This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369E1AE/A3E2EC72A56611EEBE59906AD25BE465/D0ElrSzSvYs64WLz4yLl9YEEdVw.mft
File:                     D0ElrSzSvYs64WLz4yLl9YEEdVw.mft (raw, json)
Hash identifier:          UuNiBM/m6Iq+t/n4t5xWAMZIUemLmoXXGevcgZGIc28=
Subject key identifier:   95:ED:21:A8:12:1E:E6:5C:F9:12:47:33:98:CC:11:A6:FA:BA:B2:86
Authority key identifier: 0F:41:25:AD:2C:D2:BD:8B:3A:E1:62:F3:E3:22:E5:F5:81:04:75:5C
Certificate issuer:       /CN=F369E1AEAF/serialNumber=0F4125AD2CD2BD8B3AE162F3E322E5F58104755C
Certificate serial:       030F
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/D0ElrSzSvYs64WLz4yLl9YEEdVw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F369E1AE/A3E2EC72A56611EEBE59906AD25BE465/D0ElrSzSvYs64WLz4yLl9YEEdVw.mft
Manifest number:          030D
Signing time:             Sun 25 Jan 2026 03:58:12 +0000
Manifest this update:     Sun 25 Jan 2026 03:58:11 +0000
Manifest next update:     Tue 27 Jan 2026 03:58:11 +0000
Files and hashes:         1: D0ElrSzSvYs64WLz4yLl9YEEdVw.crl (hash: SrS64iMjqZotcYrH/Z6J6D3vHuQxbyPJ+Ueaxx7JldM=)
                          2: 47AF2FF6F14011F09B4F1487DAE4EC9C.roa (hash: BdQgr789FxdUtgxj7i45jCOlxF6k3e5lzdi6pI5Zqcg=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F369E1AE/A3E2EC72A56611EEBE59906AD25BE465/D0ElrSzSvYs64WLz4yLl9YEEdVw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F369E1AE/A3E2EC72A56611EEBE59906AD25BE465/D0ElrSzSvYs64WLz4yLl9YEEdVw.mft
                          rsync://rpki.afrinic.net/repository/afrinic/D0ElrSzSvYs64WLz4yLl9YEEdVw.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:06:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 783 (0x30f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F369E1AEAF, serialNumber=0F4125AD2CD2BD8B3AE162F3E322E5F58104755C
        Validity
            Not Before: Jan 25 03:58:11 2026 GMT
            Not After : Jan 27 03:58:11 2026 GMT
        Subject: CN=697594d3-1ec6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:2e:ea:dc:f3:26:50:27:28:8d:7a:3f:70:64:
                    75:bf:26:91:cc:70:a7:74:b0:4f:c6:c0:b5:7a:46:
                    a1:ee:d1:76:05:ac:27:cc:01:be:f4:2b:9e:28:c5:
                    d5:92:0f:18:e2:6e:9b:72:59:e6:69:ff:d6:2b:3d:
                    e8:6c:4b:d8:e6:d3:21:45:0b:ef:9a:e9:ce:90:e7:
                    2a:34:68:80:2c:f6:aa:ed:02:3a:8c:87:54:3f:94:
                    ae:48:4c:8e:ec:1b:36:4c:5a:85:ad:36:f3:3d:a4:
                    55:b7:7a:22:34:fd:00:e5:78:f1:3c:f0:e0:eb:49:
                    cd:be:9d:30:b8:96:32:9f:32:0a:a5:7c:a3:66:a0:
                    d1:50:d1:8b:02:96:fc:ed:1e:3d:0e:5c:31:d0:e1:
                    a1:f1:88:ea:8d:84:bf:11:80:23:47:4b:4a:a9:fd:
                    de:75:b6:20:e0:24:0d:51:1c:36:3d:12:53:51:21:
                    61:2f:6d:e2:ff:f9:e9:93:5c:fb:5d:b4:80:de:99:
                    89:5b:57:d6:8c:63:1d:8e:07:4a:e7:c4:eb:36:a3:
                    62:c2:15:b1:77:9b:24:ea:36:22:9a:23:be:14:20:
                    72:b2:cb:e1:4d:f5:3d:d2:00:9c:db:f6:ed:6c:ac:
                    22:5c:2e:6c:21:49:f0:b5:b4:5c:df:30:01:e1:9b:
