This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3654397/8D7B31801F9611ED8233F28CF1222468/A-IO7xUFA6CxlRGK6Idof1pCecI.mft
File:                     A-IO7xUFA6CxlRGK6Idof1pCecI.mft (raw, json)
Hash identifier:          JprOIMDtJ8t8MpeE07LUJyBjnyGAqAz1k/vxU37fMGs=
Subject key identifier:   FE:4C:26:F3:7C:69:DE:3D:F2:4A:49:6D:B2:FD:EC:8B:EF:50:D4:F1
Authority key identifier: 03:E2:0E:EF:15:05:03:A0:B1:95:11:8A:E8:87:68:7F:5A:42:79:C2
Certificate issuer:       /CN=F3654397AF/serialNumber=03E20EEF150503A0B195118AE887687F5A4279C2
Certificate serial:       0524
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/A-IO7xUFA6CxlRGK6Idof1pCecI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3654397/8D7B31801F9611ED8233F28CF1222468/A-IO7xUFA6CxlRGK6Idof1pCecI.mft
Manifest number:          0513
Signing time:             Thu 01 Jan 2026 05:32:08 +0000
Manifest this update:     Thu 01 Jan 2026 05:32:07 +0000
Manifest next update:     Sat 03 Jan 2026 05:32:07 +0000
Files and hashes:         1: A-IO7xUFA6CxlRGK6Idof1pCecI.crl (hash: xa2qySGjDYTzOhSw7Dp+itki3OqLt4328Vrh+zTARwg=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3654397/8D7B31801F9611ED8233F28CF1222468/A-IO7xUFA6CxlRGK6Idof1pCecI.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3654397/8D7B31801F9611ED8233F28CF1222468/A-IO7xUFA6CxlRGK6Idof1pCecI.mft
                          rsync://rpki.afrinic.net/repository/afrinic/A-IO7xUFA6CxlRGK6Idof1pCecI.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 03 Jan 2026 05:32:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1316 (0x524)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3654397AF, serialNumber=03E20EEF150503A0B195118AE887687F5A4279C2
        Validity
            Not Before: Jan  1 05:32:07 2026 GMT
            Not After : Jan  3 05:32:07 2026 GMT
        Subject: CN=695606d8-fa3b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:80:b5:4f:45:45:04:70:46:14:d1:b9:f5:a8:
                    c0:84:b2:9d:df:cc:8b:a7:93:52:54:38:01:34:e8:
                    39:19:2c:c7:7a:38:cb:be:36:90:56:98:6d:5f:07:
                    00:35:12:d8:3a:af:14:71:79:3a:e0:3e:2c:4e:48:
                    c5:d2:ac:93:a9:c9:c6:84:5d:45:e3:e4:09:3c:b2:
                    10:19:b7:f9:bc:09:f5:11:d3:22:d2:0f:3e:4d:00:
                    1a:5a:2d:c4:97:d0:84:6c:04:2a:16:c0:37:03:82:
                    c6:ae:32:ac:c0:55:b5:bd:9c:a8:aa:f4:6a:33:41:
                    5f:83:d1:f0:c0:5d:5e:ce:86:22:ae:a2:c5:08:e7:
                    7c:29:1c:03:7c:89:82:09:6e:97:6a:83:02:8b:1f:
                    c3:ed:00:d5:ce:57:51:9c:cd:15:73:58:f6:19:a8:
                    96:ce:7a:60:cf:6c:b1:58:cf:65:75:ba:ad:18:e9:
                    35:87:20:5b:0c:44:95:ba:a0:19:1f:10:db:cd:1f:
                    65:12:1f:de:97:af:d5:88:bc:70:e2:ec:30:d0:3d:
                    0a:80:c8:f2:62:72:68:b6:a0:ab:a7:f8:b0:fb:fa:
                    16:f0:62:9d:6b:3e:c7:0c:23:b3:49:ac:d0:9f:aa:
                    c8:a8:1c:58:e3:e8:e7:9e:f1:a2:37:a7:79:71:eb:
                    5f:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:4C:26:F3:7C:69:DE:3D:F2:4A:49:6D:B2:FD:EC:8B:EF:50:D4:F1
            X509v3 Authority Key Identifier:
                keyid:03:E2:0E:EF:15:05:03:A0:B1:95:11:8A:E8:87:68:7F:5A:42:79:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3654397/8D7B31801F9611ED8233F28CF1222468/A-IO7xUFA6CxlRGK6Idof1pCecI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/A-IO7xUFA6CxlRGK6Idof1pCecI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3654397/8D7B31801F9611ED8233F28CF1222468/A-IO7xUFA6CxlRGK6Idof1pCecI.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:a3:76:13:02:f5:75:c4:1f:6e:55:2f:4f:53:fa:f7:70:51:
         b3:7d:80:a9:5d:34:8e:5b:c6:1c:83:0e:ee:b2:b4:fa:09:af:
         6f:9a:15:b4:d7:b8:91:60:ea:a8:71:e3:91:d4:91:a8:4f:b2:
         91:cf:63:aa:34:67:04:37:7a:a8:a4:b4:94:fc:60:ac:8e:ec:
         39:ac:c5:c4:5f:49:1c:95:ab:6c:98:7d:c0:a8:83:db:7e:ad:
         c4:9c:4a:05:7d:bc:5e:43:92:82:83:a3:81:55:39:75:2c:a9:
         63:80:2d:4b:fa:21:7a:28:51:8a:72:f3:85:a1:79:54:a8:0d:
         7a:43:44:bb:5f:5c:a6:c5:66:4a:b9:cc:1c:74:39:a2:4b:2c:
         70:97:4c:7c:44:d8:d8:83:4b:03:71:81:57:b6:06:e5:9b:77:
         8f:d7:7d:33:62:64:b5:9c:a9:63:47:bf:b9:25:23:22:06:e8:
         cd:3f:c8:6c:5e:ae:f9:87:b4:23:08:da:c1:4f:57:38:0f:9f:
         50:49:7c:47:9e:0d:ea:1c:aa:96:ca:5f:02:d9:fc:c1:75:aa:
         dc:cd:22:0c:aa:2e:60:79:63:b0:96:7d:c7:89:ed:3a:82:e2:
         2f:0f:5b:92:44:77:af:60:f0:98:9b:53:ce:6f:82:e2:52:09:
         cc:22:6b:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 1 15:38:48 2026 by rpki-client