This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3629B7B/D1FD7020E35511ECB0A0F090F1222468/QfCSTGDWjh-8ANKZ8hiUzkyhtck.mft
File:                     QfCSTGDWjh-8ANKZ8hiUzkyhtck.mft (raw, json)
Hash identifier:          nG5V2VePUs3Y7FSxfQ4adcKcfAlkmaF4ug/i2pOuTvo=
Subject key identifier:   EB:59:2B:BB:7A:F8:85:44:76:EC:48:B5:99:09:00:D6:09:66:72:31
Authority key identifier: 41:F0:92:4C:60:D6:8E:1F:BC:00:D2:99:F2:18:94:CE:4C:A1:B5:C9
Certificate issuer:       /CN=F3629B7BAF/serialNumber=41F0924C60D68E1FBC00D299F21894CE4CA1B5C9
Certificate serial:       055D
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/QfCSTGDWjh-8ANKZ8hiUzkyhtck.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3629B7B/D1FD7020E35511ECB0A0F090F1222468/QfCSTGDWjh-8ANKZ8hiUzkyhtck.mft
Manifest number:          055C
Signing time:             Sun 25 Jan 2026 02:46:57 +0000
Manifest this update:     Sun 25 Jan 2026 02:46:57 +0000
Manifest next update:     Tue 27 Jan 2026 02:46:57 +0000
Files and hashes:         1: QfCSTGDWjh-8ANKZ8hiUzkyhtck.crl (hash: p5IWY3vKtPP8pBrm8tEhZlhxlNLQ5U0jNLL3Ol5lK20=)
                          2: 8923FE84E70411ECB97A00C7F1222468.roa (hash: ef6Udp4f7yAWn4yjb6CIRvJunMzfPBNgWsJ+Z6PTHZE=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3629B7B/D1FD7020E35511ECB0A0F090F1222468/QfCSTGDWjh-8ANKZ8hiUzkyhtck.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3629B7B/D1FD7020E35511ECB0A0F090F1222468/QfCSTGDWjh-8ANKZ8hiUzkyhtck.mft
                          rsync://rpki.afrinic.net/repository/afrinic/QfCSTGDWjh-8ANKZ8hiUzkyhtck.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:06:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1373 (0x55d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3629B7BAF, serialNumber=41F0924C60D68E1FBC00D299F21894CE4CA1B5C9
        Validity
            Not Before: Jan 25 02:46:57 2026 GMT
            Not After : Jan 27 02:46:57 2026 GMT
        Subject: CN=69758421-9250
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:78:80:5a:f5:f0:21:e2:0a:25:14:2b:9c:0e:
                    8b:10:62:2e:55:5a:c6:ed:43:d0:19:7c:d2:c3:f0:
                    ef:4a:d8:22:50:2e:e9:7f:38:24:29:0f:8e:50:7b:
                    74:06:df:4e:df:26:84:e5:0a:2c:29:74:e8:43:0a:
                    1e:b0:68:b0:16:2e:f9:99:75:a8:49:e2:fa:48:51:
                    23:56:af:26:f2:e1:e1:ab:78:76:72:10:9d:ae:84:
                    1f:73:d8:13:90:60:24:05:3c:2c:a2:e3:f9:b7:25:
                    26:57:27:9d:bd:e7:bd:4b:92:c9:40:4a:de:a5:12:
                    7f:20:08:6e:f5:42:59:ab:75:14:e5:d3:23:fd:38:
                    d0:f6:15:20:dd:ff:cb:54:b4:62:59:2e:f1:a2:ae:
                    e7:c5:1b:e3:f0:e8:f6:a1:06:95:3a:ff:cc:ae:7d:
                    40:66:1c:f2:cd:c3:a8:50:bc:f4:87:0f:b0:99:8d:
                    25:57:63:99:4c:0e:79:57:22:c8:74:78:ec:f4:65:
                    0b:21:32:53:7f:3f:d3:37:49:9e:89:6a:97:17:a5:
                    44:b8:f1:8e:89:f7:35:65:b7:4f:9b:e9:cf:b1:ae:
                    f7:ba:51:25:c5:c2:f0:75:f6:03:3c:9b:55:d0:e2:
                    62:28:4f:d6:37:23:96:ac:54:20:39:c8:6a:ea:3c:
                    dc:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:59:2B:BB:7A:F8:85:44:76:EC:48:B5:99:09:00:D6:09:66:72:31
            X509v3 Authority Key Identifier:
                keyid:41:F0:92:4C:60:D6:8E:1F:BC:00:D2:99:F2:18:94:CE:4C:A1:B5:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3629B7B/D1FD7020E35511ECB0A0F090F1222468/QfCSTGDWjh-8ANKZ8hiUzkyhtck.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/QfCSTGDWjh-8ANKZ8hiUzkyhtck.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3629B7B/D1FD7020E35511ECB0A0F090F1222468/QfCSTGDWjh-8ANKZ8hiUzkyhtck.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:7f:77:40:85:fe:40:fc:a9:fe:b8:b7:d8:a9:48:40:a3:0e:
         30:d4:7c:25:bc:6b:0c:63:a5:af:de:6c:9f:b1:dd:fc:e9:4a:
         2f:2a:79:7f:20:7a:36:9d:e9:16:ab:e7:8c:7c:af:f4:9d:56:
         9b:f7:39:3c:b2:bc:ee:7b:e2:7b:f1:90:30:09:23:05:e2:4f:
         20:04:fe:9e:62:a7:53:75:95:c4:2d:d3:ed:ea:fa:cd:22:21:
         cf:de:7e:3e:55:d9:8e:a1:65:d0:00:40:e1:d0:9b:c7:f4:82:
         6d:11:ed:9d:12:13:ba:09:80:43:21:cb:54:7a:44:3f:42:f5:
         8f:d9:6b:6d:c3:1a:ad:11:03:8f:62:66:42:f5:11:2b:55:3f:
         10:50:70:82:73:23:67:01:93:4d:dd:bc:18:17:76:53:99:05:
         ec:1c:42:8f:a7:cc:d0:70:14:a0:82:66:17:b9:84:03:15:88:
         78:b0:82:65:c0:e4:e0:89:d2:7c:76:40:4b:aa:ad:23:e5:77:
         12:41:ec:1d:8d:36:32:7c:c1:47:08:e9:1c:8b:23:a2:60:24:
         ad:2c:b9:c6:18:ea:37:ec:f5:53:1e:6a:7e:ed:2c:10:ac:fa:
         a6:de:c0:c7:bb:58:53:a6:8b:44:7b:cd:96:40:ee:fb:27:67:
         6f:e4:4e:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 06:12:51 2026 by rpki-client