This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F365ED10/FE00E0E4303E11EEB24C1D294AD9E6FC/6XI6ezBIKdQIO_OAEXpGvAZam1Q.mft
File:                     6XI6ezBIKdQIO_OAEXpGvAZam1Q.mft (raw, json)
Hash identifier:          yuznjC0RHuIus+tyvSvKI3oUK+4uSTASbVY7iH36sHE=
Subject key identifier:   C8:4B:B4:8C:88:AC:B8:8E:8E:7B:A0:D4:8B:9D:E7:62:1E:21:90:B3
Authority key identifier: E9:72:3A:7B:30:48:29:D4:08:3B:F3:80:11:7A:46:BC:06:5A:9B:54
Certificate issuer:       /CN=F365ED10AF/serialNumber=E9723A7B304829D4083BF380117A46BC065A9B54
Certificate serial:       0398
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/6XI6ezBIKdQIO_OAEXpGvAZam1Q.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F365ED10/FE00E0E4303E11EEB24C1D294AD9E6FC/6XI6ezBIKdQIO_OAEXpGvAZam1Q.mft
Manifest number:          0397
Signing time:             Sun 11 Jan 2026 03:40:18 +0000
Manifest this update:     Sun 11 Jan 2026 03:40:18 +0000
Manifest next update:     Tue 13 Jan 2026 03:40:18 +0000
Files and hashes:         1: 6XI6ezBIKdQIO_OAEXpGvAZam1Q.crl (hash: IJkKiTo+i44p4am6KK+kJTC0rAfdw/GA0Y/F+T/8znE=)
                          2: 18124C5428A811EFA0B943477DDC24C2.roa (hash: s7MJGFTxKCFeh5P3tTDfMzIcyIjDgLtZdDB92Tt1Ehs=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F365ED10/FE00E0E4303E11EEB24C1D294AD9E6FC/6XI6ezBIKdQIO_OAEXpGvAZam1Q.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F365ED10/FE00E0E4303E11EEB24C1D294AD9E6FC/6XI6ezBIKdQIO_OAEXpGvAZam1Q.mft
                          rsync://rpki.afrinic.net/repository/afrinic/6XI6ezBIKdQIO_OAEXpGvAZam1Q.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 13 Jan 2026 00:06:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 920 (0x398)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F365ED10AF, serialNumber=E9723A7B304829D4083BF380117A46BC065A9B54
        Validity
            Not Before: Jan 11 03:40:18 2026 GMT
            Not After : Jan 13 03:40:18 2026 GMT
        Subject: CN=69631ba2-4c73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:c7:c6:f6:00:21:12:f3:f4:fb:6e:96:5a:9f:
                    71:45:c2:26:33:e9:ac:9c:6a:84:fb:e6:2f:cb:45:
                    c9:35:ec:d5:40:bf:9a:d6:60:ab:fd:cd:d8:12:33:
                    0c:9c:52:0f:a7:fe:57:37:8d:b0:cb:e7:c1:50:aa:
                    8e:91:5a:f8:d8:61:df:be:62:34:99:90:c5:26:52:
                    28:1d:53:7e:87:82:f6:d9:2d:65:37:c0:42:2e:20:
                    eb:16:5b:36:0b:00:24:d6:ff:d6:79:97:15:c6:42:
                    b7:08:d2:b4:18:8c:27:49:4f:43:bf:6d:95:fb:bd:
                    8d:57:96:b5:d7:69:eb:ba:eb:a7:55:15:c1:02:86:
                    31:9d:3d:46:d4:43:fb:4a:04:61:5c:aa:a8:ca:57:
                    b0:71:70:ef:15:d5:50:34:48:c3:2c:80:53:24:76:
                    30:82:33:0e:4c:a5:43:7a:6c:24:13:15:a7:a4:38:
                    22:2a:83:58:50:b5:d8:07:a3:f9:3f:f2:8b:7e:6e:
                    0b:7b:63:34:93:c2:1b:eb:21:a2:89:03:a5:4a:b5:
                    51:dd:fe:34:ce:2e:8e:5a:79:e2:4a:56:3e:f1:8a:
                    d2:c9:10:ca:4a:85:52:88:ce:fe:46:71:0f:bd:06:
                    91:2d:15:2c:32:90:14:97:94:3a:25:08:0f:ee:59:
                    5c:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:4B:B4:8C:88:AC:B8:8E:8E:7B:A0:D4:8B:9D:E7:62:1E:21:90:B3
            X509v3 Authority Key Identifier:
                keyid:E9:72:3A:7B:30:48:29:D4:08:3B:F3:80:11:7A:46:BC:06:5A:9B:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F365ED10/FE00E0E4303E11EEB24C1D294AD9E6FC/6XI6ezBIKdQIO_OAEXpGvAZam1Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/6XI6ezBIKdQIO_OAEXpGvAZam1Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F365ED10/FE00E0E4303E11EEB24C1D294AD9E6FC/6XI6ezBIKdQIO_OAEXpGvAZam1Q.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:af:a3:9f:b5:9e:d1:91:42:21:02:b3:ac:aa:02:41:c1:fc:
         d8:89:67:47:5f:2d:3a:21:a2:b3:08:f9:d1:a5:b7:7e:bc:f1:
         8a:16:11:93:9a:ac:a5:21:57:f2:37:54:33:f4:ca:5a:d9:17:
         e5:fb:2a:e4:7e:ce:3d:1a:de:56:30:6e:0c:fe:ad:8a:a1:eb:
         87:98:f2:17:7b:23:32:8e:f2:49:3c:68:66:33:ec:1c:72:f6:
         f2:13:6a:c2:04:bf:d2:ff:ef:61:ff:36:65:9b:25:6b:27:0b:
         ce:7c:a6:f2:ed:3b:8f:14:bf:4d:9c:5f:35:10:98:6c:88:a7:
         1b:f3:02:48:a0:94:4d:01:00:9a:22:d6:6b:8e:f7:94:88:d8:
         f0:0f:5f:e5:21:0b:c2:af:84:2e:be:90:23:7d:b0:af:01:05:
         28:44:ac:85:13:ef:08:48:cb:2a:71:45:cc:ff:8e:22:ac:de:
         7b:02:c8:ae:ee:5f:08:f4:70:a9:42:d6:b9:c6:ef:58:54:59:
         fa:3a:bc:63:5b:0c:0b:97:4b:a7:e9:c1:e6:40:4b:a9:05:bc:
         eb:a6:78:f9:df:94:1d:6e:07:6d:d2:30:7c:dd:5d:ec:cd:66:
         7c:6b:3c:51:e0:45:90:88:c1:a2:3f:74:a2:fe:a1:bb:29:c6:
         a2:94:0a:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 11 15:10:15 2026 by rpki-client