This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3698DD0/56C8EA4C667711ED967FC0A2F1222468/wD_daU9RquOPBRRWEBYXxW_YnEo.mft
File:                     wD_daU9RquOPBRRWEBYXxW_YnEo.mft (raw, json)
Hash identifier:          il9ZDO+cjgEDplPvJVUYqjZeRGWIS0hXcxv+JxZfi6U=
Subject key identifier:   07:93:3D:F3:B3:E3:27:9A:7E:AC:7A:33:F4:97:DE:5D:56:50:69:3B
Authority key identifier: C0:3F:DD:69:4F:51:AA:E3:8F:05:14:56:10:16:17:C5:6F:D8:9C:4A
Certificate issuer:       /CN=F3698DD0AF/serialNumber=C03FDD694F51AAE38F051456101617C56FD89C4A
Certificate serial:       04D0
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/wD_daU9RquOPBRRWEBYXxW_YnEo.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3698DD0/56C8EA4C667711ED967FC0A2F1222468/wD_daU9RquOPBRRWEBYXxW_YnEo.mft
Manifest number:          04C5
Signing time:             Sun 25 Jan 2026 03:07:05 +0000
Manifest this update:     Sun 25 Jan 2026 03:07:05 +0000
Manifest next update:     Tue 27 Jan 2026 03:07:05 +0000
Files and hashes:         1: wD_daU9RquOPBRRWEBYXxW_YnEo.crl (hash: mk3MhXGWusNvGyrGuLn0c+pFX/QrRfglHz64iUSKVPs=)
                          2: 2258DA46D9E611ED9991A6FC2F6D8C1D.roa (hash: zJWQpnOJZG73raUB2XV36ffD+zWbugbvO1hLTY3gu00=)
                          3: F998A4B4A68111EF83490D8F762E951A.roa (hash: gRJbn7TUJdVqzLN1VGDb0fJr1Lg413PCOuxRtaJJTFU=)
                          4: 7E60CCBE817511EDBB60FBE8F1222468.roa (hash: 3botBW7CxliYrIkkF4AkSGZ+nyL0LTvgw3z56nnf7ps=)
                          5: 6069E9FA190611EFAAC79456017001B1.roa (hash: qaWE3oZP6UDJiJvSf/qTz0gA6Weypu8kgh11g/Q7Yjc=)
                          6: E621A12E190511EF8A909B51017001B1.roa (hash: /esz7AIhM5t30ub8s0aOAXHtnxsPkykRU/r4aTbVw0Y=)
                          7: 6DC5038018FE11EF8B80B516017001B1.roa (hash: prIb+/59lGAY5m7ee/w0QfgAEg0BFXE2ZtOJctQ1wsI=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3698DD0/56C8EA4C667711ED967FC0A2F1222468/wD_daU9RquOPBRRWEBYXxW_YnEo.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3698DD0/56C8EA4C667711ED967FC0A2F1222468/wD_daU9RquOPBRRWEBYXxW_YnEo.mft
                          rsync://rpki.afrinic.net/repository/afrinic/wD_daU9RquOPBRRWEBYXxW_YnEo.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:06:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1232 (0x4d0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3698DD0AF, serialNumber=C03FDD694F51AAE38F051456101617C56FD89C4A
        Validity
            Not Before: Jan 25 03:07:05 2026 GMT
            Not After : Jan 27 03:07:05 2026 GMT
        Subject: CN=697588d9-5f3e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:94:ef:de:ff:31:3f:2d:76:50:3d:c7:8c:a4:
                    13:9a:b0:64:44:7a:2e:fc:f9:83:6d:5d:19:38:83:
                    9b:72:f2:0c:8d:9d:f2:ac:f5:af:70:11:eb:21:b8:
                    0c:a4:e3:18:64:90:52:d7:b5:13:74:6c:33:3f:d3:
                    37:b2:3c:c0:6a:24:d4:28:64:27:54:69:ba:fc:4b:
                    df:02:1f:94:65:eb:af:4a:8c:eb:44:1a:3b:a2:98:
                    57:a1:aa:b1:2c:a3:5a:f5:32:5b:13:44:2e:40:a5:
                    61:96:4d:ba:bd:dd:fb:0d:14:75:50:c2:1e:47:d4:
                    31:5e:e5:9b:70:b0:67:f7:bc:21:8d:e0:0b:65:87:
                    0b:e6:0d:92:45:f0:cb:c2:36:fa:2e:11:c8:0b:7a:
                    cb:7d:a3:13:2c:76:cc:7a:ad:64:7a:c8:51:0d:6e:
                    66:a9:cb:63:9b:d0:a1:22:30:76:17:d5:a4:78:fc:
                    45:a1:c7:5a:ba:99:be:e9:31:2b:e2:08:b4:79:72:
                    f7:c6:23:c6:ff:d3:a4:e2:c4:98:ec:7e:32:90:17:
                    63:3a:e2:20:27:37:30:c3:0d:b8:a4:2e:db:7d:d0:
                    9a:e6:8d:7d:a0:06:28:25:b3:e3:5b:c3:f2:13:c1:
                    cd:e7:15:05:5b:ef:47:29:2a:42:20:f4:22:f7:8d:
                    75:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:93:3D:F3:B3:E3:27:9A:7E:AC:7A:33:F4:97:DE:5D:56:50:69:3B
            X509v3 Authority Key Identifier:
                keyid:C0:3F:DD:69:4F:51:AA:E3:8F:05:14:56:10:16:17:C5:6F:D8:9C:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3698DD0/56C8EA4C667711ED967FC0A2F1222468/wD_daU9RquOPBRRWEBYXxW_YnEo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/wD_daU9RquOPBRRWEBYXxW_YnEo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3698DD0/56C8EA4C667711ED967FC0A2F1222468/wD_daU9RquOPBRRWEBYXxW_YnEo.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:50:49:59:16:d8:2a:3e:42:b2:6f:a0:67:eb:69:9d:e5:54:
         07:4d:16:80:12:01:96:60:25:b0:ac:5c:d8:0f:4a:f1:9f:3a:
         4d:9b:6b:43:65:8b:04:1a:16:3f:53:90:87:be:a3:3a:e3:13:
         aa:b8:25:21:3f:4a:27:b2:b6:d5:43:c1:21:66:d1:ba:21:35:
         2b:b9:31:e6:38:6a:12:e8:7e:1a:8e:75:ff:fa:5a:01:47:23:
         f4:89:0b:c8:de:36:1e:e0:c2:f8:08:f1:56:62:b3:18:4f:7e:
         18:f0:dc:dd:f7:b1:e4:a9:0f:c2:4a:51:4e:86:73:bf:1c:d2:
         8d:5c:e5:b9:87:73:7c:c2:8a:51:98:cc:25:41:f8:aa:74:2e:
         b0:77:fc:3c:b7:38:10:9b:a8:15:11:42:c4:e8:3e:80:a3:04:
         ae:dc:83:d8:87:80:29:94:02:20:e1:b9:12:e1:32:31:e3:54:
         c8:c7:08:55:08:7f:e3:28:95:ce:7f:c7:eb:40:4c:78:c0:59:
         24:64:9e:17:fe:b4:5f:13:63:05:33:50:db:89:da:0e:fc:8f:
         55:2f:d8:87:26:0b:b6:fe:92:64:fc:d4:43:a2:78:cd:86:bb:
         1f:8f:ef:47:3a:55:f9:8d:f0:2b:63:ef:5b:c1:b3:e5:d8:79:
         d3:f6:be:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 06:14:38 2026 by rpki-client