This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36374C9/5024DE42542E11E6B8BE071EF8AEA228/QVvN73HfdO_cZVY4QJM9lPIraRM.mft
File:                     QVvN73HfdO_cZVY4QJM9lPIraRM.mft (raw, json)
Hash identifier:          0x71ZeKwtMVewmTHsPHwZ8zsvfuKcmI8R+5ZPDuy+84=
Subject key identifier:   9F:62:23:4E:F0:D1:81:84:76:EF:AB:62:94:47:26:96:6E:58:E9:0F
Authority key identifier: 41:5B:CD:EF:71:DF:74:EF:DC:65:56:38:40:93:3D:94:F2:2B:69:13
Certificate issuer:       /CN=F36374C9AR/serialNumber=415BCDEF71DF74EFDC65563840933D94F22B6913
Certificate serial:       0DB5
Authority info access:    rsync://rpki.afrinic.net/repository/arin/QVvN73HfdO_cZVY4QJM9lPIraRM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36374C9/5024DE42542E11E6B8BE071EF8AEA228/QVvN73HfdO_cZVY4QJM9lPIraRM.mft
Manifest number:          0DB4
Signing time:             Tue 23 Dec 2025 01:02:36 +0000
Manifest this update:     Tue 23 Dec 2025 01:02:35 +0000
Manifest next update:     Thu 25 Dec 2025 01:02:35 +0000
Files and hashes:         1: QVvN73HfdO_cZVY4QJM9lPIraRM.crl (hash: o6D7CE4mh8/mr6+OyMKzQPC2Zjpm0/+3f2Iz6WhW8ho=)
                          2: A3321ED8542E11E6BE4E521EF8AEA228.roa (hash: sJ9cmmKEMJXtaW4GTF37G3rJicRaTpT/POSsPQBapsQ=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36374C9/5024DE42542E11E6B8BE071EF8AEA228/QVvN73HfdO_cZVY4QJM9lPIraRM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36374C9/5024DE42542E11E6B8BE071EF8AEA228/QVvN73HfdO_cZVY4QJM9lPIraRM.mft
                          rsync://rpki.afrinic.net/repository/arin/QVvN73HfdO_cZVY4QJM9lPIraRM.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 25 Dec 2025 00:26:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3509 (0xdb5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36374C9AR, serialNumber=415BCDEF71DF74EFDC65563840933D94F22B6913
        Validity
            Not Before: Dec 23 01:02:35 2025 GMT
            Not After : Dec 25 01:02:35 2025 GMT
        Subject: CN=6949ea2c-d057
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:38:22:cb:e2:9b:96:5b:48:a8:99:f9:2f:15:
                    84:09:22:7e:72:34:8e:18:b5:f3:77:07:c4:b7:60:
                    15:97:ba:4b:c9:b3:e4:74:ed:69:b2:5b:15:f7:32:
                    1b:2b:1b:07:8f:9a:6d:ea:50:8d:42:c1:a3:ea:4c:
                    73:e4:c3:64:b4:66:ab:0a:8c:9f:06:61:ef:39:9b:
                    de:42:4f:43:05:ca:c0:06:b6:31:8b:e0:2f:ea:58:
                    9f:a6:56:8f:7d:59:0b:93:29:b2:c5:84:e9:57:6c:
                    f4:95:b4:d8:b3:e8:9c:4c:a3:04:de:3e:7c:e3:5e:
                    fd:06:05:be:9e:ee:cc:8c:8b:ec:50:1b:f1:0f:01:
                    a3:49:de:9d:7f:0b:bc:7e:aa:79:05:b4:a6:69:01:
                    82:4f:56:67:c8:a0:0d:ff:9b:bc:4f:14:26:6e:2c:
                    47:77:8f:1c:67:64:39:a3:79:0c:62:66:50:9e:12:
                    d9:e6:70:42:1e:4a:62:38:7e:04:32:d7:55:6d:a3:
                    94:b5:e8:da:ac:7d:23:49:e3:61:dd:5e:73:b5:80:
                    5f:b1:4d:ae:41:ce:06:ea:c8:71:c0:67:22:a7:b3:
                    aa:48:00:34:bb:2c:46:91:b6:e9:52:f1:a1:fb:f9:
                    15:ff:f6:f0:4b:16:c7:da:74:b7:07:12:7f:a8:62:
                    58:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:62:23:4E:F0:D1:81:84:76:EF:AB:62:94:47:26:96:6E:58:E9:0F
            X509v3 Authority Key Identifier:
                keyid:41:5B:CD:EF:71:DF:74:EF:DC:65:56:38:40:93:3D:94:F2:2B:69:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36374C9/5024DE42542E11E6B8BE071EF8AEA228/QVvN73HfdO_cZVY4QJM9lPIraRM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/QVvN73HfdO_cZVY4QJM9lPIraRM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36374C9/5024DE42542E11E6B8BE071EF8AEA228/QVvN73HfdO_cZVY4QJM9lPIraRM.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:c4:1d:29:59:ca:58:4d:98:04:6d:3a:fd:63:06:29:21:f9:
         b9:42:49:6a:a1:27:92:25:9a:c9:96:c9:89:31:fa:0a:12:11:
         be:5d:ed:fc:5a:49:e0:26:0f:47:6d:f6:d7:c9:44:ae:b5:3c:
         71:d1:99:84:da:d1:c4:db:d4:ef:06:c0:07:e9:b5:c7:14:66:
         ca:1e:4d:96:85:cf:c0:c3:31:d8:8a:82:a2:64:9a:78:13:8f:
         31:99:7f:a8:27:1b:b5:14:ed:2c:e2:6b:7c:48:42:a5:d3:c5:
         92:ab:45:04:68:24:ba:b7:44:55:44:6c:3f:f0:97:95:f2:14:
         90:22:af:1f:ca:22:2c:c9:e8:10:00:6d:4e:74:ee:63:7e:92:
         df:90:b5:c6:d0:91:fc:6e:45:ac:9f:b3:dc:77:41:da:5b:a5:
         cc:27:fb:13:ba:ff:a8:b0:ca:76:44:2d:23:29:05:3a:ed:10:
         5e:f3:77:78:8f:3e:08:75:9f:4a:b0:cb:04:64:02:60:29:06:
         1f:fe:c6:e1:24:d4:cd:ba:35:e1:bf:8f:24:38:dd:90:f9:91:
         da:92:d2:99:b2:97:6a:4a:71:e5:25:3c:dc:66:f7:36:e3:60:
         b2:f6:df:62:1f:fc:30:85:95:aa:2d:e5:46:94:ff:67:d6:d3:
         9b:e1:bd:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 05:03:14 2025 by rpki-client