This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F365BC44/892D49C6F61811ECBE1B38AFF1222468/LQAVTmAKZArDKjKF2c6fxQqUGrM.mft
File:                     LQAVTmAKZArDKjKF2c6fxQqUGrM.mft (raw, json)
Hash identifier:          9Wt/peV4+vJWIdimLD8P8CcyEPtbbVjLxvv94giGkcg=
Subject key identifier:   01:40:CE:F3:26:A9:33:CD:BD:46:4A:0A:69:77:A3:E0:5A:8B:C6:8B
Authority key identifier: 2D:00:15:4E:60:0A:64:0A:C3:2A:32:85:D9:CE:9F:C5:0A:94:1A:B3
Certificate issuer:       /CN=F365BC44AF/serialNumber=2D00154E600A640AC32A3285D9CE9FC50A941AB3
Certificate serial:       0537
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/LQAVTmAKZArDKjKF2c6fxQqUGrM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F365BC44/892D49C6F61811ECBE1B38AFF1222468/LQAVTmAKZArDKjKF2c6fxQqUGrM.mft
Manifest number:          0531
Signing time:             Thu 01 Jan 2026 05:21:23 +0000
Manifest this update:     Thu 01 Jan 2026 05:21:22 +0000
Manifest next update:     Sat 03 Jan 2026 05:21:22 +0000
Files and hashes:         1: LQAVTmAKZArDKjKF2c6fxQqUGrM.crl (hash: yC74lbrHGO6DkrREyNLDYRGEDcmtel9qiFsYHdiwKcM=)
                          2: 5AD2351EF62211ECA5384CCEF1222468.roa (hash: O2TbmJ0oluer0UrOj7dugRw2nzmfuIBjrJGzVgObtfc=)
                          3: 441FBD96F62211ECAEA706CEF1222468.roa (hash: eOgo72NBB1TzX9MDNE5guVogIR1WbLYMRiu06PhqwRs=)
                          4: AEB3FD70F61811ECA343ACAFF1222468.roa (hash: yr8c8nv1fl6R2/dpv4d+UEGlhaBD6Mc7GC6CbBKlwUE=)
                          5: 92592E3EF62211ECB1890ECFF1222468.roa (hash: r+2CApErk9WQshLvMZh/1Yeo8KK9DMqaF9+XKRWgW4w=)
                          6: 76C25FA6F62211ECA4A5A1CEF1222468.roa (hash: bltEFXn7G4T8us2DT/CcL4lO2ojz0kPAbTbNgBQhLGQ=)
                          7: C977373AF61811ECAE6C16B0F1222468.roa (hash: I6EVPppAZg4DBAMr2DMZolkT3ClI2lJdmUjSbTKJ71k=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F365BC44/892D49C6F61811ECBE1B38AFF1222468/LQAVTmAKZArDKjKF2c6fxQqUGrM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F365BC44/892D49C6F61811ECBE1B38AFF1222468/LQAVTmAKZArDKjKF2c6fxQqUGrM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/LQAVTmAKZArDKjKF2c6fxQqUGrM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 03 Jan 2026 05:21:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1335 (0x537)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F365BC44AF, serialNumber=2D00154E600A640AC32A3285D9CE9FC50A941AB3
        Validity
            Not Before: Jan  1 05:21:22 2026 GMT
            Not After : Jan  3 05:21:22 2026 GMT
        Subject: CN=69560453-a809
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:d7:d1:07:02:f3:67:74:e0:22:42:11:d6:3b:
                    68:c8:dd:bc:e7:6e:23:5a:c5:ab:f3:a8:71:ca:a4:
                    bc:3f:f5:f8:d1:a6:fc:5f:76:a1:c1:2a:2a:f8:b7:
                    af:39:81:d6:f7:a9:05:97:bb:ff:a7:c7:5e:9c:cd:
                    08:25:d5:7c:13:f1:ff:10:ab:95:aa:c6:84:62:05:
                    bd:5d:14:46:8a:ab:ff:9b:56:9b:7a:2a:49:f3:7b:
                    cb:b4:29:0f:65:f7:1a:69:ae:9f:a0:6c:58:09:5e:
                    23:55:0e:a4:7a:e5:fa:54:a9:6e:1f:2d:98:36:5c:
                    75:92:8d:b6:e2:5b:62:8e:06:3f:ef:4d:35:85:5d:
                    b8:76:a8:fa:32:80:4a:48:73:3c:5a:36:f3:56:ff:
                    13:04:ff:bb:a7:27:a6:50:d6:49:eb:9d:77:e5:6e:
                    f9:22:65:b6:d2:9f:ea:80:68:af:4f:8c:bc:f6:4e:
                    c1:58:d1:c0:3f:91:fb:36:c0:ec:ff:b4:a7:b7:37:
                    54:8c:26:7d:08:be:9d:5f:88:00:0e:fd:1e:e0:88:
                    e9:ef:f6:90:a6:67:c9:cd:5f:22:39:c3:62:a3:96:
                    b2:d0:06:59:c0:57:c7:a7:f1:12:d7:24:80:3a:92:
                    76:e5:f6:39:82:db:71:f3:1b:30:ae:a9:d0:35:05:
                    bb:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:40:CE:F3:26:A9:33:CD:BD:46:4A:0A:69:77:A3:E0:5A:8B:C6:8B
            X509v3 Authority Key Identifier:
                keyid:2D:00:15:4E:60:0A:64:0A:C3:2A:32:85:D9:CE:9F:C5:0A:94:1A:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F365BC44/892D49C6F61811ECBE1B38AFF1222468/LQAVTmAKZArDKjKF2c6fxQqUGrM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/LQAVTmAKZArDKjKF2c6fxQqUGrM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F365BC44/892D49C6F61811ECBE1B38AFF1222468/LQAVTmAKZArDKjKF2c6fxQqUGrM.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:54:dd:92:75:b1:c3:95:08:0d:52:49:cd:3c:15:d2:fb:d2:
         56:81:0b:f4:8a:ad:17:dd:90:68:d8:6e:12:2e:c9:99:39:66:
         06:b2:3c:44:41:df:a8:82:9e:d9:79:48:8d:aa:9c:fb:da:83:
         2c:a4:8e:68:9a:35:38:26:7b:ec:5c:02:10:f2:fd:14:59:bb:
         5d:00:25:d8:b6:73:1c:3c:28:5b:96:6b:3f:9e:e0:bd:84:54:
         e5:88:6f:9e:7d:36:84:aa:fb:32:6d:aa:5f:b3:e4:d8:cd:ce:
         4a:04:c0:b5:48:1b:2e:eb:a0:7d:17:5d:cc:03:23:c1:07:5f:
         59:93:da:60:1c:a4:3f:74:56:83:46:19:0d:16:76:78:f4:bd:
         0d:07:50:11:73:e6:e7:7f:2e:b7:9d:41:f8:0c:7f:d1:94:dd:
         f9:2a:01:15:b8:80:88:25:8b:d0:76:5b:6e:92:c0:d1:c1:50:
         21:40:07:bf:b5:49:82:b3:27:d8:76:6d:3c:1b:1e:9e:52:db:
         53:c4:56:5d:6d:4f:05:28:c8:6c:9d:d6:88:c4:31:c3:af:4d:
         fb:10:14:53:b4:05:c5:29:8e:35:4a:c4:71:3a:f9:cd:04:b1:
         79:0d:42:c5:93:e1:97:6e:4e:56:3c:63:4f:bb:d8:be:38:75:
         64:63:ba:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 1 14:25:57 2026 by rpki-client