This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3670369/565052907E7811EC9FAD14CB5A40D577/KVkcZVM-_QiXL0qXW-xBxltEXuA.mft
File:                     KVkcZVM-_QiXL0qXW-xBxltEXuA.mft (raw, json)
Hash identifier:          gM3+2iT0SntyBQEao57hVL48O2ipciIs11lX6VjJ1wU=
Subject key identifier:   93:89:AF:D5:73:0D:BD:67:B4:36:A4:91:71:A6:80:CB:BF:91:37:BC
Authority key identifier: 29:59:1C:65:53:3E:FD:08:97:2F:4A:97:5B:EC:41:C6:5B:44:5E:E0
Certificate issuer:       /CN=F3670369AR/serialNumber=29591C65533EFD08972F4A975BEC41C65B445EE0
Certificate serial:       05B3
Authority info access:    rsync://rpki.afrinic.net/repository/arin/KVkcZVM-_QiXL0qXW-xBxltEXuA.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3670369/565052907E7811EC9FAD14CB5A40D577/KVkcZVM-_QiXL0qXW-xBxltEXuA.mft
Manifest number:          05AE
Signing time:             Thu 04 Dec 2025 02:37:38 +0000
Manifest this update:     Thu 04 Dec 2025 02:37:37 +0000
Manifest next update:     Sat 06 Dec 2025 02:37:37 +0000
Files and hashes:         1: KVkcZVM-_QiXL0qXW-xBxltEXuA.crl (hash: 22vd3ETjHLXbXV+dVcodLOiT9XQINHNKWPchbDiaMpY=)
                          2: DE53055A2E1311EFAE851899762E951A.roa (hash: UcFSJfUBz/jAMPlBsM0sx0A7nrbCZ5eci3vzt8nRiuU=)
                          3: 01CC6C947E8D11EC89A79C885A40D577.roa (hash: qd/8XDFff1CiSxAQk1vmUsyny6ywpT4UycAJmKGe26U=)
                          4: D88002927E8C11EC95A915885A40D577.roa (hash: zp+bksguNWi/6Gwbfy/elTDlK43kW6UD+PYcX23ze0Y=)
                          5: EAF40C665BD311F0B32EE4A3DAE4EC9C.roa (hash: fL1+phnAmmLMQW8rzdMcPM0YqGLRk7qlgGhlyEQ369E=)
                          6: 675DA8B27E8211ECAB19A1E75A40D577.roa (hash: TlKHAqm5F0asDSkR7ApdBCSJn77368RAQ3PQ3KzHit4=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3670369/565052907E7811EC9FAD14CB5A40D577/KVkcZVM-_QiXL0qXW-xBxltEXuA.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3670369/565052907E7811EC9FAD14CB5A40D577/KVkcZVM-_QiXL0qXW-xBxltEXuA.mft
                          rsync://rpki.afrinic.net/repository/arin/KVkcZVM-_QiXL0qXW-xBxltEXuA.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 06 Dec 2025 02:37:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1459 (0x5b3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3670369AR, serialNumber=29591C65533EFD08972F4A975BEC41C65B445EE0
        Validity
            Not Before: Dec  4 02:37:37 2025 GMT
            Not After : Dec  6 02:37:37 2025 GMT
        Subject: CN=6930f3f2-0617
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:d8:63:71:87:c5:7e:e6:a1:cf:ed:3f:9d:bf:
                    af:9f:5b:12:8e:29:ef:ee:41:f2:f6:14:7d:26:05:
                    e0:14:1d:d9:7e:4b:d2:f0:de:6d:00:87:56:1b:79:
                    f6:be:06:67:4b:90:48:64:52:f2:6f:d3:b4:ee:f2:
                    7d:ac:0a:ce:74:d2:e5:3b:bc:46:e5:6d:60:28:42:
                    e6:46:76:48:27:26:19:d3:82:e5:09:5c:4a:95:a3:
                    6f:a6:84:2d:c0:95:13:1e:78:85:af:b0:0b:b3:71:
                    ff:10:48:30:3c:ce:71:a2:aa:f9:a7:3d:f2:43:0c:
                    43:d1:b5:8c:1d:6d:73:1d:7c:b3:dd:68:40:49:67:
                    ed:3a:75:4c:9e:1d:75:a5:03:04:ac:32:66:10:5b:
                    ab:5b:be:1e:16:8b:04:dc:26:f4:e7:7d:06:eb:63:
                    e5:c4:8f:43:b6:36:a4:83:49:36:e7:de:4f:b9:fb:
                    51:2f:92:3d:12:dc:30:e7:f6:21:93:4f:cc:39:1c:
                    70:d7:fa:59:a3:b5:5a:cc:5a:37:d7:06:3d:24:e1:
                    b9:2b:c4:93:da:74:d6:ba:17:1c:f6:7b:68:6b:d5:
                    05:1f:7f:e0:31:3b:7b:68:9f:2e:44:e5:8d:92:8d:
                    82:aa:3c:2e:1d:5e:9c:99:b7:36:7c:b4:6f:48:85:
                    72:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:89:AF:D5:73:0D:BD:67:B4:36:A4:91:71:A6:80:CB:BF:91:37:BC
            X509v3 Authority Key Identifier:
                keyid:29:59:1C:65:53:3E:FD:08:97:2F:4A:97:5B:EC:41:C6:5B:44:5E:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3670369/565052907E7811EC9FAD14CB5A40D577/KVkcZVM-_QiXL0qXW-xBxltEXuA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/KVkcZVM-_QiXL0qXW-xBxltEXuA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3670369/565052907E7811EC9FAD14CB5A40D577/KVkcZVM-_QiXL0qXW-xBxltEXuA.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:03:69:5a:c3:be:2d:ac:d0:5f:63:95:f0:a3:21:c4:d1:b3:
         67:ab:5a:29:58:fa:61:91:e0:40:92:b8:76:f2:58:ac:a9:1a:
         cf:7b:88:5b:f4:64:46:1e:2b:8d:5e:27:9b:9d:f5:48:f3:6f:
         34:1b:c7:b8:21:58:43:82:b0:13:3f:52:49:0a:86:97:85:5e:
         e0:ea:da:32:58:2b:e4:2f:33:6e:38:ca:d1:d8:67:26:81:e8:
         e8:d5:8d:fd:4f:ab:11:0d:2b:04:80:83:3b:b8:1f:33:71:f1:
         6d:67:f9:b5:58:0f:fc:11:5f:c4:8d:82:39:19:ea:cd:36:4c:
         41:35:5f:3c:8b:6e:15:23:2d:bf:31:05:b3:5c:16:92:cc:49:
         76:65:df:e3:ae:f3:39:73:a0:c2:2a:76:9d:90:98:97:fa:9d:
         80:27:a3:04:dc:19:ea:38:fd:e4:ab:34:e9:2d:72:f8:42:db:
         c7:79:ca:c3:18:4b:29:65:12:81:b7:21:ee:3a:f6:ce:68:96:
         13:9c:ee:a6:e3:6d:7c:70:27:16:18:f8:d6:2f:e2:dc:c2:f4:
         2f:8d:6b:69:65:34:de:21:83:af:1e:40:1e:b6:44:5d:c8:2a:
         78:b6:96:e0:d1:73:25:71:7c:f4:cd:4a:98:a8:ac:ee:42:d9:
         55:3d:88:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 4 23:36:59 2025 by rpki-client