                    bf:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:ED:21:A8:12:1E:E6:5C:F9:12:47:33:98:CC:11:A6:FA:BA:B2:86
            X509v3 Authority Key Identifier:
                keyid:0F:41:25:AD:2C:D2:BD:8B:3A:E1:62:F3:E3:22:E5:F5:81:04:75:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F369E1AE/A3E2EC72A56611EEBE59906AD25BE465/D0ElrSzSvYs64WLz4yLl9YEEdVw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/D0ElrSzSvYs64WLz4yLl9YEEdVw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369E1AE/A3E2EC72A56611EEBE59906AD25BE465/D0ElrSzSvYs64WLz4yLl9YEEdVw.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:ee:6e:d2:10:18:88:7b:64:2f:ce:af:42:a2:72:27:a3:ea:
         fe:eb:3a:93:13:e8:4a:2a:2f:c9:d9:40:32:40:ef:a5:d0:82:
         3a:0f:2c:9b:1a:69:8c:98:98:f8:65:8b:31:54:91:0a:6c:a9:
         75:77:d0:bd:d1:e9:1b:c5:9a:eb:79:c4:a2:5c:55:c4:b3:89:
         1b:aa:0f:47:ff:06:94:26:4c:a5:db:8d:32:d5:fd:fa:ee:3b:
         33:98:e5:4f:d9:ed:f0:87:41:45:4b:33:e4:1b:97:8f:5a:f0:
         06:71:9a:3e:87:54:93:84:af:00:9b:8f:55:cd:fa:a9:ef:8e:
         3d:b6:9d:6f:42:76:56:a5:ae:ff:fb:29:ae:47:eb:11:67:cb:
         ba:b4:c7:63:eb:92:05:be:bd:bf:87:1e:f5:1a:ad:df:61:0a:
         96:c1:28:6e:67:3d:b4:1a:87:46:3d:29:c7:a6:e6:f3:aa:2e:
         28:9f:b8:24:66:aa:d9:18:e4:c6:f7:97:16:3b:22:b6:ad:93:
         62:bc:84:1d:c8:1f:5b:ba:af:77:c6:e2:01:e9:01:1b:9e:5b:
         d6:83:64:19:59:98:50:1c:c4:1c:17:d6:ac:e6:1a:48:91:7b:
         b5:a0:08:fb:36:b9:74:66:27:fb:cc:70:71:20:1e:ae:32:85:
         b6:a7:9a:19
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICAw8wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
OUUxQUVBRjExMC8GA1UEBRMoMEY0MTI1QUQyQ0QyQkQ4QjNBRTE2MkYzRTMyMkU1
RjU4MTA0NzU1QzAeFw0yNjAxMjUwMzU4MTFaFw0yNjAxMjcwMzU4MTFaMBgxFjAU
BgNVBAMTDTY5NzU5NGQzLTFlYzYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDMLurc8yZQJyiNej9wZHW/JpHMcKd0sE/GwLV6RqHu0XYFrCfMAb70K54o
xdWSDxjibptyWeZp/9YrPehsS9jm0yFFC++a6c6Q5yo0aIAs9qrtAjqMh1Q/lK5I
TI7sGzZMWoWtNvM9pFW3eiI0/QDlePE88ODrSc2+nTC4ljKfMgqlfKNmoNFQ0YsC
lvztHj0OXDHQ4aHxiOqNhL8RgCNHS0qp/d51tiDgJA1RHDY9ElNRIWEvbeL/+emT
XPtdtIDemYlbV9aMYx2OB0rnxOs2o2LCFbF3myTqNiKaI74UIHKyy+FN9T3SAJzb
9u1srCJcLmwhSfC1tFzfMAHhm7+tAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUle0h
qBIe5lz5EkczmMwRpvq6soYwHwYDVR0jBBgwFoAUD0ElrSzSvYs64WLz4yLl9YEE
dVwwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjlFMUFFL0EzRTJFQzcyQTU2NjExRUVCRTU5OTA2QUQyNUJFNDY1L0QwRWxy
U3pTdllzNjRXTHo0eUxsOVlFRWRWdy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0QwRWxyU3pTdllzNjRXTHo0eUxsOVlFRWRWdy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2OUUxQUUvQTNFMkVDNzJBNTY2MTFFRUJFNTk5MDZBRDI1
QkU0NjUvRDBFbHJTelN2WXM2NFdMejR5TGw5WUVFZFZ3Lm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCS7m7SEBiIe2Qvzq9ConIno+r+6zqT
E+hKKi/J2UAyQO+l0II6DyybGmmMmJj4ZYsxVJEKbKl1d9C90ekbxZrrecSiXFXE
s4kbqg9H/waUJkyl240y1f367jszmOVP2e3wh0FFSzPkG5ePWvAGcZo+h1SThK8A
m49Vzfqp7449tp1vQnZWpa7/+ymuR+sRZ8u6tMdj65IFvr2/hx71Gq3fYQqWwShu
Zz20GodGPSnHpubzqi4on7gkZqrZGOTG95cWOyK2rZNivIQdyB9buq93xuIB6QEb
nlvWg2QZWZhQHMQcF9as5hpIkXu1oAj7Nrl0Zif7zHBxIB6uMoW2p5oZ
-----END CERTIFICATE-----
Generated at Sun Jan 25 11:00:46 2026 by rpki-client