This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3642C0F/608E7226C07911EC96A968D55A40D577/ogtTm8eSX3rsKacM9qGEeJGpsxI.mft
File:                     ogtTm8eSX3rsKacM9qGEeJGpsxI.mft (raw, json)
Hash identifier:          fcQreHwV3Nd1zaagBcVe7z1KtHcwlexJte7qXdtcxQE=
Subject key identifier:   01:6D:BB:A6:DD:CB:78:23:38:7D:01:CE:58:5E:F5:2A:DB:37:2A:3A
Authority key identifier: A2:0B:53:9B:C7:92:5F:7A:EC:29:A7:0C:F6:A1:84:78:91:A9:B3:12
Certificate issuer:       /CN=F3642C0FAR/serialNumber=A20B539BC7925F7AEC29A70CF6A1847891A9B312
Certificate serial:       0554
Authority info access:    rsync://rpki.afrinic.net/repository/arin/ogtTm8eSX3rsKacM9qGEeJGpsxI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3642C0F/608E7226C07911EC96A968D55A40D577/ogtTm8eSX3rsKacM9qGEeJGpsxI.mft
Manifest number:          0553
Signing time:             Thu 04 Dec 2025 02:43:14 +0000
Manifest this update:     Thu 04 Dec 2025 02:43:13 +0000
Manifest next update:     Sat 06 Dec 2025 02:43:13 +0000
Files and hashes:         1: ogtTm8eSX3rsKacM9qGEeJGpsxI.crl (hash: UT0n/Q/7iRvN0udEQV6AnbcBBRaHyODtHZwEfFwEmis=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3642C0F/608E7226C07911EC96A968D55A40D577/ogtTm8eSX3rsKacM9qGEeJGpsxI.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3642C0F/608E7226C07911EC96A968D55A40D577/ogtTm8eSX3rsKacM9qGEeJGpsxI.mft
                          rsync://rpki.afrinic.net/repository/arin/ogtTm8eSX3rsKacM9qGEeJGpsxI.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 06 Dec 2025 02:43:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1364 (0x554)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3642C0FAR, serialNumber=A20B539BC7925F7AEC29A70CF6A1847891A9B312
        Validity
            Not Before: Dec  4 02:43:13 2025 GMT
            Not After : Dec  6 02:43:13 2025 GMT
        Subject: CN=6930f542-b352
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:6b:a9:1e:c5:06:c6:84:b3:92:54:af:09:45:
                    25:34:be:3f:0a:ae:39:72:45:f7:3b:f5:ce:90:a2:
                    72:42:6c:4c:a6:6f:25:b8:9c:f4:1a:ab:6d:15:31:
                    2a:4e:6c:d9:35:d9:84:03:b7:ca:06:32:b2:8d:f5:
                    a3:e5:d6:49:6a:a0:e7:b9:b0:5f:9b:18:f7:96:89:
                    e5:f5:45:19:04:8e:0e:14:d5:23:d2:64:98:23:b0:
                    76:06:34:ff:c6:c1:1c:34:18:5a:5e:87:50:53:55:
                    71:e2:6a:0c:3f:ed:fc:58:34:b4:a7:71:75:1b:8f:
                    88:90:da:74:fb:3b:40:9d:c1:ca:fa:92:6f:5a:a6:
                    48:aa:1f:dd:d3:34:d1:e2:74:10:56:b1:29:4f:d1:
                    ee:fe:12:76:f6:73:24:29:15:77:12:f2:96:37:37:
                    5e:ec:6b:91:41:3d:c2:1b:f6:f2:d8:6e:c2:40:b9:
                    d3:9f:d1:19:c7:18:7d:b3:e9:6f:89:54:d9:00:ee:
                    ca:6b:c6:3b:15:13:2f:4b:6e:92:34:8f:0f:7e:fc:
                    bf:2d:64:69:03:ac:1e:e3:24:1d:b0:44:b9:2c:53:
                    2f:73:45:e3:7b:41:e1:ec:ed:2b:50:50:f2:3d:55:
                    53:ba:e8:47:4e:62:b1:67:77:64:5c:36:8b:4f:16:
                    25:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:6D:BB:A6:DD:CB:78:23:38:7D:01:CE:58:5E:F5:2A:DB:37:2A:3A
            X509v3 Authority Key Identifier:
                keyid:A2:0B:53:9B:C7:92:5F:7A:EC:29:A7:0C:F6:A1:84:78:91:A9:B3:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3642C0F/608E7226C07911EC96A968D55A40D577/ogtTm8eSX3rsKacM9qGEeJGpsxI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/ogtTm8eSX3rsKacM9qGEeJGpsxI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3642C0F/608E7226C07911EC96A968D55A40D577/ogtTm8eSX3rsKacM9qGEeJGpsxI.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:fa:ec:40:2c:0b:6a:4c:f6:3a:cc:61:df:37:68:cb:61:22:
         37:43:2d:d3:63:06:0e:1a:a7:6b:5f:a5:d3:5f:97:e0:25:d3:
         99:31:6f:50:0c:3e:44:82:86:41:01:0c:87:eb:9e:f7:79:45:
         44:35:6a:26:89:b3:02:2e:8f:7d:18:89:6b:18:6d:49:18:37:
         16:35:c5:80:0a:74:de:81:8b:4d:07:d5:35:c0:57:ba:bc:1a:
         b5:5b:ba:bc:69:64:f0:40:57:f1:33:f9:8f:93:4f:dc:14:4c:
         61:10:34:35:55:01:2b:ea:f2:82:97:d9:36:0b:ab:49:89:67:
         99:74:66:90:f5:d4:89:18:b6:79:8c:0c:f9:68:89:00:34:01:
         8d:3e:be:32:87:e3:21:a4:88:a2:ea:26:53:a2:af:7d:e3:08:
         52:67:25:e1:b2:5b:35:be:76:ae:c1:6d:7b:8a:52:eb:77:c0:
         58:3b:df:de:d6:25:bf:46:29:cc:01:9c:5d:e5:c5:73:b4:bd:
         f5:52:ad:96:3f:db:a0:23:4a:00:c0:c9:e7:d3:82:2c:0f:cc:
         0a:f2:56:da:a2:76:1a:7c:15:ba:7f:d1:8e:e8:a4:6f:21:e7:
         cf:c9:77:53:21:af:cb:53:a0:8d:aa:7f:c8:f1:2f:45:7e:30:
         d4:eb:1e:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 4 23:39:59 2025 by rpki-client