This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369AFDD/3DB42DDAC1F211EBBA2FF03EF8AEA228/58aANgAk7bnzRR3JE-ozBZvJBKU.mft
File:                     58aANgAk7bnzRR3JE-ozBZvJBKU.mft (raw, json)
Hash identifier:          hM5r3JsQVtu6exJ0DwM0P4NVXZaRXtx2NlZWyVpc+BM=
Subject key identifier:   FB:47:7B:87:E8:B8:67:4D:67:FA:D1:69:01:28:29:58:E1:10:9A:7C
Authority key identifier: E7:C6:80:36:00:24:ED:B9:F3:45:1D:C9:13:EA:33:05:9B:C9:04:A5
Certificate issuer:       /CN=F369AFDDAF/serialNumber=E7C680360024EDB9F3451DC913EA33059BC904A5
Certificate serial:       0784
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/58aANgAk7bnzRR3JE-ozBZvJBKU.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F369AFDD/3DB42DDAC1F211EBBA2FF03EF8AEA228/58aANgAk7bnzRR3JE-ozBZvJBKU.mft
Manifest number:          073D
Signing time:             Mon 19 Jan 2026 02:11:22 +0000
Manifest this update:     Mon 19 Jan 2026 02:11:21 +0000
Manifest next update:     Wed 21 Jan 2026 02:11:21 +0000
Files and hashes:         1: 58aANgAk7bnzRR3JE-ozBZvJBKU.crl (hash: whZ4iYCb73HNTtf0taWJbOEb/dNAfNJExWuDvZYKBjU=)
                          2: 3D18FE387E8411ECB7B3866E5A40D577.roa (hash: hGrgcoiOB9LV7KES3CloBAD5cKPmYUDU2adSf4C80mc=)
                          3: 0EDCF03484E611EC9592FDAA5A40D577.roa (hash: NyeUQScQPnnngzJoTvr1sW7+YY9vIZFVos7bizwbPGM=)
                          4: A0D24DF67E8611ECBE0EA4755A40D577.roa (hash: MafVgzxyumYkACUDU162eLPKpdlrPAKDQMJCmIH26AA=)
                          5: 0F563E8424D211EE8E5C42444AD9E6FC.roa (hash: hrncCFNeFvYR3vquRxFE7njVcF7Y/kBd3xhz0r8m7OU=)
                          6: BE33BD827E8411EC957E08705A40D577.roa (hash: JUAehBmPRF+WNAGnPNSUQgNU5GqeNj9QZubk/JBwIJA=)
                          7: 3A984160EF7811EFBAE0E8A5762E951A.roa (hash: wHn4dF6I7Dyf+VZOr2mxt31ut8HGDMrGuegRJRtPs3Q=)
                          8: E5F4FB6E7E8511EC9A3058735A40D577.roa (hash: rjghF/QrXaAivTQFRZNQbkboFWCnPzVHbaNrP4ux10c=)
                          9: 815164B47E8411EC9AC14C6F5A40D577.roa (hash: lzrEzC54fkEwG1VgX/zXOiGIVwd8U+22U6iBwSLlzUo=)
                          10: DD91CC887EB011ECA94A696F5A40D577.roa (hash: 5onVcD6rU+U5kC2oY8/5fS1zI4a1bB9OMFKRQ49T6s0=)
                          11: 27ED3A66A8C811F096ACA499DAE4EC9C.roa (hash: h0ckU0WQrebL8KFtpPRQ+TGU8pGoqUY3RglYBsN7FBw=)
                          12: 00CC3D1C077F11ED89D4E8F2F1222468.roa (hash: Ghq8RdR4suhFXBx4OUYvhd9Ebd2glLwbENeMBdryUJ0=)
                          13: 02D884907E8511ECAB58C6705A40D577.roa (hash: SNdeKruEw+F1muT3aoOijqqzBEOfZy5fqMGm9iEDOmk=)
