This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368BC41/D964FC3A2EE811EF8A4045BB762E951A/VacCz2rVFBmN-x1soZywXkltX2U.mft
File:                     VacCz2rVFBmN-x1soZywXkltX2U.mft (raw, json)
Hash identifier:          Uj2T5ani4+0WS8fdr2Ki948Gp1J5aQvyu3jcLyqIeY4=
Subject key identifier:   E8:08:42:B6:86:49:8F:E5:66:AE:08:69:1E:6E:6C:EB:D1:54:B7:85
Authority key identifier: 55:A7:02:CF:6A:D5:14:19:8D:FB:1D:6C:A1:9C:B0:5E:49:6D:5F:65
Certificate issuer:       /CN=F368BC41AR/serialNumber=55A702CF6AD514198DFB1D6CA19CB05E496D5F65
Certificate serial:       0223
Authority info access:    rsync://rpki.afrinic.net/repository/arin/VacCz2rVFBmN-x1soZywXkltX2U.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368BC41/D964FC3A2EE811EF8A4045BB762E951A/VacCz2rVFBmN-x1soZywXkltX2U.mft
Manifest number:          0223
Signing time:             Sat 06 Dec 2025 04:19:08 +0000
Manifest this update:     Sat 06 Dec 2025 04:19:08 +0000
Manifest next update:     Mon 08 Dec 2025 04:19:08 +0000
Files and hashes:         1: VacCz2rVFBmN-x1soZywXkltX2U.crl (hash: 4byKNiMFcnE8NpaT37fyq4hkWGR2f74mzUiLS9er46A=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368BC41/D964FC3A2EE811EF8A4045BB762E951A/VacCz2rVFBmN-x1soZywXkltX2U.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368BC41/D964FC3A2EE811EF8A4045BB762E951A/VacCz2rVFBmN-x1soZywXkltX2U.mft
                          rsync://rpki.afrinic.net/repository/arin/VacCz2rVFBmN-x1soZywXkltX2U.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 08 Dec 2025 00:26:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 547 (0x223)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368BC41AR, serialNumber=55A702CF6AD514198DFB1D6CA19CB05E496D5F65
        Validity
            Not Before: Dec  6 04:19:08 2025 GMT
            Not After : Dec  8 04:19:08 2025 GMT
        Subject: CN=6933aebc-c759
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:16:cb:39:ea:7c:d5:9f:e2:19:95:14:a3:74:
                    5a:e1:06:29:32:f1:63:8f:c7:a7:cd:f3:bc:8d:ad:
                    76:92:ec:a6:cf:73:19:cf:a6:b0:30:17:f6:fc:15:
                    9a:79:ea:89:19:94:77:35:98:6e:bf:4d:1a:bd:d5:
                    51:f8:73:cc:0d:20:ef:8d:df:8c:e0:4c:29:b6:18:
                    4d:b1:34:c8:93:b0:6b:be:53:7e:b7:f3:42:d5:7f:
                    12:3c:dc:bf:49:4d:f3:dd:f8:a1:4e:10:dd:59:9b:
                    cb:b6:a5:d9:f4:4a:f5:c2:d8:17:ed:c4:80:7e:3f:
                    01:3a:20:20:eb:4e:c8:b3:c8:73:0b:9e:ce:95:58:
                    ce:0b:8e:18:a8:92:91:62:40:27:93:2b:43:72:d0:
                    c6:16:38:8d:0c:53:7c:9c:ac:2d:af:a1:f3:88:7c:
                    e6:df:c6:5a:5d:f1:97:12:43:8a:90:0b:56:90:d6:
                    7f:cd:ba:f2:63:8b:73:12:c3:92:47:af:0a:47:33:
                    37:98:42:b6:47:95:aa:97:14:81:fb:4c:03:56:0d:
                    56:04:49:5d:4a:00:21:e2:c7:31:e3:50:96:8b:a4:
                    3a:be:92:a7:74:a3:1b:db:eb:d7:fe:88:c6:88:2e:
                    c2:1d:50:f8:cf:4a:2e:9c:6f:8d:e5:32:90:13:42:
                    19:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:08:42:B6:86:49:8F:E5:66:AE:08:69:1E:6E:6C:EB:D1:54:B7:85
            X509v3 Authority Key Identifier:
                keyid:55:A7:02:CF:6A:D5:14:19:8D:FB:1D:6C:A1:9C:B0:5E:49:6D:5F:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368BC41/D964FC3A2EE811EF8A4045BB762E951A/VacCz2rVFBmN-x1soZywXkltX2U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/VacCz2rVFBmN-x1soZywXkltX2U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368BC41/D964FC3A2EE811EF8A4045BB762E951A/VacCz2rVFBmN-x1soZywXkltX2U.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:f3:e9:05:d0:32:dd:88:07:cb:77:dd:3c:d9:53:a7:25:d8:
         64:80:f9:1b:02:b0:cf:66:25:7f:2a:23:d3:1e:a5:17:c3:9d:
         8e:a5:6e:03:f9:3b:30:dc:87:9f:7a:7e:ee:33:26:12:cd:24:
         be:51:10:15:c7:04:29:3a:26:5a:88:3c:74:d8:4f:0c:63:81:
         46:9e:9c:27:9a:b5:09:0b:ff:39:d8:12:68:18:25:3e:5e:58:
         e7:ee:95:6c:30:3a:ee:a3:82:ee:f5:62:b6:81:20:ee:4b:6d:
         2a:9e:be:cf:99:a6:5f:13:81:76:45:9b:ba:f3:73:e5:de:2c:
         77:e2:0a:71:30:1d:e9:c2:05:7b:b8:66:69:25:8e:75:cb:a6:
         77:af:48:26:0f:b4:b2:15:f8:9d:76:eb:1b:0c:8e:f4:65:53:
         a5:88:37:bb:aa:39:57:71:ee:3f:ca:87:fe:35:49:9b:6c:0b:
         04:b4:34:97:fd:a7:19:7a:da:7c:96:a9:51:63:76:b1:6f:fb:
         5d:df:8e:4b:b9:36:26:37:1f:f8:6c:90:7f:3c:8c:4e:c7:88:
         0a:21:fb:f9:7f:6a:4b:e4:7f:7a:41:11:0f:5a:78:8a:3a:1d:
         47:26:27:54:66:49:73:82:86:a1:71:3e:34:85:20:f6:00:e4:
         bf:5c:25:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 13:24:32 2025 by rpki-client