This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363E7DE/0AF6EC623D1811EFADCB7693762E951A/mEs08lM_l20v8hGUKFlsTLCoNJQ.mft
File:                     mEs08lM_l20v8hGUKFlsTLCoNJQ.mft (raw, json)
Hash identifier:          SnycHbqKOJ5teRW5AuwvCjWNtT3Cv8y2gYp9v0RF1HQ=
Subject key identifier:   71:D0:EE:60:B1:0D:38:36:A9:E8:94:7D:46:27:4A:3D:7D:79:4F:81
Authority key identifier: 98:4B:34:F2:53:3F:97:6D:2F:F2:11:94:28:59:6C:4C:B0:A8:34:94
Certificate issuer:       /CN=F363E7DEAF/serialNumber=984B34F2533F976D2FF2119428596C4CB0A83494
Certificate serial:       0246
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/mEs08lM_l20v8hGUKFlsTLCoNJQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F363E7DE/0AF6EC623D1811EFADCB7693762E951A/mEs08lM_l20v8hGUKFlsTLCoNJQ.mft
Manifest number:          0245
Signing time:             Sat 24 Jan 2026 04:20:53 +0000
Manifest this update:     Sat 24 Jan 2026 04:20:52 +0000
Manifest next update:     Mon 26 Jan 2026 04:20:52 +0000
Files and hashes:         1: mEs08lM_l20v8hGUKFlsTLCoNJQ.crl (hash: MA5HoxAHfQdmOCjzNs+a8N1KDnjHKElBaqnEUCtEICk=)
                          2: D26968643D1911EF839BE3A0762E951A.roa (hash: J0djfjB+ImP9O4b/Y0DGlGrugUtQ+yVNNLjhpRXf1yA=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F363E7DE/0AF6EC623D1811EFADCB7693762E951A/mEs08lM_l20v8hGUKFlsTLCoNJQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F363E7DE/0AF6EC623D1811EFADCB7693762E951A/mEs08lM_l20v8hGUKFlsTLCoNJQ.mft
                          rsync://rpki.afrinic.net/repository/afrinic/mEs08lM_l20v8hGUKFlsTLCoNJQ.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 26 Jan 2026 04:20:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 582 (0x246)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F363E7DEAF, serialNumber=984B34F2533F976D2FF2119428596C4CB0A83494
        Validity
            Not Before: Jan 24 04:20:52 2026 GMT
            Not After : Jan 26 04:20:52 2026 GMT
        Subject: CN=697448a5-7baf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:d3:70:ad:86:d0:a3:f2:0f:50:50:12:00:cb:
                    0b:c2:08:f6:2d:1b:e2:82:ec:b3:50:99:b6:1a:9d:
                    fd:dd:ca:23:0a:b8:35:6f:12:17:8f:39:ff:99:55:
                    8e:c3:6e:2d:cb:db:b2:e4:0d:c7:e3:a8:6f:90:cd:
                    92:41:36:6f:cd:16:cb:e6:7a:a2:4c:89:8d:a7:15:
                    7b:c6:91:c4:06:00:44:23:85:60:70:51:9b:03:2b:
                    6f:39:f8:e2:14:d3:c3:d8:bd:fa:03:93:4e:a5:07:
                    36:4a:e5:58:8f:b9:cf:64:b7:73:20:78:ac:fc:e9:
                    98:45:97:d5:2f:01:9f:14:02:76:95:c1:e9:b0:5d:
                    db:dd:62:fc:90:1f:21:54:23:0b:c8:dd:0a:57:a0:
                    38:ba:27:b8:6c:45:90:b2:cd:49:17:81:95:7b:2d:
                    c0:de:80:10:b2:79:d8:ca:49:2d:4d:d1:83:43:78:
                    17:ec:97:2e:0b:a9:e6:7f:c9:04:d8:41:cf:c2:f2:
                    75:66:8f:6e:b7:a4:09:08:70:b1:09:f8:2e:a9:e6:
                    23:07:5c:14:b4:90:f3:81:ea:61:7e:09:77:6c:39:
                    70:ea:91:5e:25:99:9e:f5:c4:e8:3c:21:c2:7a:7f:
                    bb:cd:65:5e:67:4f:30:87:24:d6:6a:b4:c3:6d:4e:
                    08:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:D0:EE:60:B1:0D:38:36:A9:E8:94:7D:46:27:4A:3D:7D:79:4F:81
            X509v3 Authority Key Identifier:
                keyid:98:4B:34:F2:53:3F:97:6D:2F:F2:11:94:28:59:6C:4C:B0:A8:34:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F363E7DE/0AF6EC623D1811EFADCB7693762E951A/mEs08lM_l20v8hGUKFlsTLCoNJQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/mEs08lM_l20v8hGUKFlsTLCoNJQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363E7DE/0AF6EC623D1811EFADCB7693762E951A/mEs08lM_l20v8hGUKFlsTLCoNJQ.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:62:da:0e:ed:ef:a8:c8:d1:08:df:cf:22:e2:68:97:08:b5:
         9f:4c:ab:ee:0e:d7:b2:80:df:43:89:c8:bc:e1:9e:b0:44:7f:
         c3:a9:be:e0:a0:8d:1d:ff:71:5f:39:de:7b:0b:c3:a6:80:81:
         5a:4b:1a:74:1d:20:7b:14:fb:7c:14:5a:bf:9c:a1:88:19:27:
         21:82:89:8d:38:32:12:f0:72:4a:43:80:05:aa:4b:d8:60:04:
         ba:47:ac:a1:8c:8a:c8:d3:63:4e:fd:5e:dd:e0:6d:82:4e:5f:
         6e:88:e0:26:37:dd:38:76:72:c3:0a:95:49:6d:0e:69:60:ef:
         1f:8f:dd:c5:9c:ca:ea:c9:56:28:9e:23:b5:53:94:95:3d:a2:
         b3:79:f2:cb:30:1a:cd:44:bf:f0:39:84:fc:86:55:d0:4b:bf:
         7a:0a:a2:83:2b:e7:b1:70:59:c3:7d:fb:5d:cc:d9:7a:97:59:
         a2:86:be:f3:32:9d:4b:cd:f5:bc:56:cd:fd:41:f7:c1:f0:27:
         a0:62:97:a5:75:db:af:a2:e1:fb:79:95:8f:86:3b:38:1e:83:
         37:47:40:92:83:aa:4e:91:86:da:e1:4e:18:f0:a1:1f:96:2f:
         9b:1d:59:75:53:c9:a4:95:b3:ab:4f:cf:9b:7d:c7:64:d4:77:
         db:84:02:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 06:14:42 2026 by rpki-client