This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36ED8A8/0E2BC6F6FE4B11EFBC1FC479762E951A/TyZbxUWhfhe_gJ8ZVk02FhCNh98.mft
File:                     TyZbxUWhfhe_gJ8ZVk02FhCNh98.mft (raw, json)
Hash identifier:          Zvubf2Ax5kTr/bHGhEzq6i0IUa3R7XZgmrUYK0j+aKk=
Subject key identifier:   80:AB:47:40:19:26:A7:54:F2:31:24:67:6E:D8:ED:1D:8E:42:AD:85
Authority key identifier: 4F:26:5B:C5:45:A1:7E:17:BF:80:9F:19:56:4D:36:16:10:8D:87:DF
Certificate issuer:       /CN=F36ED8A8AR/serialNumber=4F265BC545A17E17BF809F19564D3616108D87DF
Certificate serial:       0113
Authority info access:    rsync://rpki.afrinic.net/repository/arin/TyZbxUWhfhe_gJ8ZVk02FhCNh98.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36ED8A8/0E2BC6F6FE4B11EFBC1FC479762E951A/TyZbxUWhfhe_gJ8ZVk02FhCNh98.mft
Manifest number:          0113
Signing time:             Sat 06 Dec 2025 04:54:43 +0000
Manifest this update:     Sat 06 Dec 2025 04:54:43 +0000
Manifest next update:     Mon 08 Dec 2025 04:54:43 +0000
Files and hashes:         1: TyZbxUWhfhe_gJ8ZVk02FhCNh98.crl (hash: y6f6VRlers7EU7QN6OrM1gEzqKfRpgMVehPtcrE552M=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36ED8A8/0E2BC6F6FE4B11EFBC1FC479762E951A/TyZbxUWhfhe_gJ8ZVk02FhCNh98.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36ED8A8/0E2BC6F6FE4B11EFBC1FC479762E951A/TyZbxUWhfhe_gJ8ZVk02FhCNh98.mft
                          rsync://rpki.afrinic.net/repository/arin/TyZbxUWhfhe_gJ8ZVk02FhCNh98.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 08 Dec 2025 00:26:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 275 (0x113)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36ED8A8AR, serialNumber=4F265BC545A17E17BF809F19564D3616108D87DF
        Validity
            Not Before: Dec  6 04:54:43 2025 GMT
            Not After : Dec  8 04:54:43 2025 GMT
        Subject: CN=6933b713-6582
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:42:1d:a8:d3:b8:0b:47:18:70:05:2d:71:08:
                    dc:62:77:7a:94:2c:86:c7:97:c3:f2:c1:60:cf:f2:
                    ac:c2:79:32:e9:54:94:1a:56:e1:62:c0:2d:10:21:
                    4c:99:ce:f8:6d:6f:f9:aa:da:f7:62:57:df:8f:f0:
                    dc:c7:15:ff:71:fd:a3:4e:18:81:01:61:9b:df:76:
                    25:43:77:d5:ec:78:3a:6f:00:79:70:8c:ac:eb:57:
                    ba:e5:a2:66:49:59:21:74:1d:a5:42:c5:05:c2:e4:
                    18:7e:6e:14:01:03:be:43:37:0b:1b:f2:ac:74:e4:
                    18:76:4c:dc:77:40:d4:43:84:0a:22:bc:78:27:53:
                    ff:6f:6c:ac:99:24:6e:dd:c2:f7:45:be:11:cc:a6:
                    0e:13:a7:2c:04:d7:13:7a:4d:4a:be:ae:fb:39:5b:
                    dc:1e:d8:e2:0f:21:ce:31:de:65:73:98:af:fd:fd:
                    e1:31:6a:78:f6:08:42:de:f0:9c:7e:34:fd:a0:ca:
                    7b:91:38:6b:27:cb:50:51:62:40:ba:f0:0f:f3:b3:
                    1b:20:ad:c3:30:1d:a9:09:48:e1:9e:e6:40:57:7e:
                    ef:dd:63:bd:2b:5d:e0:98:a4:47:7b:72:94:1e:54:
                    ef:51:9a:cc:d7:21:51:69:8f:fb:5c:18:46:22:25:
                    2f:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:AB:47:40:19:26:A7:54:F2:31:24:67:6E:D8:ED:1D:8E:42:AD:85
            X509v3 Authority Key Identifier:
                keyid:4F:26:5B:C5:45:A1:7E:17:BF:80:9F:19:56:4D:36:16:10:8D:87:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36ED8A8/0E2BC6F6FE4B11EFBC1FC479762E951A/TyZbxUWhfhe_gJ8ZVk02FhCNh98.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/TyZbxUWhfhe_gJ8ZVk02FhCNh98.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36ED8A8/0E2BC6F6FE4B11EFBC1FC479762E951A/TyZbxUWhfhe_gJ8ZVk02FhCNh98.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:28:34:34:c8:87:11:ca:c8:b4:14:f0:c7:43:5a:09:51:82:
         ac:d3:02:6d:ec:d0:cb:ae:dd:a0:6c:a9:bb:d0:60:fe:8a:91:
         d4:89:b1:dd:3f:ec:dd:03:af:c0:c5:52:0b:cf:f4:dc:93:e1:
         1c:7b:15:31:ce:6f:b3:2c:a4:29:6e:3a:1c:36:c4:65:b3:34:
         16:35:0f:bd:0f:ef:fe:cd:0d:f8:f0:fe:aa:18:d5:b3:0b:de:
         44:ff:50:2a:00:89:d5:8c:8c:fa:d7:6f:28:0c:3d:46:68:15:
         65:a7:c2:3d:e7:86:21:99:4a:83:38:86:5e:76:8d:a6:3d:c5:
         3d:d6:5d:f8:00:b4:a0:a5:e3:62:f1:e8:f5:d1:5f:f7:f9:b3:
         88:f7:e4:87:bf:90:d2:b7:3a:4a:14:f2:ac:cb:cc:25:de:85:
         0c:5f:b5:85:88:4f:16:3d:9c:89:e9:9e:5e:ad:5b:ec:7e:6f:
         20:e8:0e:c8:c6:83:1d:9f:d5:a5:51:ad:68:e8:24:e4:21:93:
         1b:70:3a:81:2b:92:c0:98:b8:36:48:f7:8e:2e:b9:3e:d4:d2:
         14:dd:2c:18:ab:1e:90:55:92:c2:e8:cb:75:be:4c:e1:3f:c5:
         1a:50:2e:f7:73:47:3a:56:72:37:19:49:4d:51:aa:66:57:29:
         8f:78:44:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 23:24:11 2025 by rpki-client