This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3670369/565052907E7811EC9FAD14CB5A40D577/KVkcZVM-_QiXL0qXW-xBxltEXuA.mft
File:                     KVkcZVM-_QiXL0qXW-xBxltEXuA.mft (raw, json)
Hash identifier:          6fqK8Y9g/LZWyZ5ycbLEE3sI5bh6QG05QMMAP7m5loQ=
Subject key identifier:   DE:55:B9:57:ED:24:BC:A7:59:0A:00:09:0E:E0:E4:D7:17:FE:37:6D
Authority key identifier: 29:59:1C:65:53:3E:FD:08:97:2F:4A:97:5B:EC:41:C6:5B:44:5E:E0
Certificate issuer:       /CN=F3670369AR/serialNumber=29591C65533EFD08972F4A975BEC41C65B445EE0
Certificate serial:       05CC
Authority info access:    rsync://rpki.afrinic.net/repository/arin/KVkcZVM-_QiXL0qXW-xBxltEXuA.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3670369/565052907E7811EC9FAD14CB5A40D577/KVkcZVM-_QiXL0qXW-xBxltEXuA.mft
Manifest number:          05C7
Signing time:             Mon 29 Dec 2025 02:37:56 +0000
Manifest this update:     Mon 29 Dec 2025 02:37:55 +0000
Manifest next update:     Wed 31 Dec 2025 02:37:55 +0000
Files and hashes:         1: KVkcZVM-_QiXL0qXW-xBxltEXuA.crl (hash: Xy1jLX8OdqUPrUyMNyWcJ/SrVbP78hs01tgQ8UmWxAE=)
                          2: DE53055A2E1311EFAE851899762E951A.roa (hash: UcFSJfUBz/jAMPlBsM0sx0A7nrbCZ5eci3vzt8nRiuU=)
                          3: 01CC6C947E8D11EC89A79C885A40D577.roa (hash: qd/8XDFff1CiSxAQk1vmUsyny6ywpT4UycAJmKGe26U=)
                          4: D88002927E8C11EC95A915885A40D577.roa (hash: zp+bksguNWi/6Gwbfy/elTDlK43kW6UD+PYcX23ze0Y=)
                          5: EAF40C665BD311F0B32EE4A3DAE4EC9C.roa (hash: fL1+phnAmmLMQW8rzdMcPM0YqGLRk7qlgGhlyEQ369E=)
                          6: 675DA8B27E8211ECAB19A1E75A40D577.roa (hash: TlKHAqm5F0asDSkR7ApdBCSJn77368RAQ3PQ3KzHit4=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3670369/565052907E7811EC9FAD14CB5A40D577/KVkcZVM-_QiXL0qXW-xBxltEXuA.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3670369/565052907E7811EC9FAD14CB5A40D577/KVkcZVM-_QiXL0qXW-xBxltEXuA.mft
                          rsync://rpki.afrinic.net/repository/arin/KVkcZVM-_QiXL0qXW-xBxltEXuA.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 31 Dec 2025 00:26:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1484 (0x5cc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3670369AR, serialNumber=29591C65533EFD08972F4A975BEC41C65B445EE0
        Validity
            Not Before: Dec 29 02:37:55 2025 GMT
            Not After : Dec 31 02:37:55 2025 GMT
        Subject: CN=6951e984-9413
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:6c:4e:ba:95:b9:45:f0:cf:df:c4:5b:4e:a2:
                    df:e1:fb:e0:13:e9:bf:2f:d1:49:f6:4f:f2:57:99:
                    21:18:8d:b2:44:b8:72:1c:82:29:cf:2a:80:50:bb:
                    17:0d:0e:55:b0:b8:f1:47:21:f9:88:a2:ea:97:5c:
                    a6:f3:a8:5e:a2:30:39:d2:ab:d8:6a:9d:11:7d:18:
                    62:a0:25:16:96:23:1a:4d:fb:23:a0:10:43:20:c0:
                    ab:3f:41:d2:c0:25:11:72:6a:88:77:e6:40:88:fa:
                    69:a8:d6:30:16:c2:05:d1:f1:6b:0d:94:26:c3:be:
                    ee:19:0e:43:e6:09:bc:bc:64:b6:e0:c7:93:90:be:
                    f9:65:89:09:78:eb:50:b3:4a:6a:dc:d4:ea:43:67:
                    a5:4c:4d:db:67:9c:8f:28:5e:d9:75:87:47:2e:67:
                    fc:bc:aa:25:97:80:de:f3:05:80:bc:dd:f2:24:74:
                    57:c2:de:44:cc:13:00:78:9a:05:ce:de:8e:b7:e4:
                    eb:31:2e:82:9c:5e:92:0a:01:7f:91:36:37:c5:d2:
                    ae:da:40:37:a2:54:7f:18:b8:52:dd:2b:33:ff:5f:
                    90:ca:39:e3:79:6c:69:15:0a:2b:1c:34:c8:5a:fb:
                    37:61:c1:30:3c:aa:fd:bc:d9:8e:ee:0c:6e:66:5a:
                    ae:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:55:B9:57:ED:24:BC:A7:59:0A:00:09:0E:E0:E4:D7:17:FE:37:6D
            X509v3 Authority Key Identifier:
                keyid:29:59:1C:65:53:3E:FD:08:97:2F:4A:97:5B:EC:41:C6:5B:44:5E:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3670369/565052907E7811EC9FAD14CB5A40D577/KVkcZVM-_QiXL0qXW-xBxltEXuA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/KVkcZVM-_QiXL0qXW-xBxltEXuA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3670369/565052907E7811EC9FAD14CB5A40D577/KVkcZVM-_QiXL0qXW-xBxltEXuA.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:a0:d5:96:42:7f:77:97:3a:a7:31:c5:d1:20:e2:14:ff:c0:
         1a:62:b9:69:c5:b0:f8:56:6f:7b:97:ca:94:20:1a:00:56:6c:
         00:ca:4e:4f:55:6f:8d:15:18:50:1a:17:27:a4:c7:2d:30:2b:
         f6:e2:d9:ac:5f:e3:58:ea:fd:cc:a1:4d:91:74:3a:1c:d2:fc:
         04:1b:38:37:b4:24:cb:a0:7c:d5:9e:27:f3:83:e8:e0:cc:77:
         5a:6f:9d:2c:a1:f5:e2:61:b5:99:55:13:0c:4b:f8:72:3b:27:
         0d:71:ef:85:6e:b8:5a:83:94:be:97:99:b9:ea:5d:6d:15:31:
         f6:8a:44:52:04:b9:96:dc:2f:0a:f4:b1:9e:3d:d7:b0:1b:03:
         6a:9a:dc:a5:de:c5:0b:44:c5:78:c1:b6:98:42:48:84:1b:e5:
         3a:fe:7a:e6:af:2c:a9:59:85:e0:22:5e:78:03:4d:df:38:a1:
         ee:35:89:7b:c3:27:1d:06:a5:61:4e:ba:36:03:a2:76:0f:b7:
         1c:e9:18:6f:67:aa:77:89:8d:b1:e7:4f:73:81:d1:47:bf:f1:
         fa:2a:09:b9:4d:37:f5:83:d8:65:8e:fe:6c:2d:b4:1a:f6:a4:
         66:ba:e1:29:51:94:ca:67:d6:d9:65:94:dc:b1:54:d8:c6:fe:
         17:63:88:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 29 23:00:28 2025 by rpki-client