This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3656177/8F51AB8E83BF11E681ABEC37F8AEA228/ARf_NlB776Kb324d58jVMKSepOM.mft
File:                     ARf_NlB776Kb324d58jVMKSepOM.mft (raw, json)
Hash identifier:          N52Qn+njU/0G8l7shXpwF4K2aUkiMYKc2Pa9WpWDLhA=
Subject key identifier:   BF:23:3B:F9:26:4A:F3:37:84:16:63:A3:6C:37:21:4B:D4:C0:79:BB
Authority key identifier: 01:17:FF:36:50:7B:EF:A2:9B:DF:6E:1D:E7:C8:D5:30:A4:9E:A4:E3
Certificate issuer:       /CN=F3656177AF/serialNumber=0117FF36507BEFA29BDF6E1DE7C8D530A49EA4E3
Certificate serial:       0DAD
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/ARf_NlB776Kb324d58jVMKSepOM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3656177/8F51AB8E83BF11E681ABEC37F8AEA228/ARf_NlB776Kb324d58jVMKSepOM.mft
Manifest number:          0DAB
Signing time:             Fri 06 Feb 2026 01:05:55 +0000
Manifest this update:     Fri 06 Feb 2026 01:05:54 +0000
Manifest next update:     Sun 08 Feb 2026 01:05:54 +0000
Files and hashes:         1: ARf_NlB776Kb324d58jVMKSepOM.crl (hash: m/jHO5M9DSDLayNglQq/PMIOCKFn9bG7HRoNbKUoSms=)
                          2: B638C7E6C8C711E997C29757F8AEA228.roa (hash: EisbOpC1Y+D87WQCpz01JdeRv1C7VPmD55bEQs7AK5Y=)
                          3: 7DB93F0EC8C711E9BC304257F8AEA228.roa (hash: UV0937nnVyRu+QQ+Af7r5v4ImK92QTguDEzt+VyalNw=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3656177/8F51AB8E83BF11E681ABEC37F8AEA228/ARf_NlB776Kb324d58jVMKSepOM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3656177/8F51AB8E83BF11E681ABEC37F8AEA228/ARf_NlB776Kb324d58jVMKSepOM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/ARf_NlB776Kb324d58jVMKSepOM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 08 Feb 2026 01:05:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3501 (0xdad)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3656177AF, serialNumber=0117FF36507BEFA29BDF6E1DE7C8D530A49EA4E3
        Validity
            Not Before: Feb  6 01:05:54 2026 GMT
            Not After : Feb  8 01:05:54 2026 GMT
        Subject: CN=69853e73-e515
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:8b:b8:c4:c2:3d:cf:8a:a3:15:94:fb:ac:e8:
                    01:49:86:fc:aa:c8:75:a2:fc:8a:9b:5f:c1:95:46:
                    e5:e7:57:c4:a8:10:fd:09:ef:ad:3c:b0:d2:e1:1a:
                    b1:31:9e:67:93:6f:19:96:6c:ae:c9:fe:05:a1:5a:
                    fa:00:11:00:a2:fa:3f:63:73:2b:5d:0b:9f:0b:b1:
                    55:b0:dd:f3:88:29:14:48:93:f3:a0:ca:f7:cb:4f:
                    05:98:af:ca:c9:19:13:00:04:92:54:68:b2:86:1d:
                    09:de:fa:19:2f:ae:1e:29:5d:30:fa:fe:9b:b0:1c:
                    f2:5a:a0:3d:4f:49:52:7c:84:2e:4e:41:7f:68:5c:
                    21:6f:a3:f9:52:a8:61:42:91:df:ab:69:a8:fa:27:
                    83:f9:f6:22:a6:7c:05:45:c1:db:e5:40:22:2c:ea:
                    2d:5f:2e:9f:3e:64:75:f9:e6:cd:3d:99:b3:3c:01:
                    c0:e4:f9:0b:43:73:1e:15:6f:44:f6:69:e1:e5:61:
                    ec:5f:62:33:47:09:5e:b7:b1:79:7e:f6:72:da:d3:
                    17:9d:b6:32:17:54:de:b2:73:f7:40:c5:06:bf:a0:
                    48:da:72:b1:34:89:9d:88:6a:52:03:0f:f5:02:c6:
                    67:48:b9:5e:97:d1:59:6b:21:4d:3b:c6:b2:d5:11:
                    85:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:23:3B:F9:26:4A:F3:37:84:16:63:A3:6C:37:21:4B:D4:C0:79:BB
            X509v3 Authority Key Identifier:
                keyid:01:17:FF:36:50:7B:EF:A2:9B:DF:6E:1D:E7:C8:D5:30:A4:9E:A4:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3656177/8F51AB8E83BF11E681ABEC37F8AEA228/ARf_NlB776Kb324d58jVMKSepOM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/ARf_NlB776Kb324d58jVMKSepOM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3656177/8F51AB8E83BF11E681ABEC37F8AEA228/ARf_NlB776Kb324d58jVMKSepOM.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:07:06:93:0c:57:5b:8a:12:df:ff:0b:2f:d6:29:f3:5c:48:
         8c:c8:e1:21:1e:a7:56:57:fd:c0:8b:82:04:62:0d:9c:bb:60:
         79:05:ae:62:ac:71:fe:d0:41:f4:01:31:65:1a:82:a3:c1:5c:
         18:1d:0b:4e:d0:f2:52:eb:60:9a:02:59:10:6f:9b:93:6c:fd:
         95:6e:2c:ec:24:2d:bd:20:54:bc:fb:4a:7b:44:76:f4:df:29:
         30:94:eb:26:db:08:63:ff:41:7b:a8:65:2d:70:38:9b:e5:a6:
         ff:75:46:af:0f:25:0d:cc:83:e6:b7:1d:20:37:36:ff:ad:2b:
         26:0b:de:92:71:be:0a:6c:50:a3:8d:88:5c:d4:b6:e4:0f:39:
         79:5d:b7:ed:32:c5:36:9f:b1:1a:e6:7b:a8:0a:43:3f:14:4a:
         4d:bc:e4:dd:b1:99:07:79:62:b7:12:8f:23:27:50:1d:1f:27:
         4d:41:5c:9e:46:29:a4:e3:51:d8:f9:1a:2b:48:16:4b:ef:0c:
         47:fb:7f:19:85:bf:64:74:d6:84:8b:1b:85:18:a0:ab:a6:c1:
         3d:bf:8c:8e:a9:89:fd:ed:99:87:35:4b:24:97:0f:60:f4:9d:
         57:13:1d:47:05:d3:14:56:6b:1b:69:1f:ab:21:76:06:6a:18:
         09:02:c1:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 6 23:58:36 2026 by rpki-client