This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3672189/38C85C46912A11EF98AA067A762E951A/pmHmEV84xQtNTFvj-kiO2AWMwvE.mft
File:                     pmHmEV84xQtNTFvj-kiO2AWMwvE.mft (raw, json)
Hash identifier:          VAUCU43BQjhEj8H7zpg2973PGqAqwbpxzmta5KxxQiw=
Subject key identifier:   EC:EA:FF:D3:64:31:27:34:66:61:09:72:5F:47:1B:38:DA:69:FB:92
Authority key identifier: A6:61:E6:11:5F:38:C5:0B:4D:4C:5B:E3:FA:48:8E:D8:05:8C:C2:F1
Certificate issuer:       /CN=F3672189AF/serialNumber=A661E6115F38C50B4D4C5BE3FA488ED8058CC2F1
Certificate serial:       01DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/pmHmEV84xQtNTFvj-kiO2AWMwvE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3672189/38C85C46912A11EF98AA067A762E951A/pmHmEV84xQtNTFvj-kiO2AWMwvE.mft
Manifest number:          01DB
Signing time:             Sun 25 Jan 2026 04:40:07 +0000
Manifest this update:     Sun 25 Jan 2026 04:40:06 +0000
Manifest next update:     Tue 27 Jan 2026 04:40:06 +0000
Files and hashes:         1: pmHmEV84xQtNTFvj-kiO2AWMwvE.crl (hash: VeyGpYUzxnpyjWXtfRy9PHMTjD7f6TXppaux8Mtdz28=)
                          2: 84121498949611EFBE8BA57F762E951A.roa (hash: XaqvhZS4unq9+u8DbG/XQq/y/o0dswE+yS72E0NeXdI=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3672189/38C85C46912A11EF98AA067A762E951A/pmHmEV84xQtNTFvj-kiO2AWMwvE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3672189/38C85C46912A11EF98AA067A762E951A/pmHmEV84xQtNTFvj-kiO2AWMwvE.mft
                          rsync://rpki.afrinic.net/repository/afrinic/pmHmEV84xQtNTFvj-kiO2AWMwvE.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:06:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 476 (0x1dc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3672189AF, serialNumber=A661E6115F38C50B4D4C5BE3FA488ED8058CC2F1
        Validity
            Not Before: Jan 25 04:40:06 2026 GMT
            Not After : Jan 27 04:40:06 2026 GMT
        Subject: CN=69759ea7-8330
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:d5:05:30:13:6c:78:80:bc:07:6f:ad:f8:3d:
                    c8:70:27:19:ab:0f:7b:19:8e:14:e2:58:3d:a9:39:
                    49:8b:6d:15:e8:2d:24:6b:0c:60:ab:7a:5a:b5:b0:
                    54:3e:c8:0e:e2:db:f1:9a:35:59:dc:20:ff:8d:00:
                    14:83:36:2a:2e:d2:a7:4f:cc:87:05:f8:01:a7:68:
                    30:1f:8c:92:0e:0f:f8:f0:fb:c1:14:11:6a:0d:51:
                    74:57:09:56:63:0c:5f:57:62:4a:93:a1:b3:b8:a6:
                    cc:97:7a:3f:21:a2:23:99:ac:3b:55:55:f2:38:b5:
                    c4:4e:c8:91:47:f0:d7:f0:67:77:ec:b2:59:c0:38:
                    a1:f3:46:a8:67:69:a3:86:f2:0f:c4:59:20:93:b9:
                    a8:01:97:35:a3:44:31:4c:7b:3a:73:07:5b:50:f8:
                    c5:42:a6:47:a0:8c:26:3b:80:15:92:7d:93:32:7b:
                    27:18:03:e9:c2:5a:4d:fb:12:d5:8f:df:7c:34:a0:
                    05:dd:bf:ce:8a:ea:03:96:e1:2a:a4:d9:06:6c:50:
                    59:ec:cc:5e:b8:17:92:91:39:83:e1:78:24:89:54:
                    af:a6:db:a8:ce:5e:46:9a:73:17:78:34:18:59:56:
                    bb:92:ba:ad:2a:e9:94:70:15:ad:9a:b4:89:29:d4:
                    20:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:EA:FF:D3:64:31:27:34:66:61:09:72:5F:47:1B:38:DA:69:FB:92
            X509v3 Authority Key Identifier:
                keyid:A6:61:E6:11:5F:38:C5:0B:4D:4C:5B:E3:FA:48:8E:D8:05:8C:C2:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3672189/38C85C46912A11EF98AA067A762E951A/pmHmEV84xQtNTFvj-kiO2AWMwvE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/pmHmEV84xQtNTFvj-kiO2AWMwvE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3672189/38C85C46912A11EF98AA067A762E951A/pmHmEV84xQtNTFvj-kiO2AWMwvE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:8e:79:a5:46:fa:d3:cb:cc:c3:3f:8c:80:c1:e1:ef:1f:67:
         0d:e0:b0:55:82:9f:6a:b8:89:30:21:8a:1f:3e:40:c8:5b:c6:
         6d:29:1c:ee:9b:bd:31:13:bf:60:8d:bd:98:df:7b:b6:7e:04:
         c2:23:46:d8:5e:52:79:dd:b5:39:ad:88:b1:90:0b:dd:b8:72:
         45:e8:c2:df:55:e9:8e:a0:35:d0:8a:5b:bd:3d:1c:9b:ce:b2:
         58:f7:2a:b7:66:38:cc:18:c7:80:11:07:7b:05:d5:f3:de:c3:
         6b:fd:78:ca:b4:0e:cc:b0:50:e1:0b:9f:86:3a:13:6f:f9:da:
         69:dc:66:af:df:83:b9:05:19:59:d5:e5:b4:89:6b:6a:d2:36:
         a3:4f:b8:86:20:6a:cb:a9:26:f6:eb:2d:e4:d1:06:8f:40:24:
         c5:a6:e4:06:94:3f:8d:5a:80:02:9b:a2:7e:26:26:13:e5:c5:
         1f:22:07:74:96:d5:fc:fe:3d:d4:1d:25:9e:f3:df:14:22:8d:
         2f:b6:d7:b4:11:85:89:7a:2f:44:e9:8c:c0:03:3e:04:5a:69:
         c8:77:5f:c5:a7:13:d6:ad:9d:8d:ac:75:50:2b:04:a1:31:d8:
         48:dd:ca:b6:ab:55:0c:7f:88:b2:df:83:f9:ee:91:80:78:a4:
         84:88:35:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 01:48:23 2026 by rpki-client