This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3687682/DB80ADB8009211EF9BC14D0D017001B1/7heW4OxZE9jIj7q68fgKRZzuOTk.mft
File:                     7heW4OxZE9jIj7q68fgKRZzuOTk.mft (raw, json)
Hash identifier:          CTaHilntxbC8tM4+myCHHAOaT88dBWttwohtPzq3VaE=
Subject key identifier:   F9:94:00:32:1E:B4:30:53:01:50:69:C6:C7:B9:5E:F4:A3:E6:02:A5
Authority key identifier: EE:17:96:E0:EC:59:13:D8:C8:8F:BA:BA:F1:F8:0A:45:9C:EE:39:39
Certificate issuer:       /CN=F3687682AF/serialNumber=EE1796E0EC5913D8C88FBABAF1F80A459CEE3939
Certificate serial:       0286
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/7heW4OxZE9jIj7q68fgKRZzuOTk.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3687682/DB80ADB8009211EF9BC14D0D017001B1/7heW4OxZE9jIj7q68fgKRZzuOTk.mft
Manifest number:          0286
Signing time:             Mon 12 Jan 2026 04:15:30 +0000
Manifest this update:     Mon 12 Jan 2026 04:15:29 +0000
Manifest next update:     Wed 14 Jan 2026 04:15:29 +0000
Files and hashes:         1: 7heW4OxZE9jIj7q68fgKRZzuOTk.crl (hash: eUT33mYr5DCTsgUpy50MrKzZ1bmasNE0RJZbBTWc4V8=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3687682/DB80ADB8009211EF9BC14D0D017001B1/7heW4OxZE9jIj7q68fgKRZzuOTk.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3687682/DB80ADB8009211EF9BC14D0D017001B1/7heW4OxZE9jIj7q68fgKRZzuOTk.mft
                          rsync://rpki.afrinic.net/repository/afrinic/7heW4OxZE9jIj7q68fgKRZzuOTk.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 14 Jan 2026 04:15:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 646 (0x286)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3687682AF, serialNumber=EE1796E0EC5913D8C88FBABAF1F80A459CEE3939
        Validity
            Not Before: Jan 12 04:15:29 2026 GMT
            Not After : Jan 14 04:15:29 2026 GMT
        Subject: CN=69647561-6687
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:19:cc:d2:ba:ac:d9:f9:15:cf:70:f4:28:68:
                    43:12:11:04:cc:d1:68:3d:a8:d4:7f:0f:9a:3f:27:
                    ec:58:0f:62:54:74:17:e9:e4:b7:db:29:01:6a:47:
                    dc:db:2b:65:64:69:d9:bf:d9:6d:90:e9:8e:8b:af:
                    b0:70:86:5f:37:48:1d:48:f3:e7:ce:3f:23:0c:f1:
                    0a:8e:0b:3e:c8:a2:11:f2:8e:cb:f0:97:df:d1:e0:
                    99:4b:ad:e0:e1:62:a0:66:b3:31:75:91:82:ca:8b:
                    6b:f9:81:48:e9:b4:b3:7a:47:58:8c:9d:f9:34:5f:
                    8a:ec:ba:2a:4b:6c:2f:2e:a7:19:b9:53:df:09:72:
                    2b:e0:f3:49:24:42:59:29:dd:e1:83:b6:d2:51:4c:
                    7f:b2:53:ee:93:42:81:cc:8d:5c:9f:68:2f:ff:69:
                    31:46:9a:3e:0c:67:d9:d5:63:96:2a:94:66:0d:d0:
                    6d:00:79:da:7f:e3:30:70:96:b3:70:63:ab:c6:11:
                    e3:06:66:9e:41:e8:e3:4b:f1:b9:3a:6e:7b:fe:52:
                    0c:df:3e:ac:ed:45:bf:c0:1c:4f:e7:a6:3d:ee:8f:
                    9f:89:b7:97:6e:b5:98:b0:37:55:3a:e3:27:b5:7b:
                    e6:b4:4f:68:70:94:25:39:6b:12:8d:18:7d:fd:1b:
                    79:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:94:00:32:1E:B4:30:53:01:50:69:C6:C7:B9:5E:F4:A3:E6:02:A5
            X509v3 Authority Key Identifier:
                keyid:EE:17:96:E0:EC:59:13:D8:C8:8F:BA:BA:F1:F8:0A:45:9C:EE:39:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3687682/DB80ADB8009211EF9BC14D0D017001B1/7heW4OxZE9jIj7q68fgKRZzuOTk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/7heW4OxZE9jIj7q68fgKRZzuOTk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3687682/DB80ADB8009211EF9BC14D0D017001B1/7heW4OxZE9jIj7q68fgKRZzuOTk.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:d8:73:fa:91:e7:57:91:1b:60:f7:1d:ad:94:b0:e3:43:82:
         a5:47:24:02:ba:89:c8:f3:9b:a3:cf:02:40:67:ab:32:30:69:
         2a:36:01:78:2c:74:ab:59:b9:5d:96:f1:f3:17:62:c2:a4:61:
         74:2a:f7:d9:87:7d:50:f2:d4:ef:84:57:d5:a2:3d:6d:5f:81:
         5e:ac:09:c8:4b:99:af:21:4c:0b:0b:15:18:c1:92:9d:e2:04:
         cf:b0:86:7b:6b:63:df:8a:16:a9:23:f7:94:d1:2a:af:13:ee:
         3f:d9:bb:9e:fa:c8:53:19:6a:42:08:d2:17:57:0e:31:1d:45:
         14:21:a1:0d:5a:d8:95:e1:96:93:f8:03:0f:2a:1f:fe:ef:be:
         18:51:8e:9d:1e:e4:7a:cd:83:b1:5f:31:43:be:8d:9b:20:0a:
         d0:e5:3b:0b:91:bd:99:cb:aa:8a:fa:ed:7f:25:93:7a:96:2f:
         4a:c3:08:86:d7:bf:86:f1:c6:93:b3:7c:34:76:3b:c6:4f:46:
         95:e8:84:d2:be:13:ad:81:cc:d9:a8:aa:ec:63:61:ea:fc:09:
         56:bf:7a:d6:65:f7:51:b1:83:05:53:41:29:90:5f:8c:93:59:
         a5:ab:0e:26:60:03:d3:7b:28:67:90:f2:89:91:31:79:85:ac:
         0e:24:da:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 22:15:39 2026 by rpki-client