This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36B49FA/B54484521C1C11E69F7C750CF8AEA228/xPPi6r3p45Aa27wxyfJTXN47HG8.mft
File:                     xPPi6r3p45Aa27wxyfJTXN47HG8.mft (raw, json)
Hash identifier:          19eV/hAqgp5u7QUMjm+vtjNV+F0mSFRCxUNoabZfe9E=
Subject key identifier:   58:6D:21:97:B6:3F:F0:96:6F:49:C5:27:FF:E8:47:E3:3A:6F:70:54
Authority key identifier: C4:F3:E2:EA:BD:E9:E3:90:1A:DB:BC:31:C9:F2:53:5C:DE:3B:1C:6F
Certificate issuer:       /CN=F36B49FAAR/serialNumber=C4F3E2EABDE9E3901ADBBC31C9F2535CDE3B1C6F
Certificate serial:       0DE6
Authority info access:    rsync://rpki.afrinic.net/repository/arin/xPPi6r3p45Aa27wxyfJTXN47HG8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36B49FA/B54484521C1C11E69F7C750CF8AEA228/xPPi6r3p45Aa27wxyfJTXN47HG8.mft
Manifest number:          0DE6
Signing time:             Thu 04 Dec 2025 01:01:42 +0000
Manifest this update:     Thu 04 Dec 2025 01:01:41 +0000
Manifest next update:     Sat 06 Dec 2025 01:01:41 +0000
Files and hashes:         1: xPPi6r3p45Aa27wxyfJTXN47HG8.crl (hash: vG6XE7E+KGercA4OuA7TXfVqk3BLuLaRF5kRtpFhIVI=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36B49FA/B54484521C1C11E69F7C750CF8AEA228/xPPi6r3p45Aa27wxyfJTXN47HG8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36B49FA/B54484521C1C11E69F7C750CF8AEA228/xPPi6r3p45Aa27wxyfJTXN47HG8.mft
                          rsync://rpki.afrinic.net/repository/arin/xPPi6r3p45Aa27wxyfJTXN47HG8.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 06 Dec 2025 01:01:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3558 (0xde6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36B49FAAR, serialNumber=C4F3E2EABDE9E3901ADBBC31C9F2535CDE3B1C6F
        Validity
            Not Before: Dec  4 01:01:41 2025 GMT
            Not After : Dec  6 01:01:41 2025 GMT
        Subject: CN=6930dd76-0b3d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:d4:c8:9d:49:4c:fc:47:eb:82:50:6d:d9:71:
                    29:0d:36:a8:a0:a3:9e:92:c4:64:9a:d9:92:8f:5c:
                    ad:c5:a3:f0:35:8b:d8:25:9a:fc:0b:25:a4:71:39:
                    16:35:58:63:df:56:fb:f5:76:c7:e4:da:a6:0e:9b:
                    e8:5a:0e:4a:35:f9:a1:56:05:23:7a:9b:7a:e7:c4:
                    63:d8:8a:d1:09:6d:c3:28:24:fd:38:a9:4a:59:bf:
                    81:73:09:a2:d2:c4:a3:b7:64:20:74:52:02:20:8e:
                    1f:6a:a0:9d:e8:00:d0:53:f7:d6:08:03:c9:dd:28:
                    9f:94:df:ab:fc:5a:e2:bb:0e:c3:1e:15:e3:88:f1:
                    e7:38:8e:71:11:5f:12:0d:32:e4:a6:dc:1b:a4:eb:
                    de:82:53:2c:9b:cd:08:e6:98:d0:ea:d0:b2:8f:7a:
                    26:c4:0b:cd:0b:b7:90:95:51:f5:43:0b:03:09:8d:
                    b8:84:e6:f3:72:46:9f:01:e6:f2:6e:ec:f9:0b:65:
                    db:c5:24:0f:74:70:5b:8e:6c:62:05:11:c4:f1:e6:
                    f2:22:02:31:52:e9:51:c2:ac:bd:4d:02:1f:c0:e0:
                    74:f4:05:02:87:6d:dc:de:a2:43:f0:91:7e:d9:20:
                    8c:e1:57:f7:af:c8:62:e2:4b:82:c2:02:36:d6:5e:
                    ee:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:6D:21:97:B6:3F:F0:96:6F:49:C5:27:FF:E8:47:E3:3A:6F:70:54
            X509v3 Authority Key Identifier:
                keyid:C4:F3:E2:EA:BD:E9:E3:90:1A:DB:BC:31:C9:F2:53:5C:DE:3B:1C:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36B49FA/B54484521C1C11E69F7C750CF8AEA228/xPPi6r3p45Aa27wxyfJTXN47HG8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/xPPi6r3p45Aa27wxyfJTXN47HG8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B49FA/B54484521C1C11E69F7C750CF8AEA228/xPPi6r3p45Aa27wxyfJTXN47HG8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:df:ff:b8:d7:a7:bc:e3:14:62:5c:6d:23:ab:b2:46:23:19:
         da:05:7b:c6:00:28:11:66:ab:96:29:6d:59:58:1b:9e:52:52:
         cc:0c:57:92:0e:1f:28:c6:fe:b3:dd:e0:5f:c5:27:b0:d0:1f:
         47:56:9b:03:19:cf:c6:9f:85:76:94:b9:7e:a8:26:50:c2:5c:
         c9:4d:54:6f:a6:2a:c7:17:12:9f:b1:af:2d:bc:61:b5:f8:2a:
         d0:f1:eb:d2:0b:b6:24:0a:fb:07:af:70:75:db:01:a4:07:d1:
         a1:95:fb:20:3a:e2:f9:87:b2:f7:a4:63:eb:2f:c2:60:15:c5:
         df:83:31:76:23:ae:e3:c6:37:78:51:a1:04:2f:67:f7:2c:2a:
         1b:ef:5a:e7:ec:ee:90:b8:bf:ed:7c:ce:a5:52:db:82:ad:50:
         4c:70:41:2e:4e:f8:da:ef:b3:c9:20:ef:83:10:dd:ac:01:7b:
         30:77:d4:3f:d0:4f:cc:0e:87:f1:6a:c2:0c:ff:37:bc:f2:37:
         0a:40:91:c0:db:c5:f0:81:9a:ff:0a:a3:2e:51:52:46:64:42:
         56:3b:8f:91:c9:e2:cc:00:b9:5c:5e:0b:66:e2:58:d0:ab:8e:
         a2:af:c9:1b:65:db:11:4b:f6:52:ce:5a:ee:6c:63:fd:c0:2c:
         d1:bb:f1:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 4 23:40:37 2025 by rpki-client