This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362EFF3/AC085646F5B511EDA75CAF494AD9E6FC/zjU-BgcibJUeYP1ogM7M-5jSvEg.mft
File:                     zjU-BgcibJUeYP1ogM7M-5jSvEg.mft (raw, json)
Hash identifier:          41GCn5p0eRu0NU0wzjzeK44K2Bq1iDgVfgyPPmfc97o=
Subject key identifier:   3B:40:72:DD:EA:45:37:AA:01:75:B1:A7:83:0A:E3:95:D8:8A:FE:B2
Authority key identifier: CE:35:3E:06:07:22:6C:95:1E:60:FD:68:80:CE:CC:FB:98:D2:BC:48
Certificate issuer:       /CN=F362EFF3AF/serialNumber=CE353E0607226C951E60FD6880CECCFB98D2BC48
Certificate serial:       0400
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/zjU-BgcibJUeYP1ogM7M-5jSvEg.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F362EFF3/AC085646F5B511EDA75CAF494AD9E6FC/zjU-BgcibJUeYP1ogM7M-5jSvEg.mft
Manifest number:          03FD
Signing time:             Sun 25 Jan 2026 03:29:09 +0000
Manifest this update:     Sun 25 Jan 2026 03:29:08 +0000
Manifest next update:     Tue 27 Jan 2026 03:29:08 +0000
Files and hashes:         1: zjU-BgcibJUeYP1ogM7M-5jSvEg.crl (hash: v+DKptCb/lPdGZ+JsR3wNXMTPtSQx0HeL2S/VEGTqHg=)
                          2: 7FBA47FAF6EF11F0BB93DCCEDAE4EC9C.roa (hash: o3L0vuoDmUBUb+//mBzsTCTXHyVLpl7JtPp6VuXXuk8=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F362EFF3/AC085646F5B511EDA75CAF494AD9E6FC/zjU-BgcibJUeYP1ogM7M-5jSvEg.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F362EFF3/AC085646F5B511EDA75CAF494AD9E6FC/zjU-BgcibJUeYP1ogM7M-5jSvEg.mft
                          rsync://rpki.afrinic.net/repository/afrinic/zjU-BgcibJUeYP1ogM7M-5jSvEg.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:06:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1024 (0x400)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F362EFF3AF, serialNumber=CE353E0607226C951E60FD6880CECCFB98D2BC48
        Validity
            Not Before: Jan 25 03:29:08 2026 GMT
            Not After : Jan 27 03:29:08 2026 GMT
        Subject: CN=69758e05-2abe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:d1:64:48:dc:72:20:43:1e:35:77:9d:69:1b:
                    fb:94:d9:90:79:e4:38:75:34:71:73:55:5a:f6:24:
                    bb:f4:a0:d0:10:27:53:95:f0:d2:7f:cf:0b:9c:d3:
                    72:7a:ce:c7:ff:c1:3d:1b:f4:bf:f5:bb:5d:63:ee:
                    c8:a7:1b:cd:a4:f1:b8:e8:d8:03:eb:df:a1:bc:f9:
                    a9:91:fa:b9:e6:ac:c7:82:cd:4a:e5:18:1d:3a:9c:
                    7e:53:7e:e0:4b:30:28:69:d5:97:09:70:c8:8a:3d:
                    db:49:13:1a:7c:ad:c6:3e:98:95:8f:1e:9f:0e:a1:
                    6b:91:f2:10:85:b2:95:35:df:d0:0a:ea:68:e5:9f:
                    d4:65:d9:46:74:ba:a6:f3:b1:78:ed:91:e5:41:19:
                    ca:2e:92:40:89:6e:2b:89:6e:c6:36:48:31:90:b1:
                    d2:93:16:11:96:f2:0b:c8:42:33:11:51:f5:22:14:
                    91:ca:a5:af:28:86:42:e7:e5:6d:fa:78:cc:49:02:
                    f6:99:d4:35:93:c0:4e:3e:60:12:1c:2d:15:7a:e5:
                    70:a8:9d:43:50:b8:e1:ec:cd:bc:04:47:61:7f:7f:
                    57:36:5b:79:22:19:7d:1c:9f:6e:81:31:54:c4:99:
                    f9:fb:1b:96:77:e5:b0:b5:5a:26:3e:2d:e5:c6:ee:
                    51:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:40:72:DD:EA:45:37:AA:01:75:B1:A7:83:0A:E3:95:D8:8A:FE:B2
            X509v3 Authority Key Identifier:
                keyid:CE:35:3E:06:07:22:6C:95:1E:60:FD:68:80:CE:CC:FB:98:D2:BC:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F362EFF3/AC085646F5B511EDA75CAF494AD9E6FC/zjU-BgcibJUeYP1ogM7M-5jSvEg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/zjU-BgcibJUeYP1ogM7M-5jSvEg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362EFF3/AC085646F5B511EDA75CAF494AD9E6FC/zjU-BgcibJUeYP1ogM7M-5jSvEg.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:28:d8:9f:08:30:7f:7e:bb:db:90:de:3e:0f:2e:e9:73:ef:
         6b:05:1e:e9:50:5c:20:da:c7:d7:2f:1c:de:9a:61:6e:3d:5f:
         d9:7d:e7:ab:9b:a0:23:02:20:50:23:cb:6b:46:28:32:bf:22:
         1e:4b:62:be:15:6c:f6:c6:8d:93:c8:7e:bc:ca:c6:e4:d4:47:
         95:10:d2:a6:58:6c:40:b5:09:bc:f0:48:69:64:11:bc:38:69:
         5f:08:ab:e0:1e:0f:56:c1:ce:da:7f:00:5c:1c:2a:53:85:4a:
         2e:d7:ad:dc:0e:3a:b2:a6:9f:a9:28:8e:6a:91:08:e3:42:4e:
         df:1e:37:72:e0:1e:87:d5:b9:1c:87:27:77:74:37:63:5c:db:
         ea:32:4f:14:c5:3d:ab:d8:98:0c:4d:47:96:0d:52:fb:10:7b:
         88:00:a9:bd:85:18:44:4b:96:57:d7:36:d6:99:15:b8:88:14:
         66:68:0d:87:72:0c:75:76:67:74:d1:b0:27:74:4f:26:41:3b:
         0e:b2:90:44:05:2d:0b:a1:21:99:f8:9b:61:ae:0a:29:23:1f:
         aa:d2:d7:fe:43:95:8e:a7:7f:14:23:d7:fb:43:5b:9a:ec:f6:
         ba:87:7e:60:b0:56:e9:1c:4c:ed:13:db:ab:33:1e:ad:8c:15:
         c3:c5:d6:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 09:36:32 2026 by rpki-client