This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3671DBD/3EE102DE124411ED9F6268B4F1222468/yD3GjOK-QyU6qlUariL5Wh8drSs.mft
File:                     yD3GjOK-QyU6qlUariL5Wh8drSs.mft (raw, json)
Hash identifier:          9TYrbpMo1yWsXaNyrwnmII14MJVTekXeOm8AGv70hsI=
Subject key identifier:   77:41:02:B5:32:DE:06:DD:40:54:75:15:7B:A2:F8:DD:01:6C:1D:EE
Authority key identifier: C8:3D:C6:8C:E2:BE:43:25:3A:AA:55:1A:AE:22:F9:5A:1F:1D:AD:2B
Certificate issuer:       /CN=F3671DBDAR/serialNumber=C83DC68CE2BE43253AAA551AAE22F95A1F1DAD2B
Certificate serial:       0524
Authority info access:    rsync://rpki.afrinic.net/repository/arin/yD3GjOK-QyU6qlUariL5Wh8drSs.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3671DBD/3EE102DE124411ED9F6268B4F1222468/yD3GjOK-QyU6qlUariL5Wh8drSs.mft
Manifest number:          0522
Signing time:             Sun 25 Jan 2026 02:54:05 +0000
Manifest this update:     Sun 25 Jan 2026 02:54:04 +0000
Manifest next update:     Tue 27 Jan 2026 02:54:04 +0000
Files and hashes:         1: yD3GjOK-QyU6qlUariL5Wh8drSs.crl (hash: x5DttUIQyAPaWNca7RFNygj4kY9kL3J0KEBKCtMzE8o=)
                          2: B1BFBFEA278711ED8808E3CDF1222468.roa (hash: Assvrj8OD6s30X7gj/5howMI7VisH2Gq7WxHn9j6+kQ=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3671DBD/3EE102DE124411ED9F6268B4F1222468/yD3GjOK-QyU6qlUariL5Wh8drSs.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3671DBD/3EE102DE124411ED9F6268B4F1222468/yD3GjOK-QyU6qlUariL5Wh8drSs.mft
                          rsync://rpki.afrinic.net/repository/arin/yD3GjOK-QyU6qlUariL5Wh8drSs.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 02:54:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1316 (0x524)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3671DBDAR, serialNumber=C83DC68CE2BE43253AAA551AAE22F95A1F1DAD2B
        Validity
            Not Before: Jan 25 02:54:04 2026 GMT
            Not After : Jan 27 02:54:04 2026 GMT
        Subject: CN=697585cc-3f0d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:07:2d:2f:59:e7:1b:ac:a8:1e:b8:90:19:d2:
                    14:b4:ca:a4:18:3b:a9:82:89:ac:ff:ae:e7:a8:17:
                    76:c2:02:5d:2c:f2:58:50:ac:ca:f0:cc:68:4d:05:
                    77:b7:cd:fc:aa:c8:aa:f5:b1:03:03:58:2a:29:b5:
                    e7:a2:1f:12:75:75:8e:83:7d:35:03:1d:5c:8c:8e:
                    b1:85:dc:fa:26:f9:c7:c3:2b:d0:c6:bf:07:06:80:
                    88:3b:a9:0f:f1:70:70:0c:b5:88:3f:97:d1:09:ab:
                    4d:66:17:e3:7a:ff:e2:29:33:38:b3:0d:7c:01:a8:
                    5d:74:52:04:a5:3e:4c:d6:20:43:48:e3:9b:f1:b3:
                    52:fd:6d:a4:06:81:1b:08:3d:02:1d:2c:95:77:6e:
                    3b:ed:41:69:8e:08:da:c6:6e:57:5a:e5:56:a0:42:
                    dd:4d:89:bb:89:54:d2:bb:76:b8:74:d1:77:f7:da:
                    d2:76:c6:bf:e0:90:13:74:97:9a:10:ac:1e:88:18:
                    1f:08:c7:87:61:98:55:45:9b:60:7a:b4:54:09:38:
                    88:8e:20:be:d4:dc:b5:8f:c5:12:1e:c1:91:bf:84:
                    be:c3:8a:d2:1a:4c:9f:a9:77:e1:22:ee:a7:78:07:
                    ca:40:30:97:71:30:06:a7:55:30:d5:84:db:f1:bd:
                    a6:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:41:02:B5:32:DE:06:DD:40:54:75:15:7B:A2:F8:DD:01:6C:1D:EE
