This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367B8D1/4273E04E21F011EEA3A2BC0F4AD9E6FC/xNAUrWh1DnXpEEzqXCmztxlY_do.mft
File:                     xNAUrWh1DnXpEEzqXCmztxlY_do.mft (raw, json)
Hash identifier:          VN4UxZ74Kv0gfUS5X5KCQL3TywTcpe0PAI0qVH0DdQ0=
Subject key identifier:   67:C5:1D:1F:66:5D:3F:22:AD:1E:1D:93:C3:BC:00:2E:3B:E7:0E:E7
Authority key identifier: C4:D0:14:AD:68:75:0E:75:E9:10:4C:EA:5C:29:B3:B7:19:58:FD:DA
Certificate issuer:       /CN=F367B8D1AR/serialNumber=C4D014AD68750E75E9104CEA5C29B3B71958FDDA
Certificate serial:       03C5
Authority info access:    rsync://rpki.afrinic.net/repository/arin/xNAUrWh1DnXpEEzqXCmztxlY_do.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F367B8D1/4273E04E21F011EEA3A2BC0F4AD9E6FC/xNAUrWh1DnXpEEzqXCmztxlY_do.mft
Manifest number:          03C2
Signing time:             Tue 27 Jan 2026 03:37:54 +0000
Manifest this update:     Tue 27 Jan 2026 03:37:53 +0000
Manifest next update:     Thu 29 Jan 2026 03:37:53 +0000
Files and hashes:         1: xNAUrWh1DnXpEEzqXCmztxlY_do.crl (hash: kZnTPLCiGvhHDsf1gY/HNyY4Tyarny0sUPX4puBcSSQ=)
                          2: 5DD33868F1A411F089B9E6DEDAE4EC9C.roa (hash: Rczn2z0Ecrdjwnh0bP0fcW/hWWKZrz4Aa+uBL6Wpovg=)
                          3: E35311B4F1A611F0B15EABEEDAE4EC9C.roa (hash: Jaa09JYLnjxVJDAu5gmEmB6jXzFVTW1h/BD6XSBqvK8=)
                          4: E1ED4904F19F11F0A30696C4DAE4EC9C.roa (hash: Rj+rpBtfQtb00WfH24VPb9zRX8B5uJNQSZxb5/pZaSw=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F367B8D1/4273E04E21F011EEA3A2BC0F4AD9E6FC/xNAUrWh1DnXpEEzqXCmztxlY_do.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F367B8D1/4273E04E21F011EEA3A2BC0F4AD9E6FC/xNAUrWh1DnXpEEzqXCmztxlY_do.mft
                          rsync://rpki.afrinic.net/repository/arin/xNAUrWh1DnXpEEzqXCmztxlY_do.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 29 Jan 2026 00:26:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 965 (0x3c5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F367B8D1AR, serialNumber=C4D014AD68750E75E9104CEA5C29B3B71958FDDA
        Validity
            Not Before: Jan 27 03:37:53 2026 GMT
            Not After : Jan 29 03:37:53 2026 GMT
        Subject: CN=69783312-72c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:3e:5b:2e:cf:33:b4:e9:be:9e:00:09:bd:62:
                    d3:7a:3b:88:5d:64:0a:c7:68:07:fa:ee:7d:2b:b1:
                    8b:25:06:a4:dc:fc:c3:c0:39:5c:44:64:8d:5c:a7:
                    15:e4:43:b4:32:38:6f:65:f6:c3:40:5e:1c:cb:f9:
                    85:00:7a:bc:10:0c:fa:29:a8:75:11:44:c3:f5:df:
                    8d:f5:b7:a9:10:7b:0a:66:7e:50:c6:14:10:bf:87:
                    53:a0:d2:ae:d0:c8:ca:2c:46:06:52:2a:df:c3:7d:
                    50:8a:11:30:27:03:fd:8e:05:ed:f3:21:28:cc:d7:
                    ee:d9:0b:04:b6:6f:7a:21:d9:f9:a4:d7:9a:76:ad:
                    5d:2c:1d:7c:1a:f9:55:5b:4d:10:6c:b5:4f:cd:b9:
                    cb:d1:98:34:45:e1:4e:bc:ec:ac:61:c2:3b:b6:66:
                    a6:f1:cc:45:7d:bd:64:19:1d:7d:c7:7e:3e:79:f5:
                    c0:cd:b4:d7:23:1c:f0:db:92:21:23:b7:09:f2:08:
                    8b:93:2c:92:b8:77:d3:99:93:3b:26:08:f0:c1:6c:
                    b4:a5:3a:ea:99:4a:67:5a:b7:69:19:77:a6:57:1b:
                    a5:0d:b8:14:0e:9a:b7:f9:7e:d0:a1:15:e4:17:01:
                    06:33:98:10:13:db:ee:bc:03:44:aa:e6:f0:30:ff:
                    2e:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:C5:1D:1F:66:5D:3F:22:AD:1E:1D:93:C3:BC:00:2E:3B:E7:0E:E7
            X509v3 Authority Key Identifier:
                keyid:C4:D0:14:AD:68:75:0E:75:E9:10:4C:EA:5C:29:B3:B7:19:58:FD:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F367B8D1/4273E04E21F011EEA3A2BC0F4AD9E6FC/xNAUrWh1DnXpEEzqXCmztxlY_do.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/xNAUrWh1DnXpEEzqXCmztxlY_do.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367B8D1/4273E04E21F011EEA3A2BC0F4AD9E6FC/xNAUrWh1DnXpEEzqXCmztxlY_do.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:ca:c2:4d:c7:04:d0:fe:bf:47:fa:cd:5d:53:d3:7e:e5:17:
         c6:69:4f:fd:67:83:15:3f:0a:d8:24:6d:c8:77:48:95:4e:af:
         f6:a3:95:0b:98:f8:2d:a5:9f:12:eb:b0:1f:a3:a3:1a:36:c3:
         16:e7:2d:28:ac:37:3a:b3:6c:24:49:a4:d9:17:c8:02:4e:23:
         a3:cd:b9:79:73:e6:98:80:ea:93:1c:85:f4:ba:99:30:77:b1:
         d8:1a:28:30:99:c2:41:47:04:3b:1e:bc:f8:e6:1b:95:d6:2f:
         5a:9d:02:f6:4b:13:c5:94:5a:db:1a:97:17:07:c4:76:3b:48:
         fc:ba:03:82:80:fe:3c:3a:8c:db:78:12:61:c6:8c:3b:b3:af:
         c5:c4:b7:9b:07:65:bd:56:b2:07:1d:e6:1a:56:5f:d7:72:79:
         90:76:2f:75:ec:8d:25:6e:c0:bd:df:dc:20:87:94:39:32:26:
         38:b7:73:d4:c5:ca:90:22:e5:dd:b2:09:27:e6:3e:43:49:e2:
         41:cd:30:66:3c:e2:50:58:af:52:69:98:98:75:1d:ae:4d:08:
         52:5c:1a:21:07:14:5f:8c:f7:e8:d7:84:57:6f:c9:12:3b:eb:
         7a:c7:ae:42:02:6b:c5:ef:cd:e0:9a:e6:b1:6e:f7:60:56:07:
         0e:e8:2c:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 27 06:09:06 2026 by rpki-client