This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F68F4/66F3832AC67311EEB3DB73A5775412E6/OckZvvVPpaxnw34-dWyhP7I0tT8.mft
File:                     OckZvvVPpaxnw34-dWyhP7I0tT8.mft (raw, json)
Hash identifier:          lazUwiQoKzCxelSyhHHQhe6dHDqsh2CDeo4DkmjUfBs=
Subject key identifier:   C6:A3:97:F6:94:4E:F7:E4:91:35:7B:FA:18:E9:AA:47:8E:3E:A2:F4
Authority key identifier: 39:C9:19:BE:F5:4F:A5:AC:67:C3:7E:3E:75:6C:A1:3F:B2:34:B5:3F
Certificate issuer:       /CN=F36F68F4AR/serialNumber=39C919BEF54FA5AC67C37E3E756CA13FB234B53F
Certificate serial:       02B7
Authority info access:    rsync://rpki.afrinic.net/repository/arin/OckZvvVPpaxnw34-dWyhP7I0tT8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36F68F4/66F3832AC67311EEB3DB73A5775412E6/OckZvvVPpaxnw34-dWyhP7I0tT8.mft
Manifest number:          02B4
Signing time:             Sat 06 Dec 2025 04:04:52 +0000
Manifest this update:     Sat 06 Dec 2025 04:04:52 +0000
Manifest next update:     Mon 08 Dec 2025 04:04:51 +0000
Files and hashes:         1: OckZvvVPpaxnw34-dWyhP7I0tT8.crl (hash: s2NcBFy4tFYpcj7Kd+QWF8luj7SeSTijMOKAHMKuG2o=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36F68F4/66F3832AC67311EEB3DB73A5775412E6/OckZvvVPpaxnw34-dWyhP7I0tT8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36F68F4/66F3832AC67311EEB3DB73A5775412E6/OckZvvVPpaxnw34-dWyhP7I0tT8.mft
                          rsync://rpki.afrinic.net/repository/arin/OckZvvVPpaxnw34-dWyhP7I0tT8.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 08 Dec 2025 00:26:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 695 (0x2b7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36F68F4AR, serialNumber=39C919BEF54FA5AC67C37E3E756CA13FB234B53F
        Validity
            Not Before: Dec  6 04:04:52 2025 GMT
            Not After : Dec  8 04:04:51 2025 GMT
        Subject: CN=6933ab64-33ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:ae:2e:69:ff:b9:70:2c:1e:13:26:34:cc:81:
                    b0:4d:99:ab:e4:7b:70:bf:ca:1f:fe:aa:6e:8a:6a:
                    5b:f3:c3:7c:64:36:6e:1c:ea:c9:64:85:30:47:85:
                    ff:8f:12:46:af:aa:fd:49:bc:7c:7d:22:8e:51:fd:
                    8c:6b:ad:9c:0e:b4:6d:b8:75:18:34:ea:1d:21:33:
                    77:72:4d:c6:d9:76:4b:6a:2b:09:ac:8e:27:cf:5a:
                    0b:59:ff:d1:8d:71:a1:92:d8:2f:9c:a6:7f:1c:01:
                    25:f9:92:64:c3:c2:72:2c:48:c3:a0:f5:17:2f:60:
                    3a:7e:87:09:c4:06:25:5d:78:e4:00:64:69:dd:4e:
                    2a:16:7d:c1:36:23:87:a7:75:a2:60:36:a8:de:73:
                    a1:6f:69:7a:1b:d5:a6:3d:c6:6c:e9:5f:cd:0b:ed:
                    05:31:e2:0c:3d:d8:a2:a7:66:0a:d4:3b:40:dc:7f:
                    86:7f:33:09:d9:b7:ff:44:1c:32:11:e4:00:cf:10:
                    64:7d:73:c2:81:9d:fc:01:83:8a:f5:ad:1f:6f:ae:
                    c8:6a:b7:a3:6b:db:d3:a1:4c:84:ff:33:90:ec:cc:
                    d5:84:a6:fa:41:e3:c2:3f:55:d9:b4:26:2f:85:b2:
                    98:02:bf:8e:72:74:27:19:a7:00:21:2a:eb:e8:c6:
                    fc:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:A3:97:F6:94:4E:F7:E4:91:35:7B:FA:18:E9:AA:47:8E:3E:A2:F4
            X509v3 Authority Key Identifier:
                keyid:39:C9:19:BE:F5:4F:A5:AC:67:C3:7E:3E:75:6C:A1:3F:B2:34:B5:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36F68F4/66F3832AC67311EEB3DB73A5775412E6/OckZvvVPpaxnw34-dWyhP7I0tT8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/OckZvvVPpaxnw34-dWyhP7I0tT8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F68F4/66F3832AC67311EEB3DB73A5775412E6/OckZvvVPpaxnw34-dWyhP7I0tT8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:2a:0d:91:3e:7e:4a:85:ff:5d:58:e7:5b:6b:4b:5f:f6:b6:
         2c:23:5d:15:6c:b9:fb:4a:79:f7:fe:4b:7d:14:ac:84:da:4d:
         2c:b6:ad:bd:94:be:ab:69:1f:8e:c2:ed:cf:8e:28:d7:82:83:
         ab:23:6e:cc:e1:a5:72:12:71:42:c7:9a:a9:6b:2d:f7:bb:5b:
         1a:b8:c3:49:fd:28:8d:2a:ae:14:fb:b4:bf:2b:e8:91:70:9e:
         c5:f1:ac:ea:34:8a:94:e7:a4:4c:bd:7e:77:3f:8f:4a:91:59:
         e8:6b:22:a8:08:f2:04:4d:70:51:0a:87:89:07:6d:3d:7e:93:
         97:24:4b:2b:3d:a2:67:27:e3:17:4e:58:9d:3f:99:97:6f:d8:
         a2:55:15:32:35:fd:26:5d:7e:a6:d7:34:db:0d:0a:df:0f:86:
         0b:35:f4:59:05:14:90:50:20:7e:ae:39:04:80:b2:05:d5:cc:
         da:f6:b5:22:fa:74:bb:7d:ca:21:16:1d:b1:d0:27:7a:7e:f3:
         f0:60:6a:ba:e8:c9:db:a2:4d:e5:c1:03:82:5e:81:e1:5a:65:
         98:ee:36:aa:3c:b1:ee:da:d5:6a:c8:f3:4f:de:ba:0e:f5:a8:
         bc:69:67:05:9a:02:99:fd:de:ce:da:40:78:2b:17:dd:6b:9e:
         85:29:6b:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 01:11:26 2025 by rpki-client