This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3670369/565052907E7811EC9FAD14CB5A40D577/KVkcZVM-_QiXL0qXW-xBxltEXuA.mft
File:                     KVkcZVM-_QiXL0qXW-xBxltEXuA.mft (raw, json)
Hash identifier:          dKsaxFWcYBt7dlvY1ztk4fEf412U8OY5W1D57yMY5Xg=
Subject key identifier:   DB:F8:8F:BF:4F:23:CB:66:E6:7E:43:8C:82:80:29:AE:8E:52:2D:8E
Authority key identifier: 29:59:1C:65:53:3E:FD:08:97:2F:4A:97:5B:EC:41:C6:5B:44:5E:E0
Certificate issuer:       /CN=F3670369AR/serialNumber=29591C65533EFD08972F4A975BEC41C65B445EE0
Certificate serial:       05B5
Authority info access:    rsync://rpki.afrinic.net/repository/arin/KVkcZVM-_QiXL0qXW-xBxltEXuA.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3670369/565052907E7811EC9FAD14CB5A40D577/KVkcZVM-_QiXL0qXW-xBxltEXuA.mft
Manifest number:          05B0
Signing time:             Sat 06 Dec 2025 02:37:07 +0000
Manifest this update:     Sat 06 Dec 2025 02:37:07 +0000
Manifest next update:     Mon 08 Dec 2025 02:37:07 +0000
Files and hashes:         1: KVkcZVM-_QiXL0qXW-xBxltEXuA.crl (hash: BLgetaoJvU1Op125hgsreG2uRi7POwrWMH90dM6m6Oc=)
                          2: DE53055A2E1311EFAE851899762E951A.roa (hash: UcFSJfUBz/jAMPlBsM0sx0A7nrbCZ5eci3vzt8nRiuU=)
                          3: 01CC6C947E8D11EC89A79C885A40D577.roa (hash: qd/8XDFff1CiSxAQk1vmUsyny6ywpT4UycAJmKGe26U=)
                          4: D88002927E8C11EC95A915885A40D577.roa (hash: zp+bksguNWi/6Gwbfy/elTDlK43kW6UD+PYcX23ze0Y=)
                          5: EAF40C665BD311F0B32EE4A3DAE4EC9C.roa (hash: fL1+phnAmmLMQW8rzdMcPM0YqGLRk7qlgGhlyEQ369E=)
                          6: 675DA8B27E8211ECAB19A1E75A40D577.roa (hash: TlKHAqm5F0asDSkR7ApdBCSJn77368RAQ3PQ3KzHit4=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3670369/565052907E7811EC9FAD14CB5A40D577/KVkcZVM-_QiXL0qXW-xBxltEXuA.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3670369/565052907E7811EC9FAD14CB5A40D577/KVkcZVM-_QiXL0qXW-xBxltEXuA.mft
                          rsync://rpki.afrinic.net/repository/arin/KVkcZVM-_QiXL0qXW-xBxltEXuA.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 08 Dec 2025 00:26:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1461 (0x5b5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3670369AR, serialNumber=29591C65533EFD08972F4A975BEC41C65B445EE0
        Validity
            Not Before: Dec  6 02:37:07 2025 GMT
            Not After : Dec  8 02:37:07 2025 GMT
        Subject: CN=693396d3-8dab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:1f:f9:00:2a:d7:a9:4e:27:73:a5:1a:57:57:
                    a6:a4:df:3f:bc:dd:4d:49:bf:b0:7a:64:77:f2:97:
                    a5:76:0a:8e:10:05:00:5c:db:14:c6:71:5c:5d:d2:
                    66:85:71:b0:cc:56:6f:38:77:49:eb:fd:30:46:af:
                    97:a5:9b:e7:e6:58:ba:b5:16:e1:79:a4:ba:d9:c2:
                    0b:c5:89:73:97:35:55:5b:0b:57:4c:31:ed:f6:f2:
                    30:78:50:c6:cb:26:bf:0f:08:5a:d7:f1:eb:b9:bd:
                    fb:34:02:37:c3:10:21:76:1f:2b:19:ba:43:f9:32:
                    0c:7c:29:1e:5a:bf:68:ab:cc:2f:f8:17:4b:51:f6:
                    17:84:0e:c1:8d:98:6f:bf:96:f6:e1:56:ba:bd:59:
                    99:9b:ef:d9:14:c8:d4:05:c1:b5:15:d6:9c:5d:3b:
                    32:fc:9d:15:bc:bf:16:db:7e:6c:de:d1:d8:51:64:
                    7e:07:f5:e7:59:1e:a6:56:82:03:0a:8b:f1:f0:b8:
                    e3:10:f7:9b:2e:71:57:1e:17:8a:5d:00:ba:e4:1d:
                    7c:3b:9f:6e:aa:2e:da:fd:41:47:f5:ac:f3:f3:7e:
                    ea:15:09:47:94:e0:4d:9f:7f:76:93:2d:80:24:e6:
                    fb:69:c5:f5:f9:58:ee:9d:2f:57:c7:02:54:76:8e:
                    85:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:F8:8F:BF:4F:23:CB:66:E6:7E:43:8C:82:80:29:AE:8E:52:2D:8E
            X509v3 Authority Key Identifier:
                keyid:29:59:1C:65:53:3E:FD:08:97:2F:4A:97:5B:EC:41:C6:5B:44:5E:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3670369/565052907E7811EC9FAD14CB5A40D577/KVkcZVM-_QiXL0qXW-xBxltEXuA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/KVkcZVM-_QiXL0qXW-xBxltEXuA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3670369/565052907E7811EC9FAD14CB5A40D577/KVkcZVM-_QiXL0qXW-xBxltEXuA.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:94:4a:26:e0:d2:a1:83:f5:0b:52:dd:21:00:bc:dd:63:5a:
         3c:1f:c7:c5:84:bf:5e:1a:fb:65:49:99:a4:ab:88:80:cb:e4:
         8f:ed:5b:25:70:02:d4:69:ff:92:f3:22:ef:fc:8f:d1:e8:5a:
         8c:2e:1e:e3:98:0f:2b:d7:ae:90:7c:2f:21:26:ce:9c:45:ac:
         bf:7f:1c:57:10:d3:bb:77:65:41:75:58:4f:23:f7:3a:4e:2d:
         a3:e3:ec:e3:1d:f7:1e:96:9c:04:cc:4c:de:27:86:2c:d9:1c:
         63:c9:32:45:0e:78:c0:7f:71:79:5c:b3:86:a3:bd:cf:80:04:
         80:20:43:ab:7c:9d:ae:02:4b:56:ed:1a:e1:ac:67:c4:a8:2a:
         95:49:74:37:62:7f:fe:0c:96:00:3a:0f:66:d6:23:8d:4a:75:
         af:d8:98:c8:0c:f5:ea:d1:b1:7a:4f:f8:f3:58:99:cc:34:b2:
         3b:9c:b8:52:03:5b:07:2b:b4:cf:f5:78:d6:8c:e8:5c:4d:3e:
         64:a7:36:19:e2:54:8f:75:e6:69:02:d8:06:33:79:be:18:38:
         a7:c8:7f:e5:bd:a3:ee:40:05:2e:c4:74:ed:cd:d4:f2:7b:ee:
         4f:d8:a4:49:f3:8f:f8:78:86:ed:20:79:55:c2:2d:10:3e:c5:
         b4:0f:b2:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 15:02:21 2025 by rpki-client