This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36B4943/193F6428343911ED8497D187F1222468/35Ti668FVkXR68M9dxpKkrH1obo.mft
File:                     35Ti668FVkXR68M9dxpKkrH1obo.mft (raw, json)
Hash identifier:          OosswlQ3IlCHE86jD981kmLUlOQNJmihKXjLkdUKnEA=
Subject key identifier:   B2:55:34:4A:88:CD:4D:DD:3C:F3:36:B7:69:94:DA:7C:9A:B5:F3:7E
Authority key identifier: DF:94:E2:EB:AF:05:56:45:D1:EB:C3:3D:77:1A:4A:92:B1:F5:A1:BA
Certificate issuer:       /CN=F36B4943AR/serialNumber=DF94E2EBAF055645D1EBC33D771A4A92B1F5A1BA
Certificate serial:       04DB
Authority info access:    rsync://rpki.afrinic.net/repository/arin/35Ti668FVkXR68M9dxpKkrH1obo.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36B4943/193F6428343911ED8497D187F1222468/35Ti668FVkXR68M9dxpKkrH1obo.mft
Manifest number:          04DA
Signing time:             Mon 29 Dec 2025 03:01:26 +0000
Manifest this update:     Mon 29 Dec 2025 03:01:25 +0000
Manifest next update:     Wed 31 Dec 2025 03:01:25 +0000
Files and hashes:         1: 35Ti668FVkXR68M9dxpKkrH1obo.crl (hash: LGEs2Kv42ga4Y41WsWlM5l2osI8eWlMHWnzqQHU4acA=)
                          2: 22DB7C2C343B11ED93BC198DF1222468.roa (hash: MYN14FUjceVL/wAPb2hSaQa3Lgxp0KPz1gwNzEYrDaM=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36B4943/193F6428343911ED8497D187F1222468/35Ti668FVkXR68M9dxpKkrH1obo.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36B4943/193F6428343911ED8497D187F1222468/35Ti668FVkXR68M9dxpKkrH1obo.mft
                          rsync://rpki.afrinic.net/repository/arin/35Ti668FVkXR68M9dxpKkrH1obo.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 31 Dec 2025 00:26:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1243 (0x4db)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36B4943AR, serialNumber=DF94E2EBAF055645D1EBC33D771A4A92B1F5A1BA
        Validity
            Not Before: Dec 29 03:01:25 2025 GMT
            Not After : Dec 31 03:01:25 2025 GMT
        Subject: CN=6951ef06-bca6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:4b:dd:b9:99:e2:97:8e:f9:b6:e6:b8:44:7f:
                    40:b7:c2:50:f8:1d:54:12:28:79:44:a1:24:d0:44:
                    0d:15:1e:b9:7d:59:55:28:db:ab:08:63:de:2a:c4:
                    66:0e:c0:d7:7c:83:51:78:e5:a7:af:e4:40:48:60:
                    49:78:91:bd:d9:a5:d4:75:82:ee:b1:ca:fd:83:bd:
                    b7:e3:3e:dd:a6:cd:c4:bf:3f:d3:b6:47:e3:e2:d9:
                    85:10:4e:d0:ae:d7:dd:88:11:6c:f2:1f:92:67:ae:
                    ed:52:bc:16:ae:51:e2:07:4e:3a:d6:98:e5:66:76:
                    f6:1d:22:66:3f:ed:19:ee:ef:2a:97:d2:48:56:35:
                    87:b0:ce:fd:ce:ab:77:71:68:83:c3:ca:e1:f8:6a:
                    02:e4:81:9e:37:f3:a9:2d:0e:e4:05:fd:c8:2f:c5:
                    8d:cc:7d:c3:3a:d6:51:e3:28:97:4d:fb:56:1a:29:
                    53:7a:c6:67:10:b2:c9:12:a2:a3:1f:22:10:1d:29:
                    60:89:04:29:1e:34:31:da:a7:22:a0:92:b6:e9:08:
                    c8:59:f2:c5:9c:f9:ff:fb:75:e7:be:be:c2:14:72:
                    1b:70:c0:cb:5d:75:cc:bb:a0:a5:18:9d:8a:34:82:
                    4e:6e:af:36:01:8c:07:b1:ef:c7:82:ea:a3:a1:8d:
                    51:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:55:34:4A:88:CD:4D:DD:3C:F3:36:B7:69:94:DA:7C:9A:B5:F3:7E
            X509v3 Authority Key Identifier:
                keyid:DF:94:E2:EB:AF:05:56:45:D1:EB:C3:3D:77:1A:4A:92:B1:F5:A1:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36B4943/193F6428343911ED8497D187F1222468/35Ti668FVkXR68M9dxpKkrH1obo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/35Ti668FVkXR68M9dxpKkrH1obo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B4943/193F6428343911ED8497D187F1222468/35Ti668FVkXR68M9dxpKkrH1obo.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:02:48:5f:58:1f:0c:3d:2a:3d:04:f3:1d:a2:af:a9:40:37:
         d4:d1:b3:19:fa:f4:b3:e7:77:d7:36:46:71:9a:6a:ec:6d:c3:
         be:a4:e6:73:99:e9:fa:7f:d0:60:51:9b:36:43:7b:c3:58:7e:
         77:0c:16:7b:d1:40:1f:45:57:23:85:7e:c0:0c:dc:98:0c:85:
         c8:99:60:9b:cf:92:42:04:a1:89:18:42:bb:74:4e:8c:8e:9a:
         54:83:af:2a:05:ae:d0:5a:7f:fc:3d:6e:c4:b5:df:bf:b5:44:
         1c:fc:c4:ac:ff:3d:3b:55:94:0b:01:1c:17:20:f2:8b:67:e2:
         7b:f2:1c:85:bd:cd:ad:47:a7:f4:4b:c4:b6:5b:d2:38:b8:e9:
         e1:a1:44:c5:47:10:3c:3f:71:6a:d1:74:9c:fd:42:8d:27:ef:
         ae:8c:6f:e7:0b:bf:b5:44:8b:71:b3:d7:7d:0e:1b:14:6a:0f:
         f6:82:43:4d:cf:74:ec:fe:0d:b2:f0:4a:e7:98:2b:37:42:a8:
         5f:df:ef:5e:ff:79:04:62:19:54:56:38:cb:91:48:72:94:b3:
         d7:80:f8:6c:5e:77:f9:cd:e6:90:e0:cc:07:09:35:12:9a:39:
         63:12:7f:4a:ef:df:94:ce:12:75:8b:f7:7d:71:f8:7e:28:b7:
         67:75:eb:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 29 10:13:33 2025 by rpki-client