This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367B8D1/4273E04E21F011EEA3A2BC0F4AD9E6FC/xNAUrWh1DnXpEEzqXCmztxlY_do.mft
File:                     xNAUrWh1DnXpEEzqXCmztxlY_do.mft (raw, json)
Hash identifier:          T9Ihqiv6E3iEx4L4kDNSx+ko8WDWntNyPRl7Cbc5ISs=
Subject key identifier:   E9:34:BE:AF:D8:DD:F3:0D:4F:9F:66:2F:AB:99:3B:B3:B4:B0:15:58
Authority key identifier: C4:D0:14:AD:68:75:0E:75:E9:10:4C:EA:5C:29:B3:B7:19:58:FD:DA
Certificate issuer:       /CN=F367B8D1AR/serialNumber=C4D014AD68750E75E9104CEA5C29B3B71958FDDA
Certificate serial:       03C4
Authority info access:    rsync://rpki.afrinic.net/repository/arin/xNAUrWh1DnXpEEzqXCmztxlY_do.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F367B8D1/4273E04E21F011EEA3A2BC0F4AD9E6FC/xNAUrWh1DnXpEEzqXCmztxlY_do.mft
Manifest number:          03C1
Signing time:             Mon 26 Jan 2026 03:36:39 +0000
Manifest this update:     Mon 26 Jan 2026 03:36:38 +0000
Manifest next update:     Wed 28 Jan 2026 03:36:38 +0000
Files and hashes:         1: xNAUrWh1DnXpEEzqXCmztxlY_do.crl (hash: 4tJeUA4bCbr179L2GzWRh5LIIVy8Q5GT684Zi3Q0yZA=)
                          2: 5DD33868F1A411F089B9E6DEDAE4EC9C.roa (hash: Rczn2z0Ecrdjwnh0bP0fcW/hWWKZrz4Aa+uBL6Wpovg=)
                          3: E35311B4F1A611F0B15EABEEDAE4EC9C.roa (hash: Jaa09JYLnjxVJDAu5gmEmB6jXzFVTW1h/BD6XSBqvK8=)
                          4: E1ED4904F19F11F0A30696C4DAE4EC9C.roa (hash: Rj+rpBtfQtb00WfH24VPb9zRX8B5uJNQSZxb5/pZaSw=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F367B8D1/4273E04E21F011EEA3A2BC0F4AD9E6FC/xNAUrWh1DnXpEEzqXCmztxlY_do.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F367B8D1/4273E04E21F011EEA3A2BC0F4AD9E6FC/xNAUrWh1DnXpEEzqXCmztxlY_do.mft
                          rsync://rpki.afrinic.net/repository/arin/xNAUrWh1DnXpEEzqXCmztxlY_do.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 28 Jan 2026 00:26:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 964 (0x3c4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F367B8D1AR, serialNumber=C4D014AD68750E75E9104CEA5C29B3B71958FDDA
        Validity
            Not Before: Jan 26 03:36:38 2026 GMT
            Not After : Jan 28 03:36:38 2026 GMT
        Subject: CN=6976e147-dfa3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:b8:59:eb:44:76:46:8c:06:3d:1e:f3:bf:dc:
                    93:7c:d8:bd:00:83:1e:9c:d1:33:81:03:1f:3c:69:
                    82:f8:85:ef:e4:ea:58:bd:07:15:19:4a:d3:12:a1:
                    f2:04:63:db:5e:8f:ea:2e:5a:78:c5:5b:34:d7:8e:
                    65:d0:78:2f:cf:7b:db:33:76:aa:74:2f:31:f2:b1:
                    6e:78:d3:68:9d:d3:df:23:41:58:64:b6:79:de:63:
                    b3:2b:cc:cc:25:15:e2:3d:5c:a1:56:31:9e:2a:eb:
                    e7:0b:55:0d:c5:ac:c5:87:c8:59:00:3a:03:67:d1:
                    ae:1b:af:24:c3:82:ce:29:bd:33:9d:0a:b3:35:ec:
                    e5:33:a1:71:36:27:77:7f:c0:f5:a7:0d:9f:4d:40:
                    d6:ee:7d:1a:c0:35:11:21:86:00:82:b9:b0:6d:02:
                    92:bd:fd:43:53:a4:7f:17:ad:1b:86:6f:f5:aa:9b:
                    de:c7:70:78:61:75:fc:bb:4b:9f:1d:68:eb:6c:27:
                    13:25:91:6d:b9:f9:f0:34:9a:02:19:44:90:b6:da:
                    38:8e:dd:e2:ee:3e:29:32:84:c1:dd:90:e2:9d:4a:
                    8f:3b:65:d1:7f:1f:b5:f2:76:97:80:ea:e5:72:6a:
                    4b:f6:9f:68:18:d4:fe:60:b3:85:c6:38:79:96:a3:
                    1f:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:34:BE:AF:D8:DD:F3:0D:4F:9F:66:2F:AB:99:3B:B3:B4:B0:15:58
            X509v3 Authority Key Identifier:
                keyid:C4:D0:14:AD:68:75:0E:75:E9:10:4C:EA:5C:29:B3:B7:19:58:FD:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F367B8D1/4273E04E21F011EEA3A2BC0F4AD9E6FC/xNAUrWh1DnXpEEzqXCmztxlY_do.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/xNAUrWh1DnXpEEzqXCmztxlY_do.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367B8D1/4273E04E21F011EEA3A2BC0F4AD9E6FC/xNAUrWh1DnXpEEzqXCmztxlY_do.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:68:c0:39:e3:66:09:38:af:29:20:19:af:82:0f:8b:ca:d7:
         4b:e0:0a:96:be:01:74:19:08:f0:c6:42:26:5c:e9:b3:c0:3b:
         1f:ed:b5:0f:05:8a:94:14:23:1a:54:37:96:75:e9:b6:35:59:
         51:b3:0d:d6:0c:d8:35:06:20:8a:89:1e:d7:43:09:7a:c5:10:
         17:66:48:7e:83:64:a6:8b:8e:41:06:d5:4e:47:a7:fa:cc:46:
         f2:fe:ad:1d:ec:19:cd:e3:bd:c5:9e:c1:26:9d:a3:34:34:15:
         3d:99:6f:81:ab:de:ea:4b:7c:0a:8b:02:3c:da:78:93:fa:a0:
         31:bb:62:38:a4:a4:b7:20:f1:15:ef:29:97:d1:26:94:56:28:
         41:a0:1c:17:f4:30:9c:79:3c:3e:12:92:6a:62:c9:59:a4:83:
         02:e8:89:b6:51:24:80:77:63:86:b4:3b:b9:3c:a5:c8:81:6c:
         1b:eb:f8:2d:41:c5:3b:cd:fd:23:c6:5e:a3:e0:47:25:d0:bf:
         39:9e:fd:2e:d6:6b:c4:d1:13:5c:03:e7:bd:22:c3:0a:1b:4b:
         0b:de:98:79:03:4b:99:d5:6b:8a:9b:6a:43:16:d0:29:b8:a2:
         d2:6d:1d:17:18:b5:e1:c7:7d:b8:cd:0d:9f:90:a6:18:b2:f9:
         ca:c2:c2:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 06:40:39 2026 by rpki-client