This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/CfsxNuzV49fPALMsEh8S6K_QpgE.mft
File:                     CfsxNuzV49fPALMsEh8S6K_QpgE.mft (raw, json)
Hash identifier:          dlxGAFAX8pCp/GQZKmJYYLyFeCTG/Bz8HmJFpj4YjJk=
Subject key identifier:   65:36:7C:F4:C8:C8:10:E7:7C:C0:0F:AA:EA:BE:8D:D2:59:08:22:E9
Authority key identifier: 09:FB:31:36:EC:D5:E3:D7:CF:00:B3:2C:12:1F:12:E8:AF:D0:A6:01
Certificate issuer:       /CN=F3659F9CAR/serialNumber=09FB3136ECD5E3D7CF00B32C121F12E8AFD0A601
Certificate serial:       0526
Authority info access:    rsync://rpki.afrinic.net/repository/arin/CfsxNuzV49fPALMsEh8S6K_QpgE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/CfsxNuzV49fPALMsEh8S6K_QpgE.mft
Manifest number:          04D7
Signing time:             Sat 06 Dec 2025 03:08:43 +0000
Manifest this update:     Sat 06 Dec 2025 03:08:42 +0000
Manifest next update:     Mon 08 Dec 2025 03:08:42 +0000
Files and hashes:         1: CfsxNuzV49fPALMsEh8S6K_QpgE.crl (hash: SAPu+rYB+XVZEjlnfxMu3TbEDxK6IxJ0UBU2AIEeRoU=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/CfsxNuzV49fPALMsEh8S6K_QpgE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/CfsxNuzV49fPALMsEh8S6K_QpgE.mft
                          rsync://rpki.afrinic.net/repository/arin/CfsxNuzV49fPALMsEh8S6K_QpgE.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 08 Dec 2025 00:26:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1318 (0x526)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3659F9CAR, serialNumber=09FB3136ECD5E3D7CF00B32C121F12E8AFD0A601
        Validity
            Not Before: Dec  6 03:08:42 2025 GMT
            Not After : Dec  8 03:08:42 2025 GMT
        Subject: CN=69339e3b-2bea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:cc:04:6e:2d:40:7d:68:cb:69:07:d2:e2:d6:
                    27:76:0c:ec:30:ad:c1:16:97:95:90:ba:70:0d:03:
                    bf:91:2a:88:72:82:5c:43:6e:f3:fa:77:02:7c:66:
                    04:34:a4:06:c7:d7:39:ba:71:b6:65:a9:56:9e:a5:
                    2a:d4:fb:9b:92:50:51:82:3d:f6:43:97:82:b9:8c:
                    09:50:cb:f8:d4:18:46:d0:db:6e:d2:0e:41:45:f3:
                    25:e8:e5:d2:90:c6:ff:9d:8e:f1:55:7c:e0:89:c8:
                    a6:7b:51:13:ce:e3:41:40:a1:b3:31:74:0a:3c:66:
                    41:7e:a2:09:c5:2d:4c:c0:ff:e7:49:a9:8d:37:00:
                    5c:fd:e6:45:6a:24:27:1a:f0:02:47:d9:f5:85:af:
                    47:46:a3:68:1c:b5:7a:33:24:62:17:12:5d:f2:dc:
                    91:ac:39:b8:58:7d:f8:ab:ae:3c:59:26:f5:0e:97:
                    0c:8b:60:b5:da:95:dc:4a:e6:e8:b4:9b:9c:92:d6:
                    e9:86:7e:0c:3b:a7:10:e0:da:42:13:98:90:28:6a:
                    72:8a:46:56:eb:41:0d:97:1c:3d:74:1f:a5:36:9d:
                    82:87:5a:64:eb:54:1f:16:e6:4b:94:7e:08:b6:ed:
                    ee:be:55:38:11:64:75:4b:1c:fe:8a:64:47:41:5f:
                    80:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:36:7C:F4:C8:C8:10:E7:7C:C0:0F:AA:EA:BE:8D:D2:59:08:22:E9
            X509v3 Authority Key Identifier:
                keyid:09:FB:31:36:EC:D5:E3:D7:CF:00:B3:2C:12:1F:12:E8:AF:D0:A6:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/CfsxNuzV49fPALMsEh8S6K_QpgE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/CfsxNuzV49fPALMsEh8S6K_QpgE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/CfsxNuzV49fPALMsEh8S6K_QpgE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:d5:f7:85:5f:25:4c:92:92:03:f5:46:a7:ba:71:6b:0f:1e:
         d3:25:27:9e:1a:a9:b2:7c:4e:c2:a6:a9:70:46:1f:03:84:87:
         05:f8:46:93:4b:e9:a4:1f:1c:13:58:dd:d2:a2:74:c7:a7:59:
         4c:7e:97:41:ba:6b:70:5f:6b:8d:a9:5f:82:41:ac:c5:04:5d:
         ee:ea:1e:f4:89:7c:f4:f3:bc:6a:8d:b0:67:35:7d:19:15:8b:
         f7:ac:9b:a5:37:02:ac:c1:2f:9a:c7:df:c5:42:11:78:b5:3e:
         7b:53:f9:f2:20:22:22:99:0e:ec:af:9d:4a:8d:b6:26:27:3f:
         89:14:b0:fc:4a:10:e1:45:04:fe:9d:89:dd:f5:68:e7:86:76:
         45:86:39:6b:6a:27:a6:0e:df:98:d0:44:01:b5:be:58:a5:d6:
         17:9d:dd:c1:3b:7b:25:3c:e7:43:61:33:1b:78:ab:a6:f8:50:
         ab:9b:aa:a7:e0:81:79:e9:88:e2:38:a7:55:a5:8e:89:53:87:
         af:42:14:a3:4c:d2:8e:76:fa:60:65:58:e1:a5:39:1a:d7:eb:
         7a:46:d0:dd:d2:e0:43:0d:b9:10:fc:62:15:2e:71:b8:70:94:
         25:bd:a5:f1:ad:89:4a:24:89:bb:5b:c0:e1:34:d6:88:3c:85:
         38:ea:23:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 14:14:29 2025 by rpki-client