This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F68F4/66F3832AC67311EEB3DB73A5775412E6/OckZvvVPpaxnw34-dWyhP7I0tT8.mft
File:                     OckZvvVPpaxnw34-dWyhP7I0tT8.mft (raw, json)
Hash identifier:          mRjLO1+0dvhHS9kiqYtT4eZtbN1gNob/22WdL06I7ME=
Subject key identifier:   A4:25:C2:B6:06:6A:C8:C2:F3:50:A7:5F:43:CA:E7:58:4F:F2:D2:C6
Authority key identifier: 39:C9:19:BE:F5:4F:A5:AC:67:C3:7E:3E:75:6C:A1:3F:B2:34:B5:3F
Certificate issuer:       /CN=F36F68F4AR/serialNumber=39C919BEF54FA5AC67C37E3E756CA13FB234B53F
Certificate serial:       02B5
Authority info access:    rsync://rpki.afrinic.net/repository/arin/OckZvvVPpaxnw34-dWyhP7I0tT8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36F68F4/66F3832AC67311EEB3DB73A5775412E6/OckZvvVPpaxnw34-dWyhP7I0tT8.mft
Manifest number:          02B2
Signing time:             Thu 04 Dec 2025 04:05:22 +0000
Manifest this update:     Thu 04 Dec 2025 04:05:21 +0000
Manifest next update:     Sat 06 Dec 2025 04:05:21 +0000
Files and hashes:         1: OckZvvVPpaxnw34-dWyhP7I0tT8.crl (hash: PFq9Q95liHCGFfA80Msyg0gW4RUdsX9U3F7vZ2OvWkY=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36F68F4/66F3832AC67311EEB3DB73A5775412E6/OckZvvVPpaxnw34-dWyhP7I0tT8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36F68F4/66F3832AC67311EEB3DB73A5775412E6/OckZvvVPpaxnw34-dWyhP7I0tT8.mft
                          rsync://rpki.afrinic.net/repository/arin/OckZvvVPpaxnw34-dWyhP7I0tT8.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 06 Dec 2025 04:05:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 693 (0x2b5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36F68F4AR, serialNumber=39C919BEF54FA5AC67C37E3E756CA13FB234B53F
        Validity
            Not Before: Dec  4 04:05:21 2025 GMT
            Not After : Dec  6 04:05:21 2025 GMT
        Subject: CN=69310882-4432
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:5c:09:b5:af:7f:cb:38:d6:e0:e3:04:78:92:
                    05:57:b7:27:3f:c2:97:9c:52:32:4e:97:fb:d1:c4:
                    89:58:ce:e3:67:4e:54:f3:80:7a:f8:22:dc:ae:1d:
                    05:a3:7c:cc:b0:5b:f3:89:90:96:ef:5a:43:78:a2:
                    14:33:25:fa:67:46:e8:c6:83:f6:cd:2c:b9:e6:65:
                    39:cc:6b:65:4b:c7:54:32:6c:a8:34:0d:34:65:70:
                    3f:30:00:73:0a:86:34:23:1a:93:aa:1a:1e:8f:3b:
                    f6:89:0c:99:1c:6f:2a:74:e2:f1:fd:5a:77:40:59:
                    8c:91:d9:61:85:37:01:de:3c:74:e2:ba:e1:f4:55:
                    e2:cf:c7:0f:53:29:6e:8f:9c:20:f9:ae:66:70:3f:
                    7c:e9:5d:52:de:1a:7c:50:ec:42:71:11:bd:af:dc:
                    97:98:67:63:0d:86:ea:07:33:d0:08:de:84:96:26:
                    98:4f:ae:17:43:0a:24:d6:58:e7:b0:bc:43:97:05:
                    ee:f2:7b:58:a6:eb:b4:d0:f8:d1:c0:00:66:3f:e4:
                    e6:cd:64:bc:25:53:59:d7:a5:02:01:ed:72:7c:f4:
                    de:e7:e0:9d:de:91:73:fd:38:d7:ec:a9:7a:6a:bd:
                    38:40:09:ca:7b:98:74:f0:66:b1:10:19:b3:b3:a1:
                    e2:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:25:C2:B6:06:6A:C8:C2:F3:50:A7:5F:43:CA:E7:58:4F:F2:D2:C6
            X509v3 Authority Key Identifier:
                keyid:39:C9:19:BE:F5:4F:A5:AC:67:C3:7E:3E:75:6C:A1:3F:B2:34:B5:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36F68F4/66F3832AC67311EEB3DB73A5775412E6/OckZvvVPpaxnw34-dWyhP7I0tT8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/OckZvvVPpaxnw34-dWyhP7I0tT8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F68F4/66F3832AC67311EEB3DB73A5775412E6/OckZvvVPpaxnw34-dWyhP7I0tT8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:40:29:db:ba:e5:4e:ac:95:6c:7c:5b:b0:64:e7:f8:0e:ba:
         d8:c5:5e:18:81:c2:c3:12:7b:6e:16:3b:af:e8:c8:55:8b:68:
         ec:40:f3:cb:28:09:21:59:9d:8e:09:cf:c5:97:1a:5b:d9:bb:
         4d:71:b0:63:f6:51:24:8f:3f:14:3b:44:97:d2:23:c0:80:6c:
         6e:61:73:5c:e1:72:eb:56:31:c5:f2:c9:e5:ab:05:04:76:e5:
         cd:1b:f1:ee:04:0c:40:db:8a:cc:9d:97:a4:a4:7b:0e:c7:c6:
         bf:dd:73:b8:2e:e0:f1:c7:2f:20:c6:2e:8e:d4:90:78:04:e2:
         db:d6:2d:1b:ad:11:ff:48:58:7e:d2:34:e5:6f:99:d2:fc:c5:
         4c:6e:e1:f0:1e:fd:db:2e:8b:ae:3c:2e:eb:61:1c:86:63:53:
         f9:48:ac:f0:42:27:bb:02:37:13:60:e9:3b:3a:aa:02:aa:5e:
         22:2d:a6:f5:48:78:7f:a5:1d:74:a2:c5:ee:5c:77:91:33:6d:
         ce:e6:fb:82:56:1b:fe:b2:2d:b3:cd:5b:95:a4:d7:12:ea:75:
         c0:b3:b4:43:c5:35:b6:23:6a:1b:07:82:92:dd:32:42:e3:b6:
         7e:2d:8d:8e:80:db:f6:fe:95:1f:28:5d:2a:d0:8c:4b:51:11:
         35:b7:df:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 4 23:40:32 2025 by rpki-client