            X509v3 Authority Key Identifier:
                keyid:C8:3D:C6:8C:E2:BE:43:25:3A:AA:55:1A:AE:22:F9:5A:1F:1D:AD:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3671DBD/3EE102DE124411ED9F6268B4F1222468/yD3GjOK-QyU6qlUariL5Wh8drSs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/yD3GjOK-QyU6qlUariL5Wh8drSs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3671DBD/3EE102DE124411ED9F6268B4F1222468/yD3GjOK-QyU6qlUariL5Wh8drSs.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:2d:e6:d6:dd:da:d2:8e:05:9c:da:81:f2:75:72:54:d7:6d:
         01:85:40:58:d6:7d:57:fe:d3:ec:c1:99:3e:84:bf:ff:c5:74:
         d7:db:12:0b:7d:6e:aa:4b:96:21:bd:20:73:62:3a:7a:72:e9:
         10:71:5a:15:9c:4f:2f:c9:4f:c2:7d:b9:35:77:db:04:b6:b4:
         7c:eb:4f:9c:65:b1:86:68:d6:b8:37:06:1f:90:bc:8e:d8:7f:
         f2:b0:b4:74:bd:04:9d:0b:0d:7a:4f:b6:03:2a:e8:d5:99:8c:
         7f:49:69:e7:ef:de:15:43:01:a1:41:6f:74:9c:87:a9:1e:c5:
         8b:ec:49:fd:64:05:58:ed:19:c3:62:fe:02:6f:0c:b2:91:d2:
         d5:c8:c1:26:08:60:f6:f6:38:4d:7f:b5:3c:10:fa:45:b4:ec:
         dd:f5:3e:90:ce:34:7e:6c:1f:9c:a4:2e:d8:b7:09:e3:3e:29:
         6d:ac:15:37:e8:59:db:b8:3a:07:72:02:fd:f5:64:d9:14:b3:
         52:5b:88:42:98:39:0e:2c:f3:4f:35:0d:54:51:24:62:a9:d8:
         9e:5b:05:75:ac:78:8c:22:09:67:cc:4c:90:c2:94:c8:38:28:
         56:5f:6e:44:06:26:a4:6b:83:22:60:bc:86:f4:87:f3:42:ef:
         b4:7a:95:ef
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgICBSQwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NzFEQkRBUjExMC8GA1UEBRMoQzgzREM2OENFMkJFNDMyNTNBQUE1NTFBQUUyMkY5
NUExRjFEQUQyQjAeFw0yNjAxMjUwMjU0MDRaFw0yNjAxMjcwMjU0MDRaMBgxFjAU
BgNVBAMTDTY5NzU4NWNjLTNmMGQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDFBy0vWecbrKgeuJAZ0hS0yqQYO6mCiaz/rueoF3bCAl0s8lhQrMrwzGhN
BXe3zfyqyKr1sQMDWCopteeiHxJ1dY6DfTUDHVyMjrGF3Pom+cfDK9DGvwcGgIg7
qQ/xcHAMtYg/l9EJq01mF+N6/+IpMzizDXwBqF10UgSlPkzWIENI45vxs1L9baQG
gRsIPQIdLJV3bjvtQWmOCNrGblda5VagQt1NibuJVNK7drh00Xf32tJ2xr/gkBN0
l5oQrB6IGB8Ix4dhmFVFm2B6tFQJOIiOIL7U3LWPxRIewZG/hL7DitIaTJ+pd+Ei
7qd4B8pAMJdxMAanVTDVhNvxvabRAgMBAAGjggK1MIICsTAdBgNVHQ4EFgQUd0EC
tTLeBt1AVHUVe6L43QFsHe4wHwYDVR0jBBgwFoAUyD3GjOK+QyU6qlUariL5Wh8d
rSswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjcxREJELzNFRTEwMkRFMTI0NDExRUQ5RjYyNjhCNEYxMjIyNDY4L3lEM0dq
T0stUXlVNnFsVWFyaUw1V2g4ZHJTcy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L3lEM0dqT0stUXlVNnFsVWFyaUw1V2g4ZHJTcy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEFBQcw
C4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl
cG9zaXRvcnkvRjM2NzFEQkQvM0VFMTAyREUxMjQ0MTFFRDlGNjI2OEI0RjEyMjI0
NjgveUQzR2pPSy1ReVU2cWxVYXJpTDVXaDhkclNzLm1mdDA1BggrBgEFBQcwDYYp
aHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA
AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCDLebW3drSjgWc2oHydXJU120BhUBY1n1X
/tPswZk+hL//xXTX2xILfW6qS5YhvSBzYjp6cukQcVoVnE8vyU/Cfbk1d9sEtrR8
60+cZbGGaNa4NwYfkLyO2H/ysLR0vQSdCw16T7YDKujVmYx/SWnn794VQwGhQW90
nIepHsWL7En9ZAVY7RnDYv4CbwyykdLVyMEmCGD29jhNf7U8EPpFtOzd9T6QzjR+
bB+cpC7YtwnjPiltrBU36FnbuDoHcgL99WTZFLNSW4hCmDkOLPNPNQ1UUSRiqdie
WwV1rHiMIglnzEyQwpTIOChWX25EBiaka4MiYLyG9IfzQu+0epXv
-----END CERTIFICATE-----
Generated at Mon Jan 26 03:32:42 2026 by rpki-client