This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3662123/0F3617B29D2811ED8302EC8AF1222468/Hn0bbhJkcIQEOHneXdkHkKatUAs.mft
File:                     Hn0bbhJkcIQEOHneXdkHkKatUAs.mft (raw, json)
Hash identifier:          mCbLEsZnSSXWCsXdSJcgihyXnXPRMz2XB/SlqxlDS54=
Subject key identifier:   22:76:46:2C:B2:DF:59:4E:D6:2B:B3:80:EC:55:2F:46:ED:50:7C:A0
Authority key identifier: 1E:7D:1B:6E:12:64:70:84:04:38:79:DE:5D:D9:07:90:A6:AD:50:0B
Certificate issuer:       /CN=F3662123AF/serialNumber=1E7D1B6E12647084043879DE5DD90790A6AD500B
Certificate serial:       0460
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/Hn0bbhJkcIQEOHneXdkHkKatUAs.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3662123/0F3617B29D2811ED8302EC8AF1222468/Hn0bbhJkcIQEOHneXdkHkKatUAs.mft
Manifest number:          045E
Signing time:             Sun 11 Jan 2026 03:15:43 +0000
Manifest this update:     Sun 11 Jan 2026 03:15:42 +0000
Manifest next update:     Tue 13 Jan 2026 03:15:42 +0000
Files and hashes:         1: Hn0bbhJkcIQEOHneXdkHkKatUAs.crl (hash: /EKfUy2aGnfdFjdnzth1i2RL6hglYfU3seFW1Q9Azb0=)
                          2: 27EE2B4290B311F09FE99A99DAE4EC9C.roa (hash: 08bdIyeGAvENvyYR9kdIYMQj8xo49Was4u9/sqMLubc=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3662123/0F3617B29D2811ED8302EC8AF1222468/Hn0bbhJkcIQEOHneXdkHkKatUAs.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3662123/0F3617B29D2811ED8302EC8AF1222468/Hn0bbhJkcIQEOHneXdkHkKatUAs.mft
                          rsync://rpki.afrinic.net/repository/afrinic/Hn0bbhJkcIQEOHneXdkHkKatUAs.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 13 Jan 2026 00:06:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1120 (0x460)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3662123AF, serialNumber=1E7D1B6E12647084043879DE5DD90790A6AD500B
        Validity
            Not Before: Jan 11 03:15:42 2026 GMT
            Not After : Jan 13 03:15:42 2026 GMT
        Subject: CN=696315df-b54b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:48:9a:ad:1a:7a:86:8f:9d:72:3f:69:33:58:
                    9f:d1:37:86:7c:30:23:c6:15:83:9f:49:48:91:fd:
                    2b:87:43:0d:25:ea:83:bb:46:4b:c8:63:4b:e9:b5:
                    05:65:3f:4e:f8:f6:c3:74:5d:b0:ed:f5:d5:51:65:
                    de:11:6a:0a:73:a6:82:dd:e1:b5:a0:7d:a1:39:92:
                    00:60:5c:96:e4:23:f9:82:11:e9:33:72:83:f1:6a:
                    c4:d7:2f:51:ba:81:a6:98:04:a9:65:19:20:4a:16:
                    6a:59:7d:15:dc:44:d5:da:79:0e:9a:b8:2f:90:86:
                    5e:22:a7:8d:30:10:eb:8d:69:b9:bf:d5:98:bc:71:
                    61:be:b4:c8:75:36:14:ef:e7:8f:c1:ef:1c:15:d9:
                    ea:9c:ef:57:4d:36:9f:16:1c:a3:ed:ce:cf:b5:41:
                    51:11:ea:2c:4c:8a:79:a3:c6:a5:90:04:1e:1d:bf:
                    c1:d7:41:26:f3:3a:0c:03:61:2e:15:5f:3a:ff:06:
                    09:3e:5e:78:9e:59:bb:43:dd:79:6e:f2:43:a7:c2:
                    9f:6c:d1:5c:2a:21:96:57:9a:d7:2d:bd:cc:2b:d4:
                    2b:85:da:86:52:aa:f8:3d:97:33:59:df:db:f3:18:
                    78:4a:4b:4a:ea:e1:9f:ee:1c:08:9b:95:c1:68:aa:
                    d4:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:76:46:2C:B2:DF:59:4E:D6:2B:B3:80:EC:55:2F:46:ED:50:7C:A0
            X509v3 Authority Key Identifier:
                keyid:1E:7D:1B:6E:12:64:70:84:04:38:79:DE:5D:D9:07:90:A6:AD:50:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3662123/0F3617B29D2811ED8302EC8AF1222468/Hn0bbhJkcIQEOHneXdkHkKatUAs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Hn0bbhJkcIQEOHneXdkHkKatUAs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3662123/0F3617B29D2811ED8302EC8AF1222468/Hn0bbhJkcIQEOHneXdkHkKatUAs.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:db:76:67:0a:be:dc:d5:06:16:54:cb:57:ba:18:33:67:c9:
         71:e7:f4:c8:0b:37:af:62:1f:5a:b9:0e:56:26:c3:4c:b4:a6:
         89:d9:e6:e8:0d:fb:98:97:db:e2:95:ea:f3:41:24:30:08:08:
         af:e1:37:dd:9b:b2:36:6b:d2:2d:14:1e:b6:5d:57:f4:e6:ef:
         32:a1:60:46:0a:d3:72:aa:ab:d3:a1:b5:00:4a:89:e6:59:c8:
         19:69:68:4b:a8:60:ba:d6:0b:9f:0e:ee:af:ab:5c:14:44:09:
         e0:09:db:67:1f:df:29:70:71:78:23:1c:98:25:ce:61:b0:e3:
         60:97:87:76:33:22:48:04:60:cf:2a:95:09:8d:cc:98:60:55:
         8d:c9:c5:14:32:e1:3a:d1:65:52:52:4d:0a:7f:c6:30:ca:65:
         91:a8:3b:4d:ef:85:e3:9b:da:6a:c4:9b:90:ae:13:5d:e6:4d:
         e1:29:e1:fd:cc:ef:cb:72:e1:57:3a:72:1c:4c:2d:b5:36:6e:
         a5:d3:34:d3:24:f9:38:ac:8c:2d:d2:9b:7f:62:b4:ce:e8:b7:
         81:dd:84:a1:e8:5a:d0:60:b8:c5:3f:04:de:b7:d7:3e:96:22:
         02:bd:ec:86:56:63:19:ff:61:47:09:b1:fd:8e:64:b8:77:b9:
         4a:05:f1:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 01:47:27 2026 by rpki-client