This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36DBC4B/358103AEF8A911EE96D1BF0F017001B1/4TG21PnDQatckQb6eKacm4gJKw8.mft
File:                     4TG21PnDQatckQb6eKacm4gJKw8.mft (raw, json)
Hash identifier:          JszFsm1h8Qo1pbbnTE2iDn37AKSHXYmMU0Xj4j+aSaE=
Subject key identifier:   66:88:55:A3:7D:F2:AA:97:8D:F9:28:EE:E2:26:A2:81:6C:1D:9B:6E
Authority key identifier: E1:31:B6:D4:F9:C3:41:AB:5C:91:06:FA:78:A6:9C:9B:88:09:2B:0F
Certificate issuer:       /CN=F36DBC4BAR/serialNumber=E131B6D4F9C341AB5C9106FA78A69C9B88092B0F
Certificate serial:       0270
Authority info access:    rsync://rpki.afrinic.net/repository/arin/4TG21PnDQatckQb6eKacm4gJKw8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36DBC4B/358103AEF8A911EE96D1BF0F017001B1/4TG21PnDQatckQb6eKacm4gJKw8.mft
Manifest number:          026F
Signing time:             Sat 06 Dec 2025 04:11:16 +0000
Manifest this update:     Sat 06 Dec 2025 04:11:16 +0000
Manifest next update:     Mon 08 Dec 2025 04:11:16 +0000
Files and hashes:         1: 4TG21PnDQatckQb6eKacm4gJKw8.crl (hash: VGeKMl8gA61ZlByWrNxbvidfsw4l5+KaHPSKAai04yM=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36DBC4B/358103AEF8A911EE96D1BF0F017001B1/4TG21PnDQatckQb6eKacm4gJKw8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36DBC4B/358103AEF8A911EE96D1BF0F017001B1/4TG21PnDQatckQb6eKacm4gJKw8.mft
                          rsync://rpki.afrinic.net/repository/arin/4TG21PnDQatckQb6eKacm4gJKw8.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 08 Dec 2025 00:26:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 624 (0x270)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36DBC4BAR, serialNumber=E131B6D4F9C341AB5C9106FA78A69C9B88092B0F
        Validity
            Not Before: Dec  6 04:11:16 2025 GMT
            Not After : Dec  8 04:11:16 2025 GMT
        Subject: CN=6933ace4-ebfa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:09:6a:46:db:bd:56:35:a2:e8:93:6b:f9:56:
                    d3:ff:88:17:07:88:ac:f7:f7:8b:77:87:03:d3:10:
                    77:a7:ed:0e:11:6b:93:d1:5d:47:90:1e:5d:a8:61:
                    fb:fc:b8:43:ae:60:f5:35:28:12:95:a3:0e:d8:5c:
                    28:62:35:a2:88:80:b4:ec:f8:58:5b:45:a2:7d:05:
                    0f:28:ac:62:a2:26:e9:95:ed:fd:5b:57:3e:4d:dd:
                    0c:d2:5a:24:f5:36:67:75:e9:c3:39:2f:cf:c9:5e:
                    e0:94:15:06:f4:47:10:8e:a5:8b:d5:15:17:0e:69:
                    d7:ae:2d:b7:32:6e:54:76:56:ea:c7:7c:0f:b7:a3:
                    ce:95:1a:7d:06:26:e8:25:c2:59:90:87:22:61:96:
                    09:c5:c3:1b:73:44:f8:94:dc:ed:db:48:69:ca:67:
                    ca:2c:b3:9f:78:8d:a4:84:3c:48:36:31:2f:f0:f0:
                    00:99:3a:c3:98:61:7e:96:c4:e4:6c:5b:61:5f:8d:
                    6d:66:c9:dd:15:7c:cc:35:e0:b2:1b:b8:79:f6:32:
                    b2:f1:bc:da:8f:be:08:b5:58:17:5a:23:d5:43:18:
                    16:c7:75:32:76:53:b3:4a:26:ef:e3:f6:10:57:1e:
                    74:46:98:17:27:15:a5:09:40:cc:09:b1:03:72:3b:
                    2e:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:88:55:A3:7D:F2:AA:97:8D:F9:28:EE:E2:26:A2:81:6C:1D:9B:6E
            X509v3 Authority Key Identifier:
                keyid:E1:31:B6:D4:F9:C3:41:AB:5C:91:06:FA:78:A6:9C:9B:88:09:2B:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36DBC4B/358103AEF8A911EE96D1BF0F017001B1/4TG21PnDQatckQb6eKacm4gJKw8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/4TG21PnDQatckQb6eKacm4gJKw8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36DBC4B/358103AEF8A911EE96D1BF0F017001B1/4TG21PnDQatckQb6eKacm4gJKw8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:26:ff:ef:e5:3e:fd:e2:23:3e:c9:43:fb:4d:39:32:04:e8:
         27:b4:71:85:b6:13:12:b5:3b:31:9c:e6:05:05:38:fb:48:34:
         ed:09:12:c8:67:68:8c:78:37:db:9e:15:3d:96:17:46:00:99:
         d4:bd:9e:97:6c:48:99:2c:bc:80:0e:67:bd:f4:b1:6e:86:d4:
         72:70:9f:95:04:6f:b4:f2:40:7b:47:d1:32:b2:0c:d3:61:a0:
         d2:65:0d:d0:54:7d:5f:da:4f:24:8d:f3:be:f8:55:63:b9:8e:
         8b:d6:33:43:99:ac:02:f2:7f:e5:32:4f:e3:e1:70:ae:37:a2:
         5b:b2:93:e5:de:fa:9f:e5:89:be:9f:22:da:c6:48:c0:4f:69:
         e3:fc:b0:27:a6:7f:11:1c:bf:92:14:65:63:42:73:fe:c4:a9:
         cb:8b:5e:ea:01:f7:5b:cd:07:f7:40:93:f3:93:65:c8:2b:b6:
         26:a6:61:bb:1d:91:11:b6:dc:31:88:81:bb:bb:d8:a9:07:2d:
         14:f0:c7:0f:3e:4d:41:a2:bd:8a:c1:86:84:57:9f:f8:b7:de:
         31:4c:ed:db:a8:33:8a:36:61:30:b2:32:b3:66:55:06:1f:fe:
         59:0f:fb:56:4a:3f:18:fb:70:3c:ca:fc:9b:9f:7e:e7:db:70:
         5a:1f:4c:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 01:35:21 2025 by rpki-client