This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3684027/43DC0FDC207711ECB23FE226D8A014CE/qPP_zPK9bxc-V43OhiXgHFOX9zU.mft
File:                     qPP_zPK9bxc-V43OhiXgHFOX9zU.mft (raw, json)
Hash identifier:          Ig2bEr5YHNpzDRE0DZzOYwamAVQWbcHPEiwljFyhRxs=
Subject key identifier:   74:E5:12:1D:9E:19:21:39:1F:FF:FC:6F:74:42:DB:8E:6D:11:B3:45
Authority key identifier: A8:F3:FF:CC:F2:BD:6F:17:3E:57:8D:CE:86:25:E0:1C:53:97:F7:35
Certificate issuer:       /CN=F3684027AF/serialNumber=A8F3FFCCF2BD6F173E578DCE8625E01C5397F735
Certificate serial:       065C
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/qPP_zPK9bxc-V43OhiXgHFOX9zU.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3684027/43DC0FDC207711ECB23FE226D8A014CE/qPP_zPK9bxc-V43OhiXgHFOX9zU.mft
Manifest number:          065A
Signing time:             Sun 25 Jan 2026 02:26:56 +0000
Manifest this update:     Sun 25 Jan 2026 02:26:55 +0000
Manifest next update:     Tue 27 Jan 2026 02:26:55 +0000
Files and hashes:         1: qPP_zPK9bxc-V43OhiXgHFOX9zU.crl (hash: qUeMovO9PgqUvylQrf/bqmRHZdO7qwQQA7CwrnITZPA=)
                          2: 7053DDBA207711ECA57B2A27D8A014CE.roa (hash: 8FwYiwQNn3Nk7JGlhTjNINHWw5iUKIWhAuMhk3sKQys=)
                          3: 5EE2F40CED9F11ED90CD53134AD9E6FC.roa (hash: 7NdUaz4rD9qpZUgGvl0CsoD0saUCFYGySX0YWVKqUtI=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3684027/43DC0FDC207711ECB23FE226D8A014CE/qPP_zPK9bxc-V43OhiXgHFOX9zU.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3684027/43DC0FDC207711ECB23FE226D8A014CE/qPP_zPK9bxc-V43OhiXgHFOX9zU.mft
                          rsync://rpki.afrinic.net/repository/afrinic/qPP_zPK9bxc-V43OhiXgHFOX9zU.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:06:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1628 (0x65c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3684027AF, serialNumber=A8F3FFCCF2BD6F173E578DCE8625E01C5397F735
        Validity
            Not Before: Jan 25 02:26:55 2026 GMT
            Not After : Jan 27 02:26:55 2026 GMT
        Subject: CN=69757f70-e4e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:35:a1:98:c7:d4:b1:98:10:91:2d:b7:77:b5:
                    a0:94:d2:a5:c2:9a:be:79:7a:42:d0:b8:e3:f8:2f:
                    52:a8:4f:e8:ce:a2:aa:28:50:9f:af:ac:36:d8:48:
                    fb:54:5f:0a:4a:f4:0e:1f:fc:be:59:51:b6:6a:db:
                    6d:73:41:44:60:60:a7:a3:e1:15:95:96:8a:99:ce:
                    4e:c6:f3:5b:f2:b6:2e:d6:0f:0e:87:d4:ff:a5:ee:
                    c7:0f:58:b0:c0:f8:94:bf:39:16:4a:45:77:c7:95:
                    1d:6f:b0:67:7c:57:16:67:92:39:fe:6e:a6:53:99:
                    49:ca:a5:4a:90:24:60:0e:f4:74:14:46:5f:ea:5f:
                    58:f2:33:af:80:36:ed:b2:88:9e:18:93:0f:4d:7a:
                    b3:6e:be:ec:d6:71:ec:54:c0:7a:d9:f6:ab:3b:38:
                    98:19:25:47:7d:da:8f:e3:5b:cd:de:29:52:27:8a:
                    18:f0:0e:76:a9:8a:e6:84:24:5b:43:e8:96:35:33:
                    7b:98:b7:9b:2f:73:8c:3b:12:71:3d:f0:43:f0:f7:
                    8b:c6:4f:4d:87:72:b9:78:2b:ee:9e:69:37:3c:49:
                    fe:91:b6:b1:3a:82:6d:80:95:70:be:bd:45:5b:c9:
                    8d:eb:3c:fa:41:93:8d:aa:14:1b:ca:ac:0a:f2:1c:
                    b9:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:E5:12:1D:9E:19:21:39:1F:FF:FC:6F:74:42:DB:8E:6D:11:B3:45
            X509v3 Authority Key Identifier:
                keyid:A8:F3:FF:CC:F2:BD:6F:17:3E:57:8D:CE:86:25:E0:1C:53:97:F7:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3684027/43DC0FDC207711ECB23FE226D8A014CE/qPP_zPK9bxc-V43OhiXgHFOX9zU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/qPP_zPK9bxc-V43OhiXgHFOX9zU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3684027/43DC0FDC207711ECB23FE226D8A014CE/qPP_zPK9bxc-V43OhiXgHFOX9zU.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d9:68:ec:06:da:fb:2d:b9:35:66:94:bd:79:bb:17:ea:1c:75:
         a0:3f:d1:f6:d8:98:f8:fb:27:7c:ee:a7:9d:8f:b0:8d:98:7f:
         d4:aa:e6:a7:f0:ac:c2:d8:b5:a8:78:26:0f:87:a6:ab:c4:89:
         93:d5:5e:64:c6:54:4c:81:b7:a5:53:15:ce:6e:69:12:24:d2:
         f2:74:de:c8:f5:c8:a2:bb:52:f8:85:1c:e3:26:e4:ad:8f:06:
         86:1b:6a:9f:92:2e:cb:30:90:29:b5:6e:42:25:53:c7:5d:ee:
         ea:92:e1:de:15:8b:da:07:e5:db:04:4a:4c:d2:74:01:a5:cf:
         f2:db:cf:f0:c6:30:3f:b6:78:ed:35:41:f8:90:7c:bf:b0:88:
         70:ed:74:e4:2c:ea:d2:7b:bf:11:24:63:e2:25:ad:09:dc:5a:
         4c:e8:12:57:d8:7c:0d:c7:76:b1:5e:7b:94:f5:2b:19:08:9c:
         1f:bf:75:1a:07:bf:80:6f:b5:5b:89:9f:09:e5:b0:aa:7a:fc:
         15:b9:91:4c:80:ee:c1:98:6f:e3:25:fc:4e:05:ef:3d:db:20:
         0b:36:70:b0:a6:76:b6:64:a2:38:8e:4b:10:32:44:59:7c:46:
         b5:c5:2c:0f:8c:1f:73:f8:c7:fb:98:fa:bf:bf:8c:ba:7e:99:
         b6:56:43:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 08:24:53 2026 by rpki-client