This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36939A6/AD94AA20B5FD11EDBFBA63F1F1222468/itr_GHci3uuw3c4Fe_PCmNAsfM4.mft
File:                     itr_GHci3uuw3c4Fe_PCmNAsfM4.mft (raw, json)
Hash identifier:          MY3rizHdWaAfws2jZCs7uLCUgxcCiSHci0m5vXztUCs=
Subject key identifier:   E4:01:EB:44:F6:5F:32:C8:99:69:EC:7E:E3:8C:FB:4B:8D:5F:9E:A6
Authority key identifier: 8A:DA:FF:18:77:22:DE:EB:B0:DD:CE:05:7B:F3:C2:98:D0:2C:7C:CE
Certificate issuer:       /CN=F36939A6AR/serialNumber=8ADAFF187722DEEBB0DDCE057BF3C298D02C7CCE
Certificate serial:       0425
Authority info access:    rsync://rpki.afrinic.net/repository/arin/itr_GHci3uuw3c4Fe_PCmNAsfM4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36939A6/AD94AA20B5FD11EDBFBA63F1F1222468/itr_GHci3uuw3c4Fe_PCmNAsfM4.mft
Manifest number:          0424
Signing time:             Sat 20 Dec 2025 03:17:50 +0000
Manifest this update:     Sat 20 Dec 2025 03:17:49 +0000
Manifest next update:     Mon 22 Dec 2025 03:17:49 +0000
Files and hashes:         1: itr_GHci3uuw3c4Fe_PCmNAsfM4.crl (hash: UJrv2rCHqGhk2pKgcImvD7cgTAnZSis+rU2qAwLNh1k=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36939A6/AD94AA20B5FD11EDBFBA63F1F1222468/itr_GHci3uuw3c4Fe_PCmNAsfM4.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36939A6/AD94AA20B5FD11EDBFBA63F1F1222468/itr_GHci3uuw3c4Fe_PCmNAsfM4.mft
                          rsync://rpki.afrinic.net/repository/arin/itr_GHci3uuw3c4Fe_PCmNAsfM4.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 22 Dec 2025 00:26:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1061 (0x425)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36939A6AR, serialNumber=8ADAFF187722DEEBB0DDCE057BF3C298D02C7CCE
        Validity
            Not Before: Dec 20 03:17:49 2025 GMT
            Not After : Dec 22 03:17:49 2025 GMT
        Subject: CN=6946155e-d782
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:da:8e:f4:94:2f:a9:e7:a0:70:d2:bb:30:3b:
                    64:2a:d1:a7:bb:95:2e:be:99:be:a5:76:84:5a:b5:
                    0f:f3:b5:39:52:c9:2c:a8:6c:c0:55:f6:45:b5:9d:
                    89:4a:ac:64:03:ee:0c:4e:4a:b4:5d:35:6d:30:2f:
                    d5:5f:ab:df:84:c8:48:3d:56:54:88:d6:cb:23:0a:
                    a5:35:4d:1e:30:a1:1a:38:e2:ae:96:24:96:5c:ef:
                    27:7f:ed:97:4e:b5:8d:b7:e1:c8:5e:28:a7:04:0f:
                    9e:d4:fe:05:5d:e3:0b:b6:3f:df:e7:21:97:3f:ff:
                    e8:c0:7c:79:de:61:fc:ec:b4:19:d8:09:2a:7c:0d:
                    5d:99:86:33:b4:f3:6f:d0:39:0e:68:e0:a3:5a:74:
                    f4:03:7c:1c:87:76:f3:4c:6f:06:9e:18:d4:69:d0:
                    24:9f:eb:bc:82:ca:20:ab:01:87:c3:ec:db:61:5f:
                    de:74:f1:ed:68:f8:67:2b:64:40:40:14:9b:68:27:
                    91:87:89:7c:63:30:e8:3c:23:24:1f:64:87:e5:77:
                    c2:44:ba:6c:56:0a:e9:02:c1:59:77:d4:f2:de:ee:
                    c9:01:5c:e4:9e:a5:64:c4:f1:08:8e:67:dd:d4:13:
                    14:aa:1f:8d:ec:9b:03:df:f5:13:b9:2a:80:c3:13:
                    56:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:01:EB:44:F6:5F:32:C8:99:69:EC:7E:E3:8C:FB:4B:8D:5F:9E:A6
            X509v3 Authority Key Identifier:
                keyid:8A:DA:FF:18:77:22:DE:EB:B0:DD:CE:05:7B:F3:C2:98:D0:2C:7C:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36939A6/AD94AA20B5FD11EDBFBA63F1F1222468/itr_GHci3uuw3c4Fe_PCmNAsfM4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/itr_GHci3uuw3c4Fe_PCmNAsfM4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36939A6/AD94AA20B5FD11EDBFBA63F1F1222468/itr_GHci3uuw3c4Fe_PCmNAsfM4.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:a0:41:75:d6:72:7a:6f:c7:f2:1c:21:14:23:ec:e7:01:ce:
         c9:2d:0c:a4:34:4d:91:eb:c8:a9:56:2e:d2:3d:b3:18:40:45:
         23:d2:20:34:5b:6b:7a:6f:fa:99:f3:41:34:c3:24:5a:5d:99:
         0d:5d:7c:27:0b:da:3d:02:ea:10:35:2b:36:21:2b:6f:c4:e3:
         c7:8f:43:31:83:c3:df:db:1a:5d:4a:a9:37:f7:b6:cc:b8:40:
         8e:ea:d7:4b:96:1f:f4:42:a8:79:64:be:f0:6e:ea:4e:fe:e4:
         89:87:5b:4f:99:0b:65:33:b1:2e:cf:e4:d8:ff:8a:22:87:ea:
         ff:0d:3b:72:3c:68:66:55:fe:3c:de:86:2e:28:de:ee:8d:0b:
         ab:23:9c:5f:55:6f:37:f2:ad:7d:bb:d9:8b:92:65:46:2e:38:
         4b:5c:e2:6e:da:b9:7d:de:2b:25:0a:59:ff:37:e7:45:85:77:
         4d:6a:dc:04:20:6e:e8:aa:40:53:c1:ba:df:b0:19:0a:84:01:
         39:ac:e7:d5:69:85:e8:1f:19:02:43:60:b7:28:42:dd:d8:26:
         c1:69:3b:e5:a7:6a:c5:d9:ec:f2:a9:61:21:99:c8:b2:1b:57:
         6a:bf:73:20:44:c8:63:8b:92:b6:27:7d:af:12:1b:58:e9:89:
         8c:a1:c4:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 18:37:40 2025 by rpki-client