This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3662123/2BCF62489D2811EDB8F9258BF1222468/MzQdyhYYc65_OkSzbhzbObXAoJo.mft
File:                     MzQdyhYYc65_OkSzbhzbObXAoJo.mft (raw, json)
Hash identifier:          2IKIrcrpn8aCkZAh6wBqCN9yX6XSbQKSyqi4YopwDY4=
Subject key identifier:   14:2A:0A:2A:B5:7C:79:36:5C:7A:9B:2D:46:9A:2D:09:1B:5C:33:31
Authority key identifier: 33:34:1D:CA:16:18:73:AE:7F:3A:44:B3:6E:1C:DB:39:B5:C0:A0:9A
Certificate issuer:       /CN=F3662123AR/serialNumber=33341DCA161873AE7F3A44B36E1CDB39B5C0A09A
Certificate serial:       044F
Authority info access:    rsync://rpki.afrinic.net/repository/arin/MzQdyhYYc65_OkSzbhzbObXAoJo.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3662123/2BCF62489D2811EDB8F9258BF1222468/MzQdyhYYc65_OkSzbhzbObXAoJo.mft
Manifest number:          044B
Signing time:             Mon 22 Dec 2025 03:15:39 +0000
Manifest this update:     Mon 22 Dec 2025 03:15:39 +0000
Manifest next update:     Wed 24 Dec 2025 03:15:39 +0000
Files and hashes:         1: MzQdyhYYc65_OkSzbhzbObXAoJo.crl (hash: sMdxbWU7J77SewtJjj26VjMER/jZpb9mIfZb+amNI4w=)
                          2: C8482A8890A511F09A249AC2DAE4EC9C.roa (hash: YU+s4UvMmcAg4MELqrvjtd9+g7rExQPJik+26Y7x314=)
                          3: 7AA044D690A611F0986ABFC6DAE4EC9C.roa (hash: /le7lzuRW1i4hL+MhKBxtXg6Ksje+Y1b6XKnVcdIPSQ=)
                          4: 407424D090A611F0A752BAC4DAE4EC9C.roa (hash: TH3/4mixLvf8p6rQJ/buDVDbyHxIQcv4IonGYryiTFc=)
                          5: A58DD09690A611F0BAABE5C8DAE4EC9C.roa (hash: WRkcJOJs2/U9E6K9MGQG8K0I2p0FY0LDJQ9GxZH1JLE=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3662123/2BCF62489D2811EDB8F9258BF1222468/MzQdyhYYc65_OkSzbhzbObXAoJo.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3662123/2BCF62489D2811EDB8F9258BF1222468/MzQdyhYYc65_OkSzbhzbObXAoJo.mft
                          rsync://rpki.afrinic.net/repository/arin/MzQdyhYYc65_OkSzbhzbObXAoJo.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 24 Dec 2025 00:26:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1103 (0x44f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3662123AR, serialNumber=33341DCA161873AE7F3A44B36E1CDB39B5C0A09A
        Validity
            Not Before: Dec 22 03:15:39 2025 GMT
            Not After : Dec 24 03:15:39 2025 GMT
        Subject: CN=6948b7db-0c6b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:40:e7:a7:8a:93:e8:77:20:8c:e9:2c:5d:bb:
                    ae:21:3e:74:36:b2:0e:35:ea:29:da:de:97:85:94:
                    16:d0:a0:db:71:19:ba:4c:8a:a3:f8:56:68:10:ac:
                    b0:98:af:8a:65:76:67:73:bc:e0:ac:fc:16:f6:ac:
                    a3:5c:cf:66:90:98:dd:ad:2c:2e:d4:bd:d8:b7:e7:
                    d0:9c:ab:37:84:08:a6:c0:59:ec:02:0c:2b:6d:89:
                    bc:d4:f7:6f:59:93:3d:5c:72:68:1d:37:ec:f3:57:
                    93:81:bf:d7:ee:a9:bb:e5:36:b6:9c:4b:42:78:fa:
                    c8:dc:6a:fb:ef:ac:d6:15:cf:bd:c6:fe:9f:75:62:
                    45:54:4f:75:c3:b8:60:a1:de:4b:2e:5f:f1:a1:b0:
                    a2:a6:ff:11:f3:eb:11:ae:26:91:92:f5:51:30:65:
                    41:a0:11:07:36:69:b6:61:27:1e:ee:e0:96:df:fb:
                    20:ce:50:c0:9e:f0:31:eb:f8:1c:e2:bb:98:a8:db:
                    30:21:ba:fb:ee:bf:69:07:68:12:87:c6:b8:64:21:
                    0f:e4:71:27:d5:73:0d:e5:2f:ba:a9:a5:5a:d4:84:
                    be:32:d7:d8:db:2b:22:55:06:c1:cf:f7:c5:e2:1e:
                    8b:ed:25:4e:1c:f3:36:4d:66:51:15:af:60:c2:90:
                    29:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:2A:0A:2A:B5:7C:79:36:5C:7A:9B:2D:46:9A:2D:09:1B:5C:33:31
            X509v3 Authority Key Identifier:
                keyid:33:34:1D:CA:16:18:73:AE:7F:3A:44:B3:6E:1C:DB:39:B5:C0:A0:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3662123/2BCF62489D2811EDB8F9258BF1222468/MzQdyhYYc65_OkSzbhzbObXAoJo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/MzQdyhYYc65_OkSzbhzbObXAoJo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3662123/2BCF62489D2811EDB8F9258BF1222468/MzQdyhYYc65_OkSzbhzbObXAoJo.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:8f:90:03:2d:05:f4:bc:31:8b:ce:70:3d:27:31:be:b2:4f:
         53:50:c3:dd:98:99:fd:e3:99:a0:c4:24:9a:50:b9:82:d8:1c:
         b0:a8:a1:01:fb:0d:be:cf:86:f8:f5:f0:3f:3c:7a:da:df:9f:
         58:42:7f:e0:2a:ac:d9:de:56:96:48:eb:ba:f5:2a:eb:32:52:
         d7:56:0f:a9:9c:12:ed:35:7a:d7:bf:92:79:92:27:49:09:a6:
         dd:e8:5e:df:3d:96:f9:ca:42:18:dd:2a:3a:2b:2b:a7:e8:b7:
         19:34:88:05:c1:c9:7a:53:cc:b8:25:46:e0:00:5f:52:72:a7:
         15:86:55:3c:91:99:17:66:73:3c:5e:55:4a:9d:89:74:ac:d3:
         77:fb:33:ae:2c:f3:d1:56:09:64:1d:77:d0:69:da:fd:88:9d:
         15:c2:f1:e3:78:54:39:a2:3d:6a:c5:bc:6c:ca:a7:eb:37:71:
         38:b6:42:98:bf:2e:82:03:53:75:cd:6a:b9:52:4d:4b:6b:b9:
         be:9e:91:c2:b9:d7:75:14:c7:f9:d8:0f:80:4c:90:b7:67:a7:
         5c:b3:e2:7c:be:95:1a:54:4a:b4:57:55:31:7c:0e:72:fb:98:
         41:87:9a:cf:47:9d:b8:cc:02:04:7a:19:c8:b2:63:07:2a:fe:
         08:40:a3:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 22:24:48 2025 by rpki-client