This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367C1FC/8F441A7AB56411EA9616635EF8AEA228/Td968BKKMqOhd1sfz6DvOMh_03w.mft
File:                     Td968BKKMqOhd1sfz6DvOMh_03w.mft (raw, json)
Hash identifier:          CmxGxpJSojtULcan65Kzal0q1Pc8hC2H7CzbCS3Y1XE=
Subject key identifier:   23:EE:24:6F:01:AD:83:63:B0:5F:2A:C0:83:51:FA:39:43:B0:B3:90
Authority key identifier: 4D:DF:7A:F0:12:8A:32:A3:A1:77:5B:1F:CF:A0:EF:38:C8:7F:D3:7C
Certificate issuer:       /CN=F367C1FCAR/serialNumber=4DDF7AF0128A32A3A1775B1FCFA0EF38C87FD37C
Certificate serial:       0816
Authority info access:    rsync://rpki.afrinic.net/repository/arin/Td968BKKMqOhd1sfz6DvOMh_03w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F367C1FC/8F441A7AB56411EA9616635EF8AEA228/Td968BKKMqOhd1sfz6DvOMh_03w.mft
Manifest number:          0811
Signing time:             Mon 22 Dec 2025 01:52:28 +0000
Manifest this update:     Mon 22 Dec 2025 01:52:27 +0000
Manifest next update:     Wed 24 Dec 2025 01:52:27 +0000
Files and hashes:         1: Td968BKKMqOhd1sfz6DvOMh_03w.crl (hash: eSzWHr9iIGVJ2zmNm27H9u/dijFLvSirNdfR4sLBMOc=)
                          2: E364072A015811EF9D73985D017001B1.roa (hash: mrOGweCwxtK60LtiqTq1XQPp9m+p+JqVU6IY5+6yR+M=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F367C1FC/8F441A7AB56411EA9616635EF8AEA228/Td968BKKMqOhd1sfz6DvOMh_03w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F367C1FC/8F441A7AB56411EA9616635EF8AEA228/Td968BKKMqOhd1sfz6DvOMh_03w.mft
                          rsync://rpki.afrinic.net/repository/arin/Td968BKKMqOhd1sfz6DvOMh_03w.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 24 Dec 2025 00:26:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2070 (0x816)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F367C1FCAR, serialNumber=4DDF7AF0128A32A3A1775B1FCFA0EF38C87FD37C
        Validity
            Not Before: Dec 22 01:52:27 2025 GMT
            Not After : Dec 24 01:52:27 2025 GMT
        Subject: CN=6948a45c-e3ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:ae:a8:fd:ba:50:af:ab:12:c4:19:fe:78:dd:
                    81:a1:bb:b3:e6:08:f3:f7:4a:77:63:a1:10:c7:19:
                    18:1b:7c:7c:38:85:86:cf:61:c5:f9:69:29:98:64:
                    83:1b:44:31:5d:27:45:b8:13:89:e0:05:cc:78:e4:
                    81:ab:82:74:91:48:cb:12:42:47:50:04:73:a7:df:
                    e3:bd:14:d8:34:db:43:cb:d8:7d:c5:ee:f7:9f:29:
                    99:45:f1:19:98:0d:2c:46:d9:c2:83:13:76:44:20:
                    64:c3:d4:00:cc:3c:49:b8:c9:6c:0a:33:86:b7:3d:
                    80:bb:6f:5a:72:00:8a:47:f7:51:a5:0e:90:87:d8:
                    be:20:a1:2a:fb:61:71:0f:3e:ef:ff:07:d4:44:fa:
                    c5:ed:23:a1:19:8c:c9:f6:8a:76:53:ea:59:2a:ea:
                    84:e3:2e:5e:1c:61:a1:91:d1:e9:d3:16:38:44:d4:
                    42:62:92:cf:a1:bc:12:19:dd:0c:9e:cb:75:9a:7a:
                    06:69:74:b3:56:5f:aa:ef:6a:bd:b4:08:66:18:9d:
                    0c:34:49:be:00:57:44:6f:8c:38:de:b9:09:75:70:
                    b7:e8:c3:e3:18:e5:70:a8:a5:61:f9:db:91:7f:d6:
                    80:b0:3c:65:24:b1:8b:4f:c6:26:e7:a3:83:0f:6c:
                    ee:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:EE:24:6F:01:AD:83:63:B0:5F:2A:C0:83:51:FA:39:43:B0:B3:90
            X509v3 Authority Key Identifier:
                keyid:4D:DF:7A:F0:12:8A:32:A3:A1:77:5B:1F:CF:A0:EF:38:C8:7F:D3:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F367C1FC/8F441A7AB56411EA9616635EF8AEA228/Td968BKKMqOhd1sfz6DvOMh_03w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/Td968BKKMqOhd1sfz6DvOMh_03w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367C1FC/8F441A7AB56411EA9616635EF8AEA228/Td968BKKMqOhd1sfz6DvOMh_03w.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c9:e3:a4:8b:3b:c9:b0:ba:59:3f:17:b0:20:f2:42:73:37:65:
         a4:d8:55:24:92:11:88:ee:81:ce:20:d9:da:6c:2e:f5:f5:fe:
         48:54:1b:ff:a7:f4:2a:41:ec:3b:12:4e:f9:e7:ee:03:b8:5e:
         5d:45:ae:c5:d2:58:88:15:94:59:89:86:5c:66:27:d8:a7:c6:
         2b:a5:51:1d:fe:d4:3a:7b:d1:34:18:d2:79:ec:76:e3:ae:e3:
         39:7d:b6:7b:02:5e:2d:bf:d8:af:0b:31:b5:4a:80:03:fd:73:
         7c:4d:1b:d8:5e:29:3c:84:06:8a:e1:37:53:b2:a8:73:01:72:
         5e:b8:65:e8:ae:0b:9c:f2:a0:a5:e1:f8:3e:f0:8c:70:0d:c6:
         65:c9:f6:9f:10:da:c2:12:2e:cd:42:c3:c5:9a:38:36:42:c6:
         60:3c:bd:7c:34:10:67:83:83:6b:b8:51:1b:f5:4f:51:83:41:
         00:ad:ba:aa:6e:cb:71:00:1c:7a:0c:fe:b5:d6:61:ab:e7:72:
         ae:d1:28:27:40:b4:e6:66:23:a3:b8:55:1e:3d:89:8a:97:77:
         f5:76:d7:6e:db:06:d4:c1:c7:1a:0b:b6:ef:fa:28:c5:84:5f:
         e9:f8:c0:ee:59:d3:c7:7b:d7:9b:49:0f:35:a2:de:ff:a7:f9:
         93:73:c2:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 06:16:15 2025 by rpki-client