This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3627BD6/366035A423F211E6BD17D823F8AEA228/osaoR7jzEgAwg0GHFH38ZcjulMA.mft
File:                     osaoR7jzEgAwg0GHFH38ZcjulMA.mft (raw, json)
Hash identifier:          QxtPx+MjPoLV8/7FTANUBsx6YybtHkXjxHchFJ+qHOA=
Subject key identifier:   9E:53:41:4D:A5:DE:8C:5D:25:B1:93:DB:F6:48:BA:59:4D:5D:D1:5B
Authority key identifier: A2:C6:A8:47:B8:F3:12:00:30:83:41:87:14:7D:FC:65:C8:EE:94:C0
Certificate issuer:       /CN=F3627BD6AF/serialNumber=A2C6A847B8F3120030834187147DFC65C8EE94C0
Certificate serial:       0E30
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/osaoR7jzEgAwg0GHFH38ZcjulMA.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3627BD6/366035A423F211E6BD17D823F8AEA228/osaoR7jzEgAwg0GHFH38ZcjulMA.mft
Manifest number:          0E24
Signing time:             Sun 25 Jan 2026 01:02:11 +0000
Manifest this update:     Sun 25 Jan 2026 01:02:11 +0000
Manifest next update:     Tue 27 Jan 2026 01:02:11 +0000
Files and hashes:         1: osaoR7jzEgAwg0GHFH38ZcjulMA.crl (hash: dAySMAma9p5P7ylMyLab3FZbmV0Sb6aR14akLxqHfEs=)
                          2: 6C39EE98619B11ED8E8FD8D6F1222468.roa (hash: OETdohCk7q65gcL6uPq06Ta3ioOvQSD9Kn6gLq8PZ80=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3627BD6/366035A423F211E6BD17D823F8AEA228/osaoR7jzEgAwg0GHFH38ZcjulMA.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3627BD6/366035A423F211E6BD17D823F8AEA228/osaoR7jzEgAwg0GHFH38ZcjulMA.mft
                          rsync://rpki.afrinic.net/repository/afrinic/osaoR7jzEgAwg0GHFH38ZcjulMA.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:06:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3632 (0xe30)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3627BD6AF, serialNumber=A2C6A847B8F3120030834187147DFC65C8EE94C0
        Validity
            Not Before: Jan 25 01:02:11 2026 GMT
            Not After : Jan 27 01:02:11 2026 GMT
        Subject: CN=69756b93-3dfe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:c6:3c:be:f1:05:7d:87:dc:ec:1d:d4:0c:29:
                    74:25:70:5f:40:c5:1b:7a:98:c5:32:12:8e:f8:72:
                    4d:b7:89:12:39:18:61:05:ab:fd:ad:09:38:39:83:
                    30:6a:71:a3:50:a9:e3:72:e2:ba:22:0c:c8:86:14:
                    e3:3f:ab:4c:0d:27:9e:cc:27:2c:ec:ab:31:dc:18:
                    62:13:19:73:33:6c:c4:25:0c:a9:36:bd:83:a0:07:
                    37:66:ce:27:64:0e:f5:5a:fe:a3:ba:2e:0e:2f:c6:
                    61:27:69:e7:a2:8e:3c:5a:0a:e8:3d:86:23:56:84:
                    68:76:a1:ef:e4:b5:29:4b:41:ff:d5:8f:09:c1:8d:
                    a6:0d:3f:df:83:14:ae:f8:fa:52:d9:7d:4e:da:e8:
                    0c:5b:e2:5a:82:d9:9b:06:1b:de:3b:30:00:cb:53:
                    96:c5:e8:b7:bf:a8:25:3e:16:5e:3d:03:78:ea:55:
                    3e:4a:32:44:24:06:f0:41:5b:7e:40:2c:a7:66:6f:
                    c1:68:99:83:63:12:4b:6e:36:70:fc:93:08:fb:5e:
                    0c:b0:ad:1c:6f:18:3b:b4:ef:14:33:cf:f6:6e:a7:
                    1b:a9:8f:2d:36:84:0d:52:4e:80:dd:82:6f:4d:15:
                    42:7f:58:28:3b:df:6e:9e:e8:18:8f:16:9b:9c:86:
