This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3627A02/39577B2AB58E11E8B60A4064F8AEA228/1qTOslDhuJgjxaxDmHTTUfkMQuY.mft
File:                     1qTOslDhuJgjxaxDmHTTUfkMQuY.mft (raw, json)
Hash identifier:          9HH2u8FYM21TustMk1xnUAn8GmAqzpFsARi18hBkIj8=
Subject key identifier:   EE:68:BC:AF:40:D5:51:62:99:FA:74:2F:BE:D4:13:01:61:5E:79:D1
Authority key identifier: D6:A4:CE:B2:50:E1:B8:98:23:C5:AC:43:98:74:D3:51:F9:0C:42:E6
Certificate issuer:       /CN=F3627A02AR/serialNumber=D6A4CEB250E1B89823C5AC439874D351F90C42E6
Certificate serial:       0AD7
Authority info access:    rsync://rpki.afrinic.net/repository/arin/1qTOslDhuJgjxaxDmHTTUfkMQuY.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3627A02/39577B2AB58E11E8B60A4064F8AEA228/1qTOslDhuJgjxaxDmHTTUfkMQuY.mft
Manifest number:          0AD1
Signing time:             Sun 25 Jan 2026 01:14:53 +0000
Manifest this update:     Sun 25 Jan 2026 01:14:52 +0000
Manifest next update:     Tue 27 Jan 2026 01:14:52 +0000
Files and hashes:         1: 1qTOslDhuJgjxaxDmHTTUfkMQuY.crl (hash: jGgMxZ4xJ5h86GAUh7hp3sS0xIqGpyXPZ0IEmSGfhZA=)
                          2: 673C61B4A88611ED9FE7EDD4F1222468.roa (hash: m91FhF+zJneUBb3UfLyzUzRvHvpK/0b7/Z5lBS15Q2I=)
                          3: B03DD41482B211ED9ACDF2D8F1222468.roa (hash: p4erYRKk741+pc1GTQOQg0ZDNMWUeJrKmmr5PjLZGWc=)
                          4: 9C57BBCA514411E9819FB57FF8AEA228.roa (hash: a2EFqum38j7M+ZpqwnpRi/IEA/fqXEm99Nf0ZysxusA=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3627A02/39577B2AB58E11E8B60A4064F8AEA228/1qTOslDhuJgjxaxDmHTTUfkMQuY.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3627A02/39577B2AB58E11E8B60A4064F8AEA228/1qTOslDhuJgjxaxDmHTTUfkMQuY.mft
                          rsync://rpki.afrinic.net/repository/arin/1qTOslDhuJgjxaxDmHTTUfkMQuY.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:26:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2775 (0xad7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3627A02AR, serialNumber=D6A4CEB250E1B89823C5AC439874D351F90C42E6
        Validity
            Not Before: Jan 25 01:14:52 2026 GMT
            Not After : Jan 27 01:14:52 2026 GMT
        Subject: CN=69756e8d-2d0b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:e2:50:04:19:55:b6:7a:60:2b:21:7b:f9:11:
                    09:0f:26:cd:69:6d:33:22:9b:f1:e4:46:b7:bb:2f:
                    f0:7d:9c:89:8f:32:61:1c:45:e2:ed:a7:5c:a6:d4:
                    54:4b:de:53:a3:5c:44:44:25:5d:11:81:11:4a:fa:
                    53:2d:46:3e:cf:01:fb:e4:dc:33:06:87:96:15:3b:
                    6f:12:1c:ce:d8:34:32:51:dc:2c:43:4a:74:64:39:
                    62:4f:16:f2:39:da:cc:ba:23:40:a7:eb:01:7a:b5:
                    03:93:70:3f:ab:1f:b0:ef:94:82:2e:e0:51:9e:37:
                    ec:25:dd:12:0e:f2:10:32:33:71:04:a1:19:57:48:
                    3e:a9:0c:b3:bd:6f:03:94:1c:2a:2c:75:4f:01:b2:
                    fc:14:f4:6b:ba:82:3f:c1:6a:68:66:4b:74:65:52:
                    42:42:d4:49:6a:3d:c7:e7:be:8a:84:26:1c:3d:b6:
                    84:f8:9a:7e:cb:44:dd:ed:18:11:04:5e:ef:08:e9:
                    11:8a:3f:6a:4d:26:da:b9:aa:c0:0d:93:33:f5:4d:
                    ad:18:7a:d2:c4:74:d7:78:85:9b:34:ad:49:e7:50:
                    86:61:ab:ee:0c:5d:cc:e9:a2:26:9a:e3:fe:33:b0:
                    58:de:eb:fe:c9:21:40:f8:39:43:9c:07:34:c1:d3:
                    b2:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:68:BC:AF:40:D5:51:62:99:FA:74:2F:BE:D4:13:01:61:5E:79:D1
            X509v3 Authority Key Identifier:
                keyid:D6:A4:CE:B2:50:E1:B8:98:23:C5:AC:43:98:74:D3:51:F9:0C:42:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3627A02/39577B2AB58E11E8B60A4064F8AEA228/1qTOslDhuJgjxaxDmHTTUfkMQuY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/1qTOslDhuJgjxaxDmHTTUfkMQuY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3627A02/39577B2AB58E11E8B60A4064F8AEA228/1qTOslDhuJgjxaxDmHTTUfkMQuY.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:0c:7e:13:0d:9c:8f:ba:10:38:d3:5b:0d:59:e7:92:b4:ae:
         4a:4d:2f:ca:65:f6:0a:5f:b6:a3:c1:ee:b6:fc:fb:8d:80:6c:
         d7:b6:1a:f7:18:ef:8c:5f:a8:c7:fb:ce:02:38:63:27:8d:ba:
         8c:eb:da:2b:1e:e6:5b:0f:84:ef:53:76:4b:72:9e:3e:ef:b5:
         a8:8e:73:8f:d0:6e:00:1e:b3:bc:de:6a:16:2f:25:d3:28:29:
         e6:c4:e3:68:00:22:d2:37:05:30:9e:7a:44:8a:b9:23:ef:bc:
         ab:b6:00:da:a4:8a:99:2c:24:9e:f6:b1:f5:d8:31:d8:ac:95:
         4c:a5:ab:7c:d4:34:a3:21:f6:21:bc:30:81:be:fe:ff:bf:97:
         d2:bd:f2:7e:43:b7:ff:eb:28:81:43:f9:80:88:74:72:c4:af:
         3f:f4:d1:fe:5c:8d:41:4e:c1:89:c8:5c:99:3c:77:b1:22:67:
         7d:ac:17:68:3d:52:18:34:f0:1f:a9:8c:be:f8:79:81:4d:6a:
         e3:03:64:6d:f7:eb:b2:4e:01:3b:32:e2:7b:f0:6c:f2:83:7e:
         e2:bc:ef:7b:a7:e7:84:32:f5:6b:10:40:85:03:dc:4d:c8:ac:
         72:62:70:c0:25:82:41:a9:14:a0:e8:da:fe:7c:2b:ea:3d:86:
         47:d7:aa:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 02:26:44 2026 by rpki-client