                          14: AF607CBC871611EFA4B4B85C762E951A.roa (hash: bzfiv5WUYP+OkMM7fSUuv+PsK419hvu6fLkkiMcm3F4=)
                          15: 0EDAC69C7E9711EC938A07A55A40D577.roa (hash: IHQza7DKfiJqgHWYlqE8cYUVoYzkuQy2AQju/GR8v0Q=)
                          16: 8114F76C7E8511EC9ADF36725A40D577.roa (hash: AhvIVxqxSbmhULAiZUQ1plZDKy7cg423tQQOEmNJ3gA=)
                          17: 4FD7C9F427E711F0BCA00BF5DAE4EC9C.roa (hash: 7HwDCppU/f5fuwrPAf2xp7Ayrbe7TxptLlo+dblJyew=)
                          18: 0F9FBC9C58DE11ECB8DE4DD35A40D577.roa (hash: CXzd3zY6In/VNStSVCJA7anAgBgKQZtimIGUm+xrgaw=)
                          19: 9383FC9C250B11F087EC90CDDAE4EC9C.roa (hash: 0MebD9YV70bEDfj/A8gNyPDksVUE3sD/+fbZkvUcVDw=)
                          20: 576C22AE7E8611EC922DA0745A40D577.roa (hash: fI4Qh0NFogb9+0OEoPEIfCjcX0dFIIKFdVkXaRwGoKo=)
                          21: 1F42A8303D8111ECBAEA9658D8A014CE.roa (hash: wC19PkWgyl896qOSMpkxiXkAt+PiXv6abmP0pDef3WI=)
                          22: ACF641FED6AD11F0812BC7D7DAE4EC9C.roa (hash: DefvG2gqn0YRx/oaaDEF9oWtrWF+Hp3FFyLDWRXzv1k=)
                          23: F4EFE80A8D1D11EF8C1A4C79762E951A.roa (hash: d4jMMXQH77HWq36R3oaT7HPszUjBz6mQV4jIDt9d5aE=)
                          24: 852AD7B827E711F0BFC09DF5DAE4EC9C.roa (hash: NefVteUHYyDwbTOkKR0OdJps3C0o9kNvy2BeEIzbcG4=)
                          25: C37216627E8511ECAB68F0725A40D577.roa (hash: U2J6RhEFg3NR/tIjr/4Mik6cyucs+ggmHttUm+HNshc=)
                          26: 1FC37E0C58DD11EC90249AD05A40D577.roa (hash: xMFtJZhm8L5JCVIG+3J/M2SkxXwG+7iXieRnX4vo4bo=)
                          27: DE34D0AC7E9411EC8F56DC9E5A40D577.roa (hash: Ejkm0DAvDYmzby5n4WAbHpYCi7SXzrDebeQ2YB2KL2o=)
                          28: E9763E28FF0711EFA64FD5B6762E951A.roa (hash: DZMIGLL6nWy5DqW2m/jDuWzGXiUhAs+6aKl2e5bFvWA=)
                          29: 4B5654F296DA11EF82B2B74D762E951A.roa (hash: ZcnfvBN38YEq7lAkTi2/k1kT/CQUDrGwaR+y7cjWcTw=)
                          30: 2CAA1A367E8511ECAE6439715A40D577.roa (hash: Jv6QPNKg0v9O6L3wmEj9ewUGukGZQ/PeryRseMLccpw=)
                          31: 362C6486797111EE812BC7784AD9E6FC.roa (hash: DBUONLIPMm5rFkuxPgFzQhp/AfEuqBHPhtS4UT6nv2k=)
                          32: 6824A2D6004611EEB9E8E6664AD9E6FC.roa (hash: /eNM3S/PVFwQF0mDt7Qv6AlyFu8IcIeM1jGIBn/FkBQ=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F369AFDD/3DB42DDAC1F211EBBA2FF03EF8AEA228/58aANgAk7bnzRR3JE-ozBZvJBKU.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F369AFDD/3DB42DDAC1F211EBBA2FF03EF8AEA228/58aANgAk7bnzRR3JE-ozBZvJBKU.mft
