This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3697F9B/C6DEF4DCE24611EA8D16EF50F8AEA228/a-k9QjdfWHWi-MrSgJiFQWLSUEg.mft
File:                     a-k9QjdfWHWi-MrSgJiFQWLSUEg.mft (raw, json)
Hash identifier:          5EIKLzu/f7rNWQ7U6UTdhG+3f2qmGQcYMc01CcHohSU=
Subject key identifier:   A2:89:BC:D5:A6:8C:B3:83:0B:AB:48:6C:78:E2:EF:D6:B2:91:28:60
Authority key identifier: 6B:E9:3D:42:37:5F:58:75:A2:F8:CA:D2:80:98:85:41:62:D2:50:48
Certificate issuer:       /CN=F3697F9BAF/serialNumber=6BE93D42375F5875A2F8CAD28098854162D25048
Certificate serial:       07F6
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/a-k9QjdfWHWi-MrSgJiFQWLSUEg.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3697F9B/C6DEF4DCE24611EA8D16EF50F8AEA228/a-k9QjdfWHWi-MrSgJiFQWLSUEg.mft
Manifest number:          07F0
Signing time:             Sun 18 Jan 2026 01:54:59 +0000
Manifest this update:     Sun 18 Jan 2026 01:54:58 +0000
Manifest next update:     Tue 20 Jan 2026 01:54:58 +0000
Files and hashes:         1: a-k9QjdfWHWi-MrSgJiFQWLSUEg.crl (hash: 7LfK3lEfivSxe4/4W2mE7abw65rrgNa3zl1daZc8sxk=)
                          2: E24D05EEE25311EA92AD155EF8AEA228.roa (hash: NhNBSTEDSsS8nv1gPk35pYlSA/j54gCUeglNVOfp5Jk=)
                          3: 8B23E96CE25411EAABDED95EF8AEA228.roa (hash: G1N7VCX3quzWOxjZ6v2ZRD1s53UOL4I3nt3IbyrQuyg=)
                          4: 10D082ECE25411EAB7E7505EF8AEA228.roa (hash: HCeS+ur8bLRwVYC7j4CEZcmf2zW7Wq0HlwhQZaJebjk=)
                          5: 8DA134B6E25311EA83A9A55DF8AEA228.roa (hash: FZLhMJ//MfWJptrE3zcXjMsUeDRso3qHvO1+H5qU2Z0=)
                          6: B193AAD8E25411EAACEFFA5EF8AEA228.roa (hash: 6msQDGgz9SoLw2neOnUxuPHAYOAC1PdRzeLr4+FvrcI=)
                          7: 57CB6630E25411EA8C85A55EF8AEA228.roa (hash: zokPSNjx8r4IpsyxRDDLa5MvDTlpaKfogK8lEwUhKrg=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3697F9B/C6DEF4DCE24611EA8D16EF50F8AEA228/a-k9QjdfWHWi-MrSgJiFQWLSUEg.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3697F9B/C6DEF4DCE24611EA8D16EF50F8AEA228/a-k9QjdfWHWi-MrSgJiFQWLSUEg.mft
                          rsync://rpki.afrinic.net/repository/afrinic/a-k9QjdfWHWi-MrSgJiFQWLSUEg.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 20 Jan 2026 01:54:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2038 (0x7f6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3697F9BAF, serialNumber=6BE93D42375F5875A2F8CAD28098854162D25048
        Validity
            Not Before: Jan 18 01:54:58 2026 GMT
            Not After : Jan 20 01:54:58 2026 GMT
        Subject: CN=696c3d73-6537
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:f8:69:a8:7b:65:cd:31:73:3d:b7:49:9f:28:
