This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F361ED63/BC72D6B6CAA411EB9C2A4A52F8AEA228/OCSsXuAEOe7aIaGhAQnov3bk-rg.mft
File:                     OCSsXuAEOe7aIaGhAQnov3bk-rg.mft (raw, json)
Hash identifier:          H3UHGftqUVioMli93RoFKOKGk5ul5bSdXp5omdEgGps=
Subject key identifier:   60:BE:77:33:D2:D5:FB:B2:9E:AB:E9:3F:38:19:F6:99:FC:48:29:3B
Authority key identifier: 38:24:AC:5E:E0:04:39:EE:DA:21:A1:A1:01:09:E8:BF:76:E4:FA:B8
Certificate issuer:       /CN=F361ED63AF/serialNumber=3824AC5EE00439EEDA21A1A10109E8BF76E4FAB8
Certificate serial:       06D6
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/OCSsXuAEOe7aIaGhAQnov3bk-rg.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F361ED63/BC72D6B6CAA411EB9C2A4A52F8AEA228/OCSsXuAEOe7aIaGhAQnov3bk-rg.mft
Manifest number:          06D0
Signing time:             Sun 25 Jan 2026 02:13:31 +0000
Manifest this update:     Sun 25 Jan 2026 02:13:31 +0000
Manifest next update:     Tue 27 Jan 2026 02:13:31 +0000
Files and hashes:         1: OCSsXuAEOe7aIaGhAQnov3bk-rg.crl (hash: oXgRmzPOg9JRAuYx+N3bT3avtMm90BNdJxigFH7dRS8=)
                          2: 5006E70E5E3611F0893678E9DAE4EC9C.roa (hash: +o+9Z0JPTJwXWASmZEn5sX4JUlRX+byFenFDA6I4P5g=)
                          3: 26D0B8E25E3611F0887D5CE9DAE4EC9C.roa (hash: 2tu3Ld1qF49GVl2mB5JFSgh0SJACUdEbR9uP9vjP6Xk=)
                          4: A42FDE0E5E3011F0B6CA0CC4DAE4EC9C.roa (hash: Ac2nu6upq7t1gl0xBIa3qrh3jUY/VotzPxg8MIknNhA=)
                          5: F426C5DA5E3511F08C38F3E8DAE4EC9C.roa (hash: 1sDWYH3f/HWstXqg5Qsn8hl+mqkD2R6cYH7ovhfNSnY=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F361ED63/BC72D6B6CAA411EB9C2A4A52F8AEA228/OCSsXuAEOe7aIaGhAQnov3bk-rg.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F361ED63/BC72D6B6CAA411EB9C2A4A52F8AEA228/OCSsXuAEOe7aIaGhAQnov3bk-rg.mft
                          rsync://rpki.afrinic.net/repository/afrinic/OCSsXuAEOe7aIaGhAQnov3bk-rg.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:06:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1750 (0x6d6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F361ED63AF, serialNumber=3824AC5EE00439EEDA21A1A10109E8BF76E4FAB8
        Validity
            Not Before: Jan 25 02:13:31 2026 GMT
            Not After : Jan 27 02:13:31 2026 GMT
        Subject: CN=69757c4b-7a7e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:6f:14:9e:a1:62:ca:96:04:78:ea:68:3d:e3:
                    54:a6:63:3d:89:24:fe:dc:c6:e0:98:06:e8:cf:cb:
                    14:a3:81:0a:99:8d:1a:02:4e:a9:e2:7e:8b:14:ca:
                    23:dc:86:60:be:6d:34:d5:54:fd:37:34:d7:99:23:
                    5e:fd:9b:5b:29:8a:bb:02:e3:01:9b:37:6f:23:0b:
                    2e:93:0e:66:0c:bf:bb:6f:4d:3b:83:ef:19:cf:c2:
                    51:93:f2:cc:2c:a0:9f:3a:73:99:d2:28:85:91:15:
                    c3:4a:c6:9a:70:75:5a:75:51:43:84:e9:42:c7:85:
                    f4:5f:a5:9b:bf:c2:cc:de:27:cd:ea:fa:8b:22:4c:
                    4a:c0:d6:46:1c:3b:9b:1a:84:07:2d:f4:92:3e:09:
                    20:b4:7a:4e:de:42:c0:87:f9:0c:c1:fc:92:77:55:
                    51:b6:ce:a4:e3:b8:91:c7:6f:7c:af:71:a3:f8:ed:
                    7b:27:ba:76:ed:4f:4f:ab:3e:4a:a9:1e:ec:54:15:
                    93:ed:20:0d:b7:a2:12:ca:20:e3:72:1d:eb:0e:d6:
                    ce:69:d2:b3:4d:fa:90:81:59:7d:a9:8e:80:80:5c:
                    bf:b8:1c:41:d9:8f:b3:48:b5:2d:23:7a:dc:3d:6a:
                    4b:4a:96:89:8a:82:e9:1c:d3:12:be:ee:01:ed:66:
                    d0:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:BE:77:33:D2:D5:FB:B2:9E:AB:E9:3F:38:19:F6:99:FC:48:29:3B
            X509v3 Authority Key Identifier:
                keyid:38:24:AC:5E:E0:04:39:EE:DA:21:A1:A1:01:09:E8:BF:76:E4:FA:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F361ED63/BC72D6B6CAA411EB9C2A4A52F8AEA228/OCSsXuAEOe7aIaGhAQnov3bk-rg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/OCSsXuAEOe7aIaGhAQnov3bk-rg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F361ED63/BC72D6B6CAA411EB9C2A4A52F8AEA228/OCSsXuAEOe7aIaGhAQnov3bk-rg.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:e3:82:6b:ca:9c:84:8b:4d:f2:e0:d7:b1:c7:6f:95:26:1f:
         37:b1:54:ad:0b:8c:7f:55:55:ab:09:02:a6:22:ad:a5:d0:ce:
         cb:cc:1c:ba:5a:9a:fb:32:20:75:23:34:86:b4:48:34:4e:04:
         b5:88:a0:8b:90:18:81:18:02:8a:ff:0c:e7:08:16:a0:e2:35:
         8d:51:8b:64:ba:c4:f5:83:93:5d:92:26:29:2a:00:71:be:e4:
         16:12:3d:ef:78:a9:33:42:16:c8:7d:a4:58:ad:87:0d:69:ac:
         8c:df:11:94:ee:49:ce:13:91:ab:70:3a:28:ae:75:8e:44:14:
         a1:8b:74:90:a7:86:ea:66:97:ab:7b:82:bf:f9:55:b5:d3:a1:
         64:13:cc:d1:d3:ad:2a:2c:83:5a:09:60:16:d9:ad:2c:89:88:
         eb:b0:97:44:bf:d5:90:43:9a:20:dd:9c:42:93:01:9e:db:99:
         70:8e:e7:15:23:79:a1:b3:b6:76:d9:5c:b4:3e:be:a5:24:03:
         46:e3:26:e9:06:e5:09:89:bb:61:a1:e7:9c:77:77:d5:3e:63:
         e0:02:2a:21:a5:63:8c:c7:65:eb:5f:8c:22:31:b7:91:6e:0b:
         2e:dc:63:12:3f:68:10:79:c2:7d:3e:78:f7:90:eb:e9:c8:35:
         64:73:0c:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 09:18:08 2026 by rpki-client