This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3675681/3A811A06B37111EE992D23C5775412E6/shxmbZvNmMAZWRBxeUg3JoQDINk.mft
File:                     shxmbZvNmMAZWRBxeUg3JoQDINk.mft (raw, json)
Hash identifier:          4LjLeB1+PMZeVA2xvJsA7r4cUNlcFMFfgwiYU8doYdM=
Subject key identifier:   CF:A6:F6:FC:91:6A:88:10:33:5C:90:FD:EE:0C:34:76:AD:24:D5:9B
Authority key identifier: B2:1C:66:6D:9B:CD:98:C0:19:59:10:71:79:48:37:26:84:03:20:D9
Certificate issuer:       /CN=F3675681AF/serialNumber=B21C666D9BCD98C01959107179483726840320D9
Certificate serial:       0300
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/shxmbZvNmMAZWRBxeUg3JoQDINk.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3675681/3A811A06B37111EE992D23C5775412E6/shxmbZvNmMAZWRBxeUg3JoQDINk.mft
Manifest number:          02FD
Signing time:             Sun 25 Jan 2026 03:59:48 +0000
Manifest this update:     Sun 25 Jan 2026 03:59:47 +0000
Manifest next update:     Tue 27 Jan 2026 03:59:47 +0000
Files and hashes:         1: shxmbZvNmMAZWRBxeUg3JoQDINk.crl (hash: ut51+LfW6eijugUfypENW83piE1dE/UAvLeTeZlaFk8=)
                          2: 3C5DC152150F11F0AFA3C00D6EB8BCC6.roa (hash: fH15aNCg4OTSLMaHS4OXxFDniAhEu0g0inrw6icGVBw=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3675681/3A811A06B37111EE992D23C5775412E6/shxmbZvNmMAZWRBxeUg3JoQDINk.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3675681/3A811A06B37111EE992D23C5775412E6/shxmbZvNmMAZWRBxeUg3JoQDINk.mft
                          rsync://rpki.afrinic.net/repository/afrinic/shxmbZvNmMAZWRBxeUg3JoQDINk.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:06:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 768 (0x300)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3675681AF, serialNumber=B21C666D9BCD98C01959107179483726840320D9
        Validity
            Not Before: Jan 25 03:59:47 2026 GMT
            Not After : Jan 27 03:59:47 2026 GMT
        Subject: CN=69759534-fb36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:54:3a:f5:f2:00:e9:0b:da:bd:5d:0a:1a:58:
                    bc:ac:b2:72:bb:35:66:12:a4:4b:ce:4a:19:01:d9:
                    9d:78:c9:5b:69:02:c8:b8:aa:6d:8e:10:0e:71:1a:
                    2d:c2:ac:25:12:91:96:bc:a2:98:f6:47:f9:8e:dd:
                    09:04:53:ed:38:8a:32:1e:a2:dc:85:1d:e5:b8:b4:
                    14:b8:e2:95:ab:b8:8d:90:83:18:b1:60:3b:73:1f:
                    9b:50:c2:9e:a0:b5:ab:8d:8b:eb:05:03:72:2c:9e:
                    ef:dc:23:cc:c3:c7:ef:c5:8c:ab:24:d8:77:8a:7b:
                    68:6c:7c:bf:cf:20:13:1f:06:b7:c0:57:7c:c5:d4:
                    7a:86:e4:08:53:49:58:ac:a2:86:e1:ce:bb:84:64:
                    be:26:20:41:8b:4f:2e:c4:1d:4e:8a:86:5f:03:60:
                    02:c9:24:db:dd:81:b3:1c:ce:4f:7f:cc:92:96:cd:
                    5e:d7:41:f5:4c:f8:d3:e2:27:08:41:8e:e6:6c:9f:
                    aa:f7:c9:5f:a7:07:71:30:39:64:16:15:be:99:b7:
                    c0:e6:14:1c:23:75:23:6d:7c:e1:ba:89:2e:57:05:
                    1f:c4:14:a4:84:f4:ae:b5:63:e6:23:84:f9:a3:d3:
                    ec:2a:d3:64:cc:c4:8c:4a:18:11:f4:2d:4d:03:dd:
                    eb:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:A6:F6:FC:91:6A:88:10:33:5C:90:FD:EE:0C:34:76:AD:24:D5:9B
            X509v3 Authority Key Identifier:
                keyid:B2:1C:66:6D:9B:CD:98:C0:19:59:10:71:79:48:37:26:84:03:20:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3675681/3A811A06B37111EE992D23C5775412E6/shxmbZvNmMAZWRBxeUg3JoQDINk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/shxmbZvNmMAZWRBxeUg3JoQDINk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3675681/3A811A06B37111EE992D23C5775412E6/shxmbZvNmMAZWRBxeUg3JoQDINk.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:6a:f2:ae:cd:59:1f:1f:2e:f6:52:ab:40:14:09:65:1b:ec:
         c6:e0:09:a9:ef:3d:68:fa:c2:69:bc:34:f6:44:7a:bc:fb:0d:
         f1:39:df:df:26:0a:25:78:bb:61:4f:cc:3a:8c:fd:f0:d4:60:
         fc:7c:79:43:49:c7:89:ad:af:cb:5b:9f:f8:f5:0d:57:24:d9:
         26:eb:d9:55:b4:84:11:14:11:3d:68:40:d0:6b:19:bb:cb:23:
         d3:bb:45:d6:33:9e:b0:dc:d2:88:df:86:af:eb:42:94:5a:ce:
         09:b6:33:16:d7:51:24:dd:d6:e1:d5:af:83:95:46:8a:3a:9c:
         aa:89:bf:d3:32:2c:38:13:70:68:4f:48:64:51:0c:ff:ab:4e:
         25:be:87:06:b7:2f:78:66:20:44:dd:81:84:ca:71:cd:85:cd:
         2c:0f:4b:c8:db:51:c0:17:8f:b1:96:fe:ac:09:50:b1:a0:a7:
         7a:f5:63:b5:11:76:52:5f:ac:ae:62:0e:c8:64:db:6c:f5:f0:
         80:c0:65:21:75:08:77:ef:62:80:80:e5:fb:37:c4:36:cc:23:
         ee:fd:7b:60:ad:46:96:a3:a4:0b:e2:fa:9a:83:ac:15:8f:d4:
         09:5a:f3:15:a2:04:17:c7:b4:1b:44:db:23:50:c0:a4:49:d6:
         3c:69:30:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 11:04:02 2026 by rpki-client