                          rsync://rpki.afrinic.net/repository/afrinic/58aANgAk7bnzRR3JE-ozBZvJBKU.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 21 Jan 2026 02:11:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1924 (0x784)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F369AFDDAF, serialNumber=E7C680360024EDB9F3451DC913EA33059BC904A5
        Validity
            Not Before: Jan 19 02:11:21 2026 GMT
            Not After : Jan 21 02:11:21 2026 GMT
        Subject: CN=696d92ca-0c9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:48:54:35:1f:98:36:2a:c7:55:db:de:cd:82:
                    1e:cc:81:c9:7f:07:81:a4:13:e4:ae:81:b0:3d:68:
                    e3:0f:9a:22:6b:42:07:4d:d5:91:1c:8a:dd:70:1b:
                    91:f8:b3:ac:d2:89:ce:e2:64:f9:ae:d9:ba:02:fa:
                    9b:f1:b9:31:27:5f:8f:e2:9f:4a:58:a4:35:56:7d:
                    aa:f9:45:aa:e3:c1:80:79:c0:9c:8e:d1:2e:00:7f:
                    52:e1:ea:44:50:cd:79:f4:f1:57:5d:46:d9:4c:2f:
                    fe:a4:97:a1:59:fb:d5:2b:7c:f1:c7:8e:85:80:5e:
                    40:99:4c:40:f4:30:1d:e3:9b:6e:a7:95:31:2a:21:
                    6f:6d:df:41:83:84:75:ac:16:53:c7:a2:a7:9c:ed:
                    fb:d7:d1:9e:7a:3c:51:8d:5c:72:86:b1:d5:df:7a:
                    92:dc:03:45:a6:50:8b:0e:a3:53:c2:ff:11:50:a9:
                    a4:25:d4:1b:05:2b:9d:dd:ed:4b:bb:88:ab:cf:2b:
                    e6:39:94:af:c4:db:c8:d7:5b:98:11:31:63:73:5b:
                    a9:0c:09:87:1b:9d:ac:cf:e7:89:a4:52:4a:a2:9f:
                    fc:72:b3:29:96:dd:73:7d:ee:c9:ae:89:e7:7f:f0:
                    2f:95:85:c2:96:f6:24:f7:97:c4:2d:98:3a:0c:de:
                    9d:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:47:7B:87:E8:B8:67:4D:67:FA:D1:69:01:28:29:58:E1:10:9A:7C
            X509v3 Authority Key Identifier:
                keyid:E7:C6:80:36:00:24:ED:B9:F3:45:1D:C9:13:EA:33:05:9B:C9:04:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F369AFDD/3DB42DDAC1F211EBBA2FF03EF8AEA228/58aANgAk7bnzRR3JE-ozBZvJBKU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/58aANgAk7bnzRR3JE-ozBZvJBKU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369AFDD/3DB42DDAC1F211EBBA2FF03EF8AEA228/58aANgAk7bnzRR3JE-ozBZvJBKU.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:70:48:ea:df:f3:a3:a9:61:c6:a9:79:11:48:38:f9:ea:62:
         fc:d3:8a:f9:71:50:17:00:d9:07:d4:cc:4c:26:dd:c5:53:66:
