This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3619C2D/A3800BAE482011EFB826B541762E951A/CrgqSYFgfZszadx3bbCHPaDXW0o.mft
File:                     CrgqSYFgfZszadx3bbCHPaDXW0o.mft (raw, json)
Hash identifier:          TgO7bBZannM52YxlIHRn/UY0zcTSon3zYiXdNBMcUko=
Subject key identifier:   26:2C:C7:2F:BC:FE:5B:42:8F:2E:84:49:00:56:E9:41:84:6A:10:1D
Authority key identifier: 0A:B8:2A:49:81:60:7D:9B:33:69:DC:77:6D:B0:87:3D:A0:D7:5B:4A
Certificate issuer:       /CN=F3619C2DAF/serialNumber=0AB82A4981607D9B3369DC776DB0873DA0D75B4A
Certificate serial:       023C
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/CrgqSYFgfZszadx3bbCHPaDXW0o.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3619C2D/A3800BAE482011EFB826B541762E951A/CrgqSYFgfZszadx3bbCHPaDXW0o.mft
Manifest number:          0239
Signing time:             Sat 24 Jan 2026 04:23:56 +0000
Manifest this update:     Sat 24 Jan 2026 04:23:55 +0000
Manifest next update:     Mon 26 Jan 2026 04:23:55 +0000
Files and hashes:         1: CrgqSYFgfZszadx3bbCHPaDXW0o.crl (hash: YRq5cXRKV+ZOvrpv9Il+kD/pbBzNAgqIrFadeBFX/Ks=)
                          2: 49178D26482111EFBF6A9846762E951A.roa (hash: Uq5zF4pcoSNvC1y+ziK2X/Qxf/rDJCV5RGjunbzu6Yw=)
                          3: B03D2452482111EF9F9EC84A762E951A.roa (hash: jCfjvbMFxRCBjcQ1hYzWoTlmpoZT6gauVXaJc8YGgBc=)
                          4: 74DC4CE4482111EFB52ABE46762E951A.roa (hash: IrKSaBlXTXvuFdDCMcmVoeGgt+ao2gr+1sDL9IuQ/x0=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3619C2D/A3800BAE482011EFB826B541762E951A/CrgqSYFgfZszadx3bbCHPaDXW0o.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3619C2D/A3800BAE482011EFB826B541762E951A/CrgqSYFgfZszadx3bbCHPaDXW0o.mft
                          rsync://rpki.afrinic.net/repository/afrinic/CrgqSYFgfZszadx3bbCHPaDXW0o.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 26 Jan 2026 04:23:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 572 (0x23c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3619C2DAF, serialNumber=0AB82A4981607D9B3369DC776DB0873DA0D75B4A
        Validity
            Not Before: Jan 24 04:23:55 2026 GMT
            Not After : Jan 26 04:23:55 2026 GMT
        Subject: CN=6974495c-f188
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:db:7c:37:e6:56:2e:dc:4f:d5:f5:c4:41:92:
                    05:09:0e:25:70:93:02:be:54:18:f9:86:09:dc:c3:
                    9c:1e:dd:f1:ce:98:80:16:bd:2d:c8:60:ad:e2:10:
                    86:d8:60:1d:58:95:3d:9b:3c:50:4e:c5:13:62:eb:
                    f1:79:b3:e5:ec:23:47:9a:22:bc:af:a3:9b:fd:ae:
                    39:82:f4:b1:d8:85:6e:8f:32:60:bd:7e:9d:78:8f:
                    99:c5:af:64:6a:21:3c:62:06:16:cf:2b:bc:30:7a:
                    86:80:2c:c5:37:a2:98:0d:1c:41:f2:d2:21:e7:32:
                    b2:4e:fe:85:ca:f1:ba:46:8d:ea:da:85:b0:f3:b9:
                    a6:0a:cd:04:09:2a:4b:3b:0e:16:fc:02:02:46:c8:
                    72:77:02:27:d3:46:95:ef:e0:cf:f0:29:2a:e5:c3:
                    95:38:64:72:3e:39:fc:4a:0a:86:a8:b9:c6:34:d5:
                    92:e1:f5:f8:48:57:f7:d6:b6:4f:06:f1:7b:4f:c7:
                    c6:8d:4d:69:1d:0d:32:57:f6:1a:5f:25:4c:af:35:
                    b5:d1:30:c2:9b:f5:d8:38:0d:77:06:da:0c:44:f8:
                    f5:74:6a:8d:21:3d:17:84:44:21:3e:a4:00:d4:b9:
                    7a:85:a0:59:cf:96:f9:02:c2:81:d3:72:6a:10:ba:
                    b2:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:2C:C7:2F:BC:FE:5B:42:8F:2E:84:49:00:56:E9:41:84:6A:10:1D
            X509v3 Authority Key Identifier:
                keyid:0A:B8:2A:49:81:60:7D:9B:33:69:DC:77:6D:B0:87:3D:A0:D7:5B:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3619C2D/A3800BAE482011EFB826B541762E951A/CrgqSYFgfZszadx3bbCHPaDXW0o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CrgqSYFgfZszadx3bbCHPaDXW0o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3619C2D/A3800BAE482011EFB826B541762E951A/CrgqSYFgfZszadx3bbCHPaDXW0o.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:f1:aa:25:b7:3d:07:89:50:bf:2a:92:ab:b2:3a:98:97:36:
         9b:ce:53:3a:6a:91:1a:97:1f:37:ff:1d:84:28:19:f4:de:8b:
         70:2f:6e:bb:dd:0d:18:f3:e3:e0:62:ca:aa:fc:fd:cd:07:2e:
         6b:b3:75:eb:a5:76:0a:3d:40:4a:ae:bf:37:b4:ad:63:4b:a3:
         7a:79:da:a7:79:83:ae:74:08:1c:34:6e:f3:94:9a:2c:dd:b4:
         31:3b:4b:21:1a:8f:68:33:f7:2e:ec:df:4c:39:04:12:b0:8a:
         ee:a6:ce:62:a8:6a:19:70:30:01:fd:3e:7d:c5:5c:6b:cd:c8:
         06:5a:4f:37:8a:73:04:f4:2b:0b:c2:2d:49:e0:d5:76:5a:33:
         45:ff:56:fe:f0:f9:56:07:86:d0:c1:27:c0:e4:74:fc:ab:9b:
         27:b3:0a:ab:16:d1:4b:8b:f4:e5:c5:8e:9a:bd:c0:4a:7b:2b:
         69:80:db:65:43:05:f2:e7:21:0a:82:a4:f4:eb:2f:c3:8c:6c:
         6e:61:4c:67:fb:ac:fa:fa:2f:22:58:68:b9:c5:bf:61:d0:e2:
         59:84:f4:73:23:57:43:ca:df:5f:85:73:65:21:2d:23:2d:ea:
         03:73:be:f5:3f:e1:2d:21:62:be:12:7e:76:e3:8a:4a:00:e4:
         42:73:4c:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 06:22:32 2026 by rpki-client