This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367678F/AB1C15EE650B11EF91C9D957762E951A/tKCUA2WAIUx9QccbjIZXpO4vQHI.mft
File:                     tKCUA2WAIUx9QccbjIZXpO4vQHI.mft (raw, json)
Hash identifier:          VDEz3rrESyrAw4lq0x5BEdEvgCNLkK5lEClwHEWk1is=
Subject key identifier:   C4:C8:E8:2F:00:F1:C0:66:CC:11:27:2D:9B:9C:E8:98:F1:FA:32:44
Authority key identifier: B4:A0:94:03:65:80:21:4C:7D:41:C7:1B:8C:86:57:A4:EE:2F:40:72
Certificate issuer:       /CN=F367678FAR/serialNumber=B4A094036580214C7D41C71B8C8657A4EE2F4072
Certificate serial:       01DD
Authority info access:    rsync://rpki.afrinic.net/repository/arin/tKCUA2WAIUx9QccbjIZXpO4vQHI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F367678F/AB1C15EE650B11EF91C9D957762E951A/tKCUA2WAIUx9QccbjIZXpO4vQHI.mft
Manifest number:          01DD
Signing time:             Sat 06 Dec 2025 04:31:32 +0000
Manifest this update:     Sat 06 Dec 2025 04:31:31 +0000
Manifest next update:     Mon 08 Dec 2025 04:31:31 +0000
Files and hashes:         1: tKCUA2WAIUx9QccbjIZXpO4vQHI.crl (hash: ng90JBql0oNNehJQM3wS+1CoFyv5DtZ+rFSyVD1VsFM=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F367678F/AB1C15EE650B11EF91C9D957762E951A/tKCUA2WAIUx9QccbjIZXpO4vQHI.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F367678F/AB1C15EE650B11EF91C9D957762E951A/tKCUA2WAIUx9QccbjIZXpO4vQHI.mft
                          rsync://rpki.afrinic.net/repository/arin/tKCUA2WAIUx9QccbjIZXpO4vQHI.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 08 Dec 2025 00:26:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 477 (0x1dd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F367678FAR, serialNumber=B4A094036580214C7D41C71B8C8657A4EE2F4072
        Validity
            Not Before: Dec  6 04:31:31 2025 GMT
            Not After : Dec  8 04:31:31 2025 GMT
        Subject: CN=6933b1a4-1f15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:15:94:dd:3b:69:db:85:47:e3:af:b2:f4:65:
                    0d:5e:f7:bb:e0:6a:82:fe:b2:99:67:85:62:38:84:
                    2e:a9:a3:42:46:c0:02:12:c6:b9:3f:98:93:34:48:
                    5b:47:59:a5:23:4e:05:1c:14:69:22:6b:c4:64:cf:
                    f1:e2:c2:17:c8:98:c1:7f:bf:e1:dd:18:38:b6:b2:
                    d3:ba:f6:1b:40:53:4b:b5:f8:39:43:f1:4e:cb:20:
                    f7:fd:aa:e9:b3:70:5d:fd:e8:92:f5:96:dd:b8:6e:
                    37:e6:47:f9:9d:89:34:cd:50:7a:13:89:69:69:35:
                    1d:db:56:e2:1d:76:ed:24:ca:14:89:e3:dc:cc:43:
                    42:5e:c2:3d:21:c7:0c:40:cb:e4:49:a7:1d:2d:7e:
                    e1:96:97:a0:3c:d2:ca:c4:f8:dc:1b:99:be:46:b5:
                    ec:e6:95:ab:14:81:e9:d3:d5:63:fc:f7:db:f5:89:
                    18:0d:ac:89:8b:d7:80:4d:1e:74:d3:ce:32:b5:f6:
                    4f:b7:e4:cd:e7:d8:56:e0:5c:e8:57:54:b3:59:af:
                    cd:76:40:ed:2b:3a:f7:6c:d0:ec:da:6b:6f:2f:ce:
                    9d:89:14:b2:61:fc:31:c3:7f:c2:2e:e4:b7:f3:c9:
                    c1:98:f8:97:a6:7d:78:6f:2c:b3:5d:bf:3f:61:93:
                    ae:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:C8:E8:2F:00:F1:C0:66:CC:11:27:2D:9B:9C:E8:98:F1:FA:32:44
            X509v3 Authority Key Identifier:
                keyid:B4:A0:94:03:65:80:21:4C:7D:41:C7:1B:8C:86:57:A4:EE:2F:40:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F367678F/AB1C15EE650B11EF91C9D957762E951A/tKCUA2WAIUx9QccbjIZXpO4vQHI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/tKCUA2WAIUx9QccbjIZXpO4vQHI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367678F/AB1C15EE650B11EF91C9D957762E951A/tKCUA2WAIUx9QccbjIZXpO4vQHI.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:8c:95:cb:74:a0:dd:c4:c5:7a:67:b1:8b:ef:47:fc:4e:de:
         11:12:96:8a:8e:4f:d6:02:79:5e:49:66:8c:f5:d7:e4:de:b3:
         6f:c9:49:45:da:e6:d4:9d:eb:6b:a9:90:38:6f:1f:d2:5a:b5:
         0b:85:96:24:67:d4:19:4b:a4:23:b4:a4:9b:d6:43:94:ad:16:
         dd:97:68:04:1d:6f:3c:17:80:9a:ab:c9:44:95:67:b8:aa:75:
         1d:51:65:46:e4:91:fd:5a:fe:1e:28:a0:6d:a4:36:d6:6c:da:
         19:16:b9:b6:d0:6e:c7:9b:22:4f:31:d9:74:1c:a6:79:f7:5f:
         59:58:5d:9f:6d:a2:f1:64:bc:a2:34:6b:02:02:b5:4b:70:5d:
         43:82:df:fd:d0:d3:24:4b:1e:ad:14:f9:d8:8f:74:d4:88:bb:
         37:26:5e:cb:51:53:35:87:83:bc:bc:9a:e5:87:5c:d0:78:5b:
         eb:4a:d8:fc:53:ff:5f:c6:bd:c0:29:a8:d9:62:03:70:3b:cc:
         5e:6b:0d:8d:f6:c9:39:19:a2:9f:3d:ba:b5:90:84:85:5b:66:
         8f:7c:62:18:21:06:b0:d6:dc:3e:68:4f:4f:58:51:0b:2d:8e:
         f6:91:8a:49:67:95:f3:c5:8c:ba:32:1a:a0:dc:15:60:e7:a7:
         c1:3a:1c:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 21:29:36 2025 by rpki-client