       /CN=F3627A02AR/serialNumber=D6A4CEB250E1B89823C5AC439874D351F90C42E6
Certificate serial:       0AA5
Authority info access:    rsync://rpki.afrinic.net/repository/arin/1qTOslDhuJgjxaxDmHTTUfkMQuY.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3627A02/39577B2AB58E11E8B60A4064F8AEA228/1qTOslDhuJgjxaxDmHTTUfkMQuY.mft
Manifest number:          0A9F
Signing time:             Sun 07 Dec 2025 01:14:41 +0000
Manifest this update:     Sun 07 Dec 2025 01:14:41 +0000
Manifest next update:     Tue 09 Dec 2025 01:14:41 +0000
Files and hashes:         1: 1qTOslDhuJgjxaxDmHTTUfkMQuY.crl (hash: Rc7nMeL5ELEIGYMYmHwKJ5IHSw9ii5DhduR3insY3GI=)
                          2: 673C61B4A88611ED9FE7EDD4F1222468.roa (hash: m91FhF+zJneUBb3UfLyzUzRvHvpK/0b7/Z5lBS15Q2I=)
                          3: B03DD41482B211ED9ACDF2D8F1222468.roa (hash: p4erYRKk741+pc1GTQOQg0ZDNMWUeJrKmmr5PjLZGWc=)
                          4: 9C57BBCA514411E9819FB57FF8AEA228.roa (hash: a2EFqum38j7M+ZpqwnpRi/IEA/fqXEm99Nf0ZysxusA=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3627A02/39577B2AB58E11E8B60A4064F8AEA228/1qTOslDhuJgjxaxDmHTTUfkMQuY.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3627A02/39577B2AB58E11E8B60A4064F8AEA228/1qTOslDhuJgjxaxDmHTTUfkMQuY.mft
                          rsync://rpki.afrinic.net/repository/arin/1qTOslDhuJgjxaxDmHTTUfkMQuY.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 09 Dec 2025 00:26:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2725 (0xaa5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3627A02AR, serialNumber=D6A4CEB250E1B89823C5AC439874D351F90C42E6
        Validity
            Not Before: Dec  7 01:14:41 2025 GMT
            Not After : Dec  9 01:14:41 2025 GMT
        Subject: CN=6934d501-2f60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:b6:14:75:3a:f2:e1:4b:32:c7:d7:e3:f9:fc:
                    e3:b8:93:6a:a7:cb:2c:09:be:70:8b:e6:f5:f3:53:
                    c5:25:e4:bd:34:f3:e3:cd:42:dd:19:87:7e:4a:1e:
                    56:6d:21:2f:55:62:92:3c:7e:60:b2:0e:61:89:69:
                    c7:4b:85:c3:b3:8a:b0:54:10:a3:a7:88:44:8c:bf:
                    50:ec:74:94:a0:08:13:0c:49:05:15:94:ef:c8:6c:
                    74:60:23:59:5f:0e:2b:76:f6:aa:92:c7:b2:fc:59:
                    43:da:ea:3c:49:bc:d0:29:62:52:25:06:88:63:d6:
                    06:6b:9c:14:2e:49:9c:e3:05:b2:75:28:c9:68:ee:
                    24:2a:ae:81:64:73:ca:04:87:da:33:4a:61:0d:03:
                    04:5c:d4:d2:0b:1a:1a:b2:f7:46:cd:94:a9:01:b4:
                    5d:5e:88:a7:34:28:68:11:d5:f7:3a:c8:7f:73:0c:
                    1a:b7:76:d3:d4:40:83:b0:c7:82:78:12:d5:7a:76:
                    55:66:7f:1f:39:a0:da:49:fb:57:e2:9d:f4:13:6e:
                    03:dc:cb:6b:2c:f1:8c:16:de:fa:2c:38:55:dd:44:
                    59:75:b2:71:a7:55:7e:e3:ff:2d:f4:f0:90:3e:d6:
                    99:42:39:e5:0c:a7:22:53:cf:58:ba:38:54:81:03:
                    33:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:DA:D6:CF:D4:F1:06:0A:D5:E7:CD:A3:1D:92:C6:29:33:35:82:36
            X509v3 Authority Key Identifier:
                keyid:D6:A4:CE:B2:50:E1:B8:98:23:C5:AC:43:98:74:D3:51:F9:0C:42:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3627A02/39577B2AB58E11E8B60A4064F8AEA228/1qTOslDhuJgjxaxDmHTTUfkMQuY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/1qTOslDhuJgjxaxDmHTTUfkMQuY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3627A02/39577B2AB58E11E8B60A4064F8AEA228/1qTOslDhuJgjxaxDmHTTUfkMQuY.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:48:b3:e6:91:44:1d:5f:45:35:e3:7a:70:a1:c4:5e:a2:e4:
         60:5b:93:ca:6b:f4:39:4e:ae:be:b4:13:a5:47:af:3b:41:85:
         ce:d0:b1:16:1e:81:87:21:95:d7:e5:a6:2c:16:fa:dc:fb:5b:
         a5:e3:68:55:5c:91:fe:ad:e7:21:f4:5d:5c:4b:05:f4:d2:19:
         7d:3b:b5:30:8c:73:12:4d:2d:e0:d5:da:2f:e5:dc:2e:01:76:
         39:75:18:9e:0f:44:bb:ab:0d:af:cf:d5:99:84:9d:a7:7e:2e:
         29:76:7f:ee:64:95:9e:5d:3b:f2:3f:f1:bd:29:38:3d:e8:83:
         35:d9:0e:67:73:bf:2a:42:f0:e3:a7:e1:5e:5b:f1:69:35:bc:
         e2:46:30:6d:b7:7f:f0:34:c1:fc:87:cb:e0:9e:68:96:c1:11:
         84:a6:27:73:25:be:f0:e7:22:66:6e:e1:ea:e6:ef:74:fb:61:
         f6:50:0f:46:3f:e0:07:3d:a5:6f:64:a1:d9:1c:c0:97:01:28:
         ea:0a:b1:3c:6a:9a:ff:7b:36:03:5d:d4:b5:c3:ed:1f:88:1d:
         09:72:44:3a:20:8c:82:3b:ce:48:2a:30:0a:ca:cd:d9:e9:c7:
         8c:b9:0f:ea:de:5b:e6:ba:90:b9:b7:a4:ee:85:f5:57:eb:3e:
         f8:d5:d1:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 03:08:55 2025 by rpki-client