This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A39CE/621AB4EE0B5311EE9B4D135D4AD9E6FC/dF3XcQDluqV1XTuTwPQnTCebbdc.mft
File:                     dF3XcQDluqV1XTuTwPQnTCebbdc.mft (raw, json)
Hash identifier:          4Iy+v1Ctrh8d+Nb0r0uw0CjIFdDm6chB88GaG9wNXG4=
Subject key identifier:   FB:E3:B5:33:D0:3C:92:81:B9:AC:43:E1:61:B4:80:A4:7E:4C:38:70
Authority key identifier: 74:5D:D7:71:00:E5:BA:A5:75:5D:3B:93:C0:F4:27:4C:27:9B:6D:D7
Certificate issuer:       /CN=F36A39CEAR/serialNumber=745DD77100E5BAA5755D3B93C0F4274C279B6DD7
Certificate serial:       03D9
Authority info access:    rsync://rpki.afrinic.net/repository/arin/dF3XcQDluqV1XTuTwPQnTCebbdc.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A39CE/621AB4EE0B5311EE9B4D135D4AD9E6FC/dF3XcQDluqV1XTuTwPQnTCebbdc.mft
Manifest number:          03D8
Signing time:             Mon 26 Jan 2026 03:32:21 +0000
Manifest this update:     Mon 26 Jan 2026 03:32:20 +0000
Manifest next update:     Wed 28 Jan 2026 03:32:20 +0000
Files and hashes:         1: dF3XcQDluqV1XTuTwPQnTCebbdc.crl (hash: P7xnrI4cgf0acsHfmb87YWJ1CYz+Qmp6KCJ4eCqGbwQ=)
                          2: 9D1F1EF4403611EF977FF944762E951A.roa (hash: hLeObmsi90Fg8VBqFqxqwLqUBn1VTFF0SZa65WhAxQ4=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A39CE/621AB4EE0B5311EE9B4D135D4AD9E6FC/dF3XcQDluqV1XTuTwPQnTCebbdc.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A39CE/621AB4EE0B5311EE9B4D135D4AD9E6FC/dF3XcQDluqV1XTuTwPQnTCebbdc.mft
                          rsync://rpki.afrinic.net/repository/arin/dF3XcQDluqV1XTuTwPQnTCebbdc.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 28 Jan 2026 00:26:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 985 (0x3d9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A39CEAR, serialNumber=745DD77100E5BAA5755D3B93C0F4274C279B6DD7
        Validity
            Not Before: Jan 26 03:32:20 2026 GMT
            Not After : Jan 28 03:32:20 2026 GMT
        Subject: CN=6976e045-49d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:8c:06:1f:82:22:84:1a:9b:e5:49:d3:7f:7a:
                    77:9e:c4:9d:db:5f:dc:14:b6:f7:b3:1a:7d:5d:f1:
                    e6:2f:ee:3f:54:3a:89:8a:a1:8e:78:cf:73:2a:67:
                    25:20:a2:d3:81:c8:6b:43:c9:2c:08:d4:37:76:ef:
                    20:53:f4:d3:73:ef:cc:ef:bb:4b:e7:51:52:03:91:
                    54:82:56:1c:87:32:c9:0a:de:28:a9:fb:93:b3:c3:
                    a5:78:50:44:7a:36:4f:58:ce:32:86:15:98:52:a5:
                    9b:eb:0f:91:9a:08:05:63:81:8d:eb:81:8d:06:54:
                    8a:e3:3b:e5:bc:a8:8b:73:d8:2f:30:82:e1:07:00:
                    bc:c0:17:52:f7:81:c4:5a:b5:fa:23:6f:a1:95:ae:
                    50:e7:11:c3:cc:5a:23:4d:aa:6a:0d:8a:1c:24:85:
                    6c:5b:0f:af:01:d2:67:36:30:ea:86:d3:0f:45:68:
                    80:16:ef:da:82:e8:b7:81:f6:c2:41:67:f2:fc:11:
                    37:fc:a7:bd:bd:f9:56:ed:1b:d5:0a:69:0b:59:42:
                    71:39:04:17:3a:5f:33:b8:af:0b:36:70:fe:06:a8:
                    d2:ee:a9:fe:a7:74:81:38:34:29:3a:1d:14:c8:b0:
                    a0:52:21:8f:6a:e2:62:2f:78:a7:d7:e7:1b:37:da:
                    7d:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:E3:B5:33:D0:3C:92:81:B9:AC:43:E1:61:B4:80:A4:7E:4C:38:70
            X509v3 Authority Key Identifier:
                keyid:74:5D:D7:71:00:E5:BA:A5:75:5D:3B:93:C0:F4:27:4C:27:9B:6D:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A39CE/621AB4EE0B5311EE9B4D135D4AD9E6FC/dF3XcQDluqV1XTuTwPQnTCebbdc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/dF3XcQDluqV1XTuTwPQnTCebbdc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A39CE/621AB4EE0B5311EE9B4D135D4AD9E6FC/dF3XcQDluqV1XTuTwPQnTCebbdc.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:d4:e8:42:94:85:7c:20:26:97:4f:44:4f:4a:ed:af:92:7f:
         dd:9a:5e:9e:43:68:3c:09:d2:ba:0d:f9:2d:95:f2:0f:71:e0:
         62:63:fd:19:35:16:48:5c:8d:fd:5d:87:77:a4:62:de:d0:cc:
         f8:00:c0:c7:40:9a:fa:21:97:ae:fc:cb:02:8d:83:6e:da:99:
         90:fa:7b:ee:89:87:61:60:30:be:be:88:ad:98:a0:e4:2b:73:
         c8:e2:07:c4:63:b8:f4:06:e2:02:69:a5:30:ee:84:e5:e1:80:
         bc:22:e6:dc:a5:6f:81:60:66:c6:47:86:7d:89:ef:df:70:fa:
         13:60:b2:4c:35:dd:1e:28:8b:67:89:a5:07:2c:c3:15:30:66:
         5c:d1:21:dc:dc:be:ff:dd:eb:e4:f9:4f:12:7a:2b:51:35:a1:
         53:26:d8:6e:cb:80:f2:e1:ad:67:60:1a:6b:6e:5d:7a:50:32:
         77:b1:05:99:44:bd:3f:ab:1c:44:97:88:db:96:ed:05:bd:93:
         a4:6a:ac:11:2b:e9:ef:67:2e:f8:59:0b:83:c4:5c:18:8a:70:
         8c:29:fb:59:65:29:3c:2a:d3:4c:19:ec:2a:a4:eb:98:56:81:
         20:b4:46:fd:0e:ed:92:a2:80:9c:25:a5:39:c4:18:53:fe:c3:
         b4:10:08:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 13:49:06 2026 by rpki-client