This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3627A02/39577B2AB58E11E8B60A4064F8AEA228/1qTOslDhuJgjxaxDmHTTUfkMQuY.mft
File:                     1qTOslDhuJgjxaxDmHTTUfkMQuY.mft (raw, json)
Hash identifier:          sxxy4w1kb1RvVXtCTMn7ZuE+4fDb7mEgsClyn/yNiy8=
Subject key identifier:   31:57:2D:44:14:40:8F:E2:E0:82:53:2D:21:13:60:60:3B:A5:83:DE
Authority key identifier: D6:A4:CE:B2:50:E1:B8:98:23:C5:AC:43:98:74:D3:51:F9:0C:42:E6
Certificate issuer:       /CN=F3627A02AR/serialNumber=D6A4CEB250E1B89823C5AC439874D351F90C42E6
Certificate serial:       0AB2
Authority info access:    rsync://rpki.afrinic.net/repository/arin/1qTOslDhuJgjxaxDmHTTUfkMQuY.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3627A02/39577B2AB58E11E8B60A4064F8AEA228/1qTOslDhuJgjxaxDmHTTUfkMQuY.mft
Manifest number:          0AAC
Signing time:             Sat 20 Dec 2025 01:15:09 +0000
Manifest this update:     Sat 20 Dec 2025 01:15:08 +0000
Manifest next update:     Mon 22 Dec 2025 01:15:08 +0000
Files and hashes:         1: 1qTOslDhuJgjxaxDmHTTUfkMQuY.crl (hash: BHxi19Yd2yJ9pzQvOZonSNQNI18L39yq4CYGopTT2hY=)
                          2: 673C61B4A88611ED9FE7EDD4F1222468.roa (hash: m91FhF+zJneUBb3UfLyzUzRvHvpK/0b7/Z5lBS15Q2I=)
                          3: B03DD41482B211ED9ACDF2D8F1222468.roa (hash: p4erYRKk741+pc1GTQOQg0ZDNMWUeJrKmmr5PjLZGWc=)
                          4: 9C57BBCA514411E9819FB57FF8AEA228.roa (hash: a2EFqum38j7M+ZpqwnpRi/IEA/fqXEm99Nf0ZysxusA=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3627A02/39577B2AB58E11E8B60A4064F8AEA228/1qTOslDhuJgjxaxDmHTTUfkMQuY.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3627A02/39577B2AB58E11E8B60A4064F8AEA228/1qTOslDhuJgjxaxDmHTTUfkMQuY.mft
                          rsync://rpki.afrinic.net/repository/arin/1qTOslDhuJgjxaxDmHTTUfkMQuY.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 22 Dec 2025 00:26:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2738 (0xab2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3627A02AR, serialNumber=D6A4CEB250E1B89823C5AC439874D351F90C42E6
        Validity
            Not Before: Dec 20 01:15:08 2025 GMT
            Not After : Dec 22 01:15:08 2025 GMT
        Subject: CN=6945f89d-242d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:f4:2d:bf:29:cb:4c:75:c6:ec:94:79:28:ee:
                    35:2c:e1:a2:c2:5a:ef:bc:2f:2e:29:52:01:93:50:
                    6c:4e:19:ff:11:b7:74:89:db:cb:8f:6c:b9:9d:8f:
                    01:4d:df:66:2f:51:75:0d:22:3b:0d:b8:22:92:68:
                    16:57:57:3d:7d:33:49:f8:da:fa:06:47:2e:b6:f8:
                    0d:90:35:e6:48:d4:63:e1:5b:b7:45:78:46:a2:84:
                    81:e1:a9:6e:27:4c:44:77:74:41:15:1b:52:23:ef:
                    83:b6:f7:d4:a9:2c:22:9a:e5:b7:bd:74:d3:41:8b:
                    33:bb:d1:83:37:19:38:e1:71:f4:47:ec:64:92:87:
                    8a:82:d9:c5:dd:5d:eb:be:ea:5f:68:18:e1:7f:f4:
                    9c:ed:13:b8:f7:40:4f:9d:97:44:9e:7e:7b:e0:d0:
                    01:98:01:67:4d:55:4e:1d:ed:57:9b:c5:f8:cb:9b:
                    f7:87:b4:7b:cc:73:c0:af:7b:12:0b:53:5c:b1:1c:
                    ef:38:a2:2a:49:2c:74:79:f6:90:ab:52:a5:0c:41:
                    21:be:0c:85:d2:a5:aa:19:d2:c5:00:4d:37:31:23:
                    b0:e9:80:ee:fc:49:83:02:26:23:48:cf:2a:05:17:
                    10:69:32:86:b2:29:05:85:9c:a5:b8:cc:f6:94:16:
                    ba:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:57:2D:44:14:40:8F:E2:E0:82:53:2D:21:13:60:60:3B:A5:83:DE
            X509v3 Authority Key Identifier:
                keyid:D6:A4:CE:B2:50:E1:B8:98:23:C5:AC:43:98:74:D3:51:F9:0C:42:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3627A02/39577B2AB58E11E8B60A4064F8AEA228/1qTOslDhuJgjxaxDmHTTUfkMQuY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/1qTOslDhuJgjxaxDmHTTUfkMQuY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3627A02/39577B2AB58E11E8B60A4064F8AEA228/1qTOslDhuJgjxaxDmHTTUfkMQuY.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:a9:1d:3b:0c:60:69:c1:50:61:a9:73:d7:cd:74:ea:2f:22:
         24:84:db:a6:9f:ca:ef:89:6a:56:42:af:3c:2d:f4:91:99:b1:
         bf:bf:94:4a:a7:7d:11:31:b7:ed:21:a9:e3:22:c2:01:d1:9f:
         e2:5e:d4:8c:cb:22:ed:dd:62:36:be:21:ab:7a:ca:36:6d:dc:
         bb:3b:ef:f4:b2:18:a7:78:46:c9:46:5a:f0:cb:97:47:c6:5b:
         af:57:eb:87:89:7c:9f:fe:44:20:e2:22:65:c3:6b:f8:6b:15:
         5b:bc:b9:5c:ef:ac:2f:a6:d2:53:a1:68:eb:46:05:06:de:0c:
         a5:6c:04:89:77:83:38:a3:0f:67:79:59:9b:6e:2e:41:cb:98:
         9f:2b:c7:cd:75:40:65:17:e9:8f:a3:0e:d6:d6:d4:cd:54:23:
         5a:47:b9:bc:39:8b:1a:6a:fd:19:38:a5:bb:de:ca:63:c7:50:
         12:16:e9:aa:67:1d:0c:61:18:c3:dd:55:d3:f3:39:80:76:2e:
         6a:01:cf:68:20:05:91:90:54:b8:55:22:f9:1f:71:02:a1:7e:
         94:c7:b6:a7:05:49:21:a0:18:19:34:40:08:b5:ec:59:e3:01:
         69:e9:bc:25:da:f2:32:61:06:b5:d3:23:56:03:53:9f:96:42:
         f3:a0:cd:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 05:19:00 2025 by rpki-client