This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368BC41/D964FC3A2EE811EF8A4045BB762E951A/VacCz2rVFBmN-x1soZywXkltX2U.mft
File:                     VacCz2rVFBmN-x1soZywXkltX2U.mft (raw, json)
Hash identifier:          QsNLBsDCf8sl64yJWabSmQA1zfKLUIHHy064iI90kCs=
Subject key identifier:   66:57:94:AA:B3:EF:B4:34:29:B1:BF:48:89:18:42:D2:1D:84:5F:1F
Authority key identifier: 55:A7:02:CF:6A:D5:14:19:8D:FB:1D:6C:A1:9C:B0:5E:49:6D:5F:65
Certificate issuer:       /CN=F368BC41AR/serialNumber=55A702CF6AD514198DFB1D6CA19CB05E496D5F65
Certificate serial:       0221
Authority info access:    rsync://rpki.afrinic.net/repository/arin/VacCz2rVFBmN-x1soZywXkltX2U.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368BC41/D964FC3A2EE811EF8A4045BB762E951A/VacCz2rVFBmN-x1soZywXkltX2U.mft
Manifest number:          0221
Signing time:             Thu 04 Dec 2025 04:19:35 +0000
Manifest this update:     Thu 04 Dec 2025 04:19:34 +0000
Manifest next update:     Sat 06 Dec 2025 04:19:34 +0000
Files and hashes:         1: VacCz2rVFBmN-x1soZywXkltX2U.crl (hash: fN9e+HwCh/67+gZBhoF84iraeDJvwoFJNDgCfoGYHKw=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368BC41/D964FC3A2EE811EF8A4045BB762E951A/VacCz2rVFBmN-x1soZywXkltX2U.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368BC41/D964FC3A2EE811EF8A4045BB762E951A/VacCz2rVFBmN-x1soZywXkltX2U.mft
                          rsync://rpki.afrinic.net/repository/arin/VacCz2rVFBmN-x1soZywXkltX2U.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 06 Dec 2025 04:19:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 545 (0x221)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368BC41AR, serialNumber=55A702CF6AD514198DFB1D6CA19CB05E496D5F65
        Validity
            Not Before: Dec  4 04:19:34 2025 GMT
            Not After : Dec  6 04:19:34 2025 GMT
        Subject: CN=69310bd7-a999
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:a0:dc:ea:c0:b7:f7:0e:ae:92:c8:36:c4:c2:
                    ce:b5:75:f2:e6:64:63:c6:de:1e:23:5d:33:d1:2e:
                    2b:88:0e:2c:10:be:a5:86:17:70:2a:bd:e3:ed:73:
                    82:12:cd:e5:91:8e:6a:58:7c:4a:49:17:3f:ee:e0:
                    eb:62:ae:2e:00:df:03:5f:01:ec:41:78:39:55:dc:
                    07:63:f1:21:db:40:df:cf:84:91:b6:e1:15:99:44:
                    3a:3e:71:2b:1f:fc:06:5a:92:c6:ed:7f:c8:c3:19:
                    56:c9:98:d2:14:16:7f:c8:79:b5:dd:7d:73:59:2f:
                    27:48:44:3e:38:38:91:7e:f9:90:3f:a1:2a:86:f1:
                    29:fa:c9:f3:34:bb:b8:d2:e9:81:a0:48:51:ec:b6:
                    b2:23:17:95:88:9a:21:cd:36:c4:06:49:a0:de:54:
                    68:47:6a:f5:7e:4f:32:3f:22:54:92:54:37:f5:9c:
                    3d:c1:15:ef:3e:93:8c:5d:70:13:3f:03:d0:66:7c:
                    56:89:44:3b:3f:78:85:9c:8f:1e:da:b6:f6:fa:1a:
                    b5:e0:a2:d2:46:65:95:18:89:a2:5e:8e:f0:80:a2:
                    e0:87:8c:e7:60:93:1f:4f:3c:1d:06:c7:69:50:e4:
                    1b:37:dc:8f:91:e1:b6:84:6a:69:b7:43:29:99:5b:
                    a1:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:57:94:AA:B3:EF:B4:34:29:B1:BF:48:89:18:42:D2:1D:84:5F:1F
            X509v3 Authority Key Identifier:
                keyid:55:A7:02:CF:6A:D5:14:19:8D:FB:1D:6C:A1:9C:B0:5E:49:6D:5F:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368BC41/D964FC3A2EE811EF8A4045BB762E951A/VacCz2rVFBmN-x1soZywXkltX2U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/VacCz2rVFBmN-x1soZywXkltX2U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368BC41/D964FC3A2EE811EF8A4045BB762E951A/VacCz2rVFBmN-x1soZywXkltX2U.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:e4:ec:f9:e3:d8:98:83:6c:b7:1e:75:f7:66:e1:87:c4:5c:
         3c:1e:98:19:aa:49:1f:1a:0f:84:e0:30:2f:51:83:af:90:80:
         10:a6:04:ce:11:7f:6c:07:d4:d5:0d:d5:7f:85:bd:1a:ca:c6:
         4a:4a:bc:dc:13:b8:22:7d:f5:48:c6:bb:92:6f:86:73:a0:25:
         ac:06:5d:57:b9:ee:bb:1e:35:58:27:bc:d5:22:d3:15:2b:26:
         88:f1:8a:1d:e9:47:24:a0:14:29:12:ff:67:5d:e6:98:4b:c1:
         fd:b5:bf:4f:0d:ff:b0:2e:8a:69:71:7c:05:87:c5:51:17:00:
         d0:4d:00:17:a9:56:36:28:7f:9f:19:ae:6f:83:3d:d4:a9:bc:
         28:8a:02:8d:bf:c4:51:10:cf:6f:a6:51:5f:3b:e4:bc:7b:5b:
         78:78:bb:ca:55:bd:18:4b:15:f2:f1:31:80:6b:e8:45:81:47:
         d1:9d:f1:5a:64:04:fd:a1:d6:02:c9:e7:13:31:d2:a7:19:b9:
         a0:07:73:e2:f6:80:b5:dd:b3:b4:35:58:43:70:91:38:8c:49:
         b0:ca:f5:48:b0:db:f8:e9:6a:a7:3c:15:75:60:42:84:5c:dc:
         ae:ea:37:cc:9b:bf:d6:53:91:18:b6:1a:1e:6c:d9:93:9c:f2:
         7a:29:0e:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 4 23:38:01 2025 by rpki-client