This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3696E5F/52FE897C189711ED8059B9D2F1222468/iyncQT61Ar1t3qMGRh4aehCExfY.mft
File:                     iyncQT61Ar1t3qMGRh4aehCExfY.mft (raw, json)
Hash identifier:          lxpKPTp1qyWoA8wk/f13jl8MQnyOAKdTFN5GEq4tOMw=
Subject key identifier:   5C:25:A9:F5:31:48:49:98:26:7F:45:64:73:FF:38:C5:1E:35:A6:59
Authority key identifier: 8B:29:DC:41:3E:B5:02:BD:6D:DE:A3:06:46:1E:1A:7A:10:84:C5:F6
Certificate issuer:       /CN=F3696E5FAR/serialNumber=8B29DC413EB502BD6DDEA306461E1A7A1084C5F6
Certificate serial:       04DE
Authority info access:    rsync://rpki.afrinic.net/repository/arin/iyncQT61Ar1t3qMGRh4aehCExfY.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3696E5F/52FE897C189711ED8059B9D2F1222468/iyncQT61Ar1t3qMGRh4aehCExfY.mft
Manifest number:          04DC
Signing time:             Tue 25 Nov 2025 02:59:27 +0000
Manifest this update:     Tue 25 Nov 2025 02:59:26 +0000
Manifest next update:     Thu 27 Nov 2025 02:59:26 +0000
Files and hashes:         1: iyncQT61Ar1t3qMGRh4aehCExfY.crl (hash: eNb+nkre58Nv8Lv5tHQVLPScJQgQI4RGiQqsjDW7y3U=)
                          2: 526F2A62732611EEA96ED8714AD9E6FC.roa (hash: Ukkb5AVQsO1Gjuu3k0PEd18RL/gRcbSRynh/B4Aa3tQ=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3696E5F/52FE897C189711ED8059B9D2F1222468/iyncQT61Ar1t3qMGRh4aehCExfY.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3696E5F/52FE897C189711ED8059B9D2F1222468/iyncQT61Ar1t3qMGRh4aehCExfY.mft
                          rsync://rpki.afrinic.net/repository/arin/iyncQT61Ar1t3qMGRh4aehCExfY.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 27 Nov 2025 00:26:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1246 (0x4de)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3696E5FAR, serialNumber=8B29DC413EB502BD6DDEA306461E1A7A1084C5F6
        Validity
            Not Before: Nov 25 02:59:26 2025 GMT
            Not After : Nov 27 02:59:26 2025 GMT
        Subject: CN=69251b8f-811b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:17:b9:10:ea:6d:2c:be:ad:e6:e8:23:05:55:
                    22:4f:7c:ae:25:6e:fc:d4:5b:95:b6:39:10:ac:28:
                    a7:35:e8:cd:07:9a:ec:88:4e:79:39:13:87:d2:89:
                    8d:34:8f:19:bb:d6:3d:07:bc:6f:a2:96:13:ac:a9:
                    fa:08:32:03:fc:57:5b:65:45:1a:ec:de:58:8a:8e:
                    2e:6d:f4:85:46:c7:7d:62:3f:de:ff:56:7d:a1:9e:
                    00:97:75:ea:c5:52:b7:ab:ba:d2:df:7c:4a:4e:58:
                    ca:fd:23:c6:69:d3:3e:b3:54:b0:09:7b:e3:fb:0c:
                    d9:d8:18:08:0a:5a:82:9e:16:eb:d2:93:47:30:a2:
                    ff:d3:34:24:e2:55:66:57:b8:84:03:12:4a:e8:d3:
                    45:b3:7a:d6:2f:b5:1c:34:87:80:d6:f9:d5:f6:91:
                    05:0e:ce:e5:a4:9c:f3:8f:4c:b6:4f:b9:02:48:e1:
                    1f:57:cb:a0:a3:f6:4c:bd:05:72:b8:b9:54:9d:49:
                    e9:6e:a7:e7:85:03:a5:42:39:cd:05:5f:a0:de:68:
                    5b:84:0f:1b:75:ac:f3:b0:6e:d4:c6:86:5f:a3:4b:
                    79:b4:da:f1:a9:91:cb:cf:fa:b4:15:98:b3:9f:41:
                    be:4d:a2:94:49:09:28:7b:2f:57:c6:4c:a8:84:8d:
                    34:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:25:A9:F5:31:48:49:98:26:7F:45:64:73:FF:38:C5:1E:35:A6:59
            X509v3 Authority Key Identifier:
                keyid:8B:29:DC:41:3E:B5:02:BD:6D:DE:A3:06:46:1E:1A:7A:10:84:C5:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3696E5F/52FE897C189711ED8059B9D2F1222468/iyncQT61Ar1t3qMGRh4aehCExfY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/iyncQT61Ar1t3qMGRh4aehCExfY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3696E5F/52FE897C189711ED8059B9D2F1222468/iyncQT61Ar1t3qMGRh4aehCExfY.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:59:11:39:a4:49:e8:47:e3:09:17:35:b3:27:7b:de:85:5d:
         2f:67:05:bc:48:3a:e3:2f:50:27:8b:fa:36:0c:14:b2:1d:a1:
         32:b1:fd:a2:d5:0b:de:7b:0a:c0:f3:4b:c6:cb:b8:30:81:10:
         31:bd:dd:64:7e:d0:c4:a8:c8:72:eb:0c:04:eb:58:29:03:b2:
         f7:63:30:5d:a0:7c:bf:df:1e:94:dd:e3:2e:18:b5:29:7e:d9:
         37:78:18:6b:a7:1b:3c:5d:17:24:3b:db:35:7e:34:6f:9f:64:
         a3:ed:c3:65:75:d4:8f:90:7f:9f:fc:bb:82:a5:8f:5a:49:72:
         2d:da:e0:cf:50:ff:a2:06:2f:d7:76:89:1f:df:46:27:13:1f:
         d1:7b:50:1f:14:f2:9f:59:b6:a0:36:57:7c:3e:88:d4:c9:4d:
         3b:5b:94:7e:6d:fb:6c:bc:1d:33:09:d4:ba:ad:83:c1:56:e9:
         7d:23:04:e8:ad:70:bf:8c:82:6e:da:92:3d:8d:25:c1:46:78:
         3a:1b:d4:0d:f4:72:68:48:77:e1:95:62:48:85:ee:ec:e6:a6:
         7a:37:41:7f:37:ff:85:f3:d6:15:a2:6f:52:31:59:38:63:b1:
         c9:2f:e1:58:7d:02:e1:72:70:22:04:98:72:2a:0d:15:dd:35:
         fb:01:f5:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 25 19:32:45 2025 by rpki-client