This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3633396/FC567508067711EC9D163D5AD8A014CE/NSunHRHXakg8nsebSWRvi0XYOLo.mft
File:                     NSunHRHXakg8nsebSWRvi0XYOLo.mft (raw, json)
Hash identifier:          zxQR28KGJqbvxaFkig+ZJ/TxYCHCWM/JX3FnO4BlNW4=
Subject key identifier:   AD:79:C4:73:9E:9A:EB:E4:8F:1B:03:4B:87:A2:33:28:EF:21:F9:BC
Authority key identifier: 35:2B:A7:1D:11:D7:6A:48:3C:9E:C7:9B:49:64:6F:8B:45:D8:38:BA
Certificate issuer:       /CN=F3633396AF/serialNumber=352BA71D11D76A483C9EC79B49646F8B45D838BA
Certificate serial:       067D
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/NSunHRHXakg8nsebSWRvi0XYOLo.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3633396/FC567508067711EC9D163D5AD8A014CE/NSunHRHXakg8nsebSWRvi0XYOLo.mft
Manifest number:          067B
Signing time:             Sun 25 Jan 2026 02:22:13 +0000
Manifest this update:     Sun 25 Jan 2026 02:22:12 +0000
Manifest next update:     Tue 27 Jan 2026 02:22:12 +0000
Files and hashes:         1: NSunHRHXakg8nsebSWRvi0XYOLo.crl (hash: XqnwzpNeyypJzVAHDUCcW6tT3fz/dSIk8f0ANYlVu+Q=)
                          2: B83520CE3C5411F0B678C6A7DAE4EC9C.roa (hash: G6iOOYX+72GS+UQO3yIOd7hEz/TAFLzGnnM38j3t3+w=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3633396/FC567508067711EC9D163D5AD8A014CE/NSunHRHXakg8nsebSWRvi0XYOLo.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3633396/FC567508067711EC9D163D5AD8A014CE/NSunHRHXakg8nsebSWRvi0XYOLo.mft
                          rsync://rpki.afrinic.net/repository/afrinic/NSunHRHXakg8nsebSWRvi0XYOLo.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:06:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1661 (0x67d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3633396AF, serialNumber=352BA71D11D76A483C9EC79B49646F8B45D838BA
        Validity
            Not Before: Jan 25 02:22:12 2026 GMT
            Not After : Jan 27 02:22:12 2026 GMT
        Subject: CN=69757e55-a382
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:19:9c:6d:0f:65:2b:7b:31:c1:c8:d8:55:93:
                    7e:e8:30:80:f8:0b:6d:47:98:06:44:00:21:c1:38:
                    2c:87:3f:1c:01:35:68:dd:07:87:a4:40:f3:69:f7:
                    1a:a9:23:3b:e8:39:83:5e:48:5b:cc:19:0b:3d:50:
                    25:68:f0:b4:ec:25:f2:42:08:c5:c0:54:21:d9:8b:
                    f9:9a:ba:d0:d1:05:d0:da:fc:58:13:34:0d:f1:a1:
                    14:b1:1e:76:86:2b:a0:c1:d2:7e:81:87:12:4d:73:
                    50:30:d8:8e:40:91:7b:ec:ed:98:ea:a1:02:e6:a3:
                    a0:3b:58:9c:bd:70:b5:09:8b:0e:f8:a8:21:3a:be:
                    19:ca:f6:8b:95:c8:e6:c8:f2:99:3e:41:04:f2:3d:
                    2c:ce:91:7d:55:61:30:1f:15:ec:88:e8:1c:e8:c4:
                    c8:85:16:ba:de:42:92:39:26:b0:e0:ab:4b:6f:cf:
                    3a:7f:10:ab:ae:3a:2c:cb:f4:68:e8:cf:14:2c:8a:
                    27:2b:19:d7:91:21:07:36:77:9a:fe:36:3b:8d:95:
                    15:96:ca:57:4d:de:85:c0:3b:aa:17:89:ee:22:4c:
                    07:28:38:5e:9f:a3:bd:2f:99:42:1c:97:29:79:97:
                    68:28:5d:0b:ca:56:b9:bc:02:22:cb:3d:1b:1d:7c:
                    e1:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:79:C4:73:9E:9A:EB:E4:8F:1B:03:4B:87:A2:33:28:EF:21:F9:BC
            X509v3 Authority Key Identifier:
                keyid:35:2B:A7:1D:11:D7:6A:48:3C:9E:C7:9B:49:64:6F:8B:45:D8:38:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3633396/FC567508067711EC9D163D5AD8A014CE/NSunHRHXakg8nsebSWRvi0XYOLo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/NSunHRHXakg8nsebSWRvi0XYOLo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3633396/FC567508067711EC9D163D5AD8A014CE/NSunHRHXakg8nsebSWRvi0XYOLo.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:b6:a9:88:ae:c8:cf:bd:e5:59:8e:b9:e6:95:38:27:fd:af:
         4b:48:24:a9:26:1b:bb:9e:95:19:25:a5:b4:b5:9b:a9:6b:36:
         5e:67:17:8d:7c:4b:bf:4e:ef:12:3e:3e:99:6d:39:3d:3e:77:
         3b:69:e6:15:ed:6d:bb:55:35:ba:01:c3:16:5a:5c:64:0b:15:
         47:ce:fa:f1:b9:39:b3:a5:25:01:3b:bc:22:a9:f6:79:bb:99:
         fa:e9:00:7c:bc:8d:14:d1:75:37:15:45:fd:06:19:87:44:ee:
         7c:c4:3b:b7:d4:aa:d7:69:12:c2:5a:3d:59:78:bb:b6:8a:06:
         ee:01:05:61:cb:27:4f:e9:d9:a4:d8:54:c8:75:62:18:4f:9d:
         ab:5b:b3:54:a0:6e:51:e6:27:e9:44:a5:2c:5c:12:04:84:f1:
         40:9d:57:3e:14:fc:5e:1a:35:39:de:56:b9:3e:45:78:ee:c7:
         8f:9a:42:69:c1:c1:9e:64:15:97:2c:05:87:f0:d6:51:49:41:
         39:12:35:67:8b:8d:f1:5c:6f:35:54:55:34:51:ee:4c:b9:e7:
         85:68:0e:90:da:f0:ab:8e:70:c7:ab:e6:0f:1f:cc:38:78:d2:
         87:85:e1:0f:da:04:be:78:39:57:c3:5c:11:c2:23:00:f7:1b:
         6e:24:3d:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 15:49:18 2026 by rpki-client