This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369E9B3/EE40A58A558C11EFAFCCFBA0762E951A/9XSxa6hq2W4A3trNY0H5qCTqR6c.mft
File:                     9XSxa6hq2W4A3trNY0H5qCTqR6c.mft (raw, json)
Hash identifier:          KVe8vzJB9Qa3aRqshY/ouyzDUY5EgIQ7RBSzxyMdbvQ=
Subject key identifier:   7B:4F:DB:1F:99:0B:F1:76:59:9C:51:06:5A:94:D2:B0:17:2F:68:23
Authority key identifier: F5:74:B1:6B:A8:6A:D9:6E:00:DE:DA:CD:63:41:F9:A8:24:EA:47:A7
Certificate issuer:       /CN=F369E9B3AF/serialNumber=F574B16BA86AD96E00DEDACD6341F9A824EA47A7
Certificate serial:       023A
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/9XSxa6hq2W4A3trNY0H5qCTqR6c.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F369E9B3/EE40A58A558C11EFAFCCFBA0762E951A/9XSxa6hq2W4A3trNY0H5qCTqR6c.mft
Manifest number:          0235
Signing time:             Sun 25 Jan 2026 04:27:20 +0000
Manifest this update:     Sun 25 Jan 2026 04:27:20 +0000
Manifest next update:     Tue 27 Jan 2026 04:27:20 +0000
Files and hashes:         1: 9XSxa6hq2W4A3trNY0H5qCTqR6c.crl (hash: hAb5MAZNV3eDHdTkjXMrdRK7IRDf1VhXqhaKwc+eHZU=)
                          2: A43C41D4120011F09D92528F762E951A.roa (hash: +C2vaGXsFk0vULg3LSJ6J09JaHsN+iiW87QQdSsPSN8=)
                          3: F0AE3C30F8F411F0BD60DAC7DAE4EC9C.roa (hash: w6gvWanr3TgG7meRgmSObxkcZzrvD0UBJOndkTrbcL0=)
                          4: CF1798702D2311F0B44678ECDAE4EC9C.roa (hash: 5LtiI+kpHrtx1PW0UuMcO5zsttEu1oGZjrXgXm+py4Y=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F369E9B3/EE40A58A558C11EFAFCCFBA0762E951A/9XSxa6hq2W4A3trNY0H5qCTqR6c.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F369E9B3/EE40A58A558C11EFAFCCFBA0762E951A/9XSxa6hq2W4A3trNY0H5qCTqR6c.mft
                          rsync://rpki.afrinic.net/repository/afrinic/9XSxa6hq2W4A3trNY0H5qCTqR6c.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:06:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 570 (0x23a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F369E9B3AF, serialNumber=F574B16BA86AD96E00DEDACD6341F9A824EA47A7
        Validity
            Not Before: Jan 25 04:27:20 2026 GMT
            Not After : Jan 27 04:27:20 2026 GMT
        Subject: CN=69759ba8-b47f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:1f:bf:5f:c1:12:ab:32:ce:d0:34:12:b8:8e:
                    d6:b1:97:47:48:3f:c3:0d:63:c4:7b:de:29:fb:51:
                    a7:dd:5d:e6:4f:4e:b4:a6:b4:7b:06:ea:cb:b5:ee:
                    ca:3b:5f:45:0a:f3:46:6c:6b:10:c0:7a:fc:22:2e:
                    8a:63:31:5d:0e:fd:ff:34:18:96:78:01:b7:1a:72:
                    23:80:a2:7d:77:48:a8:e0:93:a6:e3:17:20:8d:f1:
                    b7:76:c7:b9:a9:70:9d:cc:d0:61:3a:c9:53:fb:f5:
                    a8:80:0d:7f:28:09:90:e9:89:f5:12:a5:c3:39:34:
                    b3:fc:ce:87:71:5e:17:3c:06:24:23:0b:fc:8d:b8:
                    da:22:7f:14:81:90:29:71:6d:e5:77:5a:65:89:54:
                    88:5e:73:b5:7c:88:93:87:d0:fa:81:13:12:11:3d:
                    0f:f7:9e:ca:7c:83:0f:c4:cd:ac:fc:6a:f5:3c:d3:
                    3d:b7:53:5a:9b:0b:40:01:bc:d0:f8:fe:dc:9d:a6:
                    63:7b:c9:01:0c:1a:51:82:b4:6b:76:51:8c:f7:7c:
                    0b:0c:33:48:c4:96:8a:ba:d5:a4:28:8b:81:bd:e3:
                    1f:44:1e:f2:6c:a7:db:3c:47:d9:6d:b3:7b:71:5a:
                    6d:e6:62:bb:bf:2a:9d:49:12:96:4b:5c:98:a9:f8:
                    49:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:4F:DB:1F:99:0B:F1:76:59:9C:51:06:5A:94:D2:B0:17:2F:68:23
            X509v3 Authority Key Identifier:
                keyid:F5:74:B1:6B:A8:6A:D9:6E:00:DE:DA:CD:63:41:F9:A8:24:EA:47:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F369E9B3/EE40A58A558C11EFAFCCFBA0762E951A/9XSxa6hq2W4A3trNY0H5qCTqR6c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/9XSxa6hq2W4A3trNY0H5qCTqR6c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369E9B3/EE40A58A558C11EFAFCCFBA0762E951A/9XSxa6hq2W4A3trNY0H5qCTqR6c.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:d2:88:8b:6f:93:87:71:6c:6c:77:6c:d9:59:4a:89:5a:d0:
         ad:68:95:cf:df:03:61:9a:05:8a:b4:83:04:12:dc:d3:51:83:
         b8:85:b1:d5:61:60:68:ba:33:45:73:d4:3c:f9:90:b9:24:7a:
         11:59:0d:e3:fc:08:56:40:2a:bd:7c:1e:1f:ea:a2:c6:69:28:
         15:8a:6f:7d:01:8d:ff:9d:81:cc:6b:a4:8b:90:ca:e6:db:91:
         6e:af:91:4e:0e:c0:91:e4:a4:73:09:89:82:da:39:ca:cb:39:
         92:1b:08:05:a6:d0:3c:1a:dd:6a:f3:9e:73:cc:08:65:7e:9c:
         5a:96:3d:2d:8f:57:e6:9d:b1:57:cb:91:79:f4:ca:14:01:1f:
         5f:7c:5c:c2:93:c7:7e:ac:59:36:88:57:ce:53:e9:59:f1:2a:
         e9:dc:ea:29:7b:63:e9:f8:e0:7b:ed:37:45:84:1e:37:e8:0e:
         44:82:23:2d:ed:86:88:a0:df:52:82:93:04:48:54:35:a6:01:
         0c:0d:24:33:ae:79:02:1c:23:e9:07:d4:c2:88:3a:38:ec:12:
         3a:f6:40:14:0c:49:ee:2e:f8:7e:a8:58:96:f9:34:a9:d6:0c:
         2e:e3:10:5b:67:65:1c:b7:75:da:49:9c:35:0c:dc:9b:cf:5a:
         70:20:e9:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 08:18:24 2026 by rpki-client