This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/CfsxNuzV49fPALMsEh8S6K_QpgE.mft
File:                     CfsxNuzV49fPALMsEh8S6K_QpgE.mft (raw, json)
Hash identifier:          JwYGIrX9KpJt7DmGxwWCGINfLpm/wkJhZ6MIEhe5DlQ=
Subject key identifier:   8B:89:F6:19:60:7B:4A:A4:B4:CB:80:B4:A1:DE:3B:8E:10:8D:DF:0F
Authority key identifier: 09:FB:31:36:EC:D5:E3:D7:CF:00:B3:2C:12:1F:12:E8:AF:D0:A6:01
Certificate issuer:       /CN=F3659F9CAR/serialNumber=09FB3136ECD5E3D7CF00B32C121F12E8AFD0A601
Certificate serial:       0524
Authority info access:    rsync://rpki.afrinic.net/repository/arin/CfsxNuzV49fPALMsEh8S6K_QpgE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/CfsxNuzV49fPALMsEh8S6K_QpgE.mft
Manifest number:          04D5
Signing time:             Thu 04 Dec 2025 03:08:47 +0000
Manifest this update:     Thu 04 Dec 2025 03:08:46 +0000
Manifest next update:     Sat 06 Dec 2025 03:08:46 +0000
Files and hashes:         1: CfsxNuzV49fPALMsEh8S6K_QpgE.crl (hash: 3Y8U8tlEZUQJj/0liWLlA/faxiFZN5h0hg0vXKijFNQ=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/CfsxNuzV49fPALMsEh8S6K_QpgE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/CfsxNuzV49fPALMsEh8S6K_QpgE.mft
                          rsync://rpki.afrinic.net/repository/arin/CfsxNuzV49fPALMsEh8S6K_QpgE.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 06 Dec 2025 03:08:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1316 (0x524)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3659F9CAR, serialNumber=09FB3136ECD5E3D7CF00B32C121F12E8AFD0A601
        Validity
            Not Before: Dec  4 03:08:46 2025 GMT
            Not After : Dec  6 03:08:46 2025 GMT
        Subject: CN=6930fb3f-b36a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:34:85:c9:dc:97:0b:1a:c7:50:f6:d1:c9:c1:
                    ef:55:56:32:a5:c1:09:76:51:7b:f2:5d:bf:72:fc:
                    69:53:94:aa:dd:a7:b0:98:96:21:ee:f9:40:51:40:
                    a6:20:7c:9d:31:04:d0:9d:63:58:2e:9d:a3:56:8a:
                    8d:8a:f3:ed:1a:c4:a4:fe:6d:c5:0c:29:ef:a0:dd:
                    d7:2c:18:e9:87:49:e0:be:c2:ac:99:bb:6d:68:5b:
                    e2:51:18:0b:87:0e:65:d8:24:33:40:35:8c:62:27:
                    ac:6a:ba:a2:e9:b1:e5:b2:29:31:06:f6:3f:b2:2b:
                    aa:05:a6:63:eb:6c:ee:cb:c8:2a:1a:00:24:e6:80:
                    7c:ed:48:0c:b1:3b:d3:7b:56:18:c9:e5:94:ab:bb:
                    8c:ef:f3:f2:df:ff:e6:d6:ec:84:e7:14:38:cd:1a:
                    84:77:db:e5:2b:20:ed:30:17:3f:6c:3e:3b:70:a5:
                    f5:7b:97:9c:35:e3:fa:4a:69:96:92:57:5f:55:17:
                    59:f7:67:bc:43:f4:67:60:96:f1:42:ad:3e:6e:a5:
                    0e:c1:ca:a9:d5:f3:2c:a5:11:21:fb:ac:a8:47:0b:
                    8d:12:5f:c9:79:6a:09:06:37:a0:4e:87:c9:eb:25:
                    20:4b:ee:32:36:47:a2:d3:e2:2c:63:b6:e4:6a:96:
                    52:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:89:F6:19:60:7B:4A:A4:B4:CB:80:B4:A1:DE:3B:8E:10:8D:DF:0F
            X509v3 Authority Key Identifier:
                keyid:09:FB:31:36:EC:D5:E3:D7:CF:00:B3:2C:12:1F:12:E8:AF:D0:A6:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/CfsxNuzV49fPALMsEh8S6K_QpgE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/CfsxNuzV49fPALMsEh8S6K_QpgE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/CfsxNuzV49fPALMsEh8S6K_QpgE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:a5:74:8c:f6:38:f1:8b:98:df:fe:bf:60:ad:64:0a:46:37:
         0e:51:11:b5:e3:1f:90:34:f9:e7:29:c5:26:37:1c:18:ab:1c:
         9a:ee:b1:42:d1:8d:9b:14:fc:2e:1f:da:7f:2b:f1:5c:d7:e3:
         f4:ae:37:d5:b4:44:b3:3a:58:71:63:5b:cf:34:e3:45:0b:c2:
         91:b0:aa:27:a0:bf:b0:eb:c9:41:41:08:48:7b:1c:b5:fc:a6:
         03:43:14:c3:75:ff:93:a0:be:3f:11:08:9e:18:01:ce:fc:86:
         6e:20:1a:99:8d:17:d2:d3:cb:b8:e2:48:ff:3e:be:b7:a1:f5:
         7f:9c:db:a0:8f:ad:88:6c:af:83:f5:ec:70:30:b4:25:15:78:
         3b:5f:4b:b2:1f:80:ed:5e:68:72:3c:69:69:ac:e0:94:59:1e:
         83:06:9f:87:56:28:9c:51:34:52:f6:08:cb:d9:45:16:82:0a:
         65:89:81:a6:3c:f3:b3:93:f3:eb:c4:2c:f4:bd:ca:34:22:2e:
         89:2d:3d:28:4a:a6:b5:56:b9:4d:07:c8:1f:d1:c8:b2:42:9e:
         f5:6d:0f:cf:fd:2e:12:a7:eb:b9:f8:da:6a:e7:3c:87:1e:d3:
         07:1d:ba:e8:74:de:72:e4:7a:3f:79:be:72:dd:28:c5:4c:c0:
         1e:96:73:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 4 23:37:59 2025 by rpki-client