This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3627A02/39577B2AB58E11E8B60A4064F8AEA228/1qTOslDhuJgjxaxDmHTTUfkMQuY.mft
File:                     1qTOslDhuJgjxaxDmHTTUfkMQuY.mft (raw, json)
Hash identifier:          +qFqo+jL4WZ1zOBC9lQwQd3TFw6hn/YFxRSn5Zo6/Mg=
Subject key identifier:   8E:6B:90:81:A0:01:9A:8B:75:53:EB:C8:E0:5C:06:56:59:69:04:AB
Authority key identifier: D6:A4:CE:B2:50:E1:B8:98:23:C5:AC:43:98:74:D3:51:F9:0C:42:E6
Certificate issuer:       /CN=F3627A02AR/serialNumber=D6A4CEB250E1B89823C5AC439874D351F90C42E6
Certificate serial:       0ACB
Authority info access:    rsync://rpki.afrinic.net/repository/arin/1qTOslDhuJgjxaxDmHTTUfkMQuY.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3627A02/39577B2AB58E11E8B60A4064F8AEA228/1qTOslDhuJgjxaxDmHTTUfkMQuY.mft
Manifest number:          0AC5
Signing time:             Tue 13 Jan 2026 01:14:50 +0000
Manifest this update:     Tue 13 Jan 2026 01:14:49 +0000
Manifest next update:     Thu 15 Jan 2026 01:14:49 +0000
Files and hashes:         1: 1qTOslDhuJgjxaxDmHTTUfkMQuY.crl (hash: GuNDYAyLphl9NXfhxNnlljPxgILkvIi3KqghZsA5kTo=)
                          2: 673C61B4A88611ED9FE7EDD4F1222468.roa (hash: m91FhF+zJneUBb3UfLyzUzRvHvpK/0b7/Z5lBS15Q2I=)
                          3: B03DD41482B211ED9ACDF2D8F1222468.roa (hash: p4erYRKk741+pc1GTQOQg0ZDNMWUeJrKmmr5PjLZGWc=)
                          4: 9C57BBCA514411E9819FB57FF8AEA228.roa (hash: a2EFqum38j7M+ZpqwnpRi/IEA/fqXEm99Nf0ZysxusA=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3627A02/39577B2AB58E11E8B60A4064F8AEA228/1qTOslDhuJgjxaxDmHTTUfkMQuY.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3627A02/39577B2AB58E11E8B60A4064F8AEA228/1qTOslDhuJgjxaxDmHTTUfkMQuY.mft
                          rsync://rpki.afrinic.net/repository/arin/1qTOslDhuJgjxaxDmHTTUfkMQuY.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 15 Jan 2026 00:26:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2763 (0xacb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3627A02AR, serialNumber=D6A4CEB250E1B89823C5AC439874D351F90C42E6
        Validity
            Not Before: Jan 13 01:14:49 2026 GMT
            Not After : Jan 15 01:14:49 2026 GMT
        Subject: CN=69659c8a-3b29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:4a:0b:e1:e6:7c:53:bd:70:c7:a9:f3:10:c2:
                    c7:3b:cb:f7:22:e6:5e:97:ac:6e:fe:a2:13:85:63:
                    da:79:4f:3f:14:a6:82:fe:7e:ea:f0:f7:21:71:0a:
                    a3:c1:d5:75:b3:4a:e3:8b:14:42:c8:bf:23:52:fb:
                    f2:99:c6:09:1c:da:83:73:a3:b5:9a:86:95:24:1b:
                    0b:45:a5:77:b4:e0:e5:bf:e3:78:9f:92:b6:b9:34:
                    f6:16:f5:f5:71:64:c2:d0:f6:41:bd:3f:00:b2:39:
                    d2:48:7a:cc:36:4b:51:58:2d:c3:3d:e6:54:a0:d8:
                    a3:06:77:49:c1:dc:cd:92:28:09:56:72:56:1f:8b:
                    4e:09:af:bf:91:36:7d:fc:a0:a6:74:32:0d:53:be:
                    d7:e7:53:a3:f6:2d:98:e3:47:f0:08:47:69:29:e8:
                    88:85:60:7d:ef:be:b1:36:07:e1:f4:d7:28:29:a9:
                    be:e8:3d:ac:d1:c7:cd:8a:d4:df:72:66:00:f1:0b:
                    97:16:29:ab:7d:3e:70:d8:5b:1d:37:66:13:5f:92:
                    02:6e:d8:db:ee:22:ec:63:e5:7e:50:ce:80:45:3b:
                    de:c5:43:9e:68:bb:9f:09:33:77:ee:51:b6:85:62:
                    8b:98:08:86:44:ae:d1:46:1d:64:6f:aa:3a:3e:6e:
