This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F364789C/72EFAF4C910111EABD3F2473F8AEA228/0ffADvPrBuiBfP3B25YGBAfknA0.mft
File:                     0ffADvPrBuiBfP3B25YGBAfknA0.mft (raw, json)
Hash identifier:          3w5ipmj50lUArdSRtF/LcPxq45boai22U5nqLqTu5/U=
Subject key identifier:   B0:A9:58:06:56:27:37:23:66:87:46:BC:13:AC:C9:14:9A:60:0A:96
Authority key identifier: D1:F7:C0:0E:F3:EB:06:E8:81:7C:FD:C1:DB:96:06:04:07:E4:9C:0D
Certificate issuer:       /CN=F364789CAF/serialNumber=D1F7C00EF3EB06E8817CFDC1DB96060407E49C0D
Certificate serial:       088C
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/0ffADvPrBuiBfP3B25YGBAfknA0.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F364789C/72EFAF4C910111EABD3F2473F8AEA228/0ffADvPrBuiBfP3B25YGBAfknA0.mft
Manifest number:          087A
Signing time:             Wed 28 Jan 2026 01:47:54 +0000
Manifest this update:     Wed 28 Jan 2026 01:47:53 +0000
Manifest next update:     Fri 30 Jan 2026 01:47:53 +0000
Files and hashes:         1: 0ffADvPrBuiBfP3B25YGBAfknA0.crl (hash: apS/6XizBdmVzQWvXzF/Kx1isnNUVq8/lOQYKzOruk8=)
                          2: 54D73B32D5AA11EE804D6FA3775412E6.roa (hash: oub8O6ESl+q+fLwREHJore+8A+bbiWh69N6JO+Ek91U=)
                          3: AE414C1EFDCA11EFB623BE90762E951A.roa (hash: Y5HeKaAGek99xysljagPwhZ+CgojdV1z+NsdhuzC9jQ=)
                          4: B77376ACD5AA11EEB33131A4775412E6.roa (hash: zxfvPEymIGP+/7cg1EGEyQR/t5Gie6/ZfCLSy+jKY0I=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F364789C/72EFAF4C910111EABD3F2473F8AEA228/0ffADvPrBuiBfP3B25YGBAfknA0.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F364789C/72EFAF4C910111EABD3F2473F8AEA228/0ffADvPrBuiBfP3B25YGBAfknA0.mft
                          rsync://rpki.afrinic.net/repository/afrinic/0ffADvPrBuiBfP3B25YGBAfknA0.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 30 Jan 2026 01:47:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2188 (0x88c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F364789CAF, serialNumber=D1F7C00EF3EB06E8817CFDC1DB96060407E49C0D
        Validity
            Not Before: Jan 28 01:47:53 2026 GMT
            Not After : Jan 30 01:47:53 2026 GMT
        Subject: CN=69796aca-0055
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:d0:83:3d:e3:f1:76:4e:18:95:6f:11:d6:92:
                    3e:08:80:bd:16:d8:a1:11:88:7b:52:cf:aa:35:20:
                    1a:7b:a9:bc:c9:8c:0e:15:07:bc:28:31:62:e8:ca:
                    0d:12:c0:88:5c:5f:cb:d2:2a:01:a2:3a:48:aa:57:
                    56:ef:5c:a5:36:9c:df:c6:d4:c2:d4:e2:51:48:16:
                    25:0f:94:99:60:1e:2e:2c:c9:d2:ea:3d:e3:53:19:
                    31:6c:3c:c4:46:7d:7a:bb:37:6d:c7:b8:89:05:4f:
                    ff:86:d9:72:5f:ff:39:bf:61:b0:dd:da:6d:b7:db:
                    51:53:6a:19:a5:3b:26:23:c0:1e:e5:31:63:46:51:
                    e8:45:0e:69:f0:f2:61:b4:25:67:3b:64:2a:8b:b6:
                    3f:ba:93:78:0a:55:94:15:f7:47:fd:8e:f7:0b:ae:
                    d9:f5:25:d7:67:71:5e:ab:0e:6e:20:81:81:c9:82:
                    96:56:73:07:8e:e1:f1:79:ba:7e:c1:21:2f:c2:63:
                    d5:93:b7:8a:87:17:f3:65:f5:0f:8f:c0:c4:1a:ab:
                    af:70:75:c1:92:3f:6e:0c:60:2b:65:34:bb:d0:c5:
                    9c:e2:37:07:ee:50:0b:8b:4e:f0:1b:fe:be:9e:dd:
