This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36374C9/5024DE42542E11E6B8BE071EF8AEA228/QVvN73HfdO_cZVY4QJM9lPIraRM.mft
File:                     QVvN73HfdO_cZVY4QJM9lPIraRM.mft (raw, json)
Hash identifier:          cMUZx81uzU9EXmuWrlUbVxZzhNv5rOm5zLuzHg8n1/0=
Subject key identifier:   10:65:4D:1E:61:5D:B8:1D:B8:30:62:36:4E:97:33:0A:E7:9A:7C:18
Authority key identifier: 41:5B:CD:EF:71:DF:74:EF:DC:65:56:38:40:93:3D:94:F2:2B:69:13
Certificate issuer:       /CN=F36374C9AR/serialNumber=415BCDEF71DF74EFDC65563840933D94F22B6913
Certificate serial:       0DA2
Authority info access:    rsync://rpki.afrinic.net/repository/arin/QVvN73HfdO_cZVY4QJM9lPIraRM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36374C9/5024DE42542E11E6B8BE071EF8AEA228/QVvN73HfdO_cZVY4QJM9lPIraRM.mft
Manifest number:          0DA1
Signing time:             Thu 04 Dec 2025 01:02:42 +0000
Manifest this update:     Thu 04 Dec 2025 01:02:41 +0000
Manifest next update:     Sat 06 Dec 2025 01:02:41 +0000
Files and hashes:         1: QVvN73HfdO_cZVY4QJM9lPIraRM.crl (hash: gNieSal7mAFK1xys75wFpN4C1jLhZ6tjjOXDDtuzJX0=)
                          2: A3321ED8542E11E6BE4E521EF8AEA228.roa (hash: sJ9cmmKEMJXtaW4GTF37G3rJicRaTpT/POSsPQBapsQ=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36374C9/5024DE42542E11E6B8BE071EF8AEA228/QVvN73HfdO_cZVY4QJM9lPIraRM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36374C9/5024DE42542E11E6B8BE071EF8AEA228/QVvN73HfdO_cZVY4QJM9lPIraRM.mft
                          rsync://rpki.afrinic.net/repository/arin/QVvN73HfdO_cZVY4QJM9lPIraRM.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 06 Dec 2025 01:02:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3490 (0xda2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36374C9AR, serialNumber=415BCDEF71DF74EFDC65563840933D94F22B6913
        Validity
            Not Before: Dec  4 01:02:41 2025 GMT
            Not After : Dec  6 01:02:41 2025 GMT
        Subject: CN=6930ddb2-de6f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:dd:67:59:fb:07:d4:17:81:59:9e:53:20:f5:
                    f5:1c:7e:f9:bd:c9:1c:b9:55:73:aa:37:40:90:d4:
                    a6:f1:0e:2a:84:05:38:92:e4:96:3c:1c:21:85:f8:
                    0b:2c:f3:6d:80:65:50:4e:2f:84:7c:a0:e0:19:d2:
                    15:d8:7e:f8:99:27:6b:34:57:b2:6a:32:87:7b:e1:
                    26:d1:47:25:08:9a:fb:c1:eb:ef:1b:f8:61:f0:2f:
                    b7:c2:60:d9:05:58:cd:9b:da:52:cd:6f:fc:8d:c4:
                    71:aa:7a:72:94:61:a5:af:d3:1f:19:6f:8d:8b:5d:
                    1a:32:21:de:a8:fa:6b:4b:87:88:02:44:28:51:2a:
                    3e:69:0b:4d:5e:9c:b0:bc:4d:2c:9c:b5:9a:f4:bb:
                    e0:6a:04:ed:93:d2:28:e8:a1:08:bf:b6:a1:88:3d:
                    34:1e:01:49:4f:a2:29:53:ef:70:63:bb:63:6d:cb:
                    35:03:e4:36:df:b2:4d:c8:51:47:31:e6:58:9b:5e:
                    e7:55:f0:d4:86:be:b3:ff:f1:6a:4a:92:66:fe:7a:
                    39:51:35:aa:d8:e5:9e:92:9b:e4:6f:5e:52:38:51:
                    62:6f:25:ac:d0:08:e6:d4:32:8c:bd:35:5e:23:1e:
                    5e:09:ed:7f:6a:29:b1:3a:58:7f:86:91:7a:41:51:
                    1d:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:65:4D:1E:61:5D:B8:1D:B8:30:62:36:4E:97:33:0A:E7:9A:7C:18
            X509v3 Authority Key Identifier:
                keyid:41:5B:CD:EF:71:DF:74:EF:DC:65:56:38:40:93:3D:94:F2:2B:69:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36374C9/5024DE42542E11E6B8BE071EF8AEA228/QVvN73HfdO_cZVY4QJM9lPIraRM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/QVvN73HfdO_cZVY4QJM9lPIraRM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36374C9/5024DE42542E11E6B8BE071EF8AEA228/QVvN73HfdO_cZVY4QJM9lPIraRM.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         e2:d2:09:8c:3f:05:3d:26:78:fa:3f:0e:b5:97:f4:9c:24:2d:
         27:82:ab:a2:2a:5b:14:72:ed:b7:20:cd:e5:32:5e:09:a0:9b:
         65:4a:6f:1b:ca:b2:83:f9:9c:7c:90:a6:5d:41:38:90:a8:a4:
         7a:38:a9:c3:93:07:cc:81:c6:5d:ab:fe:3a:62:d2:06:8b:37:
         31:50:cc:00:ef:00:52:1a:70:90:e0:cb:16:a7:3b:23:6d:c5:
         f2:96:c3:fb:d0:f9:3d:00:bb:60:eb:23:d2:de:96:44:51:94:
         73:63:f2:f4:f4:75:12:95:fa:bc:c1:1e:1b:98:cb:fb:c1:44:
         81:2f:5e:34:0c:a8:88:d1:48:f8:20:fd:04:be:75:3a:4c:6f:
         97:71:78:f8:ef:31:7c:fd:86:92:0a:99:e1:8c:6f:a7:e8:06:
         4b:c3:81:f7:23:75:1f:cb:1f:9e:82:e7:42:d5:2a:54:d7:ea:
         ba:0b:20:de:8a:34:e2:a3:3d:e3:5f:23:04:ac:42:b7:ba:e4:
         3c:00:9e:b6:a7:4e:1c:01:f2:66:cd:d7:64:63:23:ae:6c:4a:
         91:ad:82:0c:94:ba:1d:bd:12:95:87:3f:8f:cc:02:61:f6:32:
         b9:a2:50:38:ab:10:a0:59:48:92:f5:eb:8a:26:b2:0a:d6:d0:
         8d:d3:cd:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 4 23:38:59 2025 by rpki-client