                    5d:4c:e6:78:05:57:5c:1d:ea:e2:11:12:ce:8e:ac:
                    19:85:53:59:ca:f7:b0:96:90:4c:19:7b:42:64:94:
                    16:96:68:20:e3:0b:3e:76:5e:04:0a:91:b0:90:cd:
                    4a:71:af:c3:69:b5:25:73:23:5d:a0:dc:e5:cb:f5:
                    32:eb:7c:a8:bf:b8:22:55:e3:73:77:20:a2:ae:66:
                    05:46:df:98:aa:d9:d7:5e:e4:02:cc:75:92:7d:be:
                    85:24:57:93:c0:33:df:90:5e:22:06:2b:71:6b:93:
                    9f:af:35:34:44:7f:ed:c4:a1:05:1f:29:99:00:42:
                    da:d5:94:e3:f5:b7:7e:c6:7f:c6:15:8f:f0:53:91:
                    fd:ab:a0:f4:74:05:06:37:5a:57:ca:63:3c:8a:ad:
                    21:dc:3f:b0:65:dd:ac:aa:52:99:6e:04:3e:af:c4:
                    00:25:a7:a7:8b:8e:ca:9d:fa:f4:00:f5:ac:43:c5:
                    b8:85:5e:d3:ca:3c:f6:92:e0:f8:09:93:19:c7:c4:
                    33:00:a3:ac:8f:7a:22:6d:47:d6:99:be:67:af:6d:
                    74:d1:c3:8e:01:ea:4b:d5:4a:b5:de:f8:f0:9a:4c:
                    ea:65:fe:65:bf:17:1e:3c:eb:4d:9c:e8:c7:b1:2b:
                    61:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:89:BC:D5:A6:8C:B3:83:0B:AB:48:6C:78:E2:EF:D6:B2:91:28:60
            X509v3 Authority Key Identifier:
                keyid:6B:E9:3D:42:37:5F:58:75:A2:F8:CA:D2:80:98:85:41:62:D2:50:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3697F9B/C6DEF4DCE24611EA8D16EF50F8AEA228/a-k9QjdfWHWi-MrSgJiFQWLSUEg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/a-k9QjdfWHWi-MrSgJiFQWLSUEg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3697F9B/C6DEF4DCE24611EA8D16EF50F8AEA228/a-k9QjdfWHWi-MrSgJiFQWLSUEg.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:0d:b8:b7:90:95:43:8c:e8:69:d0:f7:40:48:bc:9a:f0:bd:
         c6:c5:60:02:d6:7d:76:8b:fd:2f:ce:d3:c4:9a:07:c5:df:14:
         80:02:81:c6:c3:6f:0e:4c:8c:f7:57:ab:7f:11:68:d2:fd:a8:
         2a:a9:e9:50:e2:a1:93:4d:7d:a5:5e:83:ae:45:e8:8d:b2:68:
         32:be:9f:96:5e:68:be:6c:a4:cb:b0:80:cb:c1:e3:2c:b2:bc:
         40:d5:7e:c4:06:68:cb:2c:5b:91:d2:af:26:16:b2:92:b6:70:
         88:c9:c7:34:eb:df:f8:1b:bb:ce:d3:eb:95:28:9a:85:74:c0:
         c9:f9:cc:cc:f2:c0:85:8d:37:29:1a:b9:14:b9:b4:0f:69:89:
         4d:ff:55:4f:9c:2d:1a:2f:e4:5d:9e:70:15:4e:5a:dc:06:c3:
         c6:b4:8a:47:07:81:c9:f2:6e:f8:8d:5c:66:8f:13:9e:59:f3:
         ea:34:b8:65:3c:bb:18:c5:6f:b1:d8:ea:c3:2f:9a:29:a2:27:
         be:ac:b2:e6:2e:34:5f:de:5d:ba:11:47:96:08:5d:3c:a4:a8:
         f3:5a:36:18:6c:c4:ab:5a:1f:a5:4f:e9:f5:dc:ab:dc:70:bc:
         75:db:3a:b0:71:7b:9f:90:71:c1:58:93:6e:70:6a:fd:c8:a3:
         dc:48:ab:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 18 16:44:07 2026 by rpki-client