This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3670369/565052907E7811EC9FAD14CB5A40D577/KVkcZVM-_QiXL0qXW-xBxltEXuA.mft
File:                     KVkcZVM-_QiXL0qXW-xBxltEXuA.mft (raw, json)
Hash identifier:          67qmKvC8QTwTztAM6lKNKLBSuzEo7CWTbwGsQWAkluQ=
Subject key identifier:   F7:E4:92:8C:80:5D:69:65:09:84:3B:12:C1:DA:E4:CC:46:75:60:72
Authority key identifier: 29:59:1C:65:53:3E:FD:08:97:2F:4A:97:5B:EC:41:C6:5B:44:5E:E0
Certificate issuer:       /CN=F3670369AR/serialNumber=29591C65533EFD08972F4A975BEC41C65B445EE0
Certificate serial:       05E8
Authority info access:    rsync://rpki.afrinic.net/repository/arin/KVkcZVM-_QiXL0qXW-xBxltEXuA.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3670369/565052907E7811EC9FAD14CB5A40D577/KVkcZVM-_QiXL0qXW-xBxltEXuA.mft
Manifest number:          05E3
Signing time:             Sun 25 Jan 2026 02:36:46 +0000
Manifest this update:     Sun 25 Jan 2026 02:36:45 +0000
Manifest next update:     Tue 27 Jan 2026 02:36:45 +0000
Files and hashes:         1: KVkcZVM-_QiXL0qXW-xBxltEXuA.crl (hash: X8n0ePDSd1U+oX+uCwQGwn6F46R1FbDivQVqvAkDLys=)
                          2: DE53055A2E1311EFAE851899762E951A.roa (hash: UcFSJfUBz/jAMPlBsM0sx0A7nrbCZ5eci3vzt8nRiuU=)
                          3: 01CC6C947E8D11EC89A79C885A40D577.roa (hash: qd/8XDFff1CiSxAQk1vmUsyny6ywpT4UycAJmKGe26U=)
                          4: D88002927E8C11EC95A915885A40D577.roa (hash: zp+bksguNWi/6Gwbfy/elTDlK43kW6UD+PYcX23ze0Y=)
                          5: EAF40C665BD311F0B32EE4A3DAE4EC9C.roa (hash: fL1+phnAmmLMQW8rzdMcPM0YqGLRk7qlgGhlyEQ369E=)
                          6: 675DA8B27E8211ECAB19A1E75A40D577.roa (hash: TlKHAqm5F0asDSkR7ApdBCSJn77368RAQ3PQ3KzHit4=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3670369/565052907E7811EC9FAD14CB5A40D577/KVkcZVM-_QiXL0qXW-xBxltEXuA.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3670369/565052907E7811EC9FAD14CB5A40D577/KVkcZVM-_QiXL0qXW-xBxltEXuA.mft
                          rsync://rpki.afrinic.net/repository/arin/KVkcZVM-_QiXL0qXW-xBxltEXuA.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 02:36:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1512 (0x5e8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3670369AR, serialNumber=29591C65533EFD08972F4A975BEC41C65B445EE0
        Validity
            Not Before: Jan 25 02:36:45 2026 GMT
            Not After : Jan 27 02:36:45 2026 GMT
        Subject: CN=697581be-48c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:86:e6:ca:52:01:11:a8:c3:57:ec:31:bc:f7:
                    03:e3:34:84:24:ff:93:de:fd:86:a3:c7:93:2d:d1:
                    a3:dd:43:0f:36:f7:c7:56:3d:09:18:c8:d5:7e:9a:
                    f8:76:02:16:22:5b:11:54:f4:b1:da:f1:97:ff:83:
                    a6:fa:c2:51:c1:43:a4:07:8c:32:0f:cf:5b:5a:45:
                    4c:56:04:e0:a0:19:d2:fb:34:86:4f:bd:5e:be:05:
                    95:16:69:c2:de:ac:ce:4a:19:c9:b7:8c:3c:ae:f7:
                    ee:09:7d:e1:55:a4:07:e4:c8:27:4a:5f:a3:82:13:
                    e0:c1:61:28:22:d1:aa:11:da:a0:1f:14:0e:6f:a0:
                    08:99:cc:c9:e9:24:04:0e:3d:a8:cb:61:21:7b:f3:
                    50:8c:34:ed:ab:64:55:0d:a1:c1:27:24:00:27:bf:
                    ff:41:8e:08:7d:6f:6a:50:d7:43:6b:9b:16:59:9a:
                    d6:26:7c:91:0a:a3:02:33:17:dd:b7:9c:b5:18:bb:
                    df:61:fc:c5:af:49:2e:84:e7:02:90:39:88:54:70:
                    f5:2e:ec:4c:1d:96:dc:8f:42:08:cd:4b:12:a9:96:
                    66:73:1f:8e:7a:10:fa:e4:55:38:5c:36:c4:c9:be:
                    65:d4:fe:e8:e7:af:63:5f:d3:1b:56:c2:a5:03:2a:
                    e2:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:E4:92:8C:80:5D:69:65:09:84:3B:12:C1:DA:E4:CC:46:75:60:72
            X509v3 Authority Key Identifier:
                keyid:29:59:1C:65:53:3E:FD:08:97:2F:4A:97:5B:EC:41:C6:5B:44:5E:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3670369/565052907E7811EC9FAD14CB5A40D577/KVkcZVM-_QiXL0qXW-xBxltEXuA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/KVkcZVM-_QiXL0qXW-xBxltEXuA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3670369/565052907E7811EC9FAD14CB5A40D577/KVkcZVM-_QiXL0qXW-xBxltEXuA.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:3c:8b:58:37:48:ce:f9:62:5a:84:fd:e8:45:2a:f7:e8:32:
         33:ff:81:73:eb:2d:99:c5:e0:05:91:25:bd:1a:18:10:dc:f9:
         84:29:3a:63:a2:13:7f:5e:46:66:35:2f:ff:70:bd:d7:26:2d:
         de:96:7f:d4:77:9e:02:4c:9c:7e:87:52:9e:c6:d2:8a:4d:bd:
         e1:c0:79:3c:ab:0f:f6:f8:48:c2:48:30:c3:be:fd:d1:4f:c2:
         ad:74:83:dd:0d:05:01:ac:7e:db:0e:dc:39:d5:ed:8b:b9:3d:
         44:5b:da:44:47:c0:be:8a:89:98:c6:e2:3c:0f:be:34:dc:5c:
         3c:f3:59:1e:cd:9c:1e:0e:d4:98:63:20:7b:fc:22:c8:fb:f2:
         09:8a:98:24:ee:78:c0:44:2d:06:7d:24:56:49:dd:ae:c8:2e:
         bf:b7:36:b7:9c:1f:f8:ae:24:6e:b2:53:8f:62:08:00:28:fe:
         5c:a6:19:95:e2:b3:0d:15:cc:8d:a7:d3:92:3f:15:b0:20:40:
         8f:63:ac:44:41:51:e3:b1:d6:1b:2a:c4:08:3a:77:9e:2b:e7:
         28:d0:6c:b1:04:1b:2b:80:a2:f9:a6:98:be:1d:6d:5e:db:98:
         72:ff:95:89:9d:5c:90:0a:29:a8:23:f0:4e:33:21:22:cf:77:
         69:41:85:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 03:49:49 2026 by rpki-client