This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3647DDF/D0E04692863F11EA8AA7334AF8AEA228/af-Z7GUV26O7-Wo36yGeJJT-wYU.mft
File:                     af-Z7GUV26O7-Wo36yGeJJT-wYU.mft (raw, json)
Hash identifier:          aam86N6iUXl1521eoorNbTsCP/m9DCtigejVStfHTY8=
Subject key identifier:   05:AD:AD:8E:D2:B4:1C:46:00:C5:3B:72:89:51:26:7A:1A:67:FC:84
Authority key identifier: 69:FF:99:EC:65:15:DB:A3:BB:F9:6A:37:EB:21:9E:24:94:FE:C1:85
Certificate issuer:       /CN=F3647DDFAF/serialNumber=69FF99EC6515DBA3BBF96A37EB219E2494FEC185
Certificate serial:       086C
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/af-Z7GUV26O7-Wo36yGeJJT-wYU.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3647DDF/D0E04692863F11EA8AA7334AF8AEA228/af-Z7GUV26O7-Wo36yGeJJT-wYU.mft
Manifest number:          086A
Signing time:             Sun 25 Jan 2026 01:47:22 +0000
Manifest this update:     Sun 25 Jan 2026 01:47:21 +0000
Manifest next update:     Tue 27 Jan 2026 01:47:21 +0000
Files and hashes:         1: af-Z7GUV26O7-Wo36yGeJJT-wYU.crl (hash: zAJQXcgMmBeBLrTGiloV+WPMl2nkRjdoBIxzagpEI/o=)
                          2: D3FB7C1E86F511EA872C9285F8AEA228.roa (hash: TI9Oy29MRy8vT+vPx3tD5wZgwJvEGhK9WAGNOqgD+2Q=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3647DDF/D0E04692863F11EA8AA7334AF8AEA228/af-Z7GUV26O7-Wo36yGeJJT-wYU.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3647DDF/D0E04692863F11EA8AA7334AF8AEA228/af-Z7GUV26O7-Wo36yGeJJT-wYU.mft
                          rsync://rpki.afrinic.net/repository/afrinic/af-Z7GUV26O7-Wo36yGeJJT-wYU.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:06:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2156 (0x86c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3647DDFAF, serialNumber=69FF99EC6515DBA3BBF96A37EB219E2494FEC185
        Validity
            Not Before: Jan 25 01:47:21 2026 GMT
            Not After : Jan 27 01:47:21 2026 GMT
        Subject: CN=69757629-b84f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:b9:0e:4d:9a:d5:59:2b:b7:c0:60:21:78:82:
                    fd:2b:72:b6:db:d8:72:cb:bb:69:cc:8d:35:0e:84:
                    98:bb:51:6f:90:94:98:67:8d:87:8d:dd:fe:6c:6f:
                    4f:13:6e:ea:5b:a5:56:99:e4:f2:92:9c:4a:92:e0:
                    02:47:c1:94:4b:8b:df:71:a1:f4:b1:e2:51:6f:97:
                    f8:dd:81:cd:c1:db:01:d4:97:02:60:fc:7e:c5:d9:
                    d4:17:4f:41:17:79:7c:1f:58:4d:58:48:47:84:e8:
                    77:f3:fd:51:12:78:f3:05:4b:a2:c1:84:11:3a:a7:
                    e9:c6:9a:2e:23:2c:33:b9:28:61:6e:8a:5f:21:4c:
                    06:b1:79:cc:87:15:cd:2e:10:a4:4c:f9:7d:a3:ac:
                    62:26:fc:6d:27:58:76:d4:7d:3b:ca:f0:60:2f:93:
                    8d:34:f3:58:5b:be:ce:cf:6c:1e:e8:98:9d:38:52:
                    94:34:85:bc:b1:d0:95:b7:96:c3:fe:5a:69:34:99:
                    40:04:5b:29:3f:03:70:6b:cd:5c:82:00:75:be:f6:
                    3a:14:ed:26:b6:2f:8b:40:ac:d6:49:88:e3:98:1e:
                    c6:e8:d2:54:c2:51:c9:bc:53:0d:e1:26:58:f4:03:
                    a0:23:b6:0c:70:87:b8:19:7f:13:6a:24:8a:41:fc:
                    cc:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:AD:AD:8E:D2:B4:1C:46:00:C5:3B:72:89:51:26:7A:1A:67:FC:84
            X509v3 Authority Key Identifier:
                keyid:69:FF:99:EC:65:15:DB:A3:BB:F9:6A:37:EB:21:9E:24:94:FE:C1:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3647DDF/D0E04692863F11EA8AA7334AF8AEA228/af-Z7GUV26O7-Wo36yGeJJT-wYU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/af-Z7GUV26O7-Wo36yGeJJT-wYU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3647DDF/D0E04692863F11EA8AA7334AF8AEA228/af-Z7GUV26O7-Wo36yGeJJT-wYU.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:8c:e1:1b:5f:b7:63:45:cd:2e:7f:ea:36:d1:60:59:80:6b:
         2b:e7:00:c5:69:6e:6f:ad:95:2c:e7:be:e2:96:4e:6b:ef:d9:
         a1:52:1c:41:de:27:97:33:af:9a:1c:93:cd:92:86:85:e0:7f:
         2f:37:35:d6:39:41:01:79:36:ce:c8:2e:e1:d7:af:ef:02:32:
         a7:cc:2f:2a:d8:9d:80:47:99:2f:fd:1b:ec:07:ad:39:8d:de:
         ad:1c:98:94:9e:7c:22:cf:03:ce:67:00:ac:f5:d0:2c:bb:f2:
         0e:66:1a:7e:3b:f7:96:ff:8c:f7:84:84:46:b8:d8:fc:e8:ea:
         0d:0b:d3:de:1b:92:80:23:8c:bb:6c:fa:d8:f3:aa:dd:bf:23:
         cc:7d:b6:6f:32:ed:6c:9e:d3:5b:36:1b:04:c8:84:5a:be:8a:
         e7:bf:89:66:39:e7:aa:f6:8a:a3:06:eb:f4:5e:b8:d1:f3:7b:
         3c:a7:1c:7b:d7:c0:e8:56:43:4c:82:3b:90:e1:df:ae:99:7c:
         50:35:3c:2c:52:67:bb:a2:0c:21:59:9a:e1:1e:a9:6e:da:1b:
         80:93:60:11:99:1d:68:6f:23:d4:37:6e:b4:c3:74:1a:aa:5c:
         bd:a3:55:76:05:b6:01:cf:3b:e3:d9:76:80:a4:09:d0:0f:8f:
         98:82:02:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 12:38:33 2026 by rpki-client