This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36B4943/193F6428343911ED8497D187F1222468/35Ti668FVkXR68M9dxpKkrH1obo.mft
File:                     35Ti668FVkXR68M9dxpKkrH1obo.mft (raw, json)
Hash identifier:          lnkjYtnDPG/wXQGHKyJt/p6v2aLB/MqEdWOLaTJGQmk=
Subject key identifier:   33:A0:E3:78:11:B3:A6:2E:0C:DA:15:99:52:DA:2C:7C:5E:61:97:3C
Authority key identifier: DF:94:E2:EB:AF:05:56:45:D1:EB:C3:3D:77:1A:4A:92:B1:F5:A1:BA
Certificate issuer:       /CN=F36B4943AR/serialNumber=DF94E2EBAF055645D1EBC33D771A4A92B1F5A1BA
Certificate serial:       04C2
Authority info access:    rsync://rpki.afrinic.net/repository/arin/35Ti668FVkXR68M9dxpKkrH1obo.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36B4943/193F6428343911ED8497D187F1222468/35Ti668FVkXR68M9dxpKkrH1obo.mft
Manifest number:          04C1
Signing time:             Thu 04 Dec 2025 03:01:12 +0000
Manifest this update:     Thu 04 Dec 2025 03:01:11 +0000
Manifest next update:     Sat 06 Dec 2025 03:01:11 +0000
Files and hashes:         1: 35Ti668FVkXR68M9dxpKkrH1obo.crl (hash: qPfU1pK5cJiBhkDUbB7E41DNj7klq5odw/SpmyVlVoQ=)
                          2: 22DB7C2C343B11ED93BC198DF1222468.roa (hash: MYN14FUjceVL/wAPb2hSaQa3Lgxp0KPz1gwNzEYrDaM=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36B4943/193F6428343911ED8497D187F1222468/35Ti668FVkXR68M9dxpKkrH1obo.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36B4943/193F6428343911ED8497D187F1222468/35Ti668FVkXR68M9dxpKkrH1obo.mft
                          rsync://rpki.afrinic.net/repository/arin/35Ti668FVkXR68M9dxpKkrH1obo.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 06 Dec 2025 03:01:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1218 (0x4c2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36B4943AR, serialNumber=DF94E2EBAF055645D1EBC33D771A4A92B1F5A1BA
        Validity
            Not Before: Dec  4 03:01:11 2025 GMT
            Not After : Dec  6 03:01:11 2025 GMT
        Subject: CN=6930f978-d229
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:92:25:bf:d2:d7:bf:dc:2d:f3:1c:d2:98:c9:
                    57:3b:e5:d8:e0:53:81:c8:af:5e:94:ab:e8:14:84:
                    10:67:95:aa:58:1d:50:79:f8:25:f1:d7:8e:c1:9f:
                    c2:5c:bc:a7:7e:9c:20:ac:9d:8e:80:7c:f1:35:09:
                    ae:ce:eb:b7:d0:69:3b:3a:3c:cc:0d:bc:12:76:e7:
                    69:54:6d:61:e9:df:a8:af:b4:1c:0d:e5:01:26:25:
                    92:07:17:a9:3c:64:ab:b6:5c:b9:28:82:f2:44:d8:
                    a7:10:88:b1:93:26:d7:bd:a4:e8:b0:5f:87:19:93:
                    62:80:04:3b:66:f6:80:c4:75:8d:65:c7:d3:77:85:
                    d2:04:54:7f:f9:99:70:a2:1c:9d:d4:9b:49:ec:1f:
                    16:e4:95:62:f0:bf:04:37:a6:61:2d:59:fc:70:08:
                    29:76:dd:7e:f7:4e:e2:03:1a:9c:c8:8e:eb:c6:6f:
                    ad:2a:79:d2:eb:20:1a:2d:49:5a:24:69:04:ec:cb:
                    5e:08:77:59:72:d9:de:2b:6f:cb:a4:a8:57:c7:2f:
                    4c:a9:74:06:8b:f9:1a:15:dd:69:81:2b:7c:00:ca:
                    df:a2:12:b1:c0:f0:a3:54:bf:d4:f5:ca:cd:23:a2:
                    89:78:ba:4c:b3:09:c9:58:ac:34:aa:a7:22:58:5f:
                    5d:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:A0:E3:78:11:B3:A6:2E:0C:DA:15:99:52:DA:2C:7C:5E:61:97:3C
            X509v3 Authority Key Identifier:
                keyid:DF:94:E2:EB:AF:05:56:45:D1:EB:C3:3D:77:1A:4A:92:B1:F5:A1:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36B4943/193F6428343911ED8497D187F1222468/35Ti668FVkXR68M9dxpKkrH1obo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/35Ti668FVkXR68M9dxpKkrH1obo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B4943/193F6428343911ED8497D187F1222468/35Ti668FVkXR68M9dxpKkrH1obo.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:69:64:ad:fc:81:6d:f7:25:a9:91:54:d1:7c:25:49:64:e6:
         a6:66:eb:8c:fa:53:ba:16:48:3f:c9:34:3c:d6:6c:b0:c2:b6:
         dc:8c:6a:53:f7:96:4e:2f:d4:f2:80:4c:88:9f:e7:c8:2c:1b:
         bf:06:23:14:79:35:57:d8:b0:40:31:dd:53:44:3f:60:2c:5a:
         d2:04:53:03:23:60:ef:af:d4:f8:51:a6:3e:40:7c:61:9f:91:
         72:25:dd:88:a9:40:15:a2:af:21:f5:a6:a1:09:78:1e:6d:38:
         91:16:d6:ea:79:81:62:2f:60:07:0d:06:b4:61:9c:90:a7:b6:
         25:db:79:91:28:d5:60:99:ca:d0:2c:ac:7b:6f:ff:53:fd:8f:
         c4:ec:39:de:9f:71:00:11:a7:c3:ab:2c:49:42:0a:a9:d7:db:
         c7:6a:e8:eb:42:d4:1c:a3:04:40:c2:d0:fe:9d:b6:56:1b:d7:
         07:4c:79:ad:5e:43:5d:7c:9d:4b:d0:27:79:ec:9e:2f:b0:4b:
         1e:75:54:3a:4a:71:44:53:d4:2d:9f:43:62:1c:1b:23:3e:17:
         17:b2:19:02:a0:ad:39:16:64:39:e3:6c:2d:a6:3f:7d:ca:98:
         14:56:90:de:d8:8a:09:f8:f1:94:51:c0:09:b6:ba:2c:8b:6c:
         27:31:5a:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 4 23:38:59 2025 by rpki-client