This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3629B7B/D1FD7020E35511ECB0A0F090F1222468/QfCSTGDWjh-8ANKZ8hiUzkyhtck.mft
File:                     QfCSTGDWjh-8ANKZ8hiUzkyhtck.mft (raw, json)
Hash identifier:          VjR+gFNUxG+NSPCIj7mnw/iZI31yj3ZtBc5ysJGupwM=
Subject key identifier:   B9:97:8C:06:74:BB:C2:81:02:E3:B2:E1:7F:40:B6:92:7C:B1:7F:23
Authority key identifier: 41:F0:92:4C:60:D6:8E:1F:BC:00:D2:99:F2:18:94:CE:4C:A1:B5:C9
Certificate issuer:       /CN=F3629B7BAF/serialNumber=41F0924C60D68E1FBC00D299F21894CE4CA1B5C9
Certificate serial:       0569
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/QfCSTGDWjh-8ANKZ8hiUzkyhtck.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3629B7B/D1FD7020E35511ECB0A0F090F1222468/QfCSTGDWjh-8ANKZ8hiUzkyhtck.mft
Manifest number:          0568
Signing time:             Fri 06 Feb 2026 02:50:08 +0000
Manifest this update:     Fri 06 Feb 2026 02:50:07 +0000
Manifest next update:     Sun 08 Feb 2026 02:50:07 +0000
Files and hashes:         1: QfCSTGDWjh-8ANKZ8hiUzkyhtck.crl (hash: jeGLdzYHQIshb2AyVs+WfcA5DBmFBKKVDksb0BX3PlM=)
                          2: 8923FE84E70411ECB97A00C7F1222468.roa (hash: ef6Udp4f7yAWn4yjb6CIRvJunMzfPBNgWsJ+Z6PTHZE=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3629B7B/D1FD7020E35511ECB0A0F090F1222468/QfCSTGDWjh-8ANKZ8hiUzkyhtck.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3629B7B/D1FD7020E35511ECB0A0F090F1222468/QfCSTGDWjh-8ANKZ8hiUzkyhtck.mft
                          rsync://rpki.afrinic.net/repository/afrinic/QfCSTGDWjh-8ANKZ8hiUzkyhtck.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 08 Feb 2026 02:50:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1385 (0x569)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3629B7BAF, serialNumber=41F0924C60D68E1FBC00D299F21894CE4CA1B5C9
        Validity
            Not Before: Feb  6 02:50:07 2026 GMT
            Not After : Feb  8 02:50:07 2026 GMT
        Subject: CN=698556df-64a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:66:c8:e0:36:78:19:48:06:f3:a5:08:0d:5c:
                    4b:87:13:32:a2:b9:f8:80:26:0d:44:e2:59:31:b1:
                    c7:01:19:6d:fe:4a:60:6b:c2:53:13:f4:27:d6:2f:
                    e3:26:6d:18:3b:05:d6:23:4b:c5:c7:f0:12:eb:64:
                    6a:24:08:b2:5f:5f:91:ac:16:d0:d4:7d:a4:7e:ba:
                    55:cf:f5:a3:5f:69:2c:5b:8f:f5:ab:e7:1d:e6:cd:
                    46:62:c7:88:31:14:5f:dc:95:83:ff:be:66:05:44:
                    b8:0d:4b:27:6e:cc:f7:58:79:21:bc:94:3f:95:a6:
                    cf:2b:35:bd:14:4b:81:f5:9a:7d:90:32:8a:0a:6f:
                    93:c2:dd:ce:87:d1:e4:a7:2d:da:0f:cf:68:4d:65:
                    b7:7a:19:81:98:59:37:42:93:db:4d:a6:e5:0c:b1:
                    67:79:6c:26:a1:03:08:a0:7b:53:d6:e4:7b:0d:c1:
                    04:f2:8d:87:35:bc:58:72:5c:a6:62:02:0a:e2:76:
                    7d:67:2d:98:a5:52:c4:a9:28:7a:66:2a:0c:da:52:
                    b8:db:8f:27:64:cd:50:a2:61:02:c7:33:73:3e:46:
                    dc:5e:e7:79:2d:00:b6:5c:9e:79:78:0f:a5:99:76:
                    e3:3e:f9:05:0f:a1:7d:68:19:20:b2:64:8b:2b:2f:
                    a5:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:97:8C:06:74:BB:C2:81:02:E3:B2:E1:7F:40:B6:92:7C:B1:7F:23
            X509v3 Authority Key Identifier:
                keyid:41:F0:92:4C:60:D6:8E:1F:BC:00:D2:99:F2:18:94:CE:4C:A1:B5:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3629B7B/D1FD7020E35511ECB0A0F090F1222468/QfCSTGDWjh-8ANKZ8hiUzkyhtck.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/QfCSTGDWjh-8ANKZ8hiUzkyhtck.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3629B7B/D1FD7020E35511ECB0A0F090F1222468/QfCSTGDWjh-8ANKZ8hiUzkyhtck.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c8:42:2e:bc:c5:b0:bc:53:1a:96:da:8f:31:da:d8:e8:70:fb:
         64:f2:7b:cb:5e:a9:91:22:54:cc:1d:8d:da:ea:67:14:ff:05:
         b0:22:8a:e7:36:53:aa:a6:21:4f:5a:3e:27:d5:95:76:c2:25:
         fe:7b:ea:3c:29:79:ec:22:fd:0b:dc:aa:eb:63:3c:3d:eb:fa:
         d4:85:0f:ca:d1:c6:28:50:e1:c8:20:aa:ba:c9:e6:ed:a8:d8:
         75:c1:df:d0:c2:12:29:80:fc:c6:ed:78:53:02:77:de:8f:ac:
         57:36:7a:61:9d:cc:66:2c:54:c7:ad:e6:56:e1:c2:9f:8c:7f:
         de:50:63:53:10:38:73:d6:aa:54:8f:96:1b:ca:e1:8d:71:87:
         78:74:22:9e:1c:93:e0:c5:d0:02:dd:0c:3e:37:a0:53:80:93:
         53:24:4d:b8:8f:75:3c:be:63:14:b7:c2:aa:c9:76:81:6c:fa:
         d2:a8:34:9e:6f:49:80:58:7e:8a:f5:ef:5b:31:14:fb:32:a9:
         a4:f0:aa:4d:6f:40:6a:eb:3b:55:fe:8f:8e:3e:f9:29:d0:a5:
         49:6a:dd:50:f8:60:b1:54:d8:c5:53:d3:cc:04:06:47:ba:c2:
         c1:3b:fd:af:0b:3f:c6:0c:4d:59:c1:01:06:11:7f:c0:5f:af:
         7b:fa:5a:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 7 00:02:22 2026 by rpki-client