This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3681ED0/5251C078CE2411EDA092D0ACF1222468/SoPzGxsGBMptC3KkU9qj61h7TII.mft
File:                     SoPzGxsGBMptC3KkU9qj61h7TII.mft (raw, json)
Hash identifier:          uS4XTId/A3PYzlQjAgth0ztyD7KKq1zxQTMlBq49cWM=
Subject key identifier:   64:7C:1E:20:05:85:EF:73:90:AB:5F:7F:6E:C6:E2:C6:C9:03:B4:A1
Authority key identifier: 4A:83:F3:1B:1B:06:04:CA:6D:0B:72:A4:53:DA:A3:EB:58:7B:4C:82
Certificate issuer:       /CN=F3681ED0AF/serialNumber=4A83F31B1B0604CA6D0B72A453DAA3EB587B4C82
Certificate serial:       0443
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/SoPzGxsGBMptC3KkU9qj61h7TII.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3681ED0/5251C078CE2411EDA092D0ACF1222468/SoPzGxsGBMptC3KkU9qj61h7TII.mft
Manifest number:          0434
Signing time:             Mon 19 Jan 2026 03:24:11 +0000
Manifest this update:     Mon 19 Jan 2026 03:24:10 +0000
Manifest next update:     Wed 21 Jan 2026 03:24:10 +0000
Files and hashes:         1: SoPzGxsGBMptC3KkU9qj61h7TII.crl (hash: HUkW0fY4L08UVoTRcYVC6xWkhE0mW+JJtytFVr83a9U=)
                          2: C644833AEE7111EE86F7F361775412E6.roa (hash: YgdlYAvq9L3YlpIV33voCNPfR5sCeCWFkjxpZfRsE/k=)
                          3: 7B89F0F65C1011F097764BA7DAE4EC9C.roa (hash: eGy/v5dJ9Sg7LBFixJArYusJNOZkmFriL3Cy5EJmVsc=)
                          4: BFD118C27C3E11F0A02173AEDAE4EC9C.roa (hash: E8rOx5Kz5JNVd/9IEaiBcjxCcyJDlnKMUqqptEDdwRw=)
                          5: 42CC1EC00B7611EEA5D28A444AD9E6FC.roa (hash: hsH3WbP2I/ts2EY2aQeTrcaXJgp89zEB64yilwHc5pg=)
                          6: 1E00E01A052911EE84BBD2454AD9E6FC.roa (hash: sJsPXhS2u3JarGDtOh1UZa0tPJmz8vwB7/YeLKri/dk=)
                          7: F8481206047B11EE91F2EF354AD9E6FC.roa (hash: jtUAjy0+9QV2iQ02jzkoPCkRiaIb/F60j3I68U9pgH4=)
                          8: F65930865B2911F0A6F411CCDAE4EC9C.roa (hash: zlBIS1j6PkXW4nIJqeYYZE1QxvGn2R6vJr3qJUI1Apc=)
                          9: C210ED2E064611F094E66494762E951A.roa (hash: Gw9d4UydYI1TKn6YtgmxyrXffZXD7vcLeB5cryG7IG4=)
                          10: F4E7AB82052811EE94115E454AD9E6FC.roa (hash: 0f6Udr5nVgdqIgPgxaXYb0TifWritIk3wQmsNXYsjss=)
                          11: 1587E6CCEE7111EEAAFBB25C775412E6.roa (hash: zasoVhr4ZDA3BPJ+ug5ooyH3/rY2lwS6n6p8BUEgx2w=)
                          12: 4F0B564AF51511EEB208C151775412E6.roa (hash: XNyDHYdBwPvc7NbnPS7pTjwqkoohEdJw312l57VSDB8=)
                          13: 4A7830A0D18B11EFAB9E6B88762E951A.roa (hash: xV745XWxYsFhNII926E/fN4gSuSPSdyN3viLNfdZy9M=)
                          14: 31CFB30C052C11EEAC0EDC4E4AD9E6FC.roa (hash: 707c2EgzG32Mlw18CbzTHauUb9G8+7v2J+8ka2UNIbA=)
                          15: 506B37B0FD0A11EEA3B5DB34017001B1.roa (hash: 12EkqcvUqaX3EcpZliJ64g6Wrfs7WAZ3LR6j5D262RI=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3681ED0/5251C078CE2411EDA092D0ACF1222468/SoPzGxsGBMptC3KkU9qj61h7TII.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3681ED0/5251C078CE2411EDA092D0ACF1222468/SoPzGxsGBMptC3KkU9qj61h7TII.mft