                    70:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:6B:90:81:A0:01:9A:8B:75:53:EB:C8:E0:5C:06:56:59:69:04:AB
            X509v3 Authority Key Identifier:
                keyid:D6:A4:CE:B2:50:E1:B8:98:23:C5:AC:43:98:74:D3:51:F9:0C:42:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3627A02/39577B2AB58E11E8B60A4064F8AEA228/1qTOslDhuJgjxaxDmHTTUfkMQuY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/1qTOslDhuJgjxaxDmHTTUfkMQuY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3627A02/39577B2AB58E11E8B60A4064F8AEA228/1qTOslDhuJgjxaxDmHTTUfkMQuY.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:ca:95:10:5a:5a:91:0a:aa:73:e2:24:b2:af:38:f0:ed:3f:
         77:58:f7:14:a5:fc:1a:09:77:c7:5d:5d:b0:10:2d:3e:2b:1f:
         ee:b1:93:44:83:02:8f:a7:0f:76:32:9f:db:db:48:f9:6d:63:
         23:8c:00:89:34:da:41:37:7f:6e:11:6b:a4:b4:a4:48:31:2c:
         86:b0:12:ae:3d:19:06:83:98:ed:2e:36:6f:47:c0:36:85:35:
         81:09:1c:22:b2:48:12:89:2c:48:f2:f8:5b:54:1d:07:63:61:
         75:80:f2:d6:1e:63:7a:05:0c:8c:84:e1:0f:7d:2c:c7:8a:7e:
         10:83:c9:ad:4e:54:45:d5:34:1d:3d:49:10:15:35:5a:42:69:
         2e:cc:26:b5:a2:c6:11:12:4e:14:3b:0e:7d:7c:03:b1:46:6b:
         19:38:55:c7:c1:eb:17:80:db:99:cb:a1:98:59:17:ed:3a:da:
         59:68:52:36:97:f0:1e:cd:2c:f9:0f:68:05:fd:a8:3a:43:cb:
         fb:9f:e2:fa:7a:9e:0c:b9:26:c1:ee:e4:24:b2:95:be:bd:66:
         e4:63:74:23:da:81:5f:f6:81:84:cb:9b:a4:62:c7:fb:4e:02:
         83:50:b1:4a:df:d1:6d:0f:73:e8:18:dc:8f:44:a7:98:19:7c:
         aa:3d:55:3c
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgICCsswDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
MjdBMDJBUjExMC8GA1UEBRMoRDZBNENFQjI1MEUxQjg5ODIzQzVBQzQzOTg3NEQz
NTFGOTBDNDJFNjAeFw0yNjAxMTMwMTE0NDlaFw0yNjAxMTUwMTE0NDlaMBgxFjAU
BgNVBAMTDTY5NjU5YzhhLTNiMjkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDKSgvh5nxTvXDHqfMQwsc7y/ci5l6XrG7+ohOFY9p5Tz8UpoL+furw9yFx
CqPB1XWzSuOLFELIvyNS+/KZxgkc2oNzo7WahpUkGwtFpXe04OW/43ifkra5NPYW
9fVxZMLQ9kG9PwCyOdJIesw2S1FYLcM95lSg2KMGd0nB3M2SKAlWclYfi04Jr7+R
Nn38oKZ0Mg1TvtfnU6P2LZjjR/AIR2kp6IiFYH3vvrE2B+H01ygpqb7oPazRx82K
1N9yZgDxC5cWKat9PnDYWx03ZhNfkgJu2NvuIuxj5X5QzoBFO97FQ55ou58JM3fu
UbaFYouYCIZErtFGHWRvqjo+bnDXAgMBAAGjggK1MIICsTAdBgNVHQ4EFgQUjmuQ
gaABmot1U+vI4FwGVllpBKswHwYDVR0jBBgwFoAU1qTOslDhuJgjxaxDmHTTUfkM
QuYwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjI3QTAyLzM5NTc3QjJBQjU4RTExRThCNjBBNDA2NEY4QUVBMjI4LzFxVE9z
bERodUpnanhheERtSFRUVWZrTVF1WS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
LzFxVE9zbERodUpnanhheERtSFRUVWZrTVF1WS5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEFBQcw
C4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl
cG9zaXRvcnkvRjM2MjdBMDIvMzk1NzdCMkFCNThFMTFFOEI2MEE0MDY0RjhBRUEy
MjgvMXFUT3NsRGh1SmdqeGF4RG1IVFRVZmtNUXVZLm1mdDA1BggrBgEFBQcwDYYp
aHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA
AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCaypUQWlqRCqpz4iSyrzjw7T93WPcUpfwa
CXfHXV2wEC0+Kx/usZNEgwKPpw92Mp/b20j5bWMjjACJNNpBN39uEWuktKRIMSyG
sBKuPRkGg5jtLjZvR8A2hTWBCRwiskgSiSxI8vhbVB0HY2F1gPLWHmN6BQyMhOEP
fSzHin4Qg8mtTlRF1TQdPUkQFTVaQmkuzCa1osYREk4UOw59fAOxRmsZOFXHwesX
gNuZy6GYWRftOtpZaFI2l/AezSz5D2gF/ag6Q8v7n+L6ep4MuSbB7uQkspW+vWbk
Y3Qj2oFf9oGEy5ukYsf7TgKDULFK39FtD3PoGNyPRKeYGXyqPVU8
-----END CERTIFICATE-----
Generated at Tue Jan 13 04:57:27 2026 by rpki-client