                    e8:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:53:41:4D:A5:DE:8C:5D:25:B1:93:DB:F6:48:BA:59:4D:5D:D1:5B
            X509v3 Authority Key Identifier:
                keyid:A2:C6:A8:47:B8:F3:12:00:30:83:41:87:14:7D:FC:65:C8:EE:94:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3627BD6/366035A423F211E6BD17D823F8AEA228/osaoR7jzEgAwg0GHFH38ZcjulMA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/osaoR7jzEgAwg0GHFH38ZcjulMA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3627BD6/366035A423F211E6BD17D823F8AEA228/osaoR7jzEgAwg0GHFH38ZcjulMA.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:e3:9c:74:fd:c8:54:5c:d5:05:4b:f0:dc:36:62:5d:9d:59:
         c5:65:16:d4:e3:ce:18:24:4f:bc:fe:be:33:8f:cf:d2:01:35:
         61:c2:4e:f2:06:b7:55:31:dd:63:05:1f:2d:91:ab:6d:3a:05:
         96:91:c8:b2:61:73:f4:8d:2f:51:84:6a:aa:0b:73:04:7b:82:
         24:4c:7a:25:cd:e9:29:99:0b:af:5f:b7:7d:b8:ae:03:b5:9f:
         9d:e8:50:ed:82:60:54:d3:92:4e:8f:d9:57:18:1e:2a:b4:e4:
         5e:22:eb:e0:c9:e2:96:2f:f7:16:85:28:f5:e0:b7:25:35:c6:
         0d:d8:88:6e:f3:bd:b0:4a:18:8f:1c:0a:74:9f:92:98:d9:b3:
         d4:41:ed:35:9a:a3:5b:95:08:11:47:3a:90:e8:65:94:fc:f3:
         64:83:27:23:49:72:22:8a:a5:1c:ad:dc:9f:46:22:26:e1:52:
         fd:56:5c:65:94:bf:51:ea:97:bd:10:e4:77:e7:15:d2:b4:e2:
         1b:9c:6d:8b:6a:ab:1b:87:f2:1e:2d:63:6e:b5:91:82:0c:87:
         5a:da:cd:ae:c0:3b:3c:6f:f7:a6:28:25:14:75:c8:c2:1b:1e:
         4c:e9:75:38:6b:3e:a8:a6:24:6e:f5:04:04:d0:ef:37:8f:27:
         67:9d:76:12
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICDjAwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
MjdCRDZBRjExMC8GA1UEBRMoQTJDNkE4NDdCOEYzMTIwMDMwODM0MTg3MTQ3REZD
NjVDOEVFOTRDMDAeFw0yNjAxMjUwMTAyMTFaFw0yNjAxMjcwMTAyMTFaMBgxFjAU
BgNVBAMTDTY5NzU2YjkzLTNkZmUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDKxjy+8QV9h9zsHdQMKXQlcF9AxRt6mMUyEo74ck23iRI5GGEFq/2tCTg5
gzBqcaNQqeNy4roiDMiGFOM/q0wNJ57MJyzsqzHcGGITGXMzbMQlDKk2vYOgBzdm
zidkDvVa/qO6Lg4vxmEnaeeijjxaCug9hiNWhGh2oe/ktSlLQf/VjwnBjaYNP9+D
FK74+lLZfU7a6Axb4lqC2ZsGG947MADLU5bF6Le/qCU+Fl49A3jqVT5KMkQkBvBB
W35ALKdmb8FomYNjEktuNnD8kwj7XgywrRxvGDu07xQzz/Zupxupjy02hA1SToDd
gm9NFUJ/WCg7326e6BiPFpuchujZAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUnlNB
TaXejF0lsZPb9ki6WU1d0VswHwYDVR0jBBgwFoAUosaoR7jzEgAwg0GHFH38Zcju
lMAwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjI3QkQ2LzM2NjAzNUE0MjNGMjExRTZCRDE3RDgyM0Y4QUVBMjI4L29zYW9S
N2p6RWdBd2cwR0hGSDM4WmNqdWxNQS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL29zYW9SN2p6RWdBd2cwR0hGSDM4WmNqdWxNQS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2MjdCRDYvMzY2MDM1QTQyM0YyMTFFNkJEMTdEODIzRjhB
RUEyMjgvb3Nhb1I3anpFZ0F3ZzBHSEZIMzhaY2p1bE1BLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQB845x0/chUXNUFS/DcNmJdnVnFZRbU
484YJE+8/r4zj8/SATVhwk7yBrdVMd1jBR8tkattOgWWkciyYXP0jS9RhGqqC3ME
e4IkTHolzekpmQuvX7d9uK4DtZ+d6FDtgmBU05JOj9lXGB4qtOReIuvgyeKWL/cW
hSj14LclNcYN2Ihu872wShiPHAp0n5KY2bPUQe01mqNblQgRRzqQ6GWU/PNkgycj
SXIiiqUcrdyfRiIm4VL9VlxllL9R6pe9EOR35xXStOIbnG2Laqsbh/IeLWNutZGC
DIda2s2uwDs8b/emKCUUdcjCGx5M6XU4az6opiRu9QQE0O83jydnnXYS
-----END CERTIFICATE-----
Generated at Sun Jan 25 06:14:28 2026 by rpki-client