This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F364AFEC/C1CCFE3680F711EFACC908AA762E951A/RkZtNWrLGVGdZM2Cm-1APQQgBOw.mft
File:                     RkZtNWrLGVGdZM2Cm-1APQQgBOw.mft (raw, json)
Hash identifier:          dYkc3B1yObIQ2EeJMuzfJhzE6d5iPT6yHjS1YkeEFHc=
Subject key identifier:   C3:3A:C9:A5:D5:65:C9:07:89:60:81:86:38:7E:8C:A8:9A:0D:25:29
Authority key identifier: 46:46:6D:35:6A:CB:19:51:9D:64:CD:82:9B:ED:40:3D:04:20:04:EC
Certificate issuer:       /CN=F364AFECAF/serialNumber=46466D356ACB19519D64CD829BED403D042004EC
Certificate serial:       01F1
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/RkZtNWrLGVGdZM2Cm-1APQQgBOw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F364AFEC/C1CCFE3680F711EFACC908AA762E951A/RkZtNWrLGVGdZM2Cm-1APQQgBOw.mft
Manifest number:          01F0
Signing time:             Sun 25 Jan 2026 04:37:05 +0000
Manifest this update:     Sun 25 Jan 2026 04:37:04 +0000
Manifest next update:     Tue 27 Jan 2026 04:37:04 +0000
Files and hashes:         1: RkZtNWrLGVGdZM2Cm-1APQQgBOw.crl (hash: yWPej701/d1QVZ1Mapcln2Z3cPQZzToH0KxjnOA+xKc=)
                          2: 3115BA58AC9A11EFBB666976762E951A.roa (hash: bHbD7weS2dip8Z+GiQXd9+abXSVFw+tU7+Gs29hWT0o=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F364AFEC/C1CCFE3680F711EFACC908AA762E951A/RkZtNWrLGVGdZM2Cm-1APQQgBOw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F364AFEC/C1CCFE3680F711EFACC908AA762E951A/RkZtNWrLGVGdZM2Cm-1APQQgBOw.mft
                          rsync://rpki.afrinic.net/repository/afrinic/RkZtNWrLGVGdZM2Cm-1APQQgBOw.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:06:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 497 (0x1f1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F364AFECAF, serialNumber=46466D356ACB19519D64CD829BED403D042004EC
        Validity
            Not Before: Jan 25 04:37:04 2026 GMT
            Not After : Jan 27 04:37:04 2026 GMT
        Subject: CN=69759df1-b81a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:32:6d:f3:bd:32:11:c0:94:08:7a:15:d2:d3:
                    ae:9e:38:e4:a0:c1:ed:49:ca:4b:1e:93:15:d8:54:
                    fe:71:5a:06:a5:bc:4a:50:63:2b:6d:41:7c:ef:b7:
                    22:e9:d2:1a:79:3b:49:96:0e:bd:da:7f:40:d8:48:
                    a9:2c:a0:12:0c:f7:a3:2d:1b:c0:db:55:c7:16:a9:
                    1b:18:1c:61:5e:a8:58:6d:aa:65:cd:d7:3c:ed:3c:
                    93:f1:1c:9c:78:29:ae:ad:8a:30:3f:df:52:49:a9:
                    e0:1e:5f:7a:76:e1:ae:49:29:43:a9:5c:aa:de:68:
                    dd:34:d6:7b:90:10:3f:b4:08:ae:14:25:79:a6:7a:
                    4f:cf:27:39:65:97:97:c5:d3:25:db:43:4c:03:7a:
                    c1:38:8c:8b:82:9b:17:7e:7b:40:fe:9c:11:6f:f0:
                    5e:d6:3c:61:ed:fc:e1:3c:28:7e:87:06:44:75:81:
                    2b:af:8b:1d:6e:b0:c7:78:fe:ab:c7:37:19:fc:92:
                    76:64:28:87:20:90:bc:0c:97:69:bf:1a:f0:41:79:
                    3c:fe:a9:60:92:8f:82:cb:eb:d2:1e:3f:36:d4:16:
                    1a:02:a1:2d:a7:64:d7:2b:42:be:28:52:f4:66:16:
                    bc:c6:89:55:98:51:87:04:41:29:5f:a4:e6:31:f9:
                    e9:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:3A:C9:A5:D5:65:C9:07:89:60:81:86:38:7E:8C:A8:9A:0D:25:29
            X509v3 Authority Key Identifier:
                keyid:46:46:6D:35:6A:CB:19:51:9D:64:CD:82:9B:ED:40:3D:04:20:04:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F364AFEC/C1CCFE3680F711EFACC908AA762E951A/RkZtNWrLGVGdZM2Cm-1APQQgBOw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/RkZtNWrLGVGdZM2Cm-1APQQgBOw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F364AFEC/C1CCFE3680F711EFACC908AA762E951A/RkZtNWrLGVGdZM2Cm-1APQQgBOw.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:85:26:73:23:35:9c:4b:78:b5:78:2b:94:cc:9f:1f:c4:3a:
         52:a7:5b:76:f2:3a:6c:c8:99:92:e3:be:4d:11:9d:f3:cf:8c:
         a3:f4:1c:89:ef:84:a5:ee:45:f7:61:35:8b:ca:2b:30:a0:c7:
         ff:a7:6c:63:48:19:00:fe:12:4f:c7:43:e8:a0:9e:98:41:c3:
         7f:0d:d3:7a:97:aa:7a:d2:a0:69:24:57:5c:15:9f:97:9a:5d:
         a0:09:9b:90:bf:a5:db:53:40:f7:e8:8e:e9:56:87:c4:2b:21:
         0c:25:86:0a:ff:9a:0d:fa:98:9d:42:73:69:13:64:3a:42:a5:
         d6:45:33:c2:15:86:da:41:ab:23:95:0e:7c:44:bf:91:91:71:
         eb:c0:2c:93:76:23:4a:70:92:70:23:d3:be:6a:a7:8a:18:c0:
         d9:cd:54:fd:81:fb:c4:a0:59:dc:b8:53:21:8b:f6:09:7f:e4:
         b7:27:28:51:55:51:4e:6e:2f:8e:2e:98:31:41:bf:ea:d0:fd:
         e0:05:78:b9:a4:a5:80:f2:2f:8e:de:5a:64:47:ff:73:45:34:
         42:75:05:77:00:96:54:86:3b:76:7c:f5:c5:38:fe:ae:9a:d1:
         10:5f:b0:d5:03:a3:f1:7d:a8:bf:33:f4:c0:f3:52:26:b6:9d:
         2e:31:52:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:45:51 2026 by rpki-client