This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368356F/D1DFA91C66E411F0B2126192DAE4EC9C/GeW7ArqIA7KxPIiOxhoZ6G3NWmc.mft
File:                     GeW7ArqIA7KxPIiOxhoZ6G3NWmc.mft (raw, json)
Hash identifier:          eiz9g+W99peaGj1Es4J/4q7VR5iKyeQ0xPG+qAF6sv4=
Subject key identifier:   8A:0D:FD:C1:2F:01:B7:6D:71:48:F2:9F:AF:F6:EC:0F:EE:EA:AC:63
Authority key identifier: 19:E5:BB:02:BA:88:03:B2:B1:3C:88:8E:C6:1A:19:E8:6D:CD:5A:67
Certificate issuer:       /CN=F368356FAF/serialNumber=19E5BB02BA8803B2B13C888EC61A19E86DCD5A67
Certificate serial:       C6
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/GeW7ArqIA7KxPIiOxhoZ6G3NWmc.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368356F/D1DFA91C66E411F0B2126192DAE4EC9C/GeW7ArqIA7KxPIiOxhoZ6G3NWmc.mft
Manifest number:          C3
Signing time:             Sun 25 Jan 2026 05:05:49 +0000
Manifest this update:     Sun 25 Jan 2026 05:05:49 +0000
Manifest next update:     Tue 27 Jan 2026 05:05:49 +0000
Files and hashes:         1: GeW7ArqIA7KxPIiOxhoZ6G3NWmc.crl (hash: DXAN8Sb4/EVdEKFi91KgXJCRgwDspYbGfQmnjrAtjEc=)
                          2: 61967A0C923911F0857614F5DAE4EC9C.roa (hash: h6/xO+quTrTm7TNgBK9CG+HuCWB11SsyjPcjW6WV3ek=)
                          3: 0CC81814923911F083357CF4DAE4EC9C.roa (hash: LITlLq2aIhVUihUn1BaRczfpAUpOW0iot4DV3wIc2Aw=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368356F/D1DFA91C66E411F0B2126192DAE4EC9C/GeW7ArqIA7KxPIiOxhoZ6G3NWmc.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368356F/D1DFA91C66E411F0B2126192DAE4EC9C/GeW7ArqIA7KxPIiOxhoZ6G3NWmc.mft
                          rsync://rpki.afrinic.net/repository/afrinic/GeW7ArqIA7KxPIiOxhoZ6G3NWmc.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:06:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 198 (0xc6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368356FAF, serialNumber=19E5BB02BA8803B2B13C888EC61A19E86DCD5A67
        Validity
            Not Before: Jan 25 05:05:49 2026 GMT
            Not After : Jan 27 05:05:49 2026 GMT
        Subject: CN=6975a4ad-c2cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:d5:b2:99:30:05:c4:41:3f:09:a5:d7:8e:f1:
                    21:ee:e2:82:75:82:e6:6a:ad:93:64:1e:c0:90:73:
                    3f:80:5b:1d:99:91:4c:f7:14:43:38:96:8a:d5:5b:
                    22:b1:b6:6c:52:b7:91:ad:e2:34:95:49:87:a3:b9:
                    07:21:c5:a3:6f:1a:be:ea:f1:21:49:7b:6f:7b:ad:
                    0c:51:16:60:cf:fb:7f:09:6f:9d:31:ed:34:4c:79:
                    60:2e:98:98:57:af:45:d1:77:ce:85:bd:bd:15:57:
                    af:df:f7:fb:32:c0:a6:e3:a1:a2:7a:8e:5d:22:59:
                    5c:bd:ef:1a:81:8c:b1:02:a5:da:47:93:b0:1a:a6:
                    51:64:48:42:01:7b:d1:1a:af:26:88:8b:c1:e8:4e:
                    88:69:22:97:ef:ff:1d:a2:bd:1a:56:00:e0:02:b4:
                    a9:d8:54:c2:49:05:35:9d:de:67:2f:6f:02:b2:a3:
                    2f:62:bb:e1:96:f8:5b:0c:e2:30:98:18:40:d3:09:
                    1d:d9:16:5b:86:61:0e:a6:c5:49:09:30:52:7b:90:
                    cf:39:73:f2:1a:df:92:46:35:71:b6:11:fb:9e:ee:
                    5b:3e:f3:03:d1:c6:a8:8d:40:33:ca:a3:0f:7f:55:
                    27:3a:b1:53:56:47:3e:28:f6:2c:fe:25:33:6d:bf:
                    23:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:0D:FD:C1:2F:01:B7:6D:71:48:F2:9F:AF:F6:EC:0F:EE:EA:AC:63
            X509v3 Authority Key Identifier:
                keyid:19:E5:BB:02:BA:88:03:B2:B1:3C:88:8E:C6:1A:19:E8:6D:CD:5A:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368356F/D1DFA91C66E411F0B2126192DAE4EC9C/GeW7ArqIA7KxPIiOxhoZ6G3NWmc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/GeW7ArqIA7KxPIiOxhoZ6G3NWmc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368356F/D1DFA91C66E411F0B2126192DAE4EC9C/GeW7ArqIA7KxPIiOxhoZ6G3NWmc.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:e5:f4:22:4a:9c:78:bc:3f:d3:d9:f7:28:8a:a5:90:aa:c7:
         88:63:73:96:c6:20:c0:1c:c9:86:2a:4d:e5:f0:c2:32:24:80:
         87:09:22:ef:23:ef:84:ca:19:fd:8f:4c:06:96:d0:51:5d:1f:
         77:63:24:6e:20:ab:fa:71:68:40:b7:89:65:a3:af:a4:42:9b:
         59:6f:a1:2a:0b:db:65:8a:72:d9:39:8e:3e:b6:3a:2c:6b:60:
         36:19:a0:ef:40:23:3e:c3:90:14:98:92:3f:79:95:39:7e:68:
         17:18:ef:56:70:f5:a8:27:0c:d9:27:fa:cb:75:3a:d7:05:d0:
         8f:e5:82:39:46:ad:05:82:dc:80:ef:b3:3f:05:1c:bb:7b:97:
         22:62:55:38:ea:4b:04:c3:f0:35:bb:ec:f4:03:10:73:ee:8f:
         4d:46:42:3f:f9:62:c6:92:f5:92:44:51:16:d4:42:a3:c5:66:
         d4:ec:e4:45:27:06:cd:13:ee:3f:ab:11:1d:7e:3a:f4:22:35:
         a4:f5:ff:b7:56:b5:4e:24:94:a3:5d:b9:b3:0d:48:ac:52:b5:
         f9:6c:f9:06:e4:29:24:2f:e4:ea:45:98:72:1d:13:40:3a:ca:
         44:3b:04:95:d2:89:0f:51:b6:1e:15:c9:b1:58:d9:14:fb:cb:
         b5:59:76:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:48:20 2026 by rpki-client