This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3670C40/E07F1110864411E989CEFB56F8AEA228/tHFvO8e9HbRHzHMP7nortjKrGQM.mft
File:                     tHFvO8e9HbRHzHMP7nortjKrGQM.mft (raw, json)
Hash identifier:          ROX49IpBKv1J2PyZxXkT+OOVFNQMmN/0q8pQ4lF8+58=
Subject key identifier:   A9:49:35:81:5D:38:62:DC:EA:B1:B2:E5:2A:55:9F:A4:8F:3E:2F:F5
Authority key identifier: B4:71:6F:3B:C7:BD:1D:B4:47:CC:73:0F:EE:7A:2B:B6:32:AB:19:03
Certificate issuer:       /CN=F3670C40AR/serialNumber=B4716F3BC7BD1DB447CC730FEE7A2BB632AB1903
Certificate serial:       0987
Authority info access:    rsync://rpki.afrinic.net/repository/arin/tHFvO8e9HbRHzHMP7nortjKrGQM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3670C40/E07F1110864411E989CEFB56F8AEA228/tHFvO8e9HbRHzHMP7nortjKrGQM.mft
Manifest number:          0986
Signing time:             Thu 04 Dec 2025 01:25:09 +0000
Manifest this update:     Thu 04 Dec 2025 01:25:08 +0000
Manifest next update:     Sat 06 Dec 2025 01:25:08 +0000
Files and hashes:         1: tHFvO8e9HbRHzHMP7nortjKrGQM.crl (hash: lyCtBEP4Xf0m/w3Jf7v43roREQJRh3Fnp/hN1JDwZCM=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3670C40/E07F1110864411E989CEFB56F8AEA228/tHFvO8e9HbRHzHMP7nortjKrGQM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3670C40/E07F1110864411E989CEFB56F8AEA228/tHFvO8e9HbRHzHMP7nortjKrGQM.mft
                          rsync://rpki.afrinic.net/repository/arin/tHFvO8e9HbRHzHMP7nortjKrGQM.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 06 Dec 2025 01:25:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2439 (0x987)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3670C40AR, serialNumber=B4716F3BC7BD1DB447CC730FEE7A2BB632AB1903
        Validity
            Not Before: Dec  4 01:25:08 2025 GMT
            Not After : Dec  6 01:25:08 2025 GMT
        Subject: CN=6930e2f5-0785
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:57:cf:00:b9:1a:97:c5:78:12:03:70:9d:6f:
                    07:38:4d:ff:d4:46:a7:35:f5:91:74:f0:f9:05:ba:
                    77:63:f7:ea:76:b1:69:2c:29:77:98:d9:16:3d:45:
                    4f:27:77:49:4f:27:8e:d0:f9:36:00:e0:86:d3:89:
                    c5:cc:97:b4:6e:33:9a:f1:c0:e7:57:85:56:82:3e:
                    5e:b4:08:b5:77:c3:61:d6:ee:f2:ed:4e:6e:57:3f:
                    61:c1:4e:4f:e1:b8:a6:fc:c0:93:55:2c:30:83:85:
                    23:92:49:ce:30:73:84:13:0d:46:5c:6f:25:ce:3c:
                    4a:30:2c:cb:f4:49:59:fb:32:bb:22:a1:50:bc:7c:
                    87:93:43:fa:4a:ec:42:eb:1a:f9:08:bf:6d:60:4b:
                    11:7b:81:ea:cc:41:2a:35:a7:b0:48:98:f2:bc:df:
                    30:8d:a3:70:be:8f:ba:3b:07:ef:32:62:61:90:19:
                    53:b7:28:b4:cd:a0:6d:e9:9f:58:73:c0:21:ca:2d:
                    4f:47:2a:22:bd:c3:6a:fe:be:c9:ce:98:f3:5b:b3:
                    f6:68:af:da:3c:c9:53:62:08:0f:83:62:4d:40:9f:
                    3c:17:8e:39:fa:d5:db:78:68:85:49:d1:98:84:a4:
                    18:7e:34:b6:42:e5:0a:d6:b3:a4:35:c9:9f:b8:91:
                    cc:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:49:35:81:5D:38:62:DC:EA:B1:B2:E5:2A:55:9F:A4:8F:3E:2F:F5
            X509v3 Authority Key Identifier:
                keyid:B4:71:6F:3B:C7:BD:1D:B4:47:CC:73:0F:EE:7A:2B:B6:32:AB:19:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3670C40/E07F1110864411E989CEFB56F8AEA228/tHFvO8e9HbRHzHMP7nortjKrGQM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/tHFvO8e9HbRHzHMP7nortjKrGQM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3670C40/E07F1110864411E989CEFB56F8AEA228/tHFvO8e9HbRHzHMP7nortjKrGQM.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:b0:3f:df:82:a1:07:78:14:5c:9c:30:64:2d:87:a9:54:4e:
         f3:0f:54:37:b9:0c:69:3e:14:2e:90:f6:62:fc:17:a9:f6:af:
         c1:28:f8:12:ae:72:6e:92:11:96:53:44:ca:1c:97:8a:51:37:
         0c:1d:14:39:43:eb:53:e7:45:e1:25:af:2c:4f:35:1b:04:12:
         2c:91:2b:5f:f6:ef:f7:83:a9:26:90:25:dc:c1:44:66:b5:79:
         67:50:31:ae:8d:49:4a:6e:0d:84:a9:04:ac:93:c0:7e:7a:7c:
         d2:c0:ca:5f:77:b0:04:23:03:22:6c:2b:85:38:aa:d2:33:a5:
         3c:80:d9:2c:c1:64:1b:97:b1:ae:c7:03:e5:a5:a1:b4:11:d5:
         40:16:58:41:b3:e6:cf:b0:a0:f7:62:c2:4f:fe:20:8a:a5:f4:
         bb:fe:60:d8:14:50:ca:8d:91:f2:85:d7:48:7b:a2:ab:4c:2f:
         0d:45:53:05:6a:9f:bd:ed:e1:97:a5:22:7d:1f:77:6a:94:56:
         ed:ad:f4:48:b8:93:7a:f3:12:2d:2e:d4:41:80:50:ac:c2:aa:
         fc:e0:7b:2d:a2:6e:a1:33:38:a8:2a:46:ca:90:10:4e:07:29:
         81:c6:2c:22:2e:31:aa:dc:8e:f7:a3:81:21:f8:7c:fc:eb:08:
         0f:7f:19:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 4 23:36:55 2025 by rpki-client