This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363A48B/103FED46574711F0BA585979DAE4EC9C/4-0KKxQeZZxFITmco8yPgYx19x0.mft
File:                     4-0KKxQeZZxFITmco8yPgYx19x0.mft (raw, json)
Hash identifier:          PzC5F0G9K9at0IKIDpRyUkhLsZ6ySd9GD8aBpU4/Xlg=
Subject key identifier:   42:D7:58:2D:B4:79:75:52:DB:37:D1:DB:71:49:96:1E:32:00:0F:F8
Authority key identifier: E3:ED:0A:2B:14:1E:65:9C:45:21:39:9C:A3:CC:8F:81:8C:75:F7:1D
Certificate issuer:       /CN=F363A48BAF/serialNumber=E3ED0A2B141E659C4521399CA3CC8F818C75F71D
Certificate serial:       D5
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/4-0KKxQeZZxFITmco8yPgYx19x0.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F363A48B/103FED46574711F0BA585979DAE4EC9C/4-0KKxQeZZxFITmco8yPgYx19x0.mft
Manifest number:          D4
Signing time:             Sun 25 Jan 2026 05:02:46 +0000
Manifest this update:     Sun 25 Jan 2026 05:02:45 +0000
Manifest next update:     Tue 27 Jan 2026 05:02:45 +0000
Files and hashes:         1: 4-0KKxQeZZxFITmco8yPgYx19x0.crl (hash: swa7sMRdxMt9WtYMJ6dbyWYVA5pA+NClrD/zdJ1hXVA=)
                          2: 075271E4574811F0A7DC6D7EDAE4EC9C.roa (hash: zOGSgi/1KJ9xQcEdBGnV40++jUsJYV1/+BcJ8fXP1w8=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F363A48B/103FED46574711F0BA585979DAE4EC9C/4-0KKxQeZZxFITmco8yPgYx19x0.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F363A48B/103FED46574711F0BA585979DAE4EC9C/4-0KKxQeZZxFITmco8yPgYx19x0.mft
                          rsync://rpki.afrinic.net/repository/afrinic/4-0KKxQeZZxFITmco8yPgYx19x0.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:06:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 213 (0xd5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F363A48BAF, serialNumber=E3ED0A2B141E659C4521399CA3CC8F818C75F71D
        Validity
            Not Before: Jan 25 05:02:45 2026 GMT
            Not After : Jan 27 05:02:45 2026 GMT
        Subject: CN=6975a3f6-11bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:7b:cd:07:14:11:3d:bc:cf:0b:60:0b:ed:39:
                    81:a5:72:8c:56:a1:72:00:35:c5:f0:57:56:98:1b:
                    7b:44:f2:37:d3:30:c2:be:0e:c1:50:72:00:ec:4e:
                    d9:7e:1e:54:b9:ec:6d:23:a1:b5:b5:c6:7d:93:95:
                    a5:2b:1a:78:b0:32:70:b8:38:fa:7c:10:d1:b1:42:
                    20:e5:53:34:cd:13:08:78:bb:6e:49:0d:d1:65:cf:
                    0f:ab:b2:74:28:3d:ce:4a:9c:79:1f:a1:92:f4:9a:
                    ac:59:8f:11:6d:b9:7b:6d:40:6a:e0:9a:27:d2:e6:
                    49:43:5c:54:54:b5:4d:53:f9:70:b8:9d:5a:de:e9:
                    e3:7f:87:4f:63:10:ab:6b:8e:b5:06:67:b4:24:66:
                    0b:b8:6a:42:4a:c5:cd:47:fb:76:c7:b0:24:33:97:
                    69:55:41:c8:37:1d:2a:ec:09:e7:0d:71:46:c0:87:
                    04:28:9d:b0:b9:20:6a:d2:c8:19:b1:b6:51:8e:50:
                    f2:d2:04:ce:01:37:ee:ac:12:7b:98:f0:97:f0:cf:
                    75:92:a0:8a:d1:35:7e:8a:18:a5:37:05:b8:f1:54:
                    a9:fd:57:2f:d7:8b:6a:77:b0:3c:a5:e4:39:d0:f7:
                    09:54:aa:9e:13:83:53:83:2a:fc:9b:4b:36:b7:aa:
                    91:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:D7:58:2D:B4:79:75:52:DB:37:D1:DB:71:49:96:1E:32:00:0F:F8
            X509v3 Authority Key Identifier:
                keyid:E3:ED:0A:2B:14:1E:65:9C:45:21:39:9C:A3:CC:8F:81:8C:75:F7:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F363A48B/103FED46574711F0BA585979DAE4EC9C/4-0KKxQeZZxFITmco8yPgYx19x0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/4-0KKxQeZZxFITmco8yPgYx19x0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363A48B/103FED46574711F0BA585979DAE4EC9C/4-0KKxQeZZxFITmco8yPgYx19x0.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:b6:e1:b5:6e:64:02:73:06:8f:a3:15:16:69:a7:9c:af:ff:
         42:75:f2:4c:77:a7:c2:89:fd:c0:e0:83:83:93:71:ba:de:1e:
         d9:15:8c:0b:78:db:c9:8f:bf:4c:03:d4:2f:85:10:55:0a:77:
         8c:39:b7:0e:9b:50:02:d4:8f:1a:8f:b6:c4:df:e1:ee:41:91:
         cd:30:b8:b1:aa:da:bd:f8:d7:1f:32:3b:9c:27:d1:c3:5a:4e:
         30:77:74:a4:ef:bf:2e:2e:d1:de:7b:8e:ea:df:b5:62:4f:62:
         12:ec:a4:98:b2:bb:01:7f:14:ac:15:b4:a5:0d:31:dd:4b:75:
         bc:a1:d5:6f:9b:d4:b9:c6:80:a1:f9:80:bc:b0:80:06:a7:7d:
         32:1b:e1:4a:b4:ae:0b:61:67:b6:31:f9:df:21:a6:83:d3:da:
         cb:87:8a:62:e8:36:12:95:3b:b5:f1:1c:54:37:5e:97:be:7f:
         c5:2c:02:b5:9b:41:16:e8:78:5c:b9:58:1d:47:eb:35:db:34:
         12:61:1e:2a:0e:af:15:6c:e4:b1:84:12:29:fc:c9:19:42:3d:
         21:85:4f:03:cd:3d:52:a8:5f:dc:50:e7:eb:a4:2b:0e:c6:4a:
         d5:19:45:d1:31:90:f6:12:c7:cd:5a:66:3f:5b:49:46:4d:67:
         50:cf:4e:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:54:07 2026 by rpki-client