This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3613F08/BF472C78690511EEB09925884AD9E6FC/M-hGYU4VRCxoAFpeP85ct1bgSn8.mft
File:                     M-hGYU4VRCxoAFpeP85ct1bgSn8.mft (raw, json)
Hash identifier:          lCR1WVwp8BuvmZ2Ypq2h+VewlyZkK/64J/RNc8KHq7w=
Subject key identifier:   25:7B:1B:4B:D0:E9:C7:4F:A7:F0:62:4E:C8:C5:D6:39:D3:C6:9B:95
Authority key identifier: 33:E8:46:61:4E:15:44:2C:68:00:5A:5E:3F:CE:5C:B7:56:E0:4A:7F
Certificate issuer:       /CN=F3613F08AF/serialNumber=33E846614E15442C68005A5E3FCE5CB756E04A7F
Certificate serial:       035E
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/M-hGYU4VRCxoAFpeP85ct1bgSn8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3613F08/BF472C78690511EEB09925884AD9E6FC/M-hGYU4VRCxoAFpeP85ct1bgSn8.mft
Manifest number:          035D
Signing time:             Sun 25 Jan 2026 03:48:23 +0000
Manifest this update:     Sun 25 Jan 2026 03:48:22 +0000
Manifest next update:     Tue 27 Jan 2026 03:48:22 +0000
Files and hashes:         1: M-hGYU4VRCxoAFpeP85ct1bgSn8.crl (hash: vBjZjZaouMRi3peRIUmd5pZsJyPN7suLliHkV+HORe8=)
                          2: AC0A32D0690611EEB3384E8B4AD9E6FC.roa (hash: kErDXNR3ZNhWVzlb8Vo/Il2bfhwKojLKehJI3WdRMNI=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3613F08/BF472C78690511EEB09925884AD9E6FC/M-hGYU4VRCxoAFpeP85ct1bgSn8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3613F08/BF472C78690511EEB09925884AD9E6FC/M-hGYU4VRCxoAFpeP85ct1bgSn8.mft
                          rsync://rpki.afrinic.net/repository/afrinic/M-hGYU4VRCxoAFpeP85ct1bgSn8.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:06:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 862 (0x35e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3613F08AF, serialNumber=33E846614E15442C68005A5E3FCE5CB756E04A7F
        Validity
            Not Before: Jan 25 03:48:22 2026 GMT
            Not After : Jan 27 03:48:22 2026 GMT
        Subject: CN=69759287-f6f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:22:32:8e:3d:ec:2e:54:f5:17:13:5f:a6:30:
                    1a:f5:07:14:6e:4e:8e:c0:0f:93:bf:31:3e:81:b0:
                    64:7b:16:f6:19:3a:8b:e8:b6:42:f5:8b:80:a9:10:
                    cd:13:f6:19:a3:4b:61:1a:74:6d:18:e6:0c:b1:09:
                    21:85:cd:6f:f9:2f:53:14:fd:0b:a3:78:f7:97:28:
                    df:f6:7e:4a:7b:e1:28:c8:05:93:c1:da:ac:7a:ff:
                    52:f4:f4:f2:92:76:65:d3:40:61:50:0e:77:0b:7f:
                    cf:7e:48:0d:5a:61:94:04:db:51:49:22:70:75:26:
                    f3:e6:3b:f5:52:89:23:eb:b9:b5:2d:1e:7f:5a:8a:
                    34:17:ad:a2:72:d9:33:d0:29:df:df:63:78:13:e0:
                    de:b3:30:ce:ab:c9:6b:2d:4f:8e:90:56:b6:ad:be:
                    f5:91:dd:79:d2:17:c0:30:f1:0c:90:e8:51:58:b9:
                    e9:37:0f:fc:a4:fc:dd:c6:c5:97:b8:01:70:e8:85:
                    ed:d5:ab:9b:cb:f8:60:9f:d5:f6:10:8c:0b:ff:1f:
                    1c:dc:60:0b:d4:69:43:71:b9:8f:be:58:96:2f:65:
                    92:49:aa:1e:55:b9:ce:25:b8:06:27:60:91:70:df:
                    d8:85:ac:73:69:d1:ea:cc:58:e2:83:c4:be:ef:5f:
                    fb:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:7B:1B:4B:D0:E9:C7:4F:A7:F0:62:4E:C8:C5:D6:39:D3:C6:9B:95
            X509v3 Authority Key Identifier:
                keyid:33:E8:46:61:4E:15:44:2C:68:00:5A:5E:3F:CE:5C:B7:56:E0:4A:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3613F08/BF472C78690511EEB09925884AD9E6FC/M-hGYU4VRCxoAFpeP85ct1bgSn8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/M-hGYU4VRCxoAFpeP85ct1bgSn8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3613F08/BF472C78690511EEB09925884AD9E6FC/M-hGYU4VRCxoAFpeP85ct1bgSn8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:8d:74:1d:00:20:47:61:e2:89:b7:d1:aa:c0:63:f7:80:14:
         d2:88:14:db:1e:50:e3:fa:c0:8a:c0:10:26:91:9e:b2:16:41:
         d4:87:e3:dc:73:6c:22:e7:03:54:c3:69:b8:2b:11:0e:50:1b:
         3b:78:35:70:18:e4:d0:b8:8d:92:db:c5:13:f4:ab:a7:44:d1:
         5c:54:4c:af:e7:77:18:16:8d:04:65:37:ed:2f:45:f7:41:37:
         03:b4:aa:59:8f:cc:4a:11:75:d4:93:1b:af:3c:1e:ee:f5:18:
         aa:a6:04:f4:2f:4b:51:4d:f2:29:dc:d9:3e:ff:f7:ca:16:00:
         dc:2a:47:57:2e:f8:b4:13:86:47:63:a0:37:20:db:aa:7c:48:
         67:e3:41:56:c7:d2:15:f6:0b:4e:d4:ce:e0:1d:ac:0b:c0:d4:
         87:37:ee:cc:30:d6:25:48:2b:23:16:d8:56:71:5e:aa:06:91:
         5d:e9:0f:91:69:e3:ad:34:c4:bb:c2:b6:d0:c5:87:10:3c:95:
         b0:80:d0:4b:a6:7a:0e:06:0d:51:c4:db:2d:f8:10:b9:d9:6d:
         8f:3c:0e:74:da:ca:6a:a9:50:43:ba:23:8e:a3:40:c3:9f:90:
         33:6f:e9:cf:d8:8d:ea:41:8d:cd:c6:82:79:31:e1:d5:8b:ca:
         a3:86:4c:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 21:11:31 2026 by rpki-client