This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362AF02/4F6FDA66838C11E9B364E911F8AEA228/kz4Clh4KvYNcvH7ig_FXGUdGMj8.mft
File:                     kz4Clh4KvYNcvH7ig_FXGUdGMj8.mft (raw, json)
Hash identifier:          apuj5qbpBTAp9/sQNG/Fx32dEbOXlGSAgTniV8Lf+t0=
Subject key identifier:   A8:30:45:5C:66:9D:4E:36:35:44:0D:18:6B:56:D8:8C:39:6C:72:D6
Authority key identifier: 93:3E:02:96:1E:0A:BD:83:5C:BC:7E:E2:83:F1:57:19:47:46:32:3F
Certificate issuer:       /CN=F362AF02AR/serialNumber=933E02961E0ABD835CBC7EE283F157194746323F
Certificate serial:       09A9
Authority info access:    rsync://rpki.afrinic.net/repository/arin/kz4Clh4KvYNcvH7ig_FXGUdGMj8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F362AF02/4F6FDA66838C11E9B364E911F8AEA228/kz4Clh4KvYNcvH7ig_FXGUdGMj8.mft
Manifest number:          09A1
Signing time:             Sun 21 Dec 2025 01:23:36 +0000
Manifest this update:     Sun 21 Dec 2025 01:23:35 +0000
Manifest next update:     Tue 23 Dec 2025 01:23:35 +0000
Files and hashes:         1: kz4Clh4KvYNcvH7ig_FXGUdGMj8.crl (hash: Uhv0qc8/XEiOIX2AbrfTrkPNp96W076FSUlCdUibDNU=)
                          2: B2B71F48BBB711F0A55267C8DAE4EC9C.roa (hash: kChp13s64I7ds7m3cFb8J8f9uZBGgnrFBEhdaD7OJR0=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F362AF02/4F6FDA66838C11E9B364E911F8AEA228/kz4Clh4KvYNcvH7ig_FXGUdGMj8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F362AF02/4F6FDA66838C11E9B364E911F8AEA228/kz4Clh4KvYNcvH7ig_FXGUdGMj8.mft
                          rsync://rpki.afrinic.net/repository/arin/kz4Clh4KvYNcvH7ig_FXGUdGMj8.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 23 Dec 2025 01:23:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2473 (0x9a9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F362AF02AR, serialNumber=933E02961E0ABD835CBC7EE283F157194746323F
        Validity
            Not Before: Dec 21 01:23:35 2025 GMT
            Not After : Dec 23 01:23:35 2025 GMT
        Subject: CN=69474c18-d133
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:51:93:81:f0:43:a8:d4:6f:44:dc:e9:9c:74:
                    17:53:76:0f:46:b0:a9:41:1c:a1:fa:c8:d0:79:ec:
                    3f:99:cd:63:1b:b7:78:46:db:94:7a:d8:6d:6b:5d:
                    b8:83:7b:98:21:14:d5:23:26:99:2e:95:e5:99:91:
                    30:3b:e8:36:8d:d0:83:43:83:61:52:07:85:3e:dd:
                    01:68:a3:6d:0d:3e:f1:ac:70:87:1d:b3:67:a6:89:
                    ac:33:74:de:32:27:58:bc:81:1f:56:a1:a0:04:9a:
                    e6:c3:81:6e:b5:69:17:f8:31:7a:97:d0:97:4f:db:
                    31:f5:b8:7d:68:9e:e1:1a:b9:e2:75:bc:d3:98:0b:
                    a6:c7:cb:90:2b:81:52:58:ec:31:8e:04:ba:8d:ba:
                    18:a7:e2:83:a7:68:e5:bb:68:44:46:83:16:8d:72:
                    01:2f:a3:e6:f6:7a:36:02:90:02:69:0e:0e:77:3f:
                    31:3d:0b:05:fa:94:9e:03:23:29:c8:50:2d:cc:33:
                    b3:76:fb:58:8c:ec:80:4c:fd:50:62:80:5a:42:bf:
                    6c:cb:f2:fd:cf:72:5d:cd:84:e0:ed:22:e6:07:7a:
                    ac:2d:60:8a:78:bc:0e:ee:5d:fd:91:e8:e7:ce:7f:
                    c2:4c:7c:6f:1e:86:82:33:47:f0:f8:18:27:53:7c:
                    a1:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:30:45:5C:66:9D:4E:36:35:44:0D:18:6B:56:D8:8C:39:6C:72:D6
            X509v3 Authority Key Identifier:
                keyid:93:3E:02:96:1E:0A:BD:83:5C:BC:7E:E2:83:F1:57:19:47:46:32:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F362AF02/4F6FDA66838C11E9B364E911F8AEA228/kz4Clh4KvYNcvH7ig_FXGUdGMj8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/kz4Clh4KvYNcvH7ig_FXGUdGMj8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362AF02/4F6FDA66838C11E9B364E911F8AEA228/kz4Clh4KvYNcvH7ig_FXGUdGMj8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:81:4b:d7:86:52:89:20:8e:9b:4b:f1:76:a3:a4:e6:6a:b0:
         ca:1e:89:0b:ae:94:ce:05:6a:f2:12:48:57:54:41:5f:35:31:
         04:1d:81:9e:80:19:26:75:08:19:22:dd:11:08:81:98:fc:13:
         d2:d1:8b:e0:37:51:fb:9b:15:93:53:0b:ca:9e:09:72:00:b3:
         1e:4b:74:c6:5b:60:74:91:ef:f3:79:d3:30:b3:51:4c:b1:82:
         88:8f:e8:52:d8:48:d0:ee:af:a6:ae:94:7d:19:3a:f3:9f:05:
         19:34:99:20:cc:f8:39:74:72:4b:89:44:b0:05:64:af:b3:29:
         16:43:1d:54:39:92:61:8a:73:8e:62:97:22:86:36:7e:83:13:
         ff:c9:12:0b:03:8e:84:67:0f:d4:c2:96:db:3a:84:bc:bf:b8:
         6d:1c:f9:7e:7b:dc:b2:91:ea:81:a8:b1:72:80:07:7e:09:6c:
         1a:0c:e2:9b:ba:c8:22:9e:ac:95:61:bc:5a:0d:dc:99:e2:ab:
         78:6a:39:6b:85:57:9c:c4:c3:6d:1c:95:05:a2:a0:a3:a6:18:
         49:fa:b5:7b:0c:5c:2b:58:84:ab:ff:99:19:7d:62:19:20:94:
         2b:b3:da:d3:a9:99:f1:0e:b3:28:72:69:cf:52:1a:5b:01:ec:
         02:ed:18:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 02:22:34 2025 by rpki-client