This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3670C40/E07F1110864411E989CEFB56F8AEA228/tHFvO8e9HbRHzHMP7nortjKrGQM.mft
File:                     tHFvO8e9HbRHzHMP7nortjKrGQM.mft (raw, json)
Hash identifier:          DSTrvB2ykOF2EFXUoor58ZjTiIcHvXTeyNx1XvAFd+c=
Subject key identifier:   F1:CB:26:27:D7:FA:BC:80:D7:AF:18:F1:E7:2E:B4:57:31:5A:8F:5C
Authority key identifier: B4:71:6F:3B:C7:BD:1D:B4:47:CC:73:0F:EE:7A:2B:B6:32:AB:19:03
Certificate issuer:       /CN=F3670C40AR/serialNumber=B4716F3BC7BD1DB447CC730FEE7A2BB632AB1903
Certificate serial:       099E
Authority info access:    rsync://rpki.afrinic.net/repository/arin/tHFvO8e9HbRHzHMP7nortjKrGQM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3670C40/E07F1110864411E989CEFB56F8AEA228/tHFvO8e9HbRHzHMP7nortjKrGQM.mft
Manifest number:          099D
Signing time:             Sat 27 Dec 2025 01:25:18 +0000
Manifest this update:     Sat 27 Dec 2025 01:25:17 +0000
Manifest next update:     Mon 29 Dec 2025 01:25:17 +0000
Files and hashes:         1: tHFvO8e9HbRHzHMP7nortjKrGQM.crl (hash: pq0t9RRQf+dtBe6TuVahs8BWUWEpAZJrmxVkvkQ7xfU=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3670C40/E07F1110864411E989CEFB56F8AEA228/tHFvO8e9HbRHzHMP7nortjKrGQM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3670C40/E07F1110864411E989CEFB56F8AEA228/tHFvO8e9HbRHzHMP7nortjKrGQM.mft
                          rsync://rpki.afrinic.net/repository/arin/tHFvO8e9HbRHzHMP7nortjKrGQM.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 29 Dec 2025 00:26:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2462 (0x99e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3670C40AR, serialNumber=B4716F3BC7BD1DB447CC730FEE7A2BB632AB1903
        Validity
            Not Before: Dec 27 01:25:17 2025 GMT
            Not After : Dec 29 01:25:17 2025 GMT
        Subject: CN=694f357e-33ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:fd:48:6c:0e:7a:ce:d2:a3:4c:ce:45:14:35:
                    1c:59:d7:4d:0c:13:6c:b7:a5:ab:1c:ea:b3:03:8e:
                    50:98:76:55:df:9f:07:64:36:eb:f5:53:f4:81:76:
                    c6:f6:a5:d2:22:a6:5e:76:20:00:c5:da:be:14:10:
                    2c:ae:6c:c9:96:fe:23:b7:34:2b:a8:02:5b:1c:88:
                    30:ec:6c:b2:43:13:5a:4e:d6:ce:27:f2:d3:df:7c:
                    7a:e5:16:01:1f:76:40:42:42:dd:e6:b5:17:5a:e5:
                    97:99:5c:3c:92:63:3e:ac:a0:2c:ca:61:7c:23:25:
                    a9:b5:a7:3b:17:a8:9e:58:4c:7b:17:4a:0a:48:da:
                    44:44:65:b4:76:83:cf:c8:d9:14:66:39:b3:00:85:
                    b6:91:b5:e1:79:0e:3c:7c:23:af:03:4e:bf:db:e2:
                    af:bb:f2:27:74:a8:c5:6e:2e:53:e8:f7:93:2a:84:
                    78:e5:6e:c0:cd:66:e9:25:43:c3:b9:0f:3f:63:6f:
                    0e:f5:17:a3:d8:d9:00:f6:1c:63:5d:73:ac:98:4c:
                    fa:00:c6:91:e7:e4:c7:8c:56:46:dd:4d:1b:9f:46:
                    8e:ea:7f:21:eb:b0:f9:e4:82:61:0d:99:d3:fb:d1:
                    08:47:3c:5b:fa:2e:bd:9d:7f:d3:8e:78:f3:27:51:
                    f9:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:CB:26:27:D7:FA:BC:80:D7:AF:18:F1:E7:2E:B4:57:31:5A:8F:5C
            X509v3 Authority Key Identifier:
                keyid:B4:71:6F:3B:C7:BD:1D:B4:47:CC:73:0F:EE:7A:2B:B6:32:AB:19:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3670C40/E07F1110864411E989CEFB56F8AEA228/tHFvO8e9HbRHzHMP7nortjKrGQM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/tHFvO8e9HbRHzHMP7nortjKrGQM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3670C40/E07F1110864411E989CEFB56F8AEA228/tHFvO8e9HbRHzHMP7nortjKrGQM.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c7:90:c1:3f:c3:81:2d:cb:13:a9:77:fb:c0:27:e9:ae:4b:7f:
         c2:32:77:f8:14:16:de:60:bf:82:63:9a:73:29:00:3c:98:64:
         1b:a1:d9:2d:78:03:ca:12:7a:0f:64:7a:39:9f:55:46:91:7f:
         c4:d2:a5:9a:45:e5:17:39:30:dd:39:9d:30:a5:05:00:8d:3c:
         09:45:b8:fb:b1:48:62:e3:d7:eb:a9:e1:35:03:09:86:96:0c:
         31:0e:c1:44:a6:70:cd:32:75:ab:bc:29:ec:13:7e:5d:8a:7c:
         5f:83:a0:16:ed:57:15:a7:28:99:f8:1b:22:c2:32:3f:e0:72:
         fa:17:16:01:b0:47:fd:a8:d2:b5:bd:9a:e7:c2:eb:1b:75:74:
         82:8b:99:af:64:25:35:59:ca:e1:3b:7f:20:dc:27:26:cd:40:
         46:45:d3:9e:fe:7f:64:9a:d1:f9:9c:16:55:05:c7:63:f8:de:
         6d:b7:35:71:04:63:57:9a:29:50:26:4c:73:07:a0:7f:e1:ca:
         c9:9e:26:37:b8:9a:40:ac:c6:5d:2b:72:a2:03:f5:01:f2:f1:
         24:73:70:5d:55:ba:20:7f:95:4e:93:c4:5f:06:4f:bf:b0:1f:
         92:c3:76:d6:84:d7:20:89:1e:ab:82:da:10:80:8a:d3:78:dc:
         ed:43:aa:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 27 10:04:30 2025 by rpki-client