This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3652210/010E0928F53C11F094A518DBDAE4EC9C/dVGa9IvP07pGhRZS31S4t-uI7f8.mft
File:                     dVGa9IvP07pGhRZS31S4t-uI7f8.mft (raw, json)
Hash identifier:          LuBNHuezcXnNalGrv8+Svk1fHRWhcLgjtq8rvFAcTCY=
Subject key identifier:   52:48:FD:B4:C8:92:B7:C2:C5:C5:F2:C7:D5:32:CD:CB:A3:A6:ED:CB
Authority key identifier: 75:51:9A:F4:8B:CF:D3:BA:46:85:16:52:DF:54:B8:B7:EB:88:ED:FF
Certificate issuer:       /CN=F3652210AF/serialNumber=75519AF48BCFD3BA46851652DF54B8B7EB88EDFF
Certificate serial:       0D
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/dVGa9IvP07pGhRZS31S4t-uI7f8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3652210/010E0928F53C11F094A518DBDAE4EC9C/dVGa9IvP07pGhRZS31S4t-uI7f8.mft
Manifest number:          0A
Signing time:             Sun 25 Jan 2026 05:28:26 +0000
Manifest this update:     Sun 25 Jan 2026 05:28:25 +0000
Manifest next update:     Tue 27 Jan 2026 05:28:25 +0000
Files and hashes:         1: dVGa9IvP07pGhRZS31S4t-uI7f8.crl (hash: x30IcfSQJBWiL2hjiSyLKeTX031aj4Dh4lK4hcHccdU=)
                          2: C41AF490F57211F0ADA5F4A4DAE4EC9C.roa (hash: QhmPWESnb1+/6WP9zrXz6AUR4g56o3n1zihMHHPrfJM=)
                          3: E46FAFCCF56F11F0827DCE92DAE4EC9C.roa (hash: a1ThNJz9d1adFsYYPdRNFgqHPUPC6XUR4XTr2I70j94=)
                          4: 9DC9BF04F56F11F0B88EAF92DAE4EC9C.roa (hash: mqjll+6jQ1hijD2RV9xsy1IRzti4L3oaX/Vaj5z3Cyw=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3652210/010E0928F53C11F094A518DBDAE4EC9C/dVGa9IvP07pGhRZS31S4t-uI7f8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3652210/010E0928F53C11F094A518DBDAE4EC9C/dVGa9IvP07pGhRZS31S4t-uI7f8.mft
                          rsync://rpki.afrinic.net/repository/afrinic/dVGa9IvP07pGhRZS31S4t-uI7f8.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:06:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13 (0xd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3652210AF, serialNumber=75519AF48BCFD3BA46851652DF54B8B7EB88EDFF
        Validity
            Not Before: Jan 25 05:28:25 2026 GMT
            Not After : Jan 27 05:28:25 2026 GMT
        Subject: CN=6975a9fa-e671
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:d7:65:2f:94:86:c0:dd:84:6f:4a:ca:0b:36:
                    b4:57:93:a9:de:86:be:f8:bc:a1:8b:9e:64:ea:5d:
                    0a:d1:cc:bc:39:c1:a3:06:2c:0e:a0:7e:41:42:ae:
                    18:9a:3b:88:32:4d:1c:f3:87:81:4d:9f:25:eb:89:
                    fb:78:9d:3e:14:82:22:6b:2f:6b:8f:0e:ba:c0:15:
                    f0:4b:df:c6:70:ce:8c:98:25:e8:05:86:7f:57:fd:
                    af:bb:2b:d1:d6:06:9d:d4:d9:64:f2:b3:6b:6a:e2:
                    bc:48:0a:37:5a:50:a1:5e:fa:1c:10:c3:9f:2d:db:
                    e4:37:96:86:d3:b2:73:4c:f4:5b:23:f4:bd:87:f4:
                    22:da:34:3c:7e:84:45:99:57:9f:47:2a:23:d2:87:
                    5b:a1:58:c9:df:b3:97:28:e7:82:8d:43:b4:b8:9d:
                    d7:a5:b6:70:e5:15:0a:88:61:22:23:e6:c5:73:eb:
                    67:87:cf:ba:5c:f4:91:96:5f:a7:f6:55:55:d2:97:
                    6b:a0:5f:bc:a6:97:f6:f0:6b:68:d4:13:30:22:ed:
                    c9:62:c2:e0:df:2d:84:90:86:9b:74:7c:97:b0:f8:
                    a0:7c:ea:ac:28:db:b8:60:71:4d:80:b1:8f:bf:83:
                    88:27:59:4c:b4:f8:4b:2c:1f:47:f3:71:44:85:e5:
                    87:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:48:FD:B4:C8:92:B7:C2:C5:C5:F2:C7:D5:32:CD:CB:A3:A6:ED:CB
            X509v3 Authority Key Identifier:
                keyid:75:51:9A:F4:8B:CF:D3:BA:46:85:16:52:DF:54:B8:B7:EB:88:ED:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3652210/010E0928F53C11F094A518DBDAE4EC9C/dVGa9IvP07pGhRZS31S4t-uI7f8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/dVGa9IvP07pGhRZS31S4t-uI7f8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3652210/010E0928F53C11F094A518DBDAE4EC9C/dVGa9IvP07pGhRZS31S4t-uI7f8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:0b:ae:ae:33:e1:06:f0:df:7d:2b:1f:3a:30:bf:fb:7b:8c:
         17:8d:8a:84:41:ff:68:49:55:33:6e:ff:75:23:30:cb:4a:55:
         f1:24:f3:29:00:16:fe:74:06:7d:7e:d0:9d:ba:19:98:a2:07:
         bc:16:31:ab:b1:65:ed:94:90:59:4f:b2:1e:ce:f1:e7:e4:98:
         f8:e6:3a:56:bd:2d:47:5b:63:4a:37:73:9b:56:3b:ee:6a:c9:
         c7:fe:e6:c0:9f:f4:2b:21:8b:8d:10:51:0a:e4:ec:a4:71:02:
         d0:9b:03:98:fb:c9:0d:48:e2:2b:65:2b:60:0c:c7:0c:84:fa:
         39:f7:27:9a:01:20:d8:a4:71:63:fe:b1:96:2c:72:49:1f:49:
         26:84:ff:3f:b4:ce:22:48:3c:fd:12:72:eb:cd:fd:69:18:64:
         78:08:ee:20:04:65:b4:88:14:b0:5b:ce:eb:33:a9:e5:af:46:
         b8:b7:6d:98:17:d7:b2:6b:17:0a:71:20:8b:24:bf:1f:e8:75:
         39:88:fb:36:b5:a5:34:bc:f1:f2:23:79:16:48:47:2d:8f:08:
         9e:60:72:47:61:43:a3:87:32:e8:fd:97:9c:82:26:cf:da:43:
         48:31:d2:e9:6c:fc:7e:19:9d:de:28:f9:1d:42:ea:9a:d3:e8:
         e6:35:e6:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 08:49:11 2026 by rpki-client