This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3671DBD/3EE102DE124411ED9F6268B4F1222468/yD3GjOK-QyU6qlUariL5Wh8drSs.mft
File:                     yD3GjOK-QyU6qlUariL5Wh8drSs.mft (raw, json)
Hash identifier:          g+gpv3F8krXJ11N2CKc3iWP/IkGrXOqma/TeiFjxQFI=
Subject key identifier:   3D:6B:14:17:6B:75:46:18:97:6D:3C:34:23:AD:AE:21:20:6E:A9:6B
Authority key identifier: C8:3D:C6:8C:E2:BE:43:25:3A:AA:55:1A:AE:22:F9:5A:1F:1D:AD:2B
Certificate issuer:       /CN=F3671DBDAR/serialNumber=C83DC68CE2BE43253AAA551AAE22F95A1F1DAD2B
Certificate serial:       04EF
Authority info access:    rsync://rpki.afrinic.net/repository/arin/yD3GjOK-QyU6qlUariL5Wh8drSs.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3671DBD/3EE102DE124411ED9F6268B4F1222468/yD3GjOK-QyU6qlUariL5Wh8drSs.mft
Manifest number:          04ED
Signing time:             Thu 04 Dec 2025 02:54:51 +0000
Manifest this update:     Thu 04 Dec 2025 02:54:50 +0000
Manifest next update:     Sat 06 Dec 2025 02:54:50 +0000
Files and hashes:         1: yD3GjOK-QyU6qlUariL5Wh8drSs.crl (hash: d+uRr3uVsuEICxFADWC1iH6j/GmNLYX3X+F0kc8UGDQ=)
                          2: B1BFBFEA278711ED8808E3CDF1222468.roa (hash: Assvrj8OD6s30X7gj/5howMI7VisH2Gq7WxHn9j6+kQ=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3671DBD/3EE102DE124411ED9F6268B4F1222468/yD3GjOK-QyU6qlUariL5Wh8drSs.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3671DBD/3EE102DE124411ED9F6268B4F1222468/yD3GjOK-QyU6qlUariL5Wh8drSs.mft
                          rsync://rpki.afrinic.net/repository/arin/yD3GjOK-QyU6qlUariL5Wh8drSs.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 06 Dec 2025 02:54:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1263 (0x4ef)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3671DBDAR, serialNumber=C83DC68CE2BE43253AAA551AAE22F95A1F1DAD2B
        Validity
            Not Before: Dec  4 02:54:50 2025 GMT
            Not After : Dec  6 02:54:50 2025 GMT
        Subject: CN=6930f7fb-bb20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:b9:dc:37:68:65:b4:09:13:dd:45:f9:e1:cc:
                    a9:2d:a5:ff:6c:18:fd:f1:c5:16:70:00:77:17:36:
                    b4:ce:24:91:6f:56:8b:95:2f:5b:3d:39:fa:9e:33:
                    f9:99:e4:18:7d:21:7b:2e:32:55:bd:59:26:51:ab:
                    cc:47:76:2f:a8:98:cb:dd:db:2c:c7:b3:ab:48:21:
                    a5:3e:76:08:7d:ec:50:56:bb:3a:8a:35:a7:ff:00:
                    b5:d3:5f:7b:4e:b4:b4:1c:89:a5:8f:97:87:a0:0a:
                    cf:b7:e6:e1:af:6b:a7:70:3e:0c:f1:b1:ca:e7:e4:
                    92:0e:e6:c3:15:ce:4e:e6:9a:8d:93:f5:8c:d3:8b:
                    10:77:44:a9:12:db:76:b7:d5:6e:f9:92:9a:a7:ac:
                    f7:eb:35:59:b5:ce:7c:67:d7:d2:c5:cf:d2:33:33:
                    50:43:c1:2b:1c:ab:f7:99:e4:42:ae:c1:ab:5f:53:
                    51:96:8c:78:fe:47:b0:68:39:3d:e4:6d:f1:06:51:
                    f4:0c:18:aa:d7:59:e2:25:38:ad:3e:70:7f:92:ab:
                    1f:6c:62:f7:f1:57:79:0a:35:5a:aa:50:d9:ff:f3:
                    82:e4:29:ab:f8:47:dd:0a:12:5f:48:f7:a8:45:5e:
                    7b:9e:dd:b2:ef:ac:d6:4a:c9:ba:da:17:88:b4:49:
                    be:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:6B:14:17:6B:75:46:18:97:6D:3C:34:23:AD:AE:21:20:6E:A9:6B
            X509v3 Authority Key Identifier:
                keyid:C8:3D:C6:8C:E2:BE:43:25:3A:AA:55:1A:AE:22:F9:5A:1F:1D:AD:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3671DBD/3EE102DE124411ED9F6268B4F1222468/yD3GjOK-QyU6qlUariL5Wh8drSs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/yD3GjOK-QyU6qlUariL5Wh8drSs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3671DBD/3EE102DE124411ED9F6268B4F1222468/yD3GjOK-QyU6qlUariL5Wh8drSs.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:0f:17:89:90:90:69:92:a1:c2:5d:89:54:54:81:cd:c4:76:
         e0:5d:bf:7b:73:0b:c5:f1:ad:32:f7:76:01:50:a1:77:5a:8a:
         db:d9:3a:ab:fb:cf:dd:97:5b:c1:bf:98:f5:6e:41:e2:c1:31:
         58:6f:ee:79:c0:66:54:cf:39:43:33:ff:2f:45:a7:26:e9:49:
         b9:ca:7a:03:ef:0b:67:36:95:8e:a7:5b:a9:c5:46:94:e1:ef:
         30:2b:54:1a:ac:c7:93:39:02:e8:cc:61:7d:9f:19:15:86:11:
         78:a8:4a:a8:a4:90:47:86:8f:42:7c:74:e2:75:e5:46:be:53:
         c2:77:00:88:63:f2:8b:ff:e5:34:d6:7d:d9:fb:86:5b:d5:df:
         4e:50:ec:4c:fa:4b:06:10:a1:d1:ce:b5:bf:30:80:84:59:fc:
         d3:d3:c8:f7:a5:78:d1:80:e6:59:22:1c:89:ea:81:7d:39:57:
         cd:3b:14:4c:2f:4b:d9:3b:65:c6:dd:4e:7a:b2:63:be:22:ae:
         56:aa:b7:09:5d:bb:dd:b4:b9:ec:a5:ed:d9:a1:45:79:30:e2:
         6d:78:25:24:2a:94:af:a2:99:eb:58:41:0a:84:11:28:3c:d3:
         30:74:29:a6:58:05:e2:96:09:fc:48:b8:70:2e:82:24:16:cd:
         3c:2c:1b:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 4 23:39:00 2025 by rpki-client