                    1e:d6:3d:73:f4:27:96:a0:4c:20:e8:fa:f4:c4:11:
                    b1:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:A9:58:06:56:27:37:23:66:87:46:BC:13:AC:C9:14:9A:60:0A:96
            X509v3 Authority Key Identifier:
                keyid:D1:F7:C0:0E:F3:EB:06:E8:81:7C:FD:C1:DB:96:06:04:07:E4:9C:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F364789C/72EFAF4C910111EABD3F2473F8AEA228/0ffADvPrBuiBfP3B25YGBAfknA0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/0ffADvPrBuiBfP3B25YGBAfknA0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F364789C/72EFAF4C910111EABD3F2473F8AEA228/0ffADvPrBuiBfP3B25YGBAfknA0.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:c5:06:39:2e:31:ae:2c:93:db:db:be:9c:2b:10:a2:cf:b3:
         05:b8:c5:83:08:fb:79:9e:e4:fe:86:c4:eb:b0:c8:0e:14:ad:
         34:8d:9c:c9:0b:b3:00:a7:0b:06:c0:e0:fd:27:cb:73:ad:b1:
         cc:8d:5a:37:a7:08:dc:c0:9d:cf:18:74:62:a5:3b:40:3e:89:
         e6:62:90:65:59:84:88:fe:7a:e9:95:21:4c:85:30:72:52:39:
         37:27:a5:1c:57:ee:96:aa:dd:23:06:f8:ee:a6:e8:d9:8f:f9:
         67:cf:60:fe:9c:62:90:b6:bb:d7:72:64:7b:d1:cd:5e:07:ea:
         e3:63:d9:47:50:87:2c:d2:b1:88:19:b8:83:f7:92:bd:d1:c2:
         a9:56:8f:05:8e:9e:2f:84:75:f6:9c:ad:c6:9d:85:52:ca:17:
         85:10:4a:51:9b:6a:41:de:91:fe:ec:82:91:d8:c0:47:9e:b9:
         45:b1:22:da:50:dd:7a:e3:8d:dd:c0:34:19:68:60:2d:f4:ec:
         d3:59:b0:53:b6:d6:8c:0e:ff:eb:39:f5:e8:16:ee:8e:61:03:
         bb:81:65:ed:cb:0b:2f:2e:fd:dd:0f:cc:85:af:a2:fb:36:65:
         bf:27:71:b6:c2:5d:dc:7a:aa:2f:8a:ef:d8:a5:bf:05:19:90:
         d3:34:a0:16
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICCIwwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NDc4OUNBRjExMC8GA1UEBRMoRDFGN0MwMEVGM0VCMDZFODgxN0NGREMxREI5NjA2
MDQwN0U0OUMwRDAeFw0yNjAxMjgwMTQ3NTNaFw0yNjAxMzAwMTQ3NTNaMBgxFjAU
BgNVBAMTDTY5Nzk2YWNhLTAwNTUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCw0IM94/F2ThiVbxHWkj4IgL0W2KERiHtSz6o1IBp7qbzJjA4VB7woMWLo
yg0SwIhcX8vSKgGiOkiqV1bvXKU2nN/G1MLU4lFIFiUPlJlgHi4sydLqPeNTGTFs
PMRGfXq7N23HuIkFT/+G2XJf/zm/YbDd2m2321FTahmlOyYjwB7lMWNGUehFDmnw
8mG0JWc7ZCqLtj+6k3gKVZQV90f9jvcLrtn1JddncV6rDm4ggYHJgpZWcweO4fF5
un7BIS/CY9WTt4qHF/Nl9Q+PwMQaq69wdcGSP24MYCtlNLvQxZziNwfuUAuLTvAb
/r6e3R7WPXP0J5agTCDo+vTEEbH5AgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUsKlY
BlYnNyNmh0a8E6zJFJpgCpYwHwYDVR0jBBgwFoAU0ffADvPrBuiBfP3B25YGBAfk
nA0wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjQ3ODlDLzcyRUZBRjRDOTEwMTExRUFCRDNGMjQ3M0Y4QUVBMjI4LzBmZkFE
dlByQnVpQmZQM0IyNVlHQkFma25BMC5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljLzBmZkFEdlByQnVpQmZQM0IyNVlHQkFma25BMC5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2NDc4OUMvNzJFRkFGNEM5MTAxMTFFQUJEM0YyNDczRjhB
RUEyMjgvMGZmQUR2UHJCdWlCZlAzQjI1WUdCQWZrbkEwLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCgxQY5LjGuLJPb276cKxCiz7MFuMWD
CPt5nuT+hsTrsMgOFK00jZzJC7MApwsGwOD9J8tzrbHMjVo3pwjcwJ3PGHRipTtA
PonmYpBlWYSI/nrplSFMhTByUjk3J6UcV+6Wqt0jBvjupujZj/lnz2D+nGKQtrvX
cmR70c1eB+rjY9lHUIcs0rGIGbiD95K90cKpVo8Fjp4vhHX2nK3GnYVSyheFEEpR
m2pB3pH+7IKR2MBHnrlFsSLaUN16443dwDQZaGAt9OzTWbBTttaMDv/rOfXoFu6O
YQO7gWXtywsvLv3dD8yFr6L7NmW/J3G2wl3ceqoviu/Ypb8FGZDTNKAW
-----END CERTIFICATE-----
Generated at Wed Jan 28 12:09:36 2026 by rpki-client