This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367B3D1/C4C3AEB0C11F11EFA0B58AA4762E951A/8H0xNKDMPAQpA5gVfKBVkucrz6s.mft
File:                     8H0xNKDMPAQpA5gVfKBVkucrz6s.mft (raw, json)
Hash identifier:          564CGj8ZrfHU89gLKX7aFRqj3/TDRP6hzj/IVsk97rY=
Subject key identifier:   05:9E:C2:A0:84:AD:BC:6E:D3:B4:D6:2B:08:21:21:E7:0C:D4:B4:33
Authority key identifier: F0:7D:31:34:A0:CC:3C:04:29:03:98:15:7C:A0:55:92:E7:2B:CF:AB
Certificate issuer:       /CN=F367B3D1AF/serialNumber=F07D3134A0CC3C04290398157CA05592E72BCFAB
Certificate serial:       018E
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/8H0xNKDMPAQpA5gVfKBVkucrz6s.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F367B3D1/C4C3AEB0C11F11EFA0B58AA4762E951A/8H0xNKDMPAQpA5gVfKBVkucrz6s.mft
Manifest number:          018C
Signing time:             Sun 11 Jan 2026 04:47:38 +0000
Manifest this update:     Sun 11 Jan 2026 04:47:37 +0000
Manifest next update:     Tue 13 Jan 2026 04:47:37 +0000
Files and hashes:         1: 8H0xNKDMPAQpA5gVfKBVkucrz6s.crl (hash: D63pTTYtiA5bVN2A35nlFP3jbWajfNSGnxCKo0gBGdY=)
                          2: 1561360CC12111EFA3DCFAAD762E951A.roa (hash: m44/mD69fqilQr5qakXjjSIMYxNycWbNcH5wLm+55Bk=)
                          3: EBC72644C12011EFA34E2AAC762E951A.roa (hash: FBA7XhhYZKd8zAiwrkhqOdWNSKf23ZrcRwoec3JtQJI=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F367B3D1/C4C3AEB0C11F11EFA0B58AA4762E951A/8H0xNKDMPAQpA5gVfKBVkucrz6s.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F367B3D1/C4C3AEB0C11F11EFA0B58AA4762E951A/8H0xNKDMPAQpA5gVfKBVkucrz6s.mft
                          rsync://rpki.afrinic.net/repository/afrinic/8H0xNKDMPAQpA5gVfKBVkucrz6s.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 13 Jan 2026 00:06:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 398 (0x18e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F367B3D1AF, serialNumber=F07D3134A0CC3C04290398157CA05592E72BCFAB
        Validity
            Not Before: Jan 11 04:47:37 2026 GMT
            Not After : Jan 13 04:47:37 2026 GMT
        Subject: CN=69632b6a-94bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:0a:e9:37:cc:90:09:f3:ca:5e:7a:08:bb:85:
                    0c:94:29:b2:ce:a3:2b:87:a4:6c:29:31:f0:18:c3:
                    9e:42:a4:6a:67:84:3d:e0:f9:fa:44:f5:e0:07:ce:
                    59:9e:74:7a:e5:db:f4:44:54:59:57:9f:11:b2:4e:
                    85:e3:c4:20:b4:21:13:78:a3:23:10:f0:66:95:7c:
                    7b:21:99:08:4c:a3:f4:15:9d:14:c0:16:b8:e7:63:
                    6d:b8:4f:ce:c7:f3:8f:e6:95:10:3c:41:ff:f5:6c:
                    10:95:a5:97:99:3c:a1:b7:67:a2:cd:c9:69:37:2b:
                    b3:53:a8:50:62:fb:9b:c4:3a:53:75:c4:44:eb:14:
                    a9:5f:bb:cb:13:31:64:55:3c:1d:30:72:93:54:86:
                    fe:b2:44:c2:62:80:7a:a8:cd:51:d2:13:01:2b:af:
                    84:86:c6:ac:8e:62:6f:ef:8a:52:8d:ff:4b:5d:7f:
                    30:01:b7:d1:82:d0:23:d6:4a:52:12:a9:91:17:b3:
                    82:14:83:03:80:52:b9:ec:8e:a1:83:33:4e:3c:d7:
                    bd:c5:37:8e:65:00:f1:25:bb:cf:36:97:e8:31:c1:
                    62:31:f8:3d:64:24:71:83:7a:13:0f:a4:0f:13:29:
                    92:d5:42:87:e8:56:2d:d9:63:e0:c4:42:7c:3b:9e:
                    2b:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:9E:C2:A0:84:AD:BC:6E:D3:B4:D6:2B:08:21:21:E7:0C:D4:B4:33
            X509v3 Authority Key Identifier:
                keyid:F0:7D:31:34:A0:CC:3C:04:29:03:98:15:7C:A0:55:92:E7:2B:CF:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F367B3D1/C4C3AEB0C11F11EFA0B58AA4762E951A/8H0xNKDMPAQpA5gVfKBVkucrz6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/8H0xNKDMPAQpA5gVfKBVkucrz6s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367B3D1/C4C3AEB0C11F11EFA0B58AA4762E951A/8H0xNKDMPAQpA5gVfKBVkucrz6s.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:d3:9f:e2:cc:7c:56:6a:db:06:c7:31:1d:ad:fe:1b:24:ed:
         89:83:46:cb:9c:0b:b6:94:27:ad:89:3b:83:06:44:bd:f4:53:
         5c:88:b0:96:ba:e8:9d:62:56:28:9e:de:86:d9:84:f7:f5:b2:
         2d:0e:97:f2:5d:b6:98:21:d9:49:36:32:00:d1:19:99:ed:4a:
         01:5f:c1:41:e9:79:89:3d:4e:70:03:e5:8a:75:08:d9:27:f4:
         dc:83:32:e1:fe:0a:2d:23:7f:c4:a5:21:6f:46:8d:28:96:a9:
         3b:3d:ee:25:e9:4b:52:31:a6:ae:67:2d:8a:98:98:9e:66:28:
         f0:d6:a2:1c:cb:af:80:36:ee:d1:2d:b8:a7:8c:1b:c5:95:b9:
         3b:74:1f:f9:53:34:77:3a:d8:15:e7:47:7b:dd:d7:0d:22:14:
         f3:6b:02:4c:31:90:0b:bf:fa:fc:04:6e:85:4f:09:5c:83:63:
         40:01:b6:e5:87:31:7b:d1:f2:44:63:41:e3:6b:ab:da:0e:4f:
         76:f2:ab:55:92:d1:c7:41:49:db:f4:d4:be:7d:1a:a5:5a:eb:
         ff:cc:18:4e:b5:d9:36:e9:9b:6b:c3:a3:6c:43:23:89:c2:46:
         0b:16:5d:e1:eb:b9:df:79:5e:f7:f8:0d:15:4d:89:d2:96:88:
         72:8f:66:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 11 23:47:56 2026 by rpki-client