This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36BD97C/E424AE2A2D9411EC972CA145D8A014CE/7_QGHzVXLmv6HCS7I2j8_i6uYFo.mft
File:                     7_QGHzVXLmv6HCS7I2j8_i6uYFo.mft (raw, json)
Hash identifier:          jCz7m4nkqqUqiWjomo1U6Ca48oorQOOdgx1/0qjOuTA=
Subject key identifier:   6C:0B:C6:46:56:90:6D:08:97:4A:F0:63:46:C8:DC:0D:E9:22:10:2C
Authority key identifier: EF:F4:06:1F:35:57:2E:6B:FA:1C:24:BB:23:68:FC:FE:2E:AE:60:5A
Certificate issuer:       /CN=F36BD97CAR/serialNumber=EFF4061F35572E6BFA1C24BB2368FCFE2EAE605A
Certificate serial:       062B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/7_QGHzVXLmv6HCS7I2j8_i6uYFo.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36BD97C/E424AE2A2D9411EC972CA145D8A014CE/7_QGHzVXLmv6HCS7I2j8_i6uYFo.mft
Manifest number:          0625
Signing time:             Sun 14 Dec 2025 02:30:47 +0000
Manifest this update:     Sun 14 Dec 2025 02:30:47 +0000
Manifest next update:     Tue 16 Dec 2025 02:30:47 +0000
Files and hashes:         1: 7_QGHzVXLmv6HCS7I2j8_i6uYFo.crl (hash: UHuq7oPmSI9CL5AX/kAL82FpV7LpVAxYN6v6DYGCK9o=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36BD97C/E424AE2A2D9411EC972CA145D8A014CE/7_QGHzVXLmv6HCS7I2j8_i6uYFo.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36BD97C/E424AE2A2D9411EC972CA145D8A014CE/7_QGHzVXLmv6HCS7I2j8_i6uYFo.mft
                          rsync://rpki.afrinic.net/repository/arin/7_QGHzVXLmv6HCS7I2j8_i6uYFo.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 16 Dec 2025 00:26:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1579 (0x62b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36BD97CAR, serialNumber=EFF4061F35572E6BFA1C24BB2368FCFE2EAE605A
        Validity
            Not Before: Dec 14 02:30:47 2025 GMT
            Not After : Dec 16 02:30:47 2025 GMT
        Subject: CN=693e2157-af1f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:aa:60:41:07:cb:4c:1e:40:ed:88:c8:b0:43:
                    57:06:68:da:60:22:76:7a:5e:69:e9:9c:52:96:3b:
                    19:f3:ee:c6:f7:b0:c6:20:9a:00:ea:94:19:1f:73:
                    9f:23:09:7f:0e:4e:90:87:59:7c:73:20:ed:b3:9f:
                    1d:73:c9:0f:b5:fc:2b:d4:07:34:7b:ee:d6:1c:82:
                    35:8a:bc:d9:ff:f6:b6:c1:8b:ca:c3:68:1b:4d:c1:
                    6e:77:c9:3a:4d:7b:7d:c8:52:e9:35:ad:86:2e:65:
                    69:b6:fa:61:a8:eb:88:86:38:c1:72:ac:80:bc:52:
                    76:40:a9:5d:fd:48:2e:35:3e:d2:9b:8f:9b:10:85:
                    42:1c:b1:8e:1c:be:92:20:7e:99:43:d5:d7:b0:e3:
                    d1:73:f3:a9:a9:39:e9:f1:35:68:3a:27:84:d7:64:
                    85:07:7f:92:bf:55:48:44:b8:f5:a5:27:80:5f:ca:
                    0c:3c:01:1b:4d:01:c3:c7:fd:fe:11:b9:6a:fa:0a:
                    b9:7e:24:25:87:e2:5a:0d:23:e2:50:41:4b:b5:7e:
                    25:ef:ee:de:e4:41:5a:f0:9a:31:0c:80:1d:a1:0c:
                    12:21:ff:64:70:56:40:90:68:08:f0:62:53:ec:1f:
                    26:53:3b:16:68:a4:8f:e6:b2:6c:7c:d4:b1:0e:76:
                    fc:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:0B:C6:46:56:90:6D:08:97:4A:F0:63:46:C8:DC:0D:E9:22:10:2C
            X509v3 Authority Key Identifier:
                keyid:EF:F4:06:1F:35:57:2E:6B:FA:1C:24:BB:23:68:FC:FE:2E:AE:60:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36BD97C/E424AE2A2D9411EC972CA145D8A014CE/7_QGHzVXLmv6HCS7I2j8_i6uYFo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/7_QGHzVXLmv6HCS7I2j8_i6uYFo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36BD97C/E424AE2A2D9411EC972CA145D8A014CE/7_QGHzVXLmv6HCS7I2j8_i6uYFo.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:57:83:5d:d1:f8:5f:c7:a0:cb:f8:d1:7c:26:39:b8:c9:03:
         5c:2b:3b:43:72:44:9e:a5:a4:4b:ff:43:da:b7:23:b5:29:2f:
         88:d1:26:7a:42:09:44:31:0a:5b:e9:46:30:7f:b2:ab:4c:c6:
         b2:1a:35:ee:ab:85:ba:71:5c:65:a9:98:bd:13:33:3c:af:6c:
         6a:3c:a0:5d:d1:c3:e9:96:71:bf:e2:73:91:ca:58:c6:78:dc:
         37:2b:d5:63:dc:d8:32:c3:67:02:62:be:ed:50:e2:a8:bd:14:
         8f:f9:1c:3a:1c:32:75:83:c2:42:c0:8b:b5:ea:53:7e:ba:c1:
         2b:95:77:d4:ec:73:67:3b:bb:c4:6d:e1:ee:f1:d3:c8:88:61:
         5d:1a:82:7d:64:77:bd:48:5c:ee:c8:0f:cb:cd:09:f4:10:2e:
         b7:b8:40:74:a5:12:97:3a:9f:fe:2d:c7:b5:ef:d2:95:d9:6b:
         0f:44:ca:ea:b9:27:a3:6b:4e:42:62:d3:be:73:fa:bd:e0:61:
         f4:5a:1c:bb:e1:31:94:37:c9:6f:f8:34:88:26:9b:e6:bb:ea:
         21:86:55:f3:6f:b0:d5:80:80:09:7b:c7:08:c3:92:59:85:4f:
         22:cf:87:ef:f4:bc:af:62:76:f3:9f:74:76:e8:c4:a7:83:64:
         b6:16:fc:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 14 07:48:15 2025 by rpki-client