This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36ED442/D32C1B5657C811E5BDB1DA3EF8AEA228/mpAdFskLYBlnVD3tV83q800LJz4.mft
File:                     mpAdFskLYBlnVD3tV83q800LJz4.mft (raw, json)
Hash identifier:          W3Z7i8YonX4VovcBH5tlJM7WM1r7qA4UYeaHPKOja+0=
Subject key identifier:   30:CB:20:75:42:0E:B3:F4:3E:83:16:73:0C:BD:B8:77:A6:BD:A9:82
Authority key identifier: 9A:90:1D:16:C9:0B:60:19:67:54:3D:ED:57:CD:EA:F3:4D:0B:27:3E
Certificate issuer:       /CN=F36ED442AR/serialNumber=9A901D16C90B601967543DED57CDEAF34D0B273E
Certificate serial:       0EE4
Authority info access:    rsync://rpki.afrinic.net/repository/arin/mpAdFskLYBlnVD3tV83q800LJz4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36ED442/D32C1B5657C811E5BDB1DA3EF8AEA228/mpAdFskLYBlnVD3tV83q800LJz4.mft
Manifest number:          0EE4
Signing time:             Thu 04 Dec 2025 00:57:06 +0000
Manifest this update:     Thu 04 Dec 2025 00:57:05 +0000
Manifest next update:     Sat 06 Dec 2025 00:57:05 +0000
Files and hashes:         1: mpAdFskLYBlnVD3tV83q800LJz4.crl (hash: hvTdzIXYNDfX1EoBGXUnJHwY30gqsOAKZpGFLDryOOc=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36ED442/D32C1B5657C811E5BDB1DA3EF8AEA228/mpAdFskLYBlnVD3tV83q800LJz4.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36ED442/D32C1B5657C811E5BDB1DA3EF8AEA228/mpAdFskLYBlnVD3tV83q800LJz4.mft
                          rsync://rpki.afrinic.net/repository/arin/mpAdFskLYBlnVD3tV83q800LJz4.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 06 Dec 2025 00:57:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3812 (0xee4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36ED442AR, serialNumber=9A901D16C90B601967543DED57CDEAF34D0B273E
        Validity
            Not Before: Dec  4 00:57:05 2025 GMT
            Not After : Dec  6 00:57:05 2025 GMT
        Subject: CN=6930dc62-a024
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:f9:89:31:89:91:62:ac:93:99:40:2b:2d:21:
                    66:c7:fc:3b:b3:cb:be:f7:db:f8:6c:d5:2e:25:2a:
                    7b:cf:f0:51:de:86:ca:90:05:dd:85:63:0b:40:51:
                    b2:03:5f:f9:cd:6d:af:40:47:31:ff:42:bc:fd:a5:
                    03:d6:9e:8a:98:45:82:47:37:78:ae:f2:65:25:1a:
                    86:e7:1d:b7:05:97:8d:c8:2e:96:1f:d4:e4:9a:08:
                    2f:a6:e6:38:5f:e0:2a:e2:11:5f:65:c7:c6:a5:ca:
                    2c:64:44:2b:8f:02:4b:68:1a:3a:1e:74:6c:61:24:
                    6c:da:61:61:ac:7e:5b:4d:d5:39:61:dd:0f:e5:0e:
                    35:b3:51:3c:8b:57:b9:43:62:a3:7a:0c:d7:84:ae:
                    b9:89:7e:6b:04:b5:43:cf:76:76:a4:1e:f7:fb:a7:
                    b0:f4:68:33:7c:fc:f6:ce:a7:e2:84:26:c8:7c:08:
                    17:e3:61:dd:6e:dd:8c:17:a7:5e:e6:30:c7:46:79:
                    63:9f:be:90:73:f4:b2:29:36:fb:b9:0d:c5:10:70:
                    2c:1a:4e:0b:a9:cb:ab:2a:2d:1d:99:54:04:f3:64:
                    53:74:46:16:2f:06:1d:f1:35:ff:a9:0b:96:0c:ee:
                    21:2f:03:20:60:10:7b:29:5c:d8:d6:72:21:8a:75:
                    75:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:CB:20:75:42:0E:B3:F4:3E:83:16:73:0C:BD:B8:77:A6:BD:A9:82
            X509v3 Authority Key Identifier:
                keyid:9A:90:1D:16:C9:0B:60:19:67:54:3D:ED:57:CD:EA:F3:4D:0B:27:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36ED442/D32C1B5657C811E5BDB1DA3EF8AEA228/mpAdFskLYBlnVD3tV83q800LJz4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/mpAdFskLYBlnVD3tV83q800LJz4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36ED442/D32C1B5657C811E5BDB1DA3EF8AEA228/mpAdFskLYBlnVD3tV83q800LJz4.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:6e:4c:e7:03:4b:7c:71:5b:d4:5d:ab:d2:74:61:1a:06:55:
         ef:bb:82:96:9a:ea:a5:f1:d0:a4:12:93:bf:b6:6c:66:8a:90:
         ac:0b:f6:8b:9c:4d:cd:90:ed:76:3b:d3:2b:fa:c9:3f:6a:a0:
         9e:d2:2f:a2:d2:1e:67:89:1d:70:7e:45:25:4d:60:be:d8:6c:
         58:8b:6c:b7:4a:59:39:db:56:67:b9:75:30:27:01:fc:17:40:
         c5:7f:c1:61:c2:f1:9e:7f:0e:b9:f3:36:ae:ca:f2:fa:34:13:
         e7:8c:8f:00:86:2d:fc:99:50:bc:d7:bc:eb:b4:37:99:25:e5:
         69:10:6d:cb:25:ab:27:37:23:c7:ed:4e:fb:e4:2c:73:7c:f7:
         1c:06:02:07:3d:0b:11:2f:b2:ba:50:4a:93:0f:df:e2:80:77:
         9f:a2:85:42:cf:b8:c9:69:61:63:ed:33:70:8d:2b:da:04:ca:
         93:13:aa:b3:ed:f9:4f:79:93:6a:58:50:59:d4:cf:7e:01:83:
         37:99:35:99:cc:f2:a3:86:05:bf:42:59:b9:ad:ce:fd:be:a8:
         84:d0:08:d5:a8:8f:4e:95:f8:f3:4b:cc:8d:04:22:88:b7:a8:
         86:b9:e4:3d:fe:7e:4f:20:db:29:d3:98:a0:4d:15:57:18:f4:
         5e:a6:49:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 4 23:38:59 2025 by rpki-client