This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36882A1/B667B828C7C411EB9736C768F8AEA228/l2Gi0oHblH7-h-W6kVAnjbuYlu8.mft
File:                     l2Gi0oHblH7-h-W6kVAnjbuYlu8.mft (raw, json)
Hash identifier:          S9iNV+E1dTE3MHTn/VsvlVr2/I0CeXVbBKCK6uHu87k=
Subject key identifier:   45:52:97:6F:26:35:52:F6:27:F8:D1:92:4F:04:E8:CF:0C:D5:D5:FA
Authority key identifier: 97:61:A2:D2:81:DB:94:7E:FE:87:E5:BA:91:50:27:8D:BB:98:96:EF
Certificate issuer:       /CN=F36882A1AR/serialNumber=9761A2D281DB947EFE87E5BA9150278DBB9896EF
Certificate serial:       069D
Authority info access:    rsync://rpki.afrinic.net/repository/arin/l2Gi0oHblH7-h-W6kVAnjbuYlu8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36882A1/B667B828C7C411EB9736C768F8AEA228/l2Gi0oHblH7-h-W6kVAnjbuYlu8.mft
Manifest number:          069B
Signing time:             Thu 04 Dec 2025 02:14:04 +0000
Manifest this update:     Thu 04 Dec 2025 02:14:03 +0000
Manifest next update:     Sat 06 Dec 2025 02:14:03 +0000
Files and hashes:         1: l2Gi0oHblH7-h-W6kVAnjbuYlu8.crl (hash: jEwGamP/UyjC6aJUpHKCNKbgJtzzFdHuBG/ndhIvwmo=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36882A1/B667B828C7C411EB9736C768F8AEA228/l2Gi0oHblH7-h-W6kVAnjbuYlu8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36882A1/B667B828C7C411EB9736C768F8AEA228/l2Gi0oHblH7-h-W6kVAnjbuYlu8.mft
                          rsync://rpki.afrinic.net/repository/arin/l2Gi0oHblH7-h-W6kVAnjbuYlu8.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 06 Dec 2025 02:14:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1693 (0x69d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36882A1AR, serialNumber=9761A2D281DB947EFE87E5BA9150278DBB9896EF
        Validity
            Not Before: Dec  4 02:14:03 2025 GMT
            Not After : Dec  6 02:14:03 2025 GMT
        Subject: CN=6930ee6c-645b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:31:31:6b:66:70:cb:2b:78:90:14:b2:36:d9:
                    98:d4:b9:44:e4:38:7d:85:6f:fd:c4:48:c8:d9:76:
                    3b:41:80:01:46:f5:fe:cd:2b:00:52:eb:46:ef:4c:
                    d3:8c:0a:6b:40:b7:18:1a:75:ef:88:dd:97:65:51:
                    f8:ae:7e:04:97:da:57:0b:e8:0c:f5:00:0c:27:23:
                    5d:da:fe:fa:d3:ce:5e:e6:8a:29:c1:11:d6:5f:22:
                    03:5c:97:c9:85:35:00:5a:fd:28:47:e3:88:3e:b6:
                    62:be:ea:09:4d:ca:ba:86:51:69:42:c6:4c:49:10:
                    11:49:d6:a0:e8:c7:2e:95:cc:30:2d:d9:20:75:84:
                    ec:e3:ef:cb:99:e6:2c:47:0d:3a:32:68:f3:e0:c9:
                    ec:41:04:1b:67:3a:06:70:d9:51:19:b3:61:f6:e8:
                    b7:82:fd:37:b4:d8:45:fd:5c:a2:9f:e8:00:bb:9c:
                    04:90:97:a8:e0:40:c9:e9:f4:77:c0:ca:70:97:07:
                    e0:86:71:b1:78:ba:0f:23:c9:3c:c3:69:ca:dc:c0:
                    30:bd:0b:7d:7b:73:fb:49:d5:67:a4:9f:15:6b:f2:
                    f4:49:ce:9d:98:ee:8a:0d:44:db:62:b2:e8:16:3a:
                    d0:1e:b2:72:1d:56:55:7f:96:35:70:87:03:d6:91:
                    b3:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:52:97:6F:26:35:52:F6:27:F8:D1:92:4F:04:E8:CF:0C:D5:D5:FA
            X509v3 Authority Key Identifier:
                keyid:97:61:A2:D2:81:DB:94:7E:FE:87:E5:BA:91:50:27:8D:BB:98:96:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36882A1/B667B828C7C411EB9736C768F8AEA228/l2Gi0oHblH7-h-W6kVAnjbuYlu8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/l2Gi0oHblH7-h-W6kVAnjbuYlu8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36882A1/B667B828C7C411EB9736C768F8AEA228/l2Gi0oHblH7-h-W6kVAnjbuYlu8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:bd:ce:84:20:e7:76:33:c0:15:0d:c6:53:c4:ca:80:cb:b1:
         08:26:23:45:ab:4c:68:59:88:57:9d:a7:32:e2:b3:34:1d:9b:
         60:f8:62:c9:5f:e0:6b:df:e8:bb:00:64:ea:92:ec:3f:4c:5b:
         1a:83:d4:64:fd:bf:d4:0a:02:b6:01:38:2a:7d:87:bf:2a:de:
         de:39:25:ae:7a:9b:54:57:e4:ec:a4:dd:04:49:b8:33:d2:47:
         5b:bb:a3:fb:ec:10:95:e4:9c:70:c2:a1:85:02:fc:07:87:ba:
         68:38:da:7e:2b:4f:a6:a2:7f:3a:40:a0:ad:b3:37:b6:57:56:
         7a:bc:05:ad:e0:82:e2:45:81:f9:49:c1:df:76:3f:45:23:bf:
         58:35:77:c3:7c:ad:59:d9:33:ec:c4:a7:f8:d7:5d:5d:d7:14:
         dd:6f:dc:78:7a:54:29:2f:14:37:8f:8a:be:3e:8b:52:9d:51:
         1a:88:ca:86:ff:57:c4:ac:1d:22:c8:0c:eb:9c:20:09:9e:9a:
         2b:55:07:ea:e6:d8:a1:5e:90:c0:5d:f5:84:e8:48:9c:0f:3c:
         f9:a5:d6:4a:3d:28:c2:7f:0e:5d:04:83:0f:69:c3:cc:1a:b7:
         46:2a:2c:0c:85:7d:9b:41:03:5f:30:e5:fe:9f:ec:c2:37:d7:
         69:d5:14:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 4 23:38:52 2025 by rpki-client