This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3615826/38186D12F05711EB93F9A138D8A014CE/aRHVUPOKT27JEBz-cu1_bZFhR3E.mft
File:                     aRHVUPOKT27JEBz-cu1_bZFhR3E.mft (raw, json)
Hash identifier:          gorKZaff7Rm7NitzLzYBmUtr6/ztBug9YojLBGfstCc=
Subject key identifier:   DC:38:FB:C8:28:00:86:BC:5E:7B:73:47:97:84:A7:09:C7:8F:15:83
Authority key identifier: 69:11:D5:50:F3:8A:4F:6E:C9:10:1C:FE:72:ED:7F:6D:91:61:47:71
Certificate issuer:       /CN=F3615826AF/serialNumber=6911D550F38A4F6EC9101CFE72ED7F6D91614771
Certificate serial:       0695
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/aRHVUPOKT27JEBz-cu1_bZFhR3E.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3615826/38186D12F05711EB93F9A138D8A014CE/aRHVUPOKT27JEBz-cu1_bZFhR3E.mft
Manifest number:          0695
Signing time:             Sun 25 Jan 2026 02:18:15 +0000
Manifest this update:     Sun 25 Jan 2026 02:18:14 +0000
Manifest next update:     Tue 27 Jan 2026 02:18:14 +0000
Files and hashes:         1: aRHVUPOKT27JEBz-cu1_bZFhR3E.crl (hash: 3d2rS015jJKvfUu2uDiQqBVUX0G544hngncaxHcNodI=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3615826/38186D12F05711EB93F9A138D8A014CE/aRHVUPOKT27JEBz-cu1_bZFhR3E.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3615826/38186D12F05711EB93F9A138D8A014CE/aRHVUPOKT27JEBz-cu1_bZFhR3E.mft
                          rsync://rpki.afrinic.net/repository/afrinic/aRHVUPOKT27JEBz-cu1_bZFhR3E.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:06:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1685 (0x695)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3615826AF, serialNumber=6911D550F38A4F6EC9101CFE72ED7F6D91614771
        Validity
            Not Before: Jan 25 02:18:14 2026 GMT
            Not After : Jan 27 02:18:14 2026 GMT
        Subject: CN=69757d67-11d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:89:ca:ba:96:29:27:59:77:9f:fb:27:a0:2f:
                    65:f8:ec:b7:1a:a8:2f:3e:e0:39:3e:e3:49:d3:ab:
                    b1:4c:b1:45:e3:62:81:db:c0:f2:98:a1:59:c4:40:
                    fb:8f:f0:1d:6a:4d:94:bb:45:64:d0:b4:d9:60:13:
                    9c:d3:17:a5:d5:6b:ef:01:9b:50:d9:32:0d:47:e9:
                    ec:84:c0:01:88:0b:08:30:2d:16:19:ec:5b:d6:e6:
                    77:93:bc:20:d4:c3:89:1c:60:e3:ca:99:15:7c:ef:
                    65:51:b7:b2:50:21:d7:58:91:b0:ba:9b:de:67:91:
                    ba:a1:e4:d3:65:28:77:69:b8:1c:2b:02:6e:62:1e:
                    b8:d5:56:44:72:3c:e7:98:95:6e:b6:d8:01:a6:59:
                    0d:82:31:60:18:86:89:2b:6c:35:0b:0c:d6:61:8c:
                    13:c2:e2:60:a2:5a:3d:52:ce:4e:46:f4:f9:0b:70:
                    a4:c0:39:22:47:5c:46:cd:4d:a5:cf:f7:53:0d:f2:
                    b0:92:b6:38:2b:a0:8b:9a:8d:d6:9b:0d:2e:5c:a4:
                    4f:a4:af:d8:8e:40:50:fd:9a:94:14:28:a4:b8:1c:
                    2c:90:f8:e3:85:3b:b9:b6:21:14:39:9a:30:2b:50:
                    5e:ec:c2:a8:5e:d7:59:3a:3f:a7:64:cd:2d:78:d1:
                    79:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:38:FB:C8:28:00:86:BC:5E:7B:73:47:97:84:A7:09:C7:8F:15:83
            X509v3 Authority Key Identifier:
                keyid:69:11:D5:50:F3:8A:4F:6E:C9:10:1C:FE:72:ED:7F:6D:91:61:47:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3615826/38186D12F05711EB93F9A138D8A014CE/aRHVUPOKT27JEBz-cu1_bZFhR3E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/aRHVUPOKT27JEBz-cu1_bZFhR3E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3615826/38186D12F05711EB93F9A138D8A014CE/aRHVUPOKT27JEBz-cu1_bZFhR3E.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:82:84:2c:3e:e0:ba:2d:c5:a4:74:9b:79:f1:5c:91:ac:68:
         b1:f1:30:d1:50:9f:3d:dc:87:07:64:da:14:a3:8a:50:36:e4:
         7c:1e:e8:3c:ff:5f:e3:6d:0f:ea:b3:eb:44:16:1f:05:1f:f2:
         4b:1f:f1:e4:13:71:79:f1:95:91:67:78:4c:d6:0d:cd:bc:75:
         61:23:35:76:a0:9c:d1:38:85:2a:59:09:7d:37:b9:a3:c3:4a:
         ef:26:fd:44:4a:03:05:a9:9a:2e:e0:ec:c5:ca:57:54:f8:5b:
         1e:51:ce:5f:0b:b5:c3:f5:47:0a:b8:0d:65:01:c0:df:78:50:
         75:81:05:c8:2c:08:b4:e2:8c:06:45:d0:f6:6f:14:89:9c:6c:
         e4:21:ea:69:f6:cf:f4:33:07:24:d5:e9:19:65:04:91:78:20:
         bf:71:a7:68:72:10:de:b2:92:6b:1a:87:f3:ee:f2:58:30:a9:
         94:c3:76:0a:96:0a:fd:c6:ae:8e:f4:7b:d1:e0:e0:57:4e:b7:
         97:d2:7e:ee:c7:e3:c4:d4:cc:ae:9f:d1:14:e9:ab:eb:8e:16:
         72:24:2f:f2:db:78:15:50:21:9a:c0:4a:61:ae:44:eb:86:3b:
         99:b7:9d:7e:34:1f:2d:82:cf:16:12:e0:cc:cd:c0:be:66:71:
         e4:20:ca:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 17:02:26 2026 by rpki-client