This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36ED442/D32C1B5657C811E5BDB1DA3EF8AEA228/mpAdFskLYBlnVD3tV83q800LJz4.mft
File:                     mpAdFskLYBlnVD3tV83q800LJz4.mft (raw, json)
Hash identifier:          9vzpeLuVq+pcWSo3mnq+Ws6CPev9IpCeR2z2MBjpdOg=
Subject key identifier:   F8:A3:95:91:27:72:4E:1B:FD:2C:E9:52:C5:FF:0A:E7:96:10:CC:96
Authority key identifier: 9A:90:1D:16:C9:0B:60:19:67:54:3D:ED:57:CD:EA:F3:4D:0B:27:3E
Certificate issuer:       /CN=F36ED442AR/serialNumber=9A901D16C90B601967543DED57CDEAF34D0B273E
Certificate serial:       0EE7
Authority info access:    rsync://rpki.afrinic.net/repository/arin/mpAdFskLYBlnVD3tV83q800LJz4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36ED442/D32C1B5657C811E5BDB1DA3EF8AEA228/mpAdFskLYBlnVD3tV83q800LJz4.mft
Manifest number:          0EE7
Signing time:             Sun 07 Dec 2025 00:56:57 +0000
Manifest this update:     Sun 07 Dec 2025 00:56:57 +0000
Manifest next update:     Tue 09 Dec 2025 00:56:57 +0000
Files and hashes:         1: mpAdFskLYBlnVD3tV83q800LJz4.crl (hash: 9NoR3fJ4HndQkvk5JLSrRuIIJlDwt70v33fN52b7zzk=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36ED442/D32C1B5657C811E5BDB1DA3EF8AEA228/mpAdFskLYBlnVD3tV83q800LJz4.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36ED442/D32C1B5657C811E5BDB1DA3EF8AEA228/mpAdFskLYBlnVD3tV83q800LJz4.mft
                          rsync://rpki.afrinic.net/repository/arin/mpAdFskLYBlnVD3tV83q800LJz4.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 09 Dec 2025 00:26:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3815 (0xee7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36ED442AR, serialNumber=9A901D16C90B601967543DED57CDEAF34D0B273E
        Validity
            Not Before: Dec  7 00:56:57 2025 GMT
            Not After : Dec  9 00:56:57 2025 GMT
        Subject: CN=6934d0d9-7e1e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:4e:c9:b9:6b:39:27:0f:1b:4e:2e:92:04:23:
                    79:53:0c:06:05:24:a0:82:a2:1f:9d:14:8b:52:7b:
                    d4:72:14:71:26:aa:cd:86:02:41:35:ba:46:22:b9:
                    b8:e4:9a:a8:da:3b:74:08:03:8c:e5:32:7b:16:5d:
                    df:31:07:aa:a0:c2:bb:f6:44:94:3c:7d:2b:1b:8f:
                    19:61:ab:90:90:0c:12:20:2d:0f:0b:60:00:85:68:
                    49:fb:0d:80:1d:6f:d2:54:fd:f4:77:20:14:c5:4b:
                    96:ba:ff:19:14:bf:c4:54:77:b9:e1:77:a5:5e:3b:
                    8d:37:2f:30:d6:c7:17:43:bc:aa:d9:67:7f:78:f2:
                    2c:08:53:c3:f3:6b:a0:af:45:2c:a7:7e:c4:d7:d6:
                    cb:1e:4e:d4:6e:c5:aa:b9:f1:a2:b6:71:0f:c9:23:
                    3f:5d:4c:14:85:e1:27:ea:40:f1:84:8e:93:e9:6e:
                    5b:1f:53:98:73:0c:40:0c:9b:fc:64:74:40:cb:a2:
                    97:ed:6d:f5:df:28:3d:cc:ea:ad:a0:fc:27:c8:86:
                    d8:fa:0b:7b:a0:cc:ba:dc:82:81:ad:79:ba:a8:20:
                    ff:73:b5:e1:6f:9c:95:3b:62:b6:a4:e7:e3:e8:9b:
                    09:03:ed:ea:04:0c:3e:08:f5:b3:71:0d:6b:90:5e:
                    d9:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:A3:95:91:27:72:4E:1B:FD:2C:E9:52:C5:FF:0A:E7:96:10:CC:96
            X509v3 Authority Key Identifier:
                keyid:9A:90:1D:16:C9:0B:60:19:67:54:3D:ED:57:CD:EA:F3:4D:0B:27:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36ED442/D32C1B5657C811E5BDB1DA3EF8AEA228/mpAdFskLYBlnVD3tV83q800LJz4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/mpAdFskLYBlnVD3tV83q800LJz4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36ED442/D32C1B5657C811E5BDB1DA3EF8AEA228/mpAdFskLYBlnVD3tV83q800LJz4.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:2b:36:d3:87:23:a9:be:ff:7c:50:dc:a9:c7:b0:49:e6:ea:
         2a:27:54:ba:7d:62:5a:d8:b8:1c:38:c5:fb:5c:0c:46:d1:2a:
         ab:83:df:92:0e:56:96:7c:e6:ec:8a:16:80:ec:c8:56:0b:7c:
         18:96:43:78:eb:94:93:b4:b6:71:7e:8c:bc:f5:38:42:cb:9f:
         68:51:0c:7d:ad:8b:4c:d3:47:0d:1b:12:63:c1:f8:41:5a:3d:
         3e:2e:10:71:99:c3:6f:25:2d:69:a0:06:fd:e0:cb:4b:ce:71:
         f5:71:7f:19:f6:3f:6f:7a:70:22:3a:4b:c2:69:02:74:79:61:
         b3:5f:9f:5a:f9:3e:5a:f3:e1:b9:bf:8e:3b:d6:d8:d3:dc:37:
         c5:7d:9d:87:b4:dc:a5:92:95:82:d7:5b:6d:d7:a4:7b:4e:b5:
         97:1d:96:59:b4:7e:4f:8c:57:91:74:52:24:3d:dd:35:38:0d:
         96:e6:fd:5e:1d:15:78:b8:cf:fe:c1:6a:0c:b4:3c:10:90:93:
         3c:0e:49:26:ac:a1:3a:a9:bb:b7:53:4f:40:ce:80:a3:d4:a1:
         46:5b:2f:65:1b:30:69:de:8e:22:e5:54:d0:c2:74:6d:62:2f:
         87:ad:6a:81:a2:43:d1:00:0c:88:fb:2b:31:4f:bc:10:6d:e4:
         98:72:97:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 03:57:36 2025 by rpki-client