This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A34E4/CC8FC36CDA3011EE9E6C98AA775412E6/LGcfQllwcCcjdUC_YiZaLZfrlcs.mft
File:                     LGcfQllwcCcjdUC_YiZaLZfrlcs.mft (raw, json)
Hash identifier:          z00LY9DvrqlsptkhgV2wMhT/a2CSVuz2jr8vBFJAqSY=
Subject key identifier:   F6:86:40:FD:54:1C:95:94:84:B7:5A:B4:7F:AF:2E:6B:95:45:50:3A
Authority key identifier: 2C:67:1F:42:59:70:70:27:23:75:40:BF:62:26:5A:2D:97:EB:95:CB
Certificate issuer:       /CN=F36A34E4AR/serialNumber=2C671F4259707027237540BF62265A2D97EB95CB
Certificate serial:       02A8
Authority info access:    rsync://rpki.afrinic.net/repository/arin/LGcfQllwcCcjdUC_YiZaLZfrlcs.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A34E4/CC8FC36CDA3011EE9E6C98AA775412E6/LGcfQllwcCcjdUC_YiZaLZfrlcs.mft
Manifest number:          02A3
Signing time:             Thu 18 Dec 2025 06:20:38 +0000
Manifest this update:     Thu 18 Dec 2025 06:20:37 +0000
Manifest next update:     Sat 20 Dec 2025 06:20:37 +0000
Files and hashes:         1: LGcfQllwcCcjdUC_YiZaLZfrlcs.crl (hash: ZbJMH/WzkwEIB7Up/rgsHSNO7PMOt/VRME4xBwLT0Qg=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A34E4/CC8FC36CDA3011EE9E6C98AA775412E6/LGcfQllwcCcjdUC_YiZaLZfrlcs.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A34E4/CC8FC36CDA3011EE9E6C98AA775412E6/LGcfQllwcCcjdUC_YiZaLZfrlcs.mft
                          rsync://rpki.afrinic.net/repository/arin/LGcfQllwcCcjdUC_YiZaLZfrlcs.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 20 Dec 2025 00:26:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 680 (0x2a8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A34E4AR, serialNumber=2C671F4259707027237540BF62265A2D97EB95CB
        Validity
            Not Before: Dec 18 06:20:37 2025 GMT
            Not After : Dec 20 06:20:37 2025 GMT
        Subject: CN=69439d36-1d64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:db:4d:26:0e:8f:ae:eb:cb:ad:d5:c1:80:9b:
                    35:82:4a:56:05:27:28:bf:3a:64:ec:13:6d:83:f6:
                    6e:cf:28:97:f4:95:bd:93:e4:c6:00:87:45:0a:90:
                    a4:1b:43:66:f3:9c:74:5a:0c:7f:87:43:a5:e1:3f:
                    d8:eb:b5:30:10:ab:3e:45:1e:7d:8b:22:f7:4c:42:
                    e8:b7:65:62:ee:e1:b7:d9:dd:13:f5:33:ea:77:ec:
                    b4:a0:06:11:bb:c2:d2:33:ee:7c:e8:49:68:e6:b9:
                    34:23:98:96:f5:a6:c0:e8:de:59:04:de:36:b7:44:
                    a8:02:37:f4:18:38:e0:39:22:4b:40:4b:25:f8:85:
                    84:3c:5b:bc:58:a4:9f:96:3f:20:be:15:85:d3:e2:
                    ef:8a:71:ce:b4:ff:43:2a:be:a3:7a:a3:d2:a2:9e:
                    88:69:3c:0d:ea:2d:7d:bb:9d:14:e6:e1:96:15:42:
                    52:1c:db:92:7a:eb:37:58:92:ae:5d:b3:e8:51:9a:
                    8b:87:19:1c:8c:dd:2e:aa:48:7b:b4:01:48:25:a5:
                    bd:cb:91:81:20:b6:b5:aa:8d:f6:ae:d9:1b:f9:da:
                    14:45:c4:2a:85:a7:c4:70:38:f7:98:59:47:53:11:
                    e5:c5:7c:b5:f1:33:66:fe:25:2d:64:4f:43:d3:38:
                    b1:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:86:40:FD:54:1C:95:94:84:B7:5A:B4:7F:AF:2E:6B:95:45:50:3A
            X509v3 Authority Key Identifier:
                keyid:2C:67:1F:42:59:70:70:27:23:75:40:BF:62:26:5A:2D:97:EB:95:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A34E4/CC8FC36CDA3011EE9E6C98AA775412E6/LGcfQllwcCcjdUC_YiZaLZfrlcs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/LGcfQllwcCcjdUC_YiZaLZfrlcs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A34E4/CC8FC36CDA3011EE9E6C98AA775412E6/LGcfQllwcCcjdUC_YiZaLZfrlcs.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:57:06:6f:37:bf:76:6e:d8:6f:23:2c:78:f4:d4:e5:6c:33:
         2a:55:53:fa:a3:00:e6:ea:6a:e3:66:ad:fa:ca:22:7a:ca:0b:
         e5:10:ce:8f:8a:58:7f:57:8e:d6:aa:68:19:d9:43:33:79:d4:
         b6:39:e0:82:8d:4f:51:9c:14:bb:a7:ab:45:a9:cf:f1:cd:44:
         d6:63:f3:2e:14:3a:65:f8:79:07:f6:03:88:f2:26:de:1d:67:
         66:94:16:9f:df:b6:0f:96:4e:75:dc:d6:bf:6b:16:14:a6:ab:
         7d:a3:9d:8a:52:cf:4f:eb:89:6a:4f:3c:b6:45:60:ea:2d:e0:
         67:6a:4b:ad:fe:5a:6a:6b:ed:a1:8d:5e:63:70:02:21:c6:c4:
         b9:39:57:73:75:86:16:5c:55:27:05:63:30:b7:0d:5c:7e:ee:
         14:18:c5:1e:e5:24:1e:62:ed:7c:3e:d2:bd:98:b8:f3:43:df:
         ca:ad:25:f2:b8:13:45:c8:b0:a7:e4:4b:9d:71:76:05:2c:cf:
         06:45:3f:10:b0:b3:39:74:71:a7:53:c4:cd:2c:28:e9:76:df:
         8e:29:45:f0:47:07:41:2c:35:02:b0:6b:6d:77:1e:1a:14:52:
         1f:0e:d4:50:d9:18:95:79:cf:3c:51:0d:6f:10:95:c3:ca:8b:
         76:d4:59:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 18 17:52:00 2025 by rpki-client