This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3615826/38186D12F05711EB93F9A138D8A014CE/aRHVUPOKT27JEBz-cu1_bZFhR3E.mft
File:                     aRHVUPOKT27JEBz-cu1_bZFhR3E.mft (raw, json)
Hash identifier:          NMq7xFaH84OtySAh1w86yqvz/a+Yh4GwITO2nUjtVAQ=
Subject key identifier:   D6:26:3F:1D:44:98:C7:B6:6F:40:C0:FC:28:44:25:10:A6:E7:BA:FB
Authority key identifier: 69:11:D5:50:F3:8A:4F:6E:C9:10:1C:FE:72:ED:7F:6D:91:61:47:71
Certificate issuer:       /CN=F3615826AF/serialNumber=6911D550F38A4F6EC9101CFE72ED7F6D91614771
Certificate serial:       0665
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/aRHVUPOKT27JEBz-cu1_bZFhR3E.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3615826/38186D12F05711EB93F9A138D8A014CE/aRHVUPOKT27JEBz-cu1_bZFhR3E.mft
Manifest number:          0665
Signing time:             Tue 09 Dec 2025 02:18:26 +0000
Manifest this update:     Tue 09 Dec 2025 02:18:25 +0000
Manifest next update:     Thu 11 Dec 2025 02:18:25 +0000
Files and hashes:         1: aRHVUPOKT27JEBz-cu1_bZFhR3E.crl (hash: lTL6uqvvWC8BWOPuKzkRiB6yr48a8Z9oY/mxPfA28Ak=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3615826/38186D12F05711EB93F9A138D8A014CE/aRHVUPOKT27JEBz-cu1_bZFhR3E.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3615826/38186D12F05711EB93F9A138D8A014CE/aRHVUPOKT27JEBz-cu1_bZFhR3E.mft
                          rsync://rpki.afrinic.net/repository/afrinic/aRHVUPOKT27JEBz-cu1_bZFhR3E.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 11 Dec 2025 02:18:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1637 (0x665)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3615826AF, serialNumber=6911D550F38A4F6EC9101CFE72ED7F6D91614771
        Validity
            Not Before: Dec  9 02:18:25 2025 GMT
            Not After : Dec 11 02:18:25 2025 GMT
        Subject: CN=693786f2-341b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:da:9d:e3:a8:eb:d6:03:c8:04:7b:23:ad:c7:
                    f5:5d:15:3a:80:48:18:7b:e9:3f:db:82:a1:3a:4d:
                    db:d5:3c:c0:30:59:a5:6e:af:f1:3a:b8:c4:bc:5b:
                    0f:e9:45:38:05:0a:b5:05:be:f9:e7:da:01:f2:ec:
                    3f:db:be:2b:d1:7e:68:9d:a1:af:6b:67:82:49:ef:
                    f9:3d:66:0d:53:8c:6b:96:d2:22:9c:d7:5a:92:66:
                    7e:09:b6:8e:df:46:46:48:60:0f:1d:ab:76:f3:3f:
                    a7:25:0d:51:f3:04:9c:5c:bf:0e:4f:0f:11:60:5a:
                    00:a8:f2:00:09:3d:5b:b9:a9:ab:d4:c4:bf:b9:6c:
                    01:24:aa:f4:bf:3f:ef:12:eb:ec:66:a4:5a:5d:30:
                    df:36:cc:0e:7b:ee:09:01:6d:ea:b4:d2:2c:45:a6:
                    fd:bd:3d:70:40:84:80:7c:f1:76:e6:07:03:76:59:
                    35:35:8c:68:37:91:52:04:36:a9:01:c4:22:93:7b:
                    70:3b:e7:14:0f:e1:53:12:09:d9:3c:3a:c8:d3:bc:
                    2d:82:34:3a:02:00:d5:df:a3:e9:14:62:a7:51:6e:
                    d4:89:17:f7:d5:de:78:cf:4e:f6:05:0a:3f:8c:35:
                    0f:fe:ce:d7:94:31:5f:4f:aa:6a:71:3d:a5:0f:7c:
                    7f:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:26:3F:1D:44:98:C7:B6:6F:40:C0:FC:28:44:25:10:A6:E7:BA:FB
            X509v3 Authority Key Identifier:
                keyid:69:11:D5:50:F3:8A:4F:6E:C9:10:1C:FE:72:ED:7F:6D:91:61:47:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3615826/38186D12F05711EB93F9A138D8A014CE/aRHVUPOKT27JEBz-cu1_bZFhR3E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/aRHVUPOKT27JEBz-cu1_bZFhR3E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3615826/38186D12F05711EB93F9A138D8A014CE/aRHVUPOKT27JEBz-cu1_bZFhR3E.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:93:7b:d8:2c:0a:33:0c:e4:b6:59:6d:65:4b:ef:23:c5:bf:
         31:9b:db:5f:49:06:5a:64:78:8f:79:f7:94:b0:ae:4c:4b:c1:
         7b:d6:3a:33:e2:5e:0e:9b:e8:c5:50:1c:12:4d:8f:46:60:d2:
         91:5a:db:11:fa:6c:63:31:85:30:a8:be:91:75:c9:23:fc:6b:
         ca:6b:68:ac:bc:ab:65:a8:ac:32:6e:39:5a:29:a7:9a:47:53:
         33:9f:21:3c:e1:b1:8e:56:88:75:94:4d:18:68:c2:d3:0c:c1:
         07:e2:c9:dd:3b:d3:36:4b:e4:73:e2:e4:63:fe:ab:a6:3d:a3:
         2f:68:2b:f2:2b:3b:9b:f4:75:bd:f1:32:f4:bb:e9:4a:ef:cd:
         c6:d7:10:bc:7a:13:f4:8e:2a:8b:7f:a2:99:34:ba:93:6b:b7:
         a2:c8:2f:70:e8:93:34:3c:19:f1:42:21:cb:93:ab:7e:8d:ca:
         6b:cf:f3:94:38:ab:7a:8c:b2:13:51:eb:31:6e:b3:fc:fd:d0:
         ad:5e:5f:15:70:ea:33:ae:df:5d:f5:69:cf:51:5f:50:4b:55:
         e9:ec:b0:2b:94:45:bd:af:5e:79:eb:9f:0b:8c:77:51:4e:b1:
         0b:1b:a5:db:7c:5b:79:f3:a9:a8:77:00:26:f8:71:7e:02:da:
         60:82:c8:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 9 12:42:15 2025 by rpki-client