This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36ED8A8/0E2BC6F6FE4B11EFBC1FC479762E951A/TyZbxUWhfhe_gJ8ZVk02FhCNh98.mft
File:                     TyZbxUWhfhe_gJ8ZVk02FhCNh98.mft (raw, json)
Hash identifier:          uobqdsyLOe9jZN6Iq8l0s6W7pkXpmdW9OuXtkG3XiFA=
Subject key identifier:   CE:B9:F9:6A:11:03:5D:F3:5B:F8:8D:1C:10:1E:1F:4D:B2:FF:AF:50
Authority key identifier: 4F:26:5B:C5:45:A1:7E:17:BF:80:9F:19:56:4D:36:16:10:8D:87:DF
Certificate issuer:       /CN=F36ED8A8AR/serialNumber=4F265BC545A17E17BF809F19564D3616108D87DF
Certificate serial:       0124
Authority info access:    rsync://rpki.afrinic.net/repository/arin/TyZbxUWhfhe_gJ8ZVk02FhCNh98.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36ED8A8/0E2BC6F6FE4B11EFBC1FC479762E951A/TyZbxUWhfhe_gJ8ZVk02FhCNh98.mft
Manifest number:          0124
Signing time:             Tue 23 Dec 2025 04:52:40 +0000
Manifest this update:     Tue 23 Dec 2025 04:52:39 +0000
Manifest next update:     Thu 25 Dec 2025 04:52:39 +0000
Files and hashes:         1: TyZbxUWhfhe_gJ8ZVk02FhCNh98.crl (hash: jWonLB/yoKHVH2B6wnoVMdnqQV/a6LoFjJeCvKxn+Ac=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36ED8A8/0E2BC6F6FE4B11EFBC1FC479762E951A/TyZbxUWhfhe_gJ8ZVk02FhCNh98.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36ED8A8/0E2BC6F6FE4B11EFBC1FC479762E951A/TyZbxUWhfhe_gJ8ZVk02FhCNh98.mft
                          rsync://rpki.afrinic.net/repository/arin/TyZbxUWhfhe_gJ8ZVk02FhCNh98.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 25 Dec 2025 04:52:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 292 (0x124)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36ED8A8AR, serialNumber=4F265BC545A17E17BF809F19564D3616108D87DF
        Validity
            Not Before: Dec 23 04:52:39 2025 GMT
            Not After : Dec 25 04:52:39 2025 GMT
        Subject: CN=694a2018-e168
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:75:19:8f:58:b5:eb:7d:11:99:33:24:34:28:
                    1f:54:99:9f:c4:90:50:4d:18:23:ae:d9:27:2f:55:
                    65:4c:8b:bd:1c:fe:ed:ab:f4:24:58:3a:63:09:51:
                    6c:0d:20:d7:d1:2f:8d:9f:2a:19:0a:7e:8d:e6:3e:
                    9d:60:4e:7a:f0:80:0b:30:ee:64:f7:ce:4b:dc:6b:
                    fc:23:69:bf:38:60:70:37:33:17:77:76:05:a9:3a:
                    0d:9d:85:6c:b0:5e:da:53:30:d7:81:22:a2:e4:76:
                    76:dd:66:55:89:25:d9:a7:4f:d2:1d:6c:8b:1c:2f:
                    fb:61:31:7b:62:01:e9:6d:d4:79:21:c6:96:20:fb:
                    fe:c9:3c:52:e3:d1:f7:83:3e:0f:71:be:a6:57:ca:
                    eb:68:5e:67:6f:05:1d:e8:3c:65:33:a8:61:f8:4e:
                    d8:b8:ab:b1:d4:81:30:ef:91:46:05:a8:cf:b5:8f:
                    79:60:e6:02:b5:e4:3c:6f:ac:4d:d9:7f:da:17:dd:
                    d9:1f:d7:c7:cd:49:1a:17:c5:6e:87:9e:b8:10:8d:
                    49:f7:52:35:8b:16:aa:11:ef:dd:4a:45:b7:4d:02:
                    ae:15:e0:f5:a9:25:d5:cf:e9:23:9f:11:4d:c6:79:
                    5e:e0:9a:7d:9d:29:26:18:66:93:ad:bf:f7:bb:1a:
                    cd:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:B9:F9:6A:11:03:5D:F3:5B:F8:8D:1C:10:1E:1F:4D:B2:FF:AF:50
            X509v3 Authority Key Identifier:
                keyid:4F:26:5B:C5:45:A1:7E:17:BF:80:9F:19:56:4D:36:16:10:8D:87:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36ED8A8/0E2BC6F6FE4B11EFBC1FC479762E951A/TyZbxUWhfhe_gJ8ZVk02FhCNh98.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/TyZbxUWhfhe_gJ8ZVk02FhCNh98.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36ED8A8/0E2BC6F6FE4B11EFBC1FC479762E951A/TyZbxUWhfhe_gJ8ZVk02FhCNh98.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:36:c4:00:89:46:98:f9:43:32:4c:e2:ba:25:f0:47:04:10:
         58:31:bd:d2:1c:cd:21:dd:d9:32:d8:b5:68:37:ca:86:cd:32:
         51:1c:bd:65:75:b3:4f:76:f3:37:51:c3:db:19:d2:7d:d8:a7:
         39:8d:6b:7c:a8:98:f8:3c:b6:40:76:18:86:0a:34:7b:01:c4:
         40:9f:40:84:1e:7f:91:20:19:b8:a3:2a:86:e7:c5:7a:e2:0b:
         6d:75:a7:c2:5a:62:5d:6c:6c:44:fc:0c:f5:dc:92:35:b6:69:
         06:99:84:13:bb:10:7a:a6:b4:ca:84:c3:cc:d4:ac:ea:79:fa:
         32:6e:da:d0:03:5f:d9:19:0d:c1:35:62:96:c3:71:08:34:87:
         32:ec:1d:e1:81:8a:21:9d:43:43:56:78:91:9e:29:69:5b:78:
         d8:f2:3d:91:9d:1a:7e:e8:22:b3:7a:c1:93:db:bd:66:63:f1:
         d3:91:55:b3:d1:f2:ae:84:6f:16:7b:ae:a5:9f:d1:d5:1c:81:
         70:e8:63:98:29:a2:81:9b:a0:a8:c2:27:bc:6d:68:1d:6b:8e:
         34:6a:8d:cb:db:7f:9e:ed:1c:8b:d0:35:10:ec:fc:d9:89:60:
         54:65:0a:9f:b2:be:a3:b5:d5:ff:61:1f:e3:78:9b:59:01:a7:
         9f:bc:88:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 04:47:40 2025 by rpki-client