This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368CC63/0F97EDE8B24D11EFBDE38866762E951A/Py1E9QNb12kWk1ZxJj0fH-ItP9E.mft
File:                     Py1E9QNb12kWk1ZxJj0fH-ItP9E.mft (raw, json)
Hash identifier:          Y7c/VxULBiPjj8KIr4i0duWy4KdxXKzQdKIWg1pRj+o=
Subject key identifier:   07:64:56:0A:CC:2F:88:89:0B:DF:1E:3E:BE:A1:86:4E:F8:18:EB:B2
Authority key identifier: 3F:2D:44:F5:03:5B:D7:69:16:93:56:71:26:3D:1F:1F:E2:2D:3F:D1
Certificate issuer:       /CN=F368CC63AF/serialNumber=3F2D44F5035BD76916935671263D1F1FE22D3FD1
Certificate serial:       01AF
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/Py1E9QNb12kWk1ZxJj0fH-ItP9E.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368CC63/0F97EDE8B24D11EFBDE38866762E951A/Py1E9QNb12kWk1ZxJj0fH-ItP9E.mft
Manifest number:          01AD
Signing time:             Sun 25 Jan 2026 04:44:59 +0000
Manifest this update:     Sun 25 Jan 2026 04:44:59 +0000
Manifest next update:     Tue 27 Jan 2026 04:44:59 +0000
Files and hashes:         1: Py1E9QNb12kWk1ZxJj0fH-ItP9E.crl (hash: hIdVQJS9fCjYBCrrPnKGajgMBMM//QvhbaMG9Pa6QGc=)
                          2: A860D670B24D11EF9178D468762E951A.roa (hash: CZNA+65qRaZByZrXC7MwxwGK34lyEikm+CF4MxQgD/4=)
                          3: CE647098B24D11EFBF39E46A762E951A.roa (hash: Tr+Uq3brNImHW7wN7GMiqLrOGB3PYGFFy8E/vBXE1gM=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368CC63/0F97EDE8B24D11EFBDE38866762E951A/Py1E9QNb12kWk1ZxJj0fH-ItP9E.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368CC63/0F97EDE8B24D11EFBDE38866762E951A/Py1E9QNb12kWk1ZxJj0fH-ItP9E.mft
                          rsync://rpki.afrinic.net/repository/afrinic/Py1E9QNb12kWk1ZxJj0fH-ItP9E.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:06:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 431 (0x1af)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368CC63AF, serialNumber=3F2D44F5035BD76916935671263D1F1FE22D3FD1
        Validity
            Not Before: Jan 25 04:44:59 2026 GMT
            Not After : Jan 27 04:44:59 2026 GMT
        Subject: CN=69759fcb-6898
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:4f:91:b9:b2:97:99:5f:0c:ee:4f:81:2b:b7:
                    5a:f2:65:4e:2b:44:f2:f3:6b:82:49:3f:ed:6c:30:
                    ee:8a:cc:bb:e5:c2:12:73:45:b0:1f:7d:65:00:84:
                    02:a6:ab:0d:98:50:4d:fa:ed:8f:1b:7f:af:bf:5d:
                    92:c0:22:7d:e5:7a:5e:66:bf:e9:bf:21:3b:a2:89:
                    5a:34:b7:15:e3:e9:39:07:9a:92:3a:20:cb:02:f3:
                    a6:59:d1:a2:b1:d6:fa:13:e8:d7:3a:75:03:d0:19:
                    4f:a4:71:35:21:3f:8c:65:05:3a:44:35:40:68:02:
                    fd:78:7a:96:4d:9f:23:2e:6a:95:d3:4e:7f:a2:52:
                    fc:4f:9c:5b:a3:14:dc:72:a5:fc:d2:ac:e0:dc:4d:
                    21:4c:50:65:06:f2:36:03:78:74:aa:21:ad:b3:f1:
                    37:cd:44:a3:7a:f7:42:d5:a9:a2:c4:55:79:5a:0e:
                    8c:a0:59:db:1b:2c:d2:bf:8a:be:7f:98:5c:6e:9a:
                    0e:a5:64:33:e2:b1:65:14:53:21:26:fc:06:b3:62:
                    be:dc:3d:9e:9e:82:91:9a:c6:07:72:69:9b:9c:41:
                    da:1a:f0:81:27:0a:ef:80:72:3e:cf:ac:2a:ca:08:
                    14:54:31:1b:fe:36:ee:b3:87:13:c0:92:04:6b:69:
                    79:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:64:56:0A:CC:2F:88:89:0B:DF:1E:3E:BE:A1:86:4E:F8:18:EB:B2
            X509v3 Authority Key Identifier:
                keyid:3F:2D:44:F5:03:5B:D7:69:16:93:56:71:26:3D:1F:1F:E2:2D:3F:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368CC63/0F97EDE8B24D11EFBDE38866762E951A/Py1E9QNb12kWk1ZxJj0fH-ItP9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Py1E9QNb12kWk1ZxJj0fH-ItP9E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368CC63/0F97EDE8B24D11EFBDE38866762E951A/Py1E9QNb12kWk1ZxJj0fH-ItP9E.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:81:67:63:57:75:d8:a0:f9:04:60:26:20:4f:df:c0:79:ed:
         82:54:3c:5e:51:a6:12:46:ce:61:85:0e:dd:ef:b6:79:5e:2f:
         8f:10:70:c2:3b:b3:8f:d2:cf:3b:bd:4d:ed:96:e1:20:28:e0:
         35:dd:34:26:41:e4:03:42:cc:ea:31:42:d5:ac:2f:43:af:a8:
         c1:9c:e1:f9:bf:09:9b:08:0d:00:8b:5e:22:b0:54:97:59:4a:
         0f:6c:80:52:fc:9f:e5:2b:76:be:95:2c:69:93:0c:2c:0a:d7:
         49:da:69:46:ad:21:47:93:76:6b:77:a4:da:c1:26:6b:cc:7f:
         a5:eb:e7:09:fe:2b:4b:f6:aa:c0:5a:72:ae:d1:84:60:7d:7d:
         52:58:57:44:fc:e7:61:d6:ef:b0:01:90:a2:cd:14:db:19:07:
         e8:65:dd:4d:1a:a4:2c:98:1c:ed:b2:3b:2e:d7:e4:eb:c6:9b:
         95:90:f6:62:09:97:4d:59:da:2d:d6:45:4e:c4:60:63:4b:a0:
         95:6b:ce:e0:05:13:76:c3:01:09:81:7c:36:b6:80:b2:38:64:
         2e:95:4d:8c:14:f2:89:48:d5:5b:2c:fa:ab:40:2e:a3:a4:dc:
         5b:ea:b5:ac:ac:0a:0e:79:b0:41:58:af:3f:b7:47:72:60:4d:
         24:f3:15:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 17:08:16 2026 by rpki-client