This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F6034/EA17670490FC11EA8C4F5B6EF8AEA228/5zU0-ODMucOEExGNd_3qToCP6jE.mft
File:                     5zU0-ODMucOEExGNd_3qToCP6jE.mft (raw, json)
Hash identifier:          os5QyjY5fvRLMin0ByjWqI6bHfhl5nRB0Dy0j9RChzQ=
Subject key identifier:   DB:8A:64:DA:4B:22:10:DB:5B:98:99:32:84:8B:17:FA:1B:03:C2:5C
Authority key identifier: E7:35:34:F8:E0:CC:B9:C3:84:13:11:8D:77:FD:EA:4E:80:8F:EA:31
Certificate issuer:       /CN=F36F6034AR/serialNumber=E73534F8E0CCB9C38413118D77FDEA4E808FEA31
Certificate serial:       0836
Authority info access:    rsync://rpki.afrinic.net/repository/arin/5zU0-ODMucOEExGNd_3qToCP6jE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36F6034/EA17670490FC11EA8C4F5B6EF8AEA228/5zU0-ODMucOEExGNd_3qToCP6jE.mft
Manifest number:          0835
Signing time:             Thu 04 Dec 2025 01:48:42 +0000
Manifest this update:     Thu 04 Dec 2025 01:48:41 +0000
Manifest next update:     Sat 06 Dec 2025 01:48:41 +0000
Files and hashes:         1: 5zU0-ODMucOEExGNd_3qToCP6jE.crl (hash: OBR6tAOj75SQSdCNSznF049DjmK/xc2Fp9YGk7YHzZw=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36F6034/EA17670490FC11EA8C4F5B6EF8AEA228/5zU0-ODMucOEExGNd_3qToCP6jE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36F6034/EA17670490FC11EA8C4F5B6EF8AEA228/5zU0-ODMucOEExGNd_3qToCP6jE.mft
                          rsync://rpki.afrinic.net/repository/arin/5zU0-ODMucOEExGNd_3qToCP6jE.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 06 Dec 2025 01:48:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2102 (0x836)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36F6034AR, serialNumber=E73534F8E0CCB9C38413118D77FDEA4E808FEA31
        Validity
            Not Before: Dec  4 01:48:41 2025 GMT
            Not After : Dec  6 01:48:41 2025 GMT
        Subject: CN=6930e87a-ab09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:85:83:2f:6b:7b:b8:98:1f:07:b2:70:a0:34:
                    38:0d:f0:74:0c:11:23:f7:3e:2a:ac:f1:56:61:da:
                    f2:33:97:69:d9:9a:91:6e:e4:f6:c7:9b:f9:ce:42:
                    a8:e3:7c:e4:6a:2d:4e:65:24:72:b8:b1:21:af:5d:
                    27:3c:8a:e8:7b:35:f5:d7:db:85:ff:d3:d3:bf:1d:
                    cf:79:2a:16:05:13:38:03:c0:f0:57:e3:da:6e:18:
                    be:5a:6c:35:a0:71:92:46:2f:8a:d8:21:c0:6b:20:
                    ab:40:ad:e4:d5:1d:3c:d3:a0:71:c2:37:c6:7e:34:
                    3b:92:fc:17:f3:e4:78:29:c0:ee:bc:9c:5f:45:6e:
                    e5:ad:c8:b9:38:80:74:4a:04:78:28:b3:a9:48:2f:
                    12:2e:44:df:02:96:87:84:73:93:56:c0:35:08:c8:
                    95:f4:d1:9f:09:ce:cc:8e:dd:09:2f:1b:2d:76:6d:
                    1f:43:71:c5:1b:b8:5c:7a:a8:33:b9:96:e0:d6:98:
                    0e:88:5a:af:c5:d6:f1:c7:6a:58:1e:09:64:6c:44:
                    a5:c0:87:1d:be:ea:65:a9:66:ce:44:e9:44:61:bf:
                    01:e1:0c:38:1a:4e:ac:13:15:cd:bc:08:80:8c:ac:
                    a4:4b:e9:77:ba:ff:a9:c4:f8:d2:f2:62:fa:7f:bc:
                    4f:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:8A:64:DA:4B:22:10:DB:5B:98:99:32:84:8B:17:FA:1B:03:C2:5C
            X509v3 Authority Key Identifier:
                keyid:E7:35:34:F8:E0:CC:B9:C3:84:13:11:8D:77:FD:EA:4E:80:8F:EA:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36F6034/EA17670490FC11EA8C4F5B6EF8AEA228/5zU0-ODMucOEExGNd_3qToCP6jE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/5zU0-ODMucOEExGNd_3qToCP6jE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F6034/EA17670490FC11EA8C4F5B6EF8AEA228/5zU0-ODMucOEExGNd_3qToCP6jE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:57:f1:97:51:49:98:2e:cc:80:60:63:1d:28:b3:8e:3c:5d:
         b7:fc:59:f8:fd:60:74:43:5a:36:3f:d8:2a:4d:94:d0:e9:8f:
         6c:83:df:21:ab:67:6a:11:ff:ec:1c:5b:99:f3:ec:b0:99:d6:
         ed:23:da:02:a8:c6:2b:fc:80:77:0e:24:94:f8:79:92:10:1c:
         f4:5c:4f:0a:7a:ba:aa:7f:4c:97:3e:fe:1b:2e:a7:07:8f:91:
         8c:75:95:d1:17:df:61:29:ea:6a:be:a4:ef:f6:95:4f:9e:f7:
         bd:b4:b6:b4:2c:00:7d:3c:1b:78:ec:40:71:76:7f:ac:50:71:
         c2:41:63:7d:2b:37:d8:2d:4b:ba:2b:01:0f:39:e3:06:4a:7b:
         e5:82:53:96:38:8a:5e:60:84:d4:4e:d1:0c:b1:9d:bc:d6:ab:
         26:b9:77:96:ba:81:b4:81:45:c9:7d:85:92:e2:1f:ef:80:be:
         fa:e5:77:f7:b8:a4:14:8a:69:b2:eb:58:8a:33:23:8a:8e:30:
         2c:34:57:0b:bb:8a:f6:e7:95:a5:f9:4f:5a:d7:f4:6d:de:d6:
         3f:c4:99:a6:7d:cd:19:53:b2:d3:e4:f0:26:5e:b5:49:0d:7e:
         ef:78:45:6a:3c:54:d2:55:c5:f6:ec:42:bf:9a:d0:ca:2b:43:
         29:24:3c:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 4 23:39:56 2025 by rpki-client