This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3625D7B/3CE88D08BDA911F08CA0897ADAE4EC9C/4gVuyP8ZNJISyrk8jWZWxw8lSj8.mft
File:                     4gVuyP8ZNJISyrk8jWZWxw8lSj8.mft (raw, json)
Hash identifier:          RQM3pKRUWJGCQ2k8VX+hefw0Q+CnbAyUA8qUuvFUf9Y=
Subject key identifier:   3C:37:66:AA:5F:62:28:C9:DF:24:BB:55:40:77:D4:F4:23:1C:1E:D1
Authority key identifier: E2:05:6E:C8:FF:19:34:92:12:CA:B9:3C:8D:66:56:C7:0F:25:4A:3F
Certificate issuer:       /CN=F3625D7BAF/serialNumber=E2056EC8FF19349212CAB93C8D6656C70F254A3F
Certificate serial:       4B
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/4gVuyP8ZNJISyrk8jWZWxw8lSj8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3625D7B/3CE88D08BDA911F08CA0897ADAE4EC9C/4gVuyP8ZNJISyrk8jWZWxw8lSj8.mft
Manifest number:          E2
Signing time:             Sat 24 Jan 2026 05:19:05 +0000
Manifest this update:     Sat 24 Jan 2026 05:19:05 +0000
Manifest next update:     Mon 26 Jan 2026 05:19:05 +0000
Files and hashes:         1: 4gVuyP8ZNJISyrk8jWZWxw8lSj8.crl (hash: zPMmZBZCDISSpJMQVxGfh71WOqBNAU89iKgP019fQIA=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3625D7B/3CE88D08BDA911F08CA0897ADAE4EC9C/4gVuyP8ZNJISyrk8jWZWxw8lSj8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3625D7B/3CE88D08BDA911F08CA0897ADAE4EC9C/4gVuyP8ZNJISyrk8jWZWxw8lSj8.mft
                          rsync://rpki.afrinic.net/repository/afrinic/4gVuyP8ZNJISyrk8jWZWxw8lSj8.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 26 Jan 2026 05:19:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 75 (0x4b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3625D7BAF, serialNumber=E2056EC8FF19349212CAB93C8D6656C70F254A3F
        Validity
            Not Before: Jan 24 05:19:05 2026 GMT
            Not After : Jan 26 05:19:05 2026 GMT
        Subject: CN=69745649-eac6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:15:46:4d:1a:72:54:b4:a1:2b:30:2f:36:6d:
                    7c:6c:62:09:25:1b:a3:31:ed:fb:28:01:0d:6d:8d:
                    d9:57:a6:77:20:0c:82:c2:88:9f:78:80:2c:4d:27:
                    82:81:b9:14:89:de:6e:0f:51:5e:0a:45:af:3b:cb:
                    e8:70:be:e5:78:96:5a:06:b4:30:de:8d:35:5b:56:
                    98:fd:9a:f0:81:41:f1:ae:cf:c9:c3:1c:b1:c4:bd:
                    f9:e6:13:25:c0:e0:aa:7a:81:3b:0f:62:7c:41:3c:
                    72:3d:16:e5:3e:11:86:7f:4c:83:0c:1e:a1:9e:09:
                    86:cc:88:fd:7a:35:55:d5:52:4d:c5:bf:a4:d7:28:
                    1b:33:7e:df:b0:c1:3b:99:07:bc:d8:5f:e5:82:09:
                    42:82:23:35:7c:2f:24:62:0b:b2:e5:94:1e:ea:3a:
                    67:04:53:49:38:80:c6:fe:b7:04:f9:c3:77:0e:45:
                    83:fa:75:30:9f:d4:98:8c:14:1f:4b:b2:f7:2a:47:
                    8b:3e:82:fe:2e:19:ae:73:7f:f2:4d:9b:b5:67:ec:
                    66:6b:47:3f:31:a7:a1:50:b2:fe:57:78:22:70:33:
                    6a:32:be:62:65:10:7c:25:3a:1b:20:ce:61:41:90:
                    bf:22:5c:d0:e7:cc:b2:43:78:5d:c0:96:22:67:57:
                    f3:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:37:66:AA:5F:62:28:C9:DF:24:BB:55:40:77:D4:F4:23:1C:1E:D1
            X509v3 Authority Key Identifier:
                keyid:E2:05:6E:C8:FF:19:34:92:12:CA:B9:3C:8D:66:56:C7:0F:25:4A:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3625D7B/3CE88D08BDA911F08CA0897ADAE4EC9C/4gVuyP8ZNJISyrk8jWZWxw8lSj8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/4gVuyP8ZNJISyrk8jWZWxw8lSj8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3625D7B/3CE88D08BDA911F08CA0897ADAE4EC9C/4gVuyP8ZNJISyrk8jWZWxw8lSj8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:2e:0c:d5:59:4d:b3:2e:62:1e:42:04:8a:af:7b:a9:cd:cd:
         8e:f1:5f:f0:68:d2:aa:43:5b:9c:a9:f3:d2:9c:1d:cd:e8:43:
         44:32:78:26:c1:6e:0c:d7:c6:e9:50:91:f7:15:e8:64:37:8d:
         eb:fe:a8:2c:45:1f:92:f9:d8:d7:d5:39:fb:20:7d:40:40:c8:
         77:0e:c3:18:d8:1e:cb:98:32:51:98:95:45:79:ae:ba:e1:63:
         4d:51:c1:9a:5e:fa:04:0d:90:8e:8d:c2:0f:66:3a:c9:8e:2d:
         a8:53:e8:bb:60:29:23:44:0c:7c:89:db:00:2b:ef:52:52:cc:
         fd:52:b3:a1:ce:31:b9:a1:b4:8a:34:85:0e:bc:c9:fe:0e:c0:
         98:a0:72:54:2d:e2:fc:25:24:9d:71:d3:11:ec:8f:6e:5f:86:
         d4:11:82:b0:5e:8f:22:14:77:92:e1:74:24:40:91:3c:21:dd:
         a7:1f:66:ab:41:82:b6:08:c3:ca:93:a1:aa:d1:1d:50:e0:47:
         be:64:ed:81:f2:b8:8b:a6:2f:f6:71:9c:d3:57:cc:1a:29:eb:
         65:06:6c:f4:2c:1e:d9:83:01:81:de:ad:88:05:94:58:4b:4a:
         c4:f4:ee:d1:ad:b0:ac:13:a2:cf:b8:18:81:99:29:12:23:66:
         13:c3:03:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 06:14:57 2026 by rpki-client