This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3639A71/42C01EDAAD5211EE97470BAF775412E6/x_9uywvS7BI1alQX4xxzC5BQlBE.mft
File:                     x_9uywvS7BI1alQX4xxzC5BQlBE.mft (raw, json)
Hash identifier:          xjv0cBLVTPtV+/dMeVE3H3TD/wDOxCY5zGOl3Vjfk4s=
Subject key identifier:   C7:B5:C1:74:07:C0:88:C8:DD:52:6A:BD:28:79:36:C9:F4:0B:81:1F
Authority key identifier: C7:FF:6E:CB:0B:D2:EC:12:35:6A:54:17:E3:1C:73:0B:90:50:94:11
Certificate issuer:       /CN=F3639A71AF/serialNumber=C7FF6ECB0BD2EC12356A5417E31C730B90509411
Certificate serial:       0304
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/x_9uywvS7BI1alQX4xxzC5BQlBE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3639A71/42C01EDAAD5211EE97470BAF775412E6/x_9uywvS7BI1alQX4xxzC5BQlBE.mft
Manifest number:          0302
Signing time:             Sun 25 Jan 2026 03:59:24 +0000
Manifest this update:     Sun 25 Jan 2026 03:59:23 +0000
Manifest next update:     Tue 27 Jan 2026 03:59:23 +0000
Files and hashes:         1: x_9uywvS7BI1alQX4xxzC5BQlBE.crl (hash: V/FE0ZW6nyEID+knbjMhSzVOPZcmWmJd5iKQyZxt9c4=)
                          2: 209064A80ECA11EFA0FB8D6C017001B1.roa (hash: SYHt2ENsggByHF7FNfIiJDtYCTGlxeYoFHTIRbjH6Hc=)
                          3: 3906A38AAD5411EEB67B65B2775412E6.roa (hash: ReFNAC4d+VQBlR/AEunK+azob89VljT5w2yD48BTB3A=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3639A71/42C01EDAAD5211EE97470BAF775412E6/x_9uywvS7BI1alQX4xxzC5BQlBE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3639A71/42C01EDAAD5211EE97470BAF775412E6/x_9uywvS7BI1alQX4xxzC5BQlBE.mft
                          rsync://rpki.afrinic.net/repository/afrinic/x_9uywvS7BI1alQX4xxzC5BQlBE.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:06:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 772 (0x304)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3639A71AF, serialNumber=C7FF6ECB0BD2EC12356A5417E31C730B90509411
        Validity
            Not Before: Jan 25 03:59:23 2026 GMT
            Not After : Jan 27 03:59:23 2026 GMT
        Subject: CN=6975951c-ab6a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:8c:ac:6b:0c:d2:f2:2c:0a:a7:9a:a2:ac:77:
                    d4:4c:7a:b4:22:71:40:91:a0:28:e8:50:5c:68:6e:
                    25:80:1d:fa:25:69:97:e0:6b:bd:4a:6e:c3:03:55:
                    24:12:45:9b:13:c4:f2:96:0e:f8:61:3b:d6:37:3d:
                    5e:1b:66:72:28:e5:ce:7d:1e:30:45:45:0f:a7:fe:
                    f1:6f:a6:9c:f9:98:82:e1:64:07:0b:da:61:1a:b6:
                    cc:44:3a:02:4a:8b:de:4a:6e:62:e7:f6:01:c5:96:
                    c2:a2:7c:63:92:55:34:f2:dc:1b:9b:4a:a4:87:3e:
                    af:32:93:b0:30:69:62:36:70:7d:16:87:ce:61:07:
                    35:dc:90:a4:bc:cc:e5:39:a3:da:03:82:9b:59:b0:
                    c4:5f:3b:b6:38:83:75:56:00:15:08:b1:d8:a4:f7:
                    56:38:04:44:b3:bb:97:bb:38:a6:b7:8a:7d:38:03:
                    9a:92:3d:9e:d4:b5:32:8a:07:0e:74:d7:ad:a2:d8:
                    4c:48:93:f5:8a:38:be:b8:a5:df:e3:24:58:93:23:
                    ff:61:0e:f4:bc:8d:1f:26:a0:93:8b:d2:73:a0:8c:
                    ca:5f:bc:b0:c1:78:c4:0f:5c:96:2b:c3:78:c1:aa:
                    a0:66:46:60:5f:fa:59:53:98:f3:6d:49:b7:25:40:
                    1b:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:B5:C1:74:07:C0:88:C8:DD:52:6A:BD:28:79:36:C9:F4:0B:81:1F
            X509v3 Authority Key Identifier:
                keyid:C7:FF:6E:CB:0B:D2:EC:12:35:6A:54:17:E3:1C:73:0B:90:50:94:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3639A71/42C01EDAAD5211EE97470BAF775412E6/x_9uywvS7BI1alQX4xxzC5BQlBE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/x_9uywvS7BI1alQX4xxzC5BQlBE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3639A71/42C01EDAAD5211EE97470BAF775412E6/x_9uywvS7BI1alQX4xxzC5BQlBE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:7d:3d:0c:bd:0c:ea:1e:a3:ff:6c:c6:61:df:af:a2:a2:d0:
         cb:36:cc:cd:9e:83:9b:0f:c3:9c:54:68:f4:39:ba:ff:71:4a:
         ca:86:74:ff:3a:7c:dd:18:d6:2d:89:45:cc:df:ca:cd:fb:2d:
         2b:35:c2:c4:37:ce:d3:f5:8f:4a:d8:bc:a9:0d:02:69:c9:21:
         fb:07:56:f2:4a:a2:04:fd:e2:4b:4f:0c:a4:be:40:65:f3:e5:
         3e:3b:e1:80:6c:10:9a:f8:45:7f:ad:58:49:4b:6f:4b:52:5a:
         c3:5d:bb:c8:59:ed:71:a0:cc:23:13:c2:18:fb:51:e9:47:97:
         12:36:62:9b:5a:c7:d3:cb:93:da:82:40:d1:02:51:7a:30:7d:
         34:08:c0:99:06:3a:22:12:6a:ef:b0:b4:3d:32:e3:8b:50:21:
         56:7b:d1:be:d7:09:21:30:e5:90:87:b6:55:c6:8d:e2:b3:91:
         28:24:0e:8f:cd:4b:64:bc:b9:96:d7:3a:11:9c:00:8b:46:d8:
         14:e0:43:41:f6:6c:4b:2b:59:91:a2:88:9b:37:61:2a:74:de:
         91:03:87:dd:97:d4:72:68:13:ca:5d:62:5c:38:4b:b5:a2:8a:
         ff:be:de:7e:82:1d:f3:13:ed:ab:1d:fe:8b:f8:91:6e:7a:9c:
         c1:1e:2c:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 06:21:49 2026 by rpki-client