                          rsync://rpki.afrinic.net/repository/afrinic/SoPzGxsGBMptC3KkU9qj61h7TII.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 21 Jan 2026 03:24:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1091 (0x443)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3681ED0AF, serialNumber=4A83F31B1B0604CA6D0B72A453DAA3EB587B4C82
        Validity
            Not Before: Jan 19 03:24:10 2026 GMT
            Not After : Jan 21 03:24:10 2026 GMT
        Subject: CN=696da3da-bcf1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:66:e7:23:e4:90:9b:f0:18:68:a2:41:27:57:
                    25:20:bd:a8:3c:91:db:88:4c:0f:d2:3a:df:10:2a:
                    db:ab:35:d3:52:c4:9e:e2:d8:b5:47:96:e1:6a:ad:
                    e4:e2:12:34:9b:1a:cb:00:45:7e:71:b8:df:97:5d:
                    c7:53:51:32:4d:58:12:45:95:97:6a:29:46:fe:18:
                    33:08:6f:7c:a9:13:4b:46:70:a9:2b:20:7f:28:07:
                    cf:21:20:3d:ba:21:da:de:9d:ce:55:a0:bc:8f:1c:
                    a2:5d:b5:08:60:af:a2:03:f2:d4:02:c4:bc:b4:fa:
                    6f:2d:15:6d:6f:36:cc:30:4f:a7:80:b9:5d:e4:e8:
                    f5:b2:13:3e:52:31:7d:5b:e3:71:fc:37:ff:bd:22:
                    fe:d6:6c:7f:cc:ee:84:74:88:62:31:7d:82:e6:b9:
                    20:23:8d:a9:27:99:4b:0a:a2:19:25:ee:62:bd:e3:
                    4e:f7:38:ef:4d:de:cc:99:48:9d:ed:c0:8c:0f:7b:
                    d1:f3:22:29:ab:95:2a:05:98:4b:ca:09:db:1e:fc:
                    7e:d9:33:18:9a:81:61:3e:99:79:6d:fb:3d:09:8a:
                    5f:3f:ff:34:c6:bd:20:0a:76:2a:41:87:3d:42:03:
                    fd:80:6e:23:9a:10:d8:ff:42:ea:30:ef:e5:77:8e:
                    6b:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:7C:1E:20:05:85:EF:73:90:AB:5F:7F:6E:C6:E2:C6:C9:03:B4:A1
            X509v3 Authority Key Identifier:
                keyid:4A:83:F3:1B:1B:06:04:CA:6D:0B:72:A4:53:DA:A3:EB:58:7B:4C:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3681ED0/5251C078CE2411EDA092D0ACF1222468/SoPzGxsGBMptC3KkU9qj61h7TII.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SoPzGxsGBMptC3KkU9qj61h7TII.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3681ED0/5251C078CE2411EDA092D0ACF1222468/SoPzGxsGBMptC3KkU9qj61h7TII.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:2e:37:80:fd:b5:b2:ff:06:c6:49:4a:f0:ff:4f:2e:ae:7e:
         89:d3:88:56:b2:df:7d:84:a9:9b:ee:72:7f:c0:3e:43:51:e3:
         37:2f:06:9a:de:8b:ab:55:94:f5:fa:05:f8:8e:2e:9d:8c:2e:
         b4:5b:83:1c:df:48:73:e7:22:4a:bd:10:8d:80:dc:66:62:de:
         1d:e7:dd:c7:a6:36:67:ae:27:e2:d0:2a:70:9f:8b:9b:10:ac:
         15:6d:05:11:dd:40:95:b1:f5:9a:0d:d5:da:52:3b:dc:75:18:
         0e:2f:a3:a6:78:66:d9:03:91:fb:43:e8:2c:4f:fa:68:42:7f:
         39:e1:02:7b:25:d3:e0:0f:f6:d2:df:07:77:c6:d6:74:5a:25:
         d9:ee:eb:0d:9e:d0:5f:4d:36:c6:8d:52:5a:4c:84:da:66:f8:
         65:a5:86:df:f6:a6:2e:64:b3:51:60:76:c3:b3:20:bb:94:f8:
         57:5a:a5:47:21:2a:e5:62:b1:a1:1b:17:f4:61:90:1c:8f:d8:
         8d:34:3f:9a:54:be:3a:60:92:dd:52:6c:65:19:07:05:0a:2e:
         b6:74:c0:11:46:6a:53:54:a3:81:1d:ca:7a:8d:3f:43:05:5e:
         e9:96:e2:07:b4:49:b4:02:cc:d2:9e:be:11:82:e7:e6:5b:38:
         b3:31:e2:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 20 04:34:36 2026 by rpki-client