This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F365972A/2EA31FD677E411EE96312D884AD9E6FC/MCQ1DTQJIIK5C1PqPZv9uOdFHVo.mft
File:                     MCQ1DTQJIIK5C1PqPZv9uOdFHVo.mft (raw, json)
Hash identifier:          FsXWNIiOswV2nfDYM+Kpm1qrLD+pSSLQMU/lzCU2gm0=
Subject key identifier:   DE:83:A4:D1:90:4E:9F:A8:81:A0:70:6D:7A:D2:F4:19:5D:B3:28:27
Authority key identifier: 30:24:35:0D:34:09:20:82:B9:0B:53:EA:3D:9B:FD:B8:E7:45:1D:5A
Certificate issuer:       /CN=F365972AAF/serialNumber=3024350D34092082B90B53EA3D9BFDB8E7451D5A
Certificate serial:       034C
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/MCQ1DTQJIIK5C1PqPZv9uOdFHVo.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F365972A/2EA31FD677E411EE96312D884AD9E6FC/MCQ1DTQJIIK5C1PqPZv9uOdFHVo.mft
Manifest number:          034A
Signing time:             Sun 25 Jan 2026 03:51:13 +0000
Manifest this update:     Sun 25 Jan 2026 03:51:13 +0000
Manifest next update:     Tue 27 Jan 2026 03:51:13 +0000
Files and hashes:         1: MCQ1DTQJIIK5C1PqPZv9uOdFHVo.crl (hash: NdHchY7Z79HzMvhLl6e5MgxwahqUE4q3pO580VctPI4=)
                          2: 92399C0CCFB511F0886853A2DAE4EC9C.roa (hash: 8B6wU1xY38cYhzr9lZGnTjsUMM95hSXAG9bGNEVmCPI=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F365972A/2EA31FD677E411EE96312D884AD9E6FC/MCQ1DTQJIIK5C1PqPZv9uOdFHVo.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F365972A/2EA31FD677E411EE96312D884AD9E6FC/MCQ1DTQJIIK5C1PqPZv9uOdFHVo.mft
                          rsync://rpki.afrinic.net/repository/afrinic/MCQ1DTQJIIK5C1PqPZv9uOdFHVo.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:06:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 844 (0x34c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F365972AAF, serialNumber=3024350D34092082B90B53EA3D9BFDB8E7451D5A
        Validity
            Not Before: Jan 25 03:51:13 2026 GMT
            Not After : Jan 27 03:51:13 2026 GMT
        Subject: CN=69759331-1dd8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:f9:fd:19:a2:a8:bb:62:c1:06:2d:5a:a0:ed:
                    37:62:17:9d:55:19:77:cc:13:d1:b0:bb:5c:12:55:
                    aa:60:af:b4:a7:8d:44:b8:d1:ef:e0:44:09:46:23:
                    83:d3:28:77:31:6b:a2:16:cd:28:6f:d9:7b:c1:06:
                    32:7c:b1:2a:50:e6:c5:36:55:60:88:0c:d2:a1:57:
                    50:8e:15:0d:2f:b5:7a:4d:c6:e8:ce:47:85:36:a2:
                    38:30:04:09:d4:fa:c2:6a:ab:f5:3f:6e:5d:0e:05:
                    6e:fd:9f:39:4e:e3:92:b1:e3:26:ec:fe:79:7f:95:
                    2f:79:7f:22:f4:08:fe:4b:2f:47:4a:02:2d:d1:75:
                    9b:e3:ad:d6:7c:4e:1d:e5:6a:28:d8:20:a6:a0:79:
                    97:42:15:e2:5a:a2:9e:ff:11:87:9d:4d:03:c0:3c:
                    25:9b:fd:cc:e8:9a:5a:45:8e:8a:0c:97:c7:03:b1:
                    c7:ab:51:23:a4:cb:b1:79:78:89:d4:15:34:54:8a:
                    16:4c:df:bd:cc:1a:66:61:bf:94:8f:d7:f0:fe:5b:
                    3c:07:24:e7:7e:96:0f:c1:38:0b:33:03:6d:fa:7f:
                    bd:00:3f:41:01:75:4d:76:90:92:d8:d8:98:9e:53:
                    28:43:3e:87:5f:31:c7:6d:ec:50:fb:f3:34:5a:f4:
                    92:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:83:A4:D1:90:4E:9F:A8:81:A0:70:6D:7A:D2:F4:19:5D:B3:28:27
            X509v3 Authority Key Identifier:
                keyid:30:24:35:0D:34:09:20:82:B9:0B:53:EA:3D:9B:FD:B8:E7:45:1D:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F365972A/2EA31FD677E411EE96312D884AD9E6FC/MCQ1DTQJIIK5C1PqPZv9uOdFHVo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/MCQ1DTQJIIK5C1PqPZv9uOdFHVo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F365972A/2EA31FD677E411EE96312D884AD9E6FC/MCQ1DTQJIIK5C1PqPZv9uOdFHVo.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:d7:20:4e:0e:b2:9d:f6:e9:3e:09:cd:6d:00:04:a2:6b:4e:
         b5:1b:85:c3:7d:8e:54:09:7d:02:85:18:22:62:eb:7b:ff:05:
         56:3f:70:63:74:1e:a2:16:dc:d4:f4:04:6f:11:4e:dc:89:92:
         36:ea:78:2f:84:3b:58:0e:87:5a:77:e8:6b:d2:0f:7e:8d:4b:
         4c:34:8f:f5:a8:4e:f1:d9:43:88:27:78:9f:2a:cc:39:27:41:
         ae:4e:35:98:59:9a:e6:ad:fc:08:62:a0:3b:31:43:61:86:a5:
         8b:ea:25:81:88:ac:4f:63:23:21:34:e2:ad:6a:5c:cc:c5:56:
         4b:a0:0d:71:f9:e7:83:34:92:83:28:f8:ee:c7:d6:b0:f9:44:
         d3:e3:3b:7c:e1:72:b3:39:f2:fa:04:f7:9c:33:af:3d:79:33:
         66:62:5f:fa:2c:a3:7a:02:3b:18:a6:82:bc:38:ae:2f:41:46:
         63:33:09:a9:09:55:82:2b:82:c9:64:c2:0f:07:d7:3c:6e:43:
         04:94:76:11:64:45:68:b9:9d:19:f2:89:d4:6d:2d:98:6f:16:
         a9:3e:e8:d3:7f:bb:93:8c:7c:d8:0d:c4:7c:9f:13:44:3d:50:
         79:a1:4a:0a:95:46:09:6a:89:ca:d9:e4:9a:e6:fa:9b:f7:46:
         2c:e6:b3:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:46:38 2026 by rpki-client