         8e:42:00:a4:b3:67:c5:f6:c5:e2:33:ad:93:34:d2:13:2d:8a:
         de:73:1e:66:0b:0c:3b:f0:b4:1d:b3:27:83:ca:0b:34:b1:48:
         1f:45:03:35:a3:e3:fb:4e:c1:e6:d6:d6:ea:60:d6:f5:6a:e1:
         cf:df:39:81:61:f2:08:50:18:9b:55:bf:11:63:1c:4c:a9:be:
         0b:05:c2:62:ac:21:03:de:c8:d0:4d:0c:f9:5c:e7:dd:1b:40:
         76:d9:00:70:a7:ff:8d:ee:61:ff:f6:45:00:f8:70:74:70:24:
         de:46:37:39:f4:20:e6:c1:4e:eb:6c:57:42:e7:5c:7a:65:ae:
         4e:bb:89:1c:b4:74:88:90:7f:ea:87:55:7c:09:a5:f0:7b:a9:
         10:72:ae:85:49:eb:3f:b2:6d:0c:af:43:cb:a9:c4:47:2b:b8:
         2a:b3:e5:1a:c0:19:86:bf:ff:6e:ae:7f:9e:88:99:54:85:fd:
         4f:3d:d5:63:66:12:72:3d:65:fb:a7:4e:42:f7:1f:a3:4a:bb:
         2d:eb:fe:b7:e0:c0:12:01:0b:d5:7a:33:e7:a0:5a:b1:df:83:
         dc:ff:67:b4
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICB4QwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
OUFGRERBRjExMC8GA1UEBRMoRTdDNjgwMzYwMDI0RURCOUYzNDUxREM5MTNFQTMz
MDU5QkM5MDRBNTAeFw0yNjAxMTkwMjExMjFaFw0yNjAxMjEwMjExMjFaMBgxFjAU
BgNVBAMTDTY5NmQ5MmNhLTBjOWQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDiSFQ1H5g2KsdV297Ngh7Mgcl/B4GkE+SugbA9aOMPmiJrQgdN1ZEcit1w
G5H4s6zSic7iZPmu2boC+pvxuTEnX4/in0pYpDVWfar5RarjwYB5wJyO0S4Af1Lh
6kRQzXn08VddRtlML/6kl6FZ+9UrfPHHjoWAXkCZTED0MB3jm26nlTEqIW9t30GD
hHWsFlPHoqec7fvX0Z56PFGNXHKGsdXfepLcA0WmUIsOo1PC/xFQqaQl1BsFK53d
7Uu7iKvPK+Y5lK/E28jXW5gRMWNzW6kMCYcbnazP54mkUkqin/xysymW3XN97smu
ied/8C+VhcKW9iT3l8QtmDoM3p0fAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQU+0d7
h+i4Z01n+tFpASgpWOEQmnwwHwYDVR0jBBgwFoAU58aANgAk7bnzRR3JE+ozBZvJ
BKUwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjlBRkRELzNEQjQyRERBQzFGMjExRUJCQTJGRjAzRUY4QUVBMjI4LzU4YUFO
Z0FrN2JuelJSM0pFLW96Qlp2SkJLVS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljLzU4YUFOZ0FrN2JuelJSM0pFLW96Qlp2SkJLVS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2OUFGREQvM0RCNDJEREFDMUYyMTFFQkJBMkZGMDNFRjhB
RUEyMjgvNThhQU5nQWs3Ym56UlIzSkUtb3pCWnZKQktVLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQB3cEjq3/OjqWHGqXkRSDj56mL804r5
cVAXANkH1MxMJt3FU2aOQgCks2fF9sXiM62TNNITLYrecx5mCww78LQdsyeDygs0
sUgfRQM1o+P7TsHm1tbqYNb1auHP3zmBYfIIUBibVb8RYxxMqb4LBcJirCED3sjQ
TQz5XOfdG0B22QBwp/+N7mH/9kUA+HB0cCTeRjc59CDmwU7rbFdC51x6Za5Ou4kc
tHSIkH/qh1V8CaXwe6kQcq6FSes/sm0Mr0PLqcRHK7gqs+UawBmGv/9urn+eiJlU
hf1PPdVjZhJyPWX7p05C9x+jSrst6/634MASAQvVejPnoFqx34Pc/2e0
-----END CERTIFICATE-----
Generated at Tue Jan 20 01:00:58 2026 by rpki-client