This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3693944/16AA8A44207611ECB3060925D8A014CE/0YHpHtFz9k17-C2OC--ZTVmG31I.mft
File:                     0YHpHtFz9k17-C2OC--ZTVmG31I.mft (raw, json)
Hash identifier:          Vz1TEvzdXhouqPxf+pOCxEQB2JaLj/N08yycU4TAPAk=
Subject key identifier:   F8:64:A7:52:6F:A4:53:C9:ED:81:CA:96:95:00:A2:C6:A3:23:66:69
Authority key identifier: D1:81:E9:1E:D1:73:F6:4D:7B:F8:2D:8E:0B:EF:99:4D:59:86:DF:52
Certificate issuer:       /CN=F3693944AF/serialNumber=D181E91ED173F64D7BF82D8E0BEF994D5986DF52
Certificate serial:       0662
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/0YHpHtFz9k17-C2OC--ZTVmG31I.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3693944/16AA8A44207611ECB3060925D8A014CE/0YHpHtFz9k17-C2OC--ZTVmG31I.mft
Manifest number:          065D
Signing time:             Sun 25 Jan 2026 02:26:44 +0000
Manifest this update:     Sun 25 Jan 2026 02:26:43 +0000
Manifest next update:     Tue 27 Jan 2026 02:26:43 +0000
Files and hashes:         1: 0YHpHtFz9k17-C2OC--ZTVmG31I.crl (hash: ieU9uh+2gKU8fCmWlBCqaImOUc1XnFXWxdDSYY8234s=)
                          2: 9AECDB08EE3411ED9B086D5C4AD9E6FC.roa (hash: 7TbXwTAAA29/ssAknCIxCJNoExHtrE/m255Mx4kSiPE=)
                          3: 2CA2D93A038811EF9019CA30017001B1.roa (hash: Be78PaUHhsuszKdQPF/EsSUZ0AmEaz6Xf0Gf8dw0Abs=)
                          4: FE6EB5FE1A4311ED966281A5F1222468.roa (hash: lfZWe5DsRVIlTxGTn/2XYFuZb+ctw8ovU8wMMSRVTV8=)
                          5: 7F3D996AEE3411ED84E7435C4AD9E6FC.roa (hash: HFYeFndb2JxxOdKSqCujEOpY8n28a0y4vmxd4LvSXs4=)
                          6: 35E0C666207711ECA71BBD26D8A014CE.roa (hash: +cVurkAhF+yeR1OYxL2MVt7cz6AGWHeKwMma50XfssM=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3693944/16AA8A44207611ECB3060925D8A014CE/0YHpHtFz9k17-C2OC--ZTVmG31I.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3693944/16AA8A44207611ECB3060925D8A014CE/0YHpHtFz9k17-C2OC--ZTVmG31I.mft
                          rsync://rpki.afrinic.net/repository/afrinic/0YHpHtFz9k17-C2OC--ZTVmG31I.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:06:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1634 (0x662)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3693944AF, serialNumber=D181E91ED173F64D7BF82D8E0BEF994D5986DF52
        Validity
            Not Before: Jan 25 02:26:43 2026 GMT
            Not After : Jan 27 02:26:43 2026 GMT
        Subject: CN=69757f64-35e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:cc:43:47:24:24:06:f8:3b:6f:46:31:ae:a3:
                    93:3a:6a:14:cb:c7:58:de:df:6c:37:23:03:0c:c2:
                    14:0f:5a:b1:65:37:85:9d:f2:0a:42:ef:aa:b7:6c:
                    88:09:fc:5f:1a:a5:83:7f:3a:10:39:ad:d4:e4:9e:
                    0b:08:db:b5:8e:00:0b:69:cb:2b:a1:d7:de:31:4e:
                    01:a8:d7:bb:fe:a1:74:9a:f9:08:7f:bb:78:51:44:
                    e3:5e:4d:a8:08:23:77:aa:92:5d:b8:8c:4d:7e:ba:
                    4d:40:01:4e:64:45:b3:57:74:13:f2:7e:db:5f:e4:
                    c3:ae:c8:1d:71:51:bb:53:a1:6b:2f:34:97:f1:77:
                    5f:39:70:a6:92:9e:6d:8a:85:9e:b7:68:3e:90:c2:
                    bd:7a:bf:b6:76:8c:69:b3:8c:f9:3c:02:2c:e8:3f:
                    64:4d:1f:bf:a7:b8:94:86:b2:0f:dc:60:e2:a3:6b:
                    e2:f6:c9:47:cc:79:21:3b:a3:34:df:26:66:6a:20:
                    a8:e7:b7:19:93:8d:5f:c9:0a:3a:31:5a:ae:51:8c:
                    68:86:51:ec:a3:62:38:f2:c7:18:92:94:6d:8e:b5:
                    56:d9:33:eb:16:1c:3f:4b:08:ee:4a:ba:2f:99:19:
                    7e:ab:60:00:d7:b0:2f:b9:f0:cf:0d:0e:71:0f:40:
                    e3:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:64:A7:52:6F:A4:53:C9:ED:81:CA:96:95:00:A2:C6:A3:23:66:69
            X509v3 Authority Key Identifier:
                keyid:D1:81:E9:1E:D1:73:F6:4D:7B:F8:2D:8E:0B:EF:99:4D:59:86:DF:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3693944/16AA8A44207611ECB3060925D8A014CE/0YHpHtFz9k17-C2OC--ZTVmG31I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/0YHpHtFz9k17-C2OC--ZTVmG31I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3693944/16AA8A44207611ECB3060925D8A014CE/0YHpHtFz9k17-C2OC--ZTVmG31I.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:cd:2a:a6:9a:94:e1:62:f9:c0:43:36:00:61:ca:cf:a8:52:
         e7:01:30:fb:3a:ce:4a:33:c6:ac:a9:f0:78:1f:3c:f6:b4:78:
         18:c2:81:4a:4e:15:b3:51:ce:17:04:ed:c8:06:6e:8d:79:e5:
         ea:fb:66:d8:97:a2:fe:fc:f2:58:2f:73:45:7b:d2:b8:37:42:
         08:25:37:1c:be:f3:d2:2b:c0:27:0c:c3:b8:fe:2b:7b:69:0d:
         de:ea:9f:bc:cd:6d:db:8d:1d:78:29:b8:f6:d3:8c:e7:70:4d:
         ba:b4:cd:f3:b8:e1:55:72:a0:37:21:e0:70:dd:5e:75:6a:8f:
         77:ff:66:95:28:2e:df:a6:db:95:ad:28:fd:d7:88:3e:52:57:
         3f:9f:2f:d0:af:f4:f0:e8:27:25:d1:f0:ae:86:6a:44:9d:f7:
         76:26:53:38:d0:36:4a:31:4d:2c:69:f2:77:2d:ea:ee:6a:ac:
         e6:7d:78:6d:e9:f3:42:a6:df:88:a3:e3:90:be:88:6a:71:69:
         06:5f:2a:5f:df:ab:e7:d6:51:f2:db:e0:1c:f6:a2:0f:b0:3d:
         e8:f0:0a:7b:13:47:78:07:76:35:51:08:85:93:30:fb:7c:76:
         db:0c:8e:87:11:50:6d:45:61:6f:6f:fd:2f:40:48:54:9d:d8:
         72:7f:d3:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 12:43:10 2026 by rpki-client