This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3619C2D/A3800BAE482011EFB826B541762E951A/CrgqSYFgfZszadx3bbCHPaDXW0o.mft
File:                     CrgqSYFgfZszadx3bbCHPaDXW0o.mft (raw, json)
Hash identifier:          zAWSA0yrWYYkNuwBgKDln26JiPcuaxsezaR9+lUEOII=
Subject key identifier:   80:27:39:72:55:9C:C1:53:08:11:84:84:72:67:9C:24:3B:3D:B1:57
Authority key identifier: 0A:B8:2A:49:81:60:7D:9B:33:69:DC:77:6D:B0:87:3D:A0:D7:5B:4A
Certificate issuer:       /CN=F3619C2DAF/serialNumber=0AB82A4981607D9B3369DC776DB0873DA0D75B4A
Certificate serial:       0230
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/CrgqSYFgfZszadx3bbCHPaDXW0o.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3619C2D/A3800BAE482011EFB826B541762E951A/CrgqSYFgfZszadx3bbCHPaDXW0o.mft
Manifest number:          022D
Signing time:             Mon 12 Jan 2026 04:27:12 +0000
Manifest this update:     Mon 12 Jan 2026 04:27:11 +0000
Manifest next update:     Wed 14 Jan 2026 04:27:11 +0000
Files and hashes:         1: CrgqSYFgfZszadx3bbCHPaDXW0o.crl (hash: Q15uCcreG1gNUhqEF9uWRQXduJVjxjSqqb+3IIFvzfw=)
                          2: 49178D26482111EFBF6A9846762E951A.roa (hash: Uq5zF4pcoSNvC1y+ziK2X/Qxf/rDJCV5RGjunbzu6Yw=)
                          3: B03D2452482111EF9F9EC84A762E951A.roa (hash: jCfjvbMFxRCBjcQ1hYzWoTlmpoZT6gauVXaJc8YGgBc=)
                          4: 74DC4CE4482111EFB52ABE46762E951A.roa (hash: IrKSaBlXTXvuFdDCMcmVoeGgt+ao2gr+1sDL9IuQ/x0=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3619C2D/A3800BAE482011EFB826B541762E951A/CrgqSYFgfZszadx3bbCHPaDXW0o.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3619C2D/A3800BAE482011EFB826B541762E951A/CrgqSYFgfZszadx3bbCHPaDXW0o.mft
                          rsync://rpki.afrinic.net/repository/afrinic/CrgqSYFgfZszadx3bbCHPaDXW0o.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 14 Jan 2026 04:27:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 560 (0x230)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3619C2DAF, serialNumber=0AB82A4981607D9B3369DC776DB0873DA0D75B4A
        Validity
            Not Before: Jan 12 04:27:11 2026 GMT
            Not After : Jan 14 04:27:11 2026 GMT
        Subject: CN=69647820-9e39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:db:c5:38:23:1b:da:d2:a2:d4:d2:37:c2:05:
                    9d:9a:bc:ea:d1:2a:37:7b:df:f1:92:30:0a:6f:74:
                    a2:a6:4a:bb:24:95:33:db:ac:5b:72:48:42:82:8d:
                    d0:0d:b3:16:d6:12:bf:66:59:c5:6e:cb:c8:3e:8e:
                    70:db:83:08:71:c7:e3:1b:a2:a9:e0:4d:8b:31:c0:
                    6c:66:c5:10:85:f1:09:73:19:31:55:0d:11:15:fb:
                    e0:9f:da:8e:ae:1b:c3:82:1a:fc:33:63:75:df:3e:
                    a6:ef:07:a8:8c:26:38:6f:94:68:e8:64:0d:53:c3:
                    75:59:75:dc:d1:7e:4f:6a:65:9c:63:8c:76:41:f4:
                    ba:96:e6:13:96:80:d7:fe:a4:4c:73:4f:b6:d7:f1:
                    9d:79:52:e4:4c:f1:75:78:bd:31:ae:e0:96:14:97:
                    84:67:89:06:f5:f5:64:77:ed:c4:96:3b:87:ac:d0:
                    40:ee:52:fd:a3:d4:39:1a:3f:96:10:d6:06:4b:e4:
                    f4:cf:10:ab:86:b5:f1:94:ac:c5:cd:36:10:83:11:
                    45:d7:10:26:8f:61:f5:7e:20:19:48:e3:d9:4a:f4:
                    25:84:9e:30:c4:30:8a:95:3b:10:3d:8f:e2:b5:44:
                    b6:e6:b9:fa:ca:e9:96:77:d8:ab:75:aa:e8:cd:d1:
                    cc:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:27:39:72:55:9C:C1:53:08:11:84:84:72:67:9C:24:3B:3D:B1:57
            X509v3 Authority Key Identifier:
                keyid:0A:B8:2A:49:81:60:7D:9B:33:69:DC:77:6D:B0:87:3D:A0:D7:5B:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3619C2D/A3800BAE482011EFB826B541762E951A/CrgqSYFgfZszadx3bbCHPaDXW0o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CrgqSYFgfZszadx3bbCHPaDXW0o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3619C2D/A3800BAE482011EFB826B541762E951A/CrgqSYFgfZszadx3bbCHPaDXW0o.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:a6:be:b3:ae:c9:7d:89:cf:a1:12:b6:0a:1d:7b:05:6d:e6:
         fe:ae:2f:56:43:5a:02:3c:be:2c:7e:3f:bb:d2:e1:02:5b:b9:
         67:2e:13:92:52:ea:89:34:5e:c1:9f:69:ce:cd:9e:b9:26:d2:
         8f:ef:83:b2:3b:4d:b8:13:a4:2d:9f:6b:91:b0:94:8a:7b:4f:
         89:08:f7:8d:1d:44:72:34:39:98:6c:58:3f:8b:61:d7:08:c6:
         1d:f4:15:21:05:cf:14:ab:7c:27:aa:d3:85:e8:27:6d:17:f8:
         30:3b:6d:36:74:c6:34:f3:15:48:e2:90:06:58:a1:f8:20:5e:
         cf:f0:99:83:91:52:2d:61:d4:05:ff:b3:b2:0d:15:cd:6e:2b:
         37:95:01:2f:79:04:f6:5d:d3:f6:af:15:e2:5a:fe:be:4f:a3:
         7b:ad:5b:cb:d8:b0:d3:51:b4:c1:68:9e:ec:db:2a:06:10:e1:
         87:da:14:c6:7d:0a:88:b6:93:5d:3b:d8:7a:08:bf:81:be:a8:
         20:f1:03:0a:6f:a9:e8:a6:aa:a8:4c:5f:0a:d3:f4:d3:0d:24:
         a8:52:58:31:70:a7:31:17:02:cf:67:97:af:c4:3c:a8:c6:76:
         b8:dd:ba:6b:12:f9:7e:d0:24:70:43:de:46:45:ae:aa:89:47:
         a0:c7:5d:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 13 02:54:55 2026 by rpki-client