This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3645590/761A322227F811EF968FC2157DDC24C2/s4rg2ENn30CCL75YUHD2mDzRgFk.mft
File:                     s4rg2ENn30CCL75YUHD2mDzRgFk.mft (raw, json)
Hash identifier:          rt7zFIhh3TsG784Cy7C4khbkb+EZipQbb/JUZROk37Y=
Subject key identifier:   B2:A1:19:C6:09:69:CA:04:06:52:B0:5D:C3:8C:D2:2F:7E:98:F0:0F
Authority key identifier: B3:8A:E0:D8:43:67:DF:40:82:2F:BE:58:50:70:F6:98:3C:D1:80:59
Certificate issuer:       /CN=F3645590AR/serialNumber=B38AE0D84367DF40822FBE585070F6983CD18059
Certificate serial:       022C
Authority info access:    rsync://rpki.afrinic.net/repository/arin/s4rg2ENn30CCL75YUHD2mDzRgFk.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3645590/761A322227F811EF968FC2157DDC24C2/s4rg2ENn30CCL75YUHD2mDzRgFk.mft
Manifest number:          022B
Signing time:             Thu 04 Dec 2025 04:18:22 +0000
Manifest this update:     Thu 04 Dec 2025 04:18:21 +0000
Manifest next update:     Sat 06 Dec 2025 04:18:21 +0000
Files and hashes:         1: s4rg2ENn30CCL75YUHD2mDzRgFk.crl (hash: BW5QjovQLOWh4IP9yFTkShP4W49rvfZ812RPiZGqt2U=)
                          2: 0630E34C27F911EF99C5B7167DDC24C2.roa (hash: u1Kgum9/rIa3gu9tEpPcpHBCjsDs7Hpw84FU4EIS7uY=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3645590/761A322227F811EF968FC2157DDC24C2/s4rg2ENn30CCL75YUHD2mDzRgFk.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3645590/761A322227F811EF968FC2157DDC24C2/s4rg2ENn30CCL75YUHD2mDzRgFk.mft
                          rsync://rpki.afrinic.net/repository/arin/s4rg2ENn30CCL75YUHD2mDzRgFk.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 06 Dec 2025 04:18:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 556 (0x22c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3645590AR, serialNumber=B38AE0D84367DF40822FBE585070F6983CD18059
        Validity
            Not Before: Dec  4 04:18:21 2025 GMT
            Not After : Dec  6 04:18:21 2025 GMT
        Subject: CN=69310b8e-be63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:39:a9:cc:76:c1:85:25:34:99:0a:8c:f8:7f:
                    e1:3e:57:00:e1:8e:30:10:93:43:0c:a4:76:64:fc:
                    db:49:c4:78:be:08:59:1c:8a:91:89:f7:bd:96:e9:
                    5e:44:7f:e2:68:f0:16:cd:be:d5:62:11:4b:c5:09:
                    8e:9e:d2:c5:f0:07:fe:e9:09:c4:37:c7:73:4f:83:
                    a1:65:bc:57:d7:b1:84:31:2c:e4:5a:af:8c:d5:d3:
                    2f:3d:6a:e6:99:e0:d8:df:1a:7d:cd:50:d9:f1:a6:
                    be:15:f4:d0:fa:3a:78:66:c0:c7:2b:04:2e:2c:a1:
                    6f:f6:e5:25:6b:a1:c9:77:c7:b4:17:80:ba:00:23:
                    7a:88:18:bf:38:45:81:8c:05:fc:84:37:ba:df:e5:
                    26:28:bf:00:f1:0e:e4:38:19:59:9b:6f:fc:c7:e0:
                    f0:3c:26:8f:98:d7:ef:00:82:10:b7:7d:e1:b9:86:
                    42:f8:58:5e:cb:0f:5d:4a:2d:ee:6a:63:24:9b:d0:
                    dd:35:52:37:d3:b0:82:96:7f:c5:97:c3:b0:6d:99:
                    cb:5e:1f:d8:e8:2d:9c:a2:0f:6f:a3:2b:88:4e:99:
                    55:48:99:41:b2:5c:e4:d3:9d:0f:3f:19:aa:75:17:
                    aa:16:da:6c:6d:7b:6c:2f:6d:e8:cb:25:bf:e6:af:
                    8d:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:A1:19:C6:09:69:CA:04:06:52:B0:5D:C3:8C:D2:2F:7E:98:F0:0F
            X509v3 Authority Key Identifier:
                keyid:B3:8A:E0:D8:43:67:DF:40:82:2F:BE:58:50:70:F6:98:3C:D1:80:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3645590/761A322227F811EF968FC2157DDC24C2/s4rg2ENn30CCL75YUHD2mDzRgFk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/s4rg2ENn30CCL75YUHD2mDzRgFk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3645590/761A322227F811EF968FC2157DDC24C2/s4rg2ENn30CCL75YUHD2mDzRgFk.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:e1:5e:fd:b4:9c:ed:3d:fc:3a:69:c3:04:69:e0:f1:03:eb:
         88:61:fa:ad:2a:92:22:12:b5:62:6f:d0:fb:fa:5b:96:4e:8d:
         b9:d7:3c:b3:e8:b8:29:46:3f:25:ec:ad:81:37:dd:50:df:f2:
         20:ba:73:29:b4:11:51:46:25:a2:49:cb:ee:36:55:70:04:78:
         50:7d:f5:f2:3f:03:fb:db:3e:20:92:bd:ab:0b:b8:8b:86:d5:
         dd:62:c7:9e:9f:8d:e0:84:6e:f8:8d:44:cb:bd:fc:a2:35:8d:
         b1:a1:a5:2a:95:9f:bb:d4:69:d4:a9:b3:4c:af:6f:e2:a6:74:
         c4:8f:5a:c8:92:aa:94:f9:f0:a7:85:43:41:00:d4:af:35:61:
         aa:a5:27:99:5c:f2:fb:26:9d:2a:36:89:39:46:d5:41:c5:b9:
         f6:41:24:dd:45:b7:9a:63:de:b1:ea:47:33:0a:aa:dd:70:fd:
         94:d7:ae:7d:21:38:bd:2f:21:5a:79:c2:fb:5f:17:56:a2:15:
         be:ed:ce:da:e0:f0:b2:aa:36:42:32:d8:32:40:73:61:83:72:
         fc:7d:20:95:ae:03:85:09:4c:80:79:e3:1a:40:88:cf:c6:34:
         89:1f:8e:87:c7:b9:c1:aa:a1:ec:4f:a6:73:9b:f6:70:6d:5c:
         20:35:6c:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 4 23:39:00 